//The Wire//2300Z October 23, 2026// //ROUTINE// //BLUF: SHOOTINGS REPORTED IN FRANCE. IRAN REACTIVATES MOSAIC DEFENSE PLAN, HARDENING THEIR COMMAND AND CONTROL SYSTEMS IN THE EVENT OF ATTACK. EL SALVADOR LAUNCHES MILITARY OPERATION IN HAITI TO RESCUE CAPTURED SOLDIERS. NEW WORLD SCREWWORM DETECTED IN TEXAS WILDLIFE.// -----BEGIN TEARLINE----- -International Events- France: This morning a series of drive-by shootings were reported throughout the suburbs of Paris. The first shooting was reported in the Trappes area, before the suspect maneuvered to the La Verrière district, shooting at random pedestrians along the way. The crime scene encompasses several square miles and as of this report, locations impacted by small arms fire are still being cataloged by police. The lone suspect was detained by police, though as of this report the circumstances of his arrest are not clear. Concerning victims, 1x fatality has been confirmed so far, with 3-6 others wounded as a result of the attack. More details are expected as the situation develops. Haiti: El Salvadoran troops arrived in Port au Prince this morning, expanding their presence in Haiti following the deterioration of gang activity on the island. El Salvador has been involved in the Gang Suppression Task Force mission, a UN-chartered mission to combat violent gangs and restore order throughout Haitian society. Last weekend, a patrol of Salvadoran soldiers was ambushed by gangs, with four service members being taken captive. This morning, a large contingent of Salvadoran troops landed in Port au Prince, to stage for the upcoming rescue mission of the captives, as well as clearance operations throughout the city. Analyst Comment: Though it has taken time to organize the response to this crisis, Salvadoran President Nayib Bukele, the legendary leader known for his extremely harsh crackdown on gangs in his nation, is not messing around. Gangs throughout the various slums in Port au Prince are preparing for a wider war, and it's very likely that intense combat operations are going to kick off within the next few days. In short, this is undoubtedly going to get very violent, very quickly. -HomeFront- Texas: Yesterday the USDA confirmed that at least one case of New World Screwworm has been detected in wildlife, confirming that the parasite has transitioned to wild fauna and not just commercially raised cattle. The detection was made in Pecos County, and was noted in an infected elk. Nebraska: STRATCOM announced the kickoff of exercise GLOBAL THUNDER 27, this year's strategic demonstration of force and training scenario intended to ensure the effectiveness of strategic deterrence. Analyst Comment: This exercise is completely normal but in the context of the wider impending war in the Middle East, these drills present the side-benefit of obfuscating the deployment of strategic assets. Many plane-watchers are going to have a hard time determining which movement of bombers is part of the drill...and which assets are taking off to conduct bombings in the Middle East. USA: Around the nation, this morning Brent crude futures surged to over $114/bbl during early morning trading, with WTI crude passing $100/bbl as well. Gas and diesel prices have continued to rise nationwide over the past few days, as most mitigation efforts (such as the suspension of gasoline taxes in midwestern states) are beginning to reach the limit of their effectiveness. Cyber: Overnight a data breach was announced involving Quest Diagnostics, a major data firm responsible for providing services to most hospitals and medical institutions around the United States. The breach includes the leak of patient data such as billing records, however Quest has not stated how many patients have been affected. More information is expected as the investigation into the breach continues. -----END TEARLINE----- Analyst Comment: Within the Middle East, Iranian sources claimed that the IRGC has activated their Mosaic defensive command and control doctrine, which allows regional commanders more autonomy in making decisions in the event that communications are severed with higher command structures. Serving as Iran's version of a deadman switch, this command system allows local commanders to choose targets and launch missiles on their own, if they are cut off from higher command. This is the exact same doctrine that was in place before the war began, and was the main reason for why the IRGC was devastatingly effective during the first few weeks of the war, even though a large percentage of IRGC high command was killed. If these reports are true, Iran shifting to this doctrine once again is a major indicator that Iran expects large-scale attacks imminently. Whether or not this will happen remains debatable, but right now the Iranians are absolutely convinced that it's not a matter of 'if' the US will attack, but 'when' strikes will resume. Analyst: S2A1 Research: publish.obsidian.md/s2underg… NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//

//The Wire//2100Z October 22, 2026// //ROUTINE// //BLUF: FRANCE ATTEMPTS TO CRACK DOWN ON PROTEST ACTIVITY BEFORE THE WEEKEND. INDICATIONS CONTINUE TO MOUNT REGARDING RETURN TO WAR IN MIDDLE EAST, STATE DEPARTMENT CONFIRMS PERSONNEL DRAWDOWNS IN SAUDI ARABIA. CONSEQUENCES OF MAJOR CYBERSECURITY EVENTS CONTINUE TO INCREASE IN SEVERITY.// -----BEGIN TEARLINE----- -International Events- France: This morning authorities have issued blanket bans on protests in some areas, due to the potential for last weekend's unrest to be repeated. All protests have been banned throughout the entire city of Lyon, and within Paris gatherings are prohibited in some districts as the curfews stay in place. Most major cities are banning protests unless conducted by unions and registered with the government. Middle East: Late-stage preparations regarding a return to the shooting phase of the war continue to mount. Last night, State Department spokesman Tommy Pigott attempted to fact-check a post on social media regarding personnel changes in the region, but in doing so he directly confirmed that State Department employees and their families are being evacuated from Saudi Arabia. Within the Strait of Hormuz, Iranian targeting efforts continue regularly. Yesterday, Iran struck a total of 4x tanker vessels, none of which have been confirmed by the UKMTO yet. Analyst Comment: On the rhetorical front, the situation is not looking good. Statements made by White House officials (and President Trump himself) indicate that a preemptive strike on Iran is possibly imminent. Last night while standing on the tarmac preparing to board Air Force One, President Trump directly stated that negotiations with Iran are not ongoing, and heavily implied that strikes will be taking place immediately after the midterms. Within Israel, PM Netanyahu has begun an intensive media campaign, stating that their intelligence indicates that Iran has decided to build a nuclear weapon, and that "there is only one way to remove this threat once and for all, to topple the regime in Iran, and that is my directive to the IDF". -----END TEARLINE----- Analyst Comment: Around the world, the cybersecurity incidents of the past few days continue to expand in severity. In short, this week is certainly one for the history books for the IT world. Regarding the PHP vulnerability, the NSA, FBI, CISA, most of Europe, and the Prime Minister of Japan have offered up two solutions, and two solutions only...immediately update servers, or unplug them completely. This applies to roughly 70% of the entire internet, and some estimates claim that roughly 35% of all websites are unpatchable as they run on a version of PHP which is too old to be fixed. Within a few days, up to a third of the entire internet might be gone forever, if those web servers are not manually rebuilt from scratch. Yesterday, thousands of websites went offline, to include the government websites of France, the Netherlands, Finland, Japan, and dozens of others relying on PHP. Everything from Wikipedia to home media servers are affected, and manual intervention is needed in order for most internet-connected servers to be fixed. More broadly, many professionals are calling it "Black October" due to the severity and the impact of the events that have unfolded over the past few days. In addition to the PHP vulnerability and the eMudhra saga, around a dozen other completely separate issues have popped up, nearly all of which would have grabbed headlines on their own. Most of these vulnerabilities were in place a decade ago, and are only being discovered (or exploited) right now, a short time before major elections in Israel and the United States. The nature of the problem itself also makes it worse: Unfortunately, a significant portion of the world depends on random servers running in someone's dusty closet since 2009, and since the solution right now is patch it or unplug it, the true impact of this will not be known until more bad things happen. To say that the IT world is freaking out would be putting it mildly, even though the full scale of what's happened will take weeks to determine. In terms of real-world impact, most normal people won't see the severity of what's happened (or even be aware of it at all) with the exception of various websites going down for a short time. The real damage will surface months from now, after malign actors have time to exploit whatever vulnerabilities existed, but weren't fixed fast enough. Analyst: S2A1 Research: publish.obsidian.md/s2underg… NomadNet: 5fa68c88be727a0e1a250a75e5e79269 Disclaimer: No LLMs were used in the writing of this report. //END REPORT//