Dynamic Roundup

Russia and Ukraine Intensify Long-Range Infrastructure Strikes — Associated Press, September 22, 2026. Russian missile and drone attacks struck multiple Ukrainian regions as Ukraine reported additional strikes against Russian oil refineries. The continued targeting of energy infrastructure is increasingly connecting the battlefield with broader energy-security and economic consequences, particularly while Middle Eastern disruptions are simultaneously constraining global oil supplies. AP News

New Ethiopian Armed Alliance Challenges Federal Government — Associated Press, September 21, 2026. Seven Ethiopian opposition groups—including factions that fought on opposing sides of the 2020–2022 Tigray conflict—announced a coalition seeking to remove Prime Minister Abiy Ahmed’s government. The participation of the Tigray People's Liberation Front and Amhara Fano elements raises renewed concern over fragmentation of the 2022 peace framework and the potential for overlapping regional conflicts to escalate. AP News

U.S.-China Talks Seek Stability Amid Intensifying AI and Strategic Competition — Associated Press, September 22, 2026. U.S. and Chinese leaders met amid continuing disagreements over artificial intelligence, technology restrictions, Iran, Taiwan, and trade. The discussions demonstrated that both governments are attempting to establish mechanisms for managing strategic competition even as rivalry over advanced technologies increasingly intersects with national security policy. AP News

Executives Accused of Concealing Russian Development of Software Sold to U.S. Government — U.S. Department of Justice, September 23, 2026. Federal authorities arrested the CEO of a Virginia-based software company and a Russian national on allegations that they concealed Russian ownership, control, and software development from U.S. government customers. The allegations illustrate the counterintelligence and supply-chain risks created when foreign ownership, development environments, or privileged technical access are obscured from government customers. The charges remain allegations, and the defendants are presumed innocent unless proven guilty. Department of Justice

Stolen Credentials Create Significant Exposure Across U.S. Water Utilities — CyberScoop, September 22, 2026. Research examining approximately 10,000 U.S. water and wastewater organizations identified active infostealer-related credential exposure at 1,787 entities; one infected device reportedly contained login information associated with 167 utility-metering tenants. The findings illustrate how compromised employee or contractor credentials can create pathways into operationally sensitive environments without requiring exploitation of an industrial-control-system vulnerability. Goincop

FAA Communications Security Gaps Raise Spoofing and Jamming Concerns — Reuters, September 21, 2026. A U.S. Government Accountability Office review found that the FAA had not completed key risk assessments or fully modernized protections for communications between air traffic controllers and aircraft, including defenses against spoofing and jamming. The findings highlight the organizational-security consequences of legacy systems whose operational importance has outlasted their original security architecture. Reuters

Hormuz Commercial Traffic Falls to Fraction of Prewar Levels — Reuters, September 22, 2026. Preliminary shipping data showed only two commodity vessels crossing the Strait of Hormuz on September 21, compared with a pre-conflict average of approximately 125 large commercial vessels per day; two vessels were also reported struck by unidentified projectiles. The figures demonstrate that physical availability of a maritime corridor does not equate to commercial normalization when operators continue to face elevated security, insurance, and routing risks. Reuters

Gulf Cargo Disruption Extends Beyond Energy Markets — Financial Times, September 2026. Container traffic through the Strait of Hormuz reportedly fell sharply as higher insurance costs, longer transit times, and restricted access to major Gulf ports disrupted non-energy commerce. The effects on consumer goods, fertilizers, construction materials, and regional logistics demonstrate how chokepoint disruption can propagate well beyond oil and gas markets. Financial Times

U.S. and Arab Partners Consider Infrastructure Designed to Reduce Hormuz Dependence — Financial Times, September 23, 2026. The United States proposed a $10 billion initiative with Arab partners to expand pipelines and other energy infrastructure capable of reducing reliance on the Strait of Hormuz, with a larger investment platform potentially envisioned over time. The proposal indicates that governments are increasingly treating maritime chokepoint exposure as a structural resilience problem rather than a temporary consequence of the current conflict. Financial Times

Lithuania Hardens Critical Power Infrastructure Against Drone and Sabotage Threats — Reuters, September 22, 2026. Lithuania is designing a strategically important electrical substation near the Suwałki Gap with reinforced structures, redundant systems, enhanced perimeter security, and underground-intrusion detection. The project demonstrates the growing integration of physical attack scenarios into European critical-infrastructure design as governments reassess resilience against hybrid threats. Reuters

Pakistan Strikes Militant Targets in Afghanistan Following Major Insurgent Violence — Reuters, September 21, 2026. Pakistan said cross-border airstrikes killed at least 28 militants after a period of escalating attacks, including an assault on a police facility that killed 24 people; Afghan authorities and the United Nations reported civilian casualties from the Pakistani strikes. The episode underscores how militant safe-haven allegations and retaliatory operations can transform domestic terrorism challenges into interstate security crises. Reuters

Police Protecting Polio Vaccination Campaign Killed in Pakistan — Associated Press, September 22, 2026. Gunmen killed two police officers assigned to protect health workers conducting a nationwide polio vaccination campaign in Balochistan. While responsibility was not immediately established, militant groups have repeatedly targeted vaccination efforts and security personnel, demonstrating how persistent insecurity can directly undermine public-health operations and government access to vulnerable communities. AP News

Gunfire Outside Canadian Synagogue Prompts Investigation of Possible Targeting — Associated Press, September 21, 2026. A gunman opened fire on a police officer positioned outside a synagogue in Belleville, Ontario, during Yom Kippur, triggering an exchange of gunfire that seriously wounded the officer and critically injured the alleged attacker. Authorities had not established whether the synagogue or Jewish community was deliberately targeted, making motive an important unresolved element of the investigation. AP News

34-Country Operation Targets Multiple Transnational Criminal Markets — An Garda Síochána, September 21, 2026. Law-enforcement organizations from 34 countries participated in Operation Atlas Nexus targeting drug trafficking, human trafficking, document fraud, firearms trafficking, and environmental crime. The operation's breadth illustrates the increasingly interconnected nature of illicit markets and the importance of multinational information sharing and coordinated enforcement. Garda

European Network Accused of Combining Migrant Smuggling, Document Fraud and Money Laundering — Europol, September 23, 2026. Authorities in Austria, Italy, Spain, and the United Kingdom arrested six suspects in an investigation involving a network allegedly smuggling migrants through Schengen-area airports while also providing fraudulent documents and laundering proceeds. The case demonstrates how illicit networks combine specialized capabilities rather than operating within a single criminal market. Europol

North Korea Suspected in $351 Million Cryptocurrency Theft — SecurityWeek, September 25, 2026. North Korean actors were suspected in the theft of approximately $351 million from cryptocurrency exchange Bitget, according to reporting following unauthorized transfers detected on September 24. The incident highlights the continuing convergence of state activity, cybercrime, cryptocurrency theft, and revenue generation. SecurityWeek

Colorado Water Utilities Report Operational-Technology Cyberattacks — SecurityWeek, September 21, 2026. Cyberattacks against Colorado water utilities reportedly altered equipment settings, changed pumping cycles, and disabled remote access and alarms. The incidents are operationally significant because they demonstrate adversary interaction with physical processes rather than conventional theft of enterprise data. SecurityWeek

AI-Enabled Phishing Platform Disrupted After Automating Multiple Attack Functions — SecurityWeek, September 23, 2026. Microsoft disrupted the EvilTokens cybercrime platform, which reportedly incorporated artificial intelligence across multiple stages of phishing operations, including generating social-engineering content and selecting targets. The activity illustrates how AI can reduce the skill and labor requirements associated with scalable cybercrime. SecurityWeek

Salesforce Agentforce Vulnerabilities Exposed Risks From Trusted AI Agents — SecurityWeek, September 25, 2026. Researchers disclosed three vulnerabilities dubbed “SalesBleed” that could have enabled attackers to manipulate trusted Salesforce AI agents, exfiltrate CRM data, and support phishing activity. The findings demonstrate an emerging security challenge in which autonomous or semi-autonomous agents themselves become pathways to sensitive enterprise information. Muck Rack

U.S. and China Discuss AI Incident Notification Mechanism — Associated Press, September 2026. U.S. officials proposed a bilateral notification mechanism for artificial-intelligence incidents posing national-security risks during discussions with Chinese counterparts. Although preliminary, the concept suggests that AI safety is beginning to develop characteristics of other strategic risk-reduction mechanisms intended to prevent miscalculation between major powers. AP News

European Officials Warn Russian Hybrid Activity Is Expanding Below Armed-Conflict Threshold — Reuters, September 23, 2026. European officials said Russia is increasingly employing sabotage, cyberattacks, drone incursions, and other deniable activities intended to intimidate governments and weaken support for Ukraine, while distinguishing those activities from an imminent conventional attack on NATO. The pattern reinforces the challenge of responding proportionately to coordinated activity deliberately designed to remain below traditional military-response thresholds. Investing.com

EU Considers New Collective Mechanism for Hybrid Threats — Associated Press, September 2026. European Commission President Ursula von der Leyen proposed a collective consultation mechanism and “counter-hybrid playbook” in response to drone incidents, sabotage, and cyberattacks affecting European states. The proposal reflects growing recognition that hybrid activity can create collective-security effects without meeting the threshold for conventional armed aggression. AP News

French Political Leaders Publicly Reject Alleged Russian Interference — Reuters, September 21, 2026. National Rally leaders Marine Le Pen and Jordan Bardella accused Russia of attempts to influence French policy through intimidation and destabilization; the Kremlin categorically denied the allegations. The exchange illustrates the increasingly contested information environment surrounding alleged foreign interference and the political sensitivity of attribution. Reuters

NATO Intercepts Drone Over Lithuania Amid Broader Hybrid-Security Concerns — Associated Press, September 2026. A NATO fighter shot down a drone over Lithuanian airspace amid a series of European concerns involving drone incursions, sabotage, surveillance, and other hybrid activity. The response demonstrates the increasing requirement to integrate air defense, intelligence, law enforcement, infrastructure protection, and political decision-making when incidents remain ambiguous in origin or intent. AP News

Telecommunications Cybersecurity Legislation Targets Lessons From Salt Typhoon — CyberScoop, September 24, 2026. Bipartisan U.S. legislation would establish a government-industry mechanism to develop voluntary cybersecurity practices for telecommunications providers following the Salt Typhoon compromises. The proposal reflects a broader shift from incident-specific remediation toward institutionalizing resilience across infrastructure whose compromise can create national-level consequences. CyberScoop

Biotechnology Protection Proposals Highlight Emerging Critical-Infrastructure Gaps — CyberScoop, September 24, 2026. Bipartisan lawmakers introduced legislation intended to strengthen federal cybersecurity support for biotechnology, biomanufacturing, and biological data, which do not fit neatly within the existing critical-infrastructure sector framework. The proposals illustrate how technological change can create strategically important capabilities faster than established protection models adapt to them. CyberScoop

China and U.S. Establish AI Safety Communication Channel — SecurityWeek, September 27, 2026. Washington and Beijing agreed to establish a mechanism for communicating about AI-related incidents while continuing trade and military discussions. From a resilience perspective, the channel represents an early effort to create escalation-management mechanisms around a rapidly developing technology with potential national-security consequences. SecurityWeek