Hormuz shipping attacks continue as Ukraine meets prior strike threshold and Sudan fighting threatens El Obeid

Bottom Line

Further attacks on commercial vessels in or near the Strait of Hormuz are likely over the next 14 days, at 65 per cent probability and moderate confidence. A major renewed US-Iran air campaign before 19 October is unlikely, at 25 per cent and moderate confidence. For this brief, a major air campaign means at least 20 US or Iranian air or missile launches against at least three target locations within 24 hours, or repeated strikes over three consecutive days.

The Ukrainian Air Force's reported 135-weapon salvo from 3 to 4 October probably meets the prior forecast of at least one attack involving 100 or more launched drones or missiles by 8 October. That prior forecast is closed as probably met, at moderate confidence because the count is belligerent-reported. A second qualifying Russian attack before 8 October has a roughly even chance, at 45 per cent and moderate confidence.

The Sudanese Armed Forces probably improved their position in North Kordofan, but independent confirmation of control is absent. There is a 60 per cent chance of major fighting around El Obeid within 14 days, at low to moderate confidence. Major fighting means at least 10 artillery or airstrike incidents in 24 hours within 20 kilometres of the city, a ground assault into the urban area, displacement of at least 5,000 people, or suspension of the principal humanitarian access routes.

Key Developments

UK Maritime Trade Operations reported at least one attack per day in the Strait of Hormuz or Gulf of Aden from 2 October. Marisks counted at least seven tanker attacks in and around Hormuz.
President Donald Trump rejected the Iranian government's seven-day ceasefire and reopening proposal. Mohammad Bagher Ghalibaf said the Strait would remain closed until the US accepted the proposal.
Reporting identifies USS Theodore Roosevelt and the USS Makin Island Amphibious Ready Group with the 13th Marine Expeditionary Unit in the wider US posture, but accounts conflict over Roosevelt's location.
The Ukrainian Air Force reported 135 Russian drones and other unmanned weapons overnight from 3 to 4 October, including 52 jet-powered Shahed-type drones.
The Russian Ministry of Defence reported 199 Ukrainian drone interceptions overnight from 4 to 5 October. The count is not independently confirmed.
Russian strikes reportedly damaged Kyiv's Northern Bridge, energy infrastructure in Poltava Oblast and port and industrial facilities in Odesa Oblast.
Ukraine's Defence Ministry claimed that more than 51 per cent of Russian refining capacity is disabled. The figure is not independently established.
SAF reporting described captures at al-Mazroub and Sodari in North Kordofan. The IOM warned of an invasion threat to El Obeid, which shelters about 500,000 people, including more than 83,000 displaced people.
WFP reported that a marked food convoy in South Kordofan was struck on 3 October and that a driver was killed. WFP did not identify the perpetrator.
German Chancellor Friedrich Merz reported daily airspace violations, near-daily attacks on data centres and systematic disinformation. Finnish diplomatic sources reported threats to Baltic submarine cables, drone incidents and cyberattacks. The material does not independently document each incident.
Blockades were reported in El Alto on the road towards Viacha. Evo Morales called for protests from 13 October. Reports conflict over whether emergency powers are in force.

Analysis

Hormuz

Reported fact: UKMTO and Marisks describe recurring attacks around Hormuz and the Gulf of Aden. Reported fact: President Trump rejected the Iranian government's seven-day proposal, while Ghalibaf publicly linked reopening to US acceptance. Assessment: another verified attack, boarding, forced diversion or near miss involving a commercial vessel has a 65 per cent probability within 14 days, at moderate confidence. Maritime operator reporting and multiple media accounts support the occurrence of attacks; they do not establish Iranian responsibility for the 1 October attack on Kazimah III.

A major renewed US-Iran air campaign before 19 October is unlikely, at 25 per cent and moderate confidence. The definition used here requires at least 20 US or Iranian air or missile launches against at least three target locations within 24 hours, or repeated strikes over three consecutive days. Public reporting describes a lull in major strikes and does not establish a confirmed US strike order. The reported movement of US naval forces expands available military options but does not by itself demonstrate an intention to launch an air campaign.

Kpler, JPMorgan and Goldman Sachs report partial recovery in aggregate Middle East crude exports, but their estimates cover different routes and periods. Saudi Arabia's East-West Pipeline and other bypass routes explain part of the recovery. The relevant judgment for shipping operators and marine insurers is therefore route-specific: aggregate exports can approach pre-war levels while Hormuz transits remain exposed to attack, delay, diversion and higher war-risk premiums. Gulf energy importers face a greater risk of freight and insurance disruption than of an immediate loss of all regional crude supply.

Ukraine and Russia

Reported fact: the Ukrainian Air Force said that 135 Russian drones and other unmanned weapons were launched overnight from 3 to 4 October. Assessment: the event probably meets the prior definition of at least 100 launched drones or missiles in one attack. The prior 85 per cent forecast by 8 October is therefore closed as probably met, with moderate confidence. Confidence is high that the Ukrainian Air Force made the report, but only moderate in the exact launch total because the Ukrainian government is a belligerent source.

The residual forecast is different: a second attack meeting the same 100-launch threshold before 8 October has a roughly even chance, at 45 per cent and moderate confidence. Russia and Ukraine are likely to continue long-range attacks against infrastructure over the next 14 days, at 80 per cent and moderate confidence. Russian strikes reportedly damaged the Northern Bridge in Kyiv, Poltava energy infrastructure and Odesa port and industrial sites. The reported damage establishes disruption at named locations, but its duration and operational effect are not independently measured.

Ukraine's Defence Ministry has high-confidence attribution as the source of the more than 51 per cent refining-capacity claim, but the underlying estimate has low confidence. Independent satellite imagery, refinery operator notices, loading data and facility-level throughput estimates are absent from the supplied material. Ukrainian and Russian infrastructure planners face a continuing probability of localised transport, energy, port and refining outages, but the evidence does not establish a national Russian fuel shortage or a battlefield breakthrough.

The 24 September forecast that Ukraine would conduct another deep strike against a Russian refinery, military facility or logistics node by 24 October remains unchanged at 75 per cent and moderate confidence. The reported increase in Ukrainian long-range drone production provides limited reinforcement, but it is itself a Ukrainian Defence Ministry claim without independent production data. The prior reported reciprocal energy-strike understanding remains very unlikely to operate durably through 21 October, at 15 per cent and moderate confidence. No new evidence in the current period establishes a formal or durable agreement.

The prior ground-breakthrough forecast had a 27 September deadline and has expired without a supplied, independently verified outcome. It is replaced by a 14-day event defined as sustained movement of at least 10 kilometres along one axis, or verified control of multiple settlements that severs a named major supply route. That event is unlikely, at 10 per cent and low to moderate confidence, because the current material concerns air and drone strikes rather than verified frontline movement.

Sudan

Reported fact: the SAF and associated reporting claimed captures at al-Mazroub and Sodari in North Kordofan. Assessment: the SAF probably improved its tactical position, at 65 per cent and low to moderate confidence. The claims rely heavily on SAF-linked reporting, and the supplied material lacks independent imagery, humanitarian access reporting or persistent local confirmation.

The IOM warned of an invasion threat to El Obeid, a city of about 500,000 people including more than 83,000 displaced people. There is a 60 per cent chance of major fighting around El Obeid within 14 days, at low to moderate confidence. The definition requires at least 10 artillery or airstrike incidents in 24 hours within 20 kilometres of the city, a ground assault into the urban area, displacement of at least 5,000 people, or suspension of the main humanitarian access routes. A 3 October WFP convoy strike killed a driver. WFP reported the occurrence but did not identify the perpetrator; separate field reporting attributed it to an SAF drone, which remains unverified.

WFP, IOM and other humanitarian agencies face a higher probability of route interruption if fighting reaches the El Obeid approaches or additional marked convoys are attacked. This is an assessment about access risk, not evidence that the SAF or RSF has adopted a policy of targeting aid workers. Severe humanitarian stress is very likely to persist over the next one to three months, at high confidence for the continuation of acute needs and moderate confidence for any specific displacement total.

Europe and Bolivia

German Chancellor Friedrich Merz reported daily airspace violations, near-daily attacks on data centres and systematic disinformation. Finnish diplomatic sources reported threats to Baltic submarine cables, drone incidents and cyberattacks, but no named Finnish official or independent incident record was supplied. Russia has issued warnings concerning defence of Kaliningrad and use of its full arsenal, while Vladimir Putin has said Russia does not intend to attack European countries. Assessment: Russia is likely using the warnings to deter NATO and influence alliance debate rather than signalling an imminent attack, at 65 per cent and moderate confidence. This judgment rests on internally mixed Russian statements and European official reporting, not on evidence of an impending attack order.

NATO air and cyber defenders face a defined escalation threshold rather than a general increase in alert language. A verified airspace violation over a NATO member, forensic attribution of subsea-cable damage to a Russian state or proxy actor, or a cyberattack disrupting a German or Finnish critical service for at least 24 hours would materially raise the hybrid-risk assessment. Official claims without incident-level evidence would leave it unchanged.

Reported fact: blockade points were identified in El Alto on the road towards Viacha, and Evo Morales called for protests from 13 October. Assessment: localised blockades are likely to persist through 13 October, at 70 per cent and low to moderate confidence. A nationwide shutdown remains unlikely because the material does not establish coordinated participation by transport unions or blockades linking La Paz to multiple departments. Road users and commercial operators face delay risk on the El Alto-Viacha route, while the legal basis for any clearance operation remains unresolved because reporting conflicts over emergency powers.

Analytic continuity and source quality

The 24 September Russia forecast of at least one attack involving 100 or more launched drones or missiles by 8 October is probably met by the reported 3 to 4 October Ukrainian Air Force event. The original 85 per cent probability is closed, and the residual forecast concerns a second qualifying event at 45 per cent. The Ukraine deep-strike forecast by 24 October remains unchanged at 75 per cent. The reported reciprocal energy-strike understanding remains very unlikely to operate durably through 21 October, at 15 per cent. North Korean training, the presence of more than 10,000 personnel in Russia and combat deployment remain unchanged at 65 per cent, 50 per cent and 25 per cent respectively, all with low confidence because no new corroboration was supplied. The prior 27 September ground-breakthrough forecast has expired and is replaced by the defined 14-day event above.

The strongest evidence in this package concerns the occurrence of maritime alerts, reported attacks, humanitarian incidents and public statements. UKMTO and vessel operators have operational access to maritime incidents, but attribution remains weak. WFP and IOM have direct humanitarian access and are more reliable for convoy incidents, displacement and access conditions than for identifying perpetrators or predicting battlefield movement. Kpler, JPMorgan and Goldman Sachs provide useful commercial estimates, but their route and time definitions differ. The Ukrainian Air Force, Russian Ministry of Defence and SAF provide direct belligerent reporting that is high confidence as evidence of what each institution claims, but lower confidence as independent evidence of counts, damage or territorial control. German and Finnish official reporting supports the existence of official concern but does not independently establish each cited hybrid incident. The overall assessment is moderate confidence.

Indicators & Warnings

UKMTO alerts, shipowner statements, validated AIS deviations and imagery showing projectile, mine or boarding damage would confirm another Hormuz incident. One verified hit, boarding, forced diversion or crew casualty would raise the 65 per cent attack forecast. Watch in the next 24 to 72 hours.
A confirmed movement of USS Theodore Roosevelt or the USS Makin Island Amphibious Ready Group into a named Gulf or Arabian Sea operating area, combined with force-protection notices, escort orders, tanker rerouting or a public rules-of-engagement change, would raise the US-Iran escalation branch. A carrier location alone would not. Watch in the next 24 to 72 hours.
A second attack involving at least 100 launched drones or missiles before 8 October, with impact locations validated by local authorities, satellite imagery or geolocated video, would raise the residual Russian-strike forecast. A series of smaller attacks would confirm continued activity but would not meet the event definition. Watch by 8 October.
Satellite-detected outages, refinery operator notices, loading data and facility-level throughput estimates would raise or lower confidence in Ukraine's refining-capacity claim. Watch within 7 days.
Independent imagery, repeated local reporting and humanitarian access evidence from al-Mazroub and Sodari would confirm or weaken the SAF territorial-control assessment. Watch over 72 hours to 14 days.
Ten or more artillery or airstrike incidents within 20 kilometres of El Obeid in 24 hours, a ground assault, displacement of at least 5,000 people or suspension of principal aid routes would raise the 60 per cent major-fighting estimate. Watch over 72 hours to 14 days.
A further strike on a marked WFP or other humanitarian convoy, or suspension of aid routes into South Kordofan, would indicate deteriorating access. Watch within 7 days.
A verified airspace violation over a NATO member, forensic attribution of subsea-cable damage or a cyberattack disrupting a German or Finnish critical service for at least 24 hours would raise the hybrid-escalation assessment. Watch over 72 hours to 30 days.
Confirmed blockades on routes linking La Paz to at least two departments, coordinated transport-union participation, a verified emergency decree or security-force deployments would raise the national-disruption branch in Bolivia. Watch by 13 October.
Imagery or official and independent reporting showing North Korean personnel moving from the named training facilities towards the Ukrainian theatre would raise the combat-deployment estimate. Training without onward movement would leave it unchanged. Watch over 30 days.

Alternatives

Hormuz

Continued attacks without a major air campaign or verified reopening, 55 per cent, roughly even chance. At least one further commercial-vessel incident occurs within 14 days, while the defined major-air-campaign threshold and the 72-hour de-escalation threshold are not met.
Direct US-Iran escalation, 25 per cent, unlikely. A US or coalition casualty, an attack on a US warship, confirmed Iranian mining or a commercial-vessel incident causing at least 10 deaths is followed by US or Iranian strikes within 72 hours. This branch would increase the probability of fuller Hormuz closure and Gulf shipping disruption.
Limited de-escalation, 20 per cent, unlikely. Verified attacks halt for at least 72 consecutive hours, the US and Iranian governments announce an arrangement, and either the Strait reopens or at least three commercial vessels transit under a verified escort arrangement.

Kordofan

SAF consolidation and fighting around El Obeid, 60 per cent, better than even chance. Independent or multi-source evidence confirms SAF presence in al-Mazroub and Sodari, and at least one defined major-fighting threshold is met around El Obeid.
Stalled SAF advances and below-threshold El Obeid fighting, 40 per cent, unlikely. RSF counterattacks or persistent uncertainty prevent confirmation of control, while no ground assault, displacement threshold, aid-route suspension or 10-incident strike day occurs.

Russian-linked hybrid activity

Activity remains below a verified NATO security threshold, 75 per cent, likely. German and Finnish officials continue to report suspected incidents, but no event receives forensic attribution and no critical service disruption lasts at least 24 hours.
A verified incident causes prolonged disruption in a NATO member, 25 per cent, unlikely. A Russian state or proxy actor is forensically linked to cable damage, a verified airspace violation or a cyberattack that disrupts a German or Finnish critical service for at least 24 hours.

Bolivia

Localised El Alto and Viacha disruption, 70 per cent, likely. Blockades continue at the reported points without confirmed blockades to multiple departments or coordinated national transport-union participation.
Coordinated national blockades, 30 per cent, unlikely. Transport unions or other national organisers join the 13 October mobilisation, routes to at least two departments are blocked and security forces deploy under a verified emergency decree.

Outlook

Further attacks on commercial vessels in or near the Strait of Hormuz are likely over the next 14 days, at 65 per cent and moderate confidence. A major renewed US-Iran air campaign before 19 October is unlikely, at 25 per cent and moderate confidence. A full reopening under the current Iranian seven-day proposal is unlikely by 19 October, at 20 per cent and moderate confidence, because President Trump rejected the terms and Ghalibaf linked reopening to US acceptance.

The prior Russian large-strike forecast is probably met by the reported 3 to 4 October Ukrainian Air Force event. A second attack involving at least 100 launched drones or missiles before 8 October has a roughly even chance, at 45 per cent and moderate confidence. Russia and Ukraine are likely to continue long-range attacks against infrastructure over the next 14 days, at 80 per cent and moderate confidence. A defined sustained battlefield breakthrough by either side is unlikely over that period, at 10 per cent and low to moderate confidence.

Ukraine is likely to conduct another deep strike against a Russian refinery, military facility or logistics node by 24 October, at 75 per cent and moderate confidence. The reported reciprocal energy-strike understanding remains very unlikely to operate durably through 21 October, at 15 per cent and moderate confidence. The SAF and RSF are likely to continue contesting North and South Kordofan over the next 14 days, at 75 per cent and moderate confidence. Major fighting around El Obeid has a 60 per cent probability over that period, at low to moderate confidence.

The CrisisBrief Index is 62, HIGH. It is an equal-weighted editorial trend measure, not an operational threshold or a substitute for the theatre assessments. Conflict is 72 because Russia-Ukraine long-range attacks, Sudanese fighting and the US-Iran escalation branch are active. Maritime trade is 66 because recurring attacks around Hormuz are reported and reopening is unverified. Energy is 58 because Gulf exports have partly recovered through bypass routes while Hormuz traffic and Russian refining remain exposed. Political risk is 51 because of Kaliningrad signalling, Sudan's parallel administrations, Bolivian protest pressure and unresolved US-Iran bargaining. The supplied prior briefing contains no previous CBX, so no day-to-day change can be calculated. Given source dependence and conflicting reports, the composite has an estimated uncertainty of plus or minus 7 points.