Bottom Line
The US-Iran maritime confrontation intensified between 5 and 12 October. CENTCOM reported that US forces disabled the Panama-flagged M/V Ocean Molica in the Gulf of Oman on 10 October, UKMTO recorded 11 commercial-shipping attacks in the seven-day period ending 7 October, and Kpler estimated average Hormuz crude flows at 8.5 million barrels per day for the week ending 7 October, roughly 40 per cent below normal. These facts support a very likely, 80-95 per cent, assessment that commercial vessels will remain exposed to attack or coercive interference in the next 14 days. Confidence is high for continued exposure, but only moderate for attribution and the precise level of traffic disruption.
Houthi attacks on Saudi targets created a second escalation pathway. Saudi authorities reported 12 deaths and 309 injuries in the 10 October Riyadh airport attack, while another account reported 50 injuries. A Houthi official claimed responsibility, but chronology and attribution remain unresolved. Further Houthi attacks and Saudi-led strikes are each likely, 55-70 per cent, in the next 14 days. Direct US combat against the Houthis and a direct US strike on Iranian territory before 3 November are each unlikely, 20-40 per cent.
Key Developments
Maritime confrontation
Reported: CENTCOM stated that US forces disabled M/V Ocean Molica, also known as Arika Sun, in the Gulf of Oman on 10 October after it left an Iranian port and ignored repeated warnings. CENTCOM also reported four commercial vessels disabled, 135 ships turned back and 10 IRGC-linked tankers destroyed since the blockade resumed on 14 July. This is primary US military reporting, but the supplied material contains no independent corroboration of the Ocean Molica action or the cumulative figures.
Reported: UKMTO recorded 11 attacks on commercial shipping in the seven-day period ending 7 October, including 10 in the Strait of Hormuz. A vessel identified by shipping sources as GEM NO.2 was reported struck by an unknown projectile west of Al Jazeera, UAE, on 9 October. A separate tanker incident was reported off Qatar. Responsibility for both incidents remains unresolved.
Assessment: Further attacks, warnings or coercive interference involving commercial vessels in Hormuz, the Gulf of Oman or waters off Qatar and the UAE are very likely, 80-95 per cent, in the next 14 days. UKMTO is primary incident reporting, but it does not attribute every event. JMIC's severe threat assessment and commercial security reporting provide corroboration for exposure, not for responsibility.
Hormuz traffic metrics
| Measure | Source and window | Baseline | What it supports | Limitation |
|---|---|---|---|---|
| Crude flow | Kpler, week ending 7 October | Normal flow | 8.5 million barrels per day, roughly 40 per cent below normal | Commercial methodology and normal baseline are not specified in the supplied record |
| Vessel transits | UKMTO, latest seven-day period | Previous UKMTO period | 275 transits, up from 247 | Counts vessels, not barrels or cargo value |
| Industry shipment estimate | Industry executives, current reporting | Pre-war shipments | About 80 per cent of pre-war levels | Anonymous commercial estimate with a different period and denominator |
| Relative traffic estimate | Separate maritime reporting | Pre-conflict traffic | About 75 per cent below pre-conflict levels | Baseline and counting method are not reconciled with UKMTO |
Assessment: The Strait is likely to remain navigable, 70-85 per cent, but materially below normal, 55-70 per cent, over the next 14 days. Kpler is the authoritative source for the crude-flow estimate in this product; UKMTO is authoritative for reported vessel movements. The figures should not be combined into one recovery rate.
Houthi-Saudi escalation
Reported: Saudi civil aviation authorities said a 10 October attack on King Khalid International Airport killed 12 people and injured 309. A New York Times account reported 12 deaths and 50 injuries. A Houthi political bureau member claimed responsibility, while other reporting described the attacker as unknown or placed a projectile strike at the terminal on 11 October. Saudi Arabia separately reported more than 60 airstrikes on Houthi-controlled provinces.
Assessment: The occurrence of an airport attack or damaging projectile incident is likely, 70-85 per cent, but the casualty figure and attribution are low confidence. Houthi responsibility is assessed at 55-70 per cent, low confidence, based on the Houthi claim and Saudi attribution, offset by conflicting chronology and the absence of forensic confirmation. Further Houthi attacks on Riyadh, Abha, Yanbu or Saudi energy infrastructure are likely, 55-70 per cent, in the next 14 days. Saudi-led strikes on Houthi positions are also likely, 55-70 per cent.
Donald Trump has said Washington is considering joining Saudi operations. The United States has confirmed intelligence support and deployed military experts to Saudi Arabia. These are declared or reported support measures, not evidence of an authorised US strike. Direct US combat operations against Houthi positions in Yemen are unlikely, 20-40 per cent, in the next 14 days, with low confidence.
South China Sea and Taiwan
Reported: The Philippine Coast Guard said China Coast Guard vessels obstructed a medical evacuation near Second Thomas Shoal on 8 October. Beijing said it permitted a humanitarian transfer. Philippine and Chinese accounts also describe an encounter between a Philippine C-208 and a PLA Air Force J-16 near Scarborough Shoal on 3 October, but disagree over airspace and conduct. Manila reported 101 Chinese navy and coast guard vessels around Thitu Island, Second Thomas Shoal, Sabina Shoal and Scarborough Shoal in September, compared with 56 in August.
Assessment: Another China Coast Guard and Philippine government-vessel encounter is likely, 55-70 per cent, within one to three months. This is unchanged from the 28 September briefing because the reported September presence and October encounters support recurrence. A sustained armed China-Philippines clash is very unlikely, 5-15 per cent. Confidence is moderate for recurrence and low for escalation.
The supplied reporting does not establish a new PLA operation in the Taiwan Strait during 3-11 October. Routine PLA and China Coast Guard pressure around Taiwan remains likely, 55-70 per cent, over the next one to three months, consistent with the 28 September briefing. A blockade or attack within 14 days remains unlikely, 20-40 per cent, with low confidence. The main limitation is sparse current operational reporting.
Ukraine
Reported: The Ukrainian General Staff reported 221 combat engagements in the 24 hours to 08:00 on 11 October, including 25 in the Pokrovsk sector, 21 in Huliaipole and 18 in Kostiantynivka. ISW assessed that Operation Vivaldi disrupted the northern arm of Russia's pincer near Lyman. Reported Ukrainian gain estimates range from at least 80 square kilometres to 176 square kilometres, depending on source and method.
The Zaporizhzhia regional authorities reported 1,039 Russian attacks across 51 settlements on 8 October, including air, artillery, multiple-launch rocket system and drone attacks. Ukrainian authorities reported that a Russian strike on civilian transport in Kramatorsk killed at least 30 people, while another account reported 33 deaths. The Ukrainian Air Force and local authorities provide primary reporting for these claims, but the supplied material does not independently verify every strike or casualty figure.
Assessment: At least one Russian missile, glide-bomb or Shahed-type drone attack against a Ukrainian urban or energy target is very likely, 80-95 per cent, in the next 14 days, with high confidence. Ukrainian long-range attacks on Russian fuel infrastructure and local counter-attacks near Lyman are likely, 55-70 per cent, with moderate confidence. A decisive Ukrainian breakthrough or durable Russian collapse is unlikely, 20-40 per cent.
Sahel and Sudan
Reported: Malian forces entered Kidal on 6 October after the Azawad Liberation Front announced a withdrawal. The entry is supported by accounts from both sides, but there is no follow-up evidence in the supplied record showing a sustained Malian garrison. JNIM claimed to have seized a Burkinabè military headquarters in Diapaga on 6 October. The Diapaga claim is unattributed and uncorroborated.
In Sudan, SAF and allied forces were reported to have taken Abu Zaima, Sudri and Al-Mazroub or to have advanced towards El-Khoei and En Nahud. Reports also described RSF defections, including claims involving Mohamed Arz El-Fanjri. The dates, force sizes and control claims differ. SAF and RSF statements are direct accounts of each side's position, not independent confirmation.
Assessment: JNIM attacks against fixed security positions or disruption of the Kayes-Bamako fuel corridor are likely, 55-70 per cent, in the next 30 days, with low confidence. Malian Armed Forces control of Kidal beyond the reported entry is unresolved. A wider SAF battlefield reversal against the RSF is unlikely, 20-40 per cent, and a negotiated Sudanese ceasefire is unlikely, 20-40 per cent, over the next 30 days. UN and humanitarian reporting supports continued displacement pressure, but the supplied record does not establish a new nationwide battlefield balance.
Gaza, southern Lebanon and Europe
Reported: The IDF's 55th Reserve Paratroopers Brigade completed a 100-day mobilisation, including 80 days of operations. Reporting describes reinforced positions, barriers and a defensive line roughly 12 kilometres from the Israeli border. September satellite imagery showed IDF outposts, barriers and demolitions at Bani Suheila, Shujaiya, Jabaliya and Rafah. Hamas was reported to control approximately 35 per cent of Gaza.
Assessment: The IDF is likely to retain a forward posture and conduct further strikes in southern Lebanon, 55-70 per cent, over the next one to three months. Hamas and the IDF are likely to retain divided control in Gaza, 55-70 per cent, over the next month. Confidence is moderate for continued Israeli posture and low for the precise Gaza control line because the imagery is from September and the control estimate is single-source.
European intelligence officials report increased Russian recruitment of intermediaries through criminal and online networks. Estonia reported 20 arrests since 2025 of people allegedly recruited after travelling to Russia and described an August attack on defence supplier Milrem. Denmark's PET reported Russian-linked sabotage against defence companies supplying Ukraine, an allegation rejected by Moscow. Assessment: Russian-linked recruitment, sabotage and intimidation in Europe are likely, 55-70 per cent, over the next three months, with moderate confidence. Public reporting does not establish that every incident belongs to one centrally directed campaign.
Analysis
Change from the 28 September briefing
| Prior judgement | Current judgement | Direction of change | Evidence driving the change | Confidence |
|---|---|---|---|---|
| Hormuz would remain severely restricted but not demonstrably closed through 5 October | Hormuz is likely to remain navigable but materially below normal through the next 14 days | Consistent on traffic restriction, higher concern over direct confrontation | CENTCOM reported the Ocean Molica action on 10 October; UKMTO recorded 11 attacks for the period ending 7 October; Kpler estimated 8.5 million barrels per day | Moderate for the overall judgement; high for continued exposure |
| Another China Coast Guard encounter with a Philippine government vessel was assessed at 55-70 per cent within one to three months | The estimate remains 55-70 per cent | Unchanged | The Second Thomas Shoal medical-evacuation incident and the reported C-208-J-16 encounter reinforce recurrence | Moderate for recurrence |
| A sustained armed China-Philippines clash was assessed at 10-20 per cent | The estimate is revised to 5-15 per cent | Lower | The October encounters involved coercive manoeuvring and competing claims, but no weapons discharge or sustained armed exchange | Low to moderate |
| Routine PLA pressure around Taiwan was assessed at 55-70 per cent | The estimate remains 55-70 per cent over one to three months; a blockade or attack in 14 days remains 20-40 per cent | Substantively unchanged, with low confidence | Current reporting adds no dated PLA operation, but recurring China Coast Guard and PLA activity remains a baseline | Low |
| Direct US strikes against the Houthis were unlikely | Direct US combat remains 20-40 per cent in the next 14 days | Slightly higher escalation concern, but still unlikely | Trump reportedly considered participation, while the United States confirmed intelligence support and deployed military experts; no strike was reported | Low |
| The Strait would not be treated as demonstrably closed | The judgement remains unchanged | Consistent | UKMTO counted 275 transits, while Kpler and industry figures show materially reduced flow | Moderate |
Source quality and corroboration
The supplied corpus contains 115 reports in the highest reliability band and 70 in the next band, alongside 81 in a middle band, 23 in a low band, 27 in a very low band and 21 that are not assessable under the supplied grading system. The reliability categories indicate source quality, not the truth of every claim.
UKMTO incident notifications are primary maritime reporting and are strong evidence that an incident was reported, but they generally do not establish attribution. JMIC provides a maritime-threat assessment based on incident reporting and is useful for exposure, not proof of responsibility. Kpler provides commercial flow estimates, but its methodology and baseline differ from UKMTO vessel counts. CENTCOM is the primary source for the Ocean Molica action and the cumulative blockade figures, but the supplied material contains no independent corroboration. Saudi civil aviation authorities and Houthi officials provide direct accounts of the Riyadh incident, but their opposing interests and conflicting chronology reduce confidence in attribution and casualty totals.
The Ukrainian General Staff, Ukrainian Air Force, NASA FIRMS and UN agencies provide primary or institutional reporting for specific observations. Ukrainian and Russian military claims remain interested reporting and require geolocation or independent imagery for control judgements. ISW provides independent analytical mapping but uses reported and open-source inputs whose coverage varies. Reports on Diapaga, Kidal, Sudanese defections and the Gaza control line rely more heavily on local media, official statements or single-source accounts and therefore carry lower confidence.
Stakeholder implications
For shipowners and insurers, the principal near-term exposure is the combination of reported vessel attacks, US blockade enforcement and unresolved attribution. A second disablement or a confirmed attack causing crew casualties would increase the probability of higher war-risk premiums, delays and route changes. For Saudi, Emirati and Qatari exporters, sustained use of alternative terminals or loading arrangements would indicate that the disruption is affecting cargo planning rather than only individual vessels. For Asian refiners, the relevant exposure is altered arrival timing and tanker cost, not a confirmed physical closure of Hormuz.
For CENTCOM, a further incident involving an Iranian-linked vessel, IRGC unit or US asset would increase the probability of reciprocal maritime escalation. For Saudi authorities, repeated attacks on King Khalid International Airport, Abha, Yanbu or energy infrastructure would indicate that the Houthi campaign is broadening beyond a single airport incident. For the Philippine Coast Guard and the Armed Forces of the Philippines, a collision, water-cannon damage or repeated PLA Air Force interception would mark a higher-risk phase than the current pattern of coercive encounters.
For Ukraine's energy authorities and European defence companies, the near-term exposure is continued Russian strike activity and Russian-linked sabotage attempts rather than a demonstrated change in strategic control. For UN agencies and humanitarian organisations in Sudan, Mali and Gaza, the decision-relevant indicators are verified changes in access, new displacement from named areas and repeated attacks on civilian infrastructure.
Indicators & Warnings
| Indicator | Baseline and trigger | Source and cadence | Analytic consequence | Horizon |
|---|---|---|---|---|
| Further vessel strike, boarding or disablement | Baseline: 11 UKMTO-reported attacks in the seven-day period ending 7 October. Trigger: two or more independently corroborated incidents in a subsequent seven-day period | UKMTO, JMIC and company-security notices, reviewed daily | Raises the probability of continued maritime attacks and direct US-Iran confrontation | 7-14 days |
| Hormuz traffic deterioration | Baseline: 275 UKMTO transits in the latest period, 247 in the preceding period; trigger: two consecutive periods below the preceding figure, or Kpler crude flow below 8.5 million barrels per day | UKMTO weekly reporting and Kpler weekly estimates | Raises the probability of materially reduced traffic; a sustained increase lowers it | 7-21 days |
| Routine US blockade enforcement | Baseline: one CENTCOM-reported Ocean Molica disablement; trigger: a second comparable action against a vessel leaving an Iranian port | CENTCOM statements and maritime notices, reviewed daily | Raises the probability of reciprocal IRGC action and direct US-Iran maritime confrontation | 14 days |
| Saudi-Houthi escalation | Baseline: reported Riyadh airport attack and more than 60 Saudi airstrikes; trigger: a new attack on Riyadh, Abha, Yanbu or Saudi energy infrastructure with independently corroborated casualties | Saudi civil aviation, Saudi coalition statements, JMIC and major-media reporting, reviewed daily | Raises the probability of further Saudi strikes and US combat involvement | 14 days |
| China-Philippines danger | Baseline: October encounters near Second Thomas Shoal and Scarborough Shoal; trigger: collision, water-cannon damage, injury, weapons discharge or repeated J-16 interceptions within seven days | Philippine Coast Guard, China Coast Guard, Philippine Department of National Defence and commercial imagery, reviewed daily | Raises the probability of a sustained armed clash above 5-15 per cent | 1-3 months |
| Taiwan blockade or attack preparations | Baseline: no current dated operation in the supplied record; trigger: PLA Eastern Theater Command mobilisation, exclusion zones, civilian roll-on/roll-off requisitioning or Fujian logistics activity | Taiwan Ministry of National Defence, PLA Eastern Theater Command notices, commercial imagery and shipping data, reviewed daily | Raises the 20-40 per cent 14-day blockade-or-attack estimate; absence of indicators lowers it | 14 days |
| Consolidation near Lyman | Baseline: reported local Ukrainian gains and 221 engagements in 24 hours; trigger: geolocation of at least two named positions under Ukrainian control for seven days and Russian acknowledgement of withdrawal | ISW, satellite imagery, Ukrainian General Staff and Russian military reporting, reviewed daily | Raises the probability of a wider Ukrainian operational gain | 14-30 days |
| JNIM or FLA control around Kidal and Diapaga | Baseline: Malian entry into Kidal and unverified JNIM seizure claim; trigger: independent imagery confirming control or continued absence of Malian forces from Kidal after 14 days | Commercial imagery, Malian Armed Forces, FLA and JNIM releases, reviewed every 48 hours | Raises confidence in durable insurgent or state control, depending on the observed actor | 14-30 days |
| Sudanese battlefield shift | Baseline: reported SAF gains and RSF defections without independent confirmation; trigger: independent confirmation of additional Kordofan town control or repeated geolocated RSF advances towards Damazin | UN OCHA, satellite imagery, SAF and RSF reporting, reviewed every 48 hours | Raises confidence in a wider battlefield shift; isolated claims leave it unchanged | 30 days |
| Lebanon escalation | Baseline: reported IDF forward posture and Hezbollah resistance statements; trigger: repeated Hezbollah attacks causing Israeli casualties, new IDF ground operations or confirmed winter deployments | IDF, UNIFIL, Lebanese Armed Forces and satellite imagery, reviewed daily | Raises the probability of sustained Israel-Hezbollah hostilities | 1-3 months |
| European sabotage expansion | Baseline: Estonian arrests, Milrem incident and Danish PET warning; trigger: coordinated cyber and physical attacks against two or more named defence firms or another explosive-device incident at aviation infrastructure | National police and security services, NATO and company disclosures, reviewed weekly | Raises the probability of an expanding Russian-linked campaign | 1-3 months |
Alternatives
The alternatives are independent branches rather than mutually exclusive outcomes. Their probability ranges therefore do not sum to 100 per cent.
Maritime confrontation remains contained below direct US-Iran strikes on land
Probability: 55-70 per cent, likely.
Washington has used maritime force against M/V Ocean Molica, while Donald Trump has publicly opposed an attack on Iran before 3 November. Iran retains an incentive to impose costs on shipping without provoking a US land campaign. A confirmed Iranian attack on US personnel, a US strike on Iranian territory or a mass-casualty vessel incident would break this base case.
A US-Iran maritime incident produces reciprocal force beyond the Ocean Molica action
Probability: 20-40 per cent, unlikely.
A second US disablement, an IRGC attack on a US vessel or aircraft, or a confirmed US strike on an Iranian naval unit would create a direct escalation cycle. The supplied reporting records no confirmed Iranian attack on US forces during this window, which keeps this branch below the containment case.
Washington and Tehran reach a limited maritime arrangement
Probability: 40-60 per cent, roughly even chance.
The reported review of reopening proposals provides a basis for this branch, but the US blockade remains active and CENTCOM reports continued enforcement. A formal maritime deconfliction channel, reciprocal vessel releases and two consecutive periods of rising UKMTO transits would support it. Further vessel disablements would reduce its probability.
The Riyadh airport attack was conducted by the Houthis as claimed
Probability: 55-70 per cent, likely, low confidence.
The Houthi political bureau claim and Saudi attribution support this explanation. Conflicting dates, casualty totals and an unidentified-attacker account prevent high confidence. Geolocated Houthi launch evidence or a consistent Houthi claim matching the weapon and date would strengthen it.
The Riyadh reporting conflates separate events or misattributes the attacker
Probability: 30-45 per cent, unlikely.
The supplied accounts disagree over whether the relevant strike occurred on 10 or 11 October and report 50 or 309 injuries. A separate-event or reporting-error explanation remains credible even though an airport disruption itself is likely to have occurred.
Further Saudi-Houthi exchanges remain below direct US combat
Probability: 55-70 per cent, likely.
Saudi Arabia has reported more than 60 strikes on Houthi-controlled provinces, while Trump has discussed participation without authorising it. A confirmed US strike package or US combat sortie would break this branch.
A China-Philippines encounter causes casualties or a sustained armed exchange
Probability: 5-15 per cent, very unlikely.
The parties have repeatedly used manoeuvring, water cannon and competing legal claims without sustained weapons fire. A collision causing deaths, weapons discharge or mobilisation of Philippine and Chinese naval forces would confirm this branch.
Taiwan reporting understates PLA preparations
Probability: 20-40 per cent, unlikely.
Current reporting is sparse and cannot exclude concealed preparation. The branch would require corroborated PLA Eastern Theater Command mobilisation, exclusion zones, civilian vessel requisitioning or Fujian logistics activity. Continued absence of such indicators over 14 days would lower its probability.
Ukrainian gains near Lyman consolidate without producing a strategic breakthrough
Probability: 55-70 per cent, likely.
ISW and Ukrainian reporting support local gains, but the reported area estimates differ and Russian ground pressure remains high. Confirmation of Ukrainian control of named positions for seven days would support this branch. A Russian counterattack restoring the previous line would favour the temporary-gain alternative.
Reported gains near Lyman, Kidal or Kordofan prove temporary or exaggerated
Probability: 40-60 per cent, roughly even chance.
The claims rely on divergent official accounts, low-reliability local reporting and limited follow-up imagery. Reversal of positions near Lyman, a renewed Malian garrison in Kidal or verified SAF loss of reported Kordofan positions would support this branch.
A negotiated pause in Sudan briefly reduces fighting
Probability: 20-40 per cent, unlikely.
SAF commander Abdel Fattah al-Burhan has rejected talks under current conditions, and the supplied record contains no RSF acceptance of the 90-day proposal. Public RSF acceptance of withdrawal and cantonment terms followed by a verified fall in attacks around Blue Nile and Kordofan would support this branch.
Israeli and Hezbollah positions in southern Lebanon remain tense but below sustained war
Probability: 55-70 per cent, likely.
The IDF has reported forward positions and winter preparations, while Hezbollah Secretary-General Naim Qassem has rejected a continuing Israeli presence. Repeated Hezbollah attacks causing Israeli casualties or Israeli ground operations beyond current positions would favour the escalation branch.
Russia-linked European sabotage expands into coordinated attacks
Probability: 20-40 per cent, unlikely.
European officials report recruitment networks, arrests and attempted attacks, but public evidence does not establish a single centrally directed campaign or an imminent mass-casualty plot. Coordinated cyber and physical attacks against named defence companies, or a second explosive-device incident at aviation infrastructure, would raise this branch.
Outlook
The highest-confidence forward judgement is continued maritime exposure in and around the Strait of Hormuz. The key uncertainty is not whether risk exists, but whether the next incident remains an isolated vessel event or becomes a reciprocal US-Iran confrontation. A second CENTCOM-reported disablement, an IRGC attack on US forces or a confirmed mass-casualty vessel incident would materially change the trajectory.
The Houthi-Saudi track is likely to remain active alongside the maritime confrontation. The Riyadh airport occurrence is better supported than its casualty total or attribution. Saudi retaliation is likely, but US participation remains unlikely because current evidence shows support and planning signals rather than authorisation or combat activity.
The South China Sea forecast is unchanged from 28 September: another China Coast Guard and Philippine government-vessel encounter is likely, while a sustained armed clash is very unlikely. The Taiwan blockade-or-attack estimate remains unlikely but low confidence because the supplied reporting contains no current operational picture.
Ukraine is likely to see continued Russian missile, glide-bomb and Shahed-type attacks, with Ukrainian long-range strikes and local counter-attacks continuing. The available evidence supports local contestation near Lyman, not a decisive change in the national battlefield balance. In the Sahel and Sudan, reported tactical gains remain vulnerable to reversal and lack sufficient independent follow-up to support a strategic-control judgement.
The IDF is likely to retain a forward posture in southern Lebanon, while Gaza is likely to remain divided between Israeli and Hamas control areas. Russia-linked recruitment and sabotage attempts in Europe are likely to continue, but a mass-casualty attack against German aviation infrastructure remains very unlikely. Overall confidence is moderate because the principal maritime occurrence and Ukraine activity judgements have multiple source types, while attribution, intent and battlefield-control assessments rely more heavily on official claims and single-source reporting.