Daily Brief
2026-09-22
Top Story
France waives its winter diesel specification as pump prices set records on two continents
France let summer-grade diesel stay on sale two weeks into winter and asked Brussels to relax EU fuel-quality rules, which is what a government does when it doubts the fuel will arrive rather than when it dislikes the price.
United States
Colorado governor's office confirms foreign actors hacked two small water utilities, altering pump cycles and disabling alarms
Both utilities serve fewer than 200 people.
Around the World
A live US prohibition against Egypt's Banque Misr returns clean on every OFAC list
FinCEN's proposed Section 311 action would cut US correspondent access for five UAE branches of Banque Misr, Egypt's state-owned bank, over roughly $1.8bn routed through 103 suspected Iranian front companies; comments close October 1. The bank has no match on OFAC's SDN or Consolidated lists.
Ireland's data-protection regulator fines Google €403M over geolocation-data violations
Ireland's regulator put a nine-figure price on location-data consent, and the same consent chain runs through the ad-tech SDKs sitting in ordinary business apps.
The EU moves to drop two Kremlin-linked billionaires from its Russia sanctions list, brokered inside a fight to renew 2,600 other designations
Alisher Usmanov and Mikhail Fridman, sanctioned by the EU since 2022 over ties to Putin, would come off the list pending no member-state objection — folded into the EU's renewal of sanctions on roughly 2,600 other Russian individuals and entities, a vote that needed a one-week extension of its own to get done.
EU Court of Auditors: member states may lawfully withhold critical-infrastructure attack information from each other
The auditors name insufficient information sharing as the biggest weakness in EU cyber readiness and point at the September 2025 airport attack across Germany, Belgium and Ireland that member states never properly reported to ENISA, the EU's cybersecurity agency, or to each other.
Kaspersky documents a ransomware campaign that used no malware and encrypted nothing
The PAYLOAD campaign ran its extortion entirely through Active Directory Group Policy management, with no malicious executables and no encryption.
Aeroméxico confirms breach of 15M+ customer records via third-party vendor platform, Mexican regulator investigating
The data left through a customer-data platform run by an external vendor.
EU's new steel "melt and pour" rule takes effect October 1, requiring documented proof of where the steel was made
An importer of covered steel must name the country where it was melted and poured, proved by a Mill Test Certificate carrying that country and the heat number — without it, there's no duty rate at which the steel clears.
Turkish Airlines suspends all flights to Iran until at least March 2027
A major regional carrier has taken an entire market out of its schedule for at least two quarters, which is a commercial planning horizon rather than a rolling cancellation.
Iraqi lawmaker Shivan Dubardan says US pressure has left Iraq as Iran's only remaining route to US dollars
Shivan Dubardan of Iraq's parliamentary Security and Defense Commission describes a corridor narrowed to a single channel, which is the shape sanctions pressure takes before it produces a single point of failure somebody else is banking through.
The Kremlin publicly ties Germany's far-right gains to Berlin giving up cheap Russian gas
Moscow is claiming European energy policy as the cause of a domestic political shift in Germany, which tells you more about Russia's messaging line for Europe this winter than about German voters.
US reportedly to open two new military bases in Greenland, relayed by Russian state media without the usual framing
TASS relayed a Reuters report on a US Arctic base build-out with no adversarial spin attached, which is itself unusual for the outlet's treatment of NATO basing.
Ukrainian drones hit Russian refineries again as Moscow prepares to extend its diesel export ban
Drones set the Kuibyshevsky refinery at Samara alight and a Moscow-area refinery halted after a strike, while Russian government fuel procurement volumes rose 16 to 35 percent year on year and Bloomberg reports the export ban will run past September 30.
The US Trade Representative opens the first Section 301 case against a sovereign's own domestic drug-pricing law
Section 301, the US tariff-retaliation law normally aimed at unfair trade or IP practices, is now pointed at Germany's pharmaceutical reimbursement rules — the first time it has targeted how a country prices something inside its own borders rather than a trade practice. Retaliatory tariffs on German pharma are the outcome under consideration.