Global Threat Intelligence Briefing 📅 January 16, 2026
Geopolitical
Iran Tensions and US Military Positioning
Tensions remain high regarding the popular uprising in Iran and the potential for US military intervention.
- Iran is signaling plans for swift trials and executions of anti-government protesters.
- Tehran warned neighboring countries hosting US troops that it would retaliate against American bases if Washington carries out threats to intervene in the protests.
- The US withdrew some personnel from bases in the Middle East, including the Al Udeid Air Base in Qatar.
- France is exploring sending Eutelsat satellite terminals to Iran to help citizens affected by the ongoing communications blackout imposed by Iranian authorities.
US-Venezuela Relations and Oil
Following the capture of Nicolás Maduro, the US is advancing oil sales and diplomatic normalization efforts with Venezuela’s acting government.
- The US completed the first sales of Venezuelan oil, valued at $500M, as part of a $2 billion deal reached earlier this month.
- US oil companies have expressed hesitation about reentering the Venezuelan market, especially if it means helping to lower oil prices to President Trump’s goal of $50 per barrel.
- Venezuelan opposition leader María Corina Machado met President Trump at the White House and presented him with her Nobel Peace Prize award.
- Security and updated laws are cited as key requirements for future investment in Venezuela.
Greenland Sovereignty Dispute
The US administration’s push to acquire Greenland continues to escalate, prompting European responses.
- President Trump reiterated that the U.S. needs Greenland for national security and the Golden Dome missile defense project.
- The European Parliament is considering putting on hold the EU’s implementation of the US trade deal in protest over US threats regarding Greenland.
- European military personnel, including 13 soldiers from Germany, arrived in Greenland as part of a reconnaissance mission involving Finland, France, Germany, the Netherlands, Norway, Sweden, and the UK.
- Denmark pledged to increase its military footprint in Greenland.
International Restrictions and Trade
- The US administration is suspending all visa processing for visitors from 75 countries, including Russia, Iran, Afghanistan, Brazil, Nigeria, Thailand, and Somalia, starting January 21, 2026, pending a departmental reassessment.
- The European Union proposed splitting the 90 billion euro ($104.8 billion) financial support for Ukraine into one-third for the general budget and two-thirds for military supplies.
- The EU loan to Ukraine mandates that Kyiv buy weapons and military platforms from European manufacturers unless those supplies are unavailable.
Critical Infrastructure
Hospital Cyberattack and Telecom Outage
Infrastructure disruption occurred due to both malicious attacks and systemic failures across international locations.
- Belgium Hospital Attack: Belgian hospital AZ Monica (Antwerp/Deurne) shut down all servers, canceled scheduled procedures, and transferred seven critical patients following a ransomware cyberattack on January 13, 2026. Emergency services are operating at reduced capacity.
- US Telecom Outage: Verizon customers experienced a service outage on January 14, 2026, impacting wireless voice and data services, causing phones to show “SOS”. The outage affected some users calling 911; NYC Emergency Management advised calling using another carrier, a landline, or going to a police/fire station.
- Greece Airspace Blackout: An eight-hour radio outage at Greek airports on January 4, 2026, forced airspace clearance and flight diversions. Investigators linked the issue to an outdated communications system, not a cyberattack, though the exact cause remains unclear.
Infrastructure Failure and Accidents
- Thailand Rail Disaster: At least 32 people were reported killed, and scores injured, after a construction crane collapsed onto a moving passenger train in Nakhon Ratchasima province, Thailand, on January 14, 2026. The accident occurred at a construction site for China’s Belt and Road high-speed rail project.
Security and Recommendations
- The Department of Homeland Security (DHS) is finalizing plans for a new body to replace the Critical Infrastructure Partnership Advisory Council (CIPAC), serving as a communications hub to discuss threats, including cyber attacks, to US critical infrastructure.
- Western cyber agencies warned about growing digital threats facing the operational technology at the heart of industrial systems.
Activism Terrorism
Muslim Brotherhood Terror Designations
The U.S. issued its first-ever designations against Muslim Brotherhood (MB) branches, marking a significant escalation against Islamist networks.
- The U.S. State and Treasury departments designated three MB branches on January 13, 2026.
- Lebanese MB (al-Jamaa al-Islamiyah): Designated a Foreign Terrorist Organization (FTO) and Specially Designated Global Terrorist (SDGT). Its armed wing, the Dawn Forces (Quwwat Al Fajr), launched rockets into northern Israel in coordination with Hezbollah and Hamas.
- Egyptian and Jordanian MB Branches: Designated SDGTs based on material support for Hamas, including recruitment, logistics, and financing.
- Lebanon’s own laws, including the 1989 Taif Agreement, require the Dawn Forces to disarm and end military cooperation with armed groups like Hezbollah and Hamas. Hezbollah, however, warned the Lebanese government that pressing disarmament would trigger chaos and possibly civil war.
Domestic Civil Unrest and Targeting
Ongoing protests and violent activity require vigilance, especially around easily accessible locations.
- Minneapolis Protests: Unrest escalated against federal immigration enforcement after a federal agent shot and injured a man who allegedly assaulted the agent following a traffic stop. President Trump threatened to invoke the Insurrection Act to end ongoing protests.
- Church Security Advisory: Security briefings cover emerging civil unrest patterns, including activist calls to target off-duty federal agents.
- Suicide Response: Briefings emphasize training for churches on recognizing and responding to suicidal individuals, noting that people in crisis often seek out churches.
DVE (Domestic Violent Extremists) / EVE (Environmental Violent Extremist)
Antisemitism and Doxing Threats
The intentional publishing of lists of Jewish and pro-Israel organizations is highlighted as a tool used by antisemites for targeting and violence.
- Antisemitic incidents surged 340 percent globally in 2024 compared to 2022.
- A French-based platform removed a map cataloging more than 150 Jewish and Israeli-linked businesses in Catalonia, Spain, following warnings it violates laws against incitement to hatred.
- In Canada, websites were created to catalog Canadians fighting in the IDF and list schools/synagogues/camps in the Greater Toronto Area linked to IDF members.
- The threat of violence is real; ISIS supporters previously used publicly advertised event locations to carry out a mass shooting at a Hanukkah celebration in Sydney, Australia.
Cyber
Malicious Cyber Activity and Exposure
Recent cybersecurity events include large-scale doxing, disruptive cybercrime platforms, and emerging threats related to AI technology.
- Federal Agent Doxing: The identities of about 4,500 federal employees working with ICE and CBP, including 2,000 agents, were leaked online to “The ICE List”. DHS stated the leak would constitute 4,500 felonies.
- Cybercrime Disruption: Microsoft collaborated with international law enforcement to seize infrastructure used by the RedVDS cybercrime subscription service.
- Vulnerabilities Identified: ServiceNow patched a severe AI vulnerability in its Virtual Agent, and researchers identified a side-channel attack that exploits memory reordering flaws.
- Data Breach: A university breach exposed the data of 320,000 people.
AI and Foreign Influence Risks
AI models face issues where availability, rather than credibility, determines citation sources, potentially normalizing state-aligned propaganda.
- Foundation for Defense of Democracies (FDD) research found that 57% of AI responses about international conflicts cited state-aligned propaganda sources, often because credible sources are behind paywalls or block AI scanning.
- 70% of neutral questions concerning the Israel-Gaza conflict yielded Al Jazeera citations.
- White House guidance mandates that AI tools procured for government use be “truthful” and “ideologically neutral”.
- Recommendations: AI companies should prioritize credible journalism, and a user literacy campaign is needed to address citation bias.
International Tech Competition and Tariffs
- China told domestic firms to stop using cybersecurity software from U.S. and Israeli companies due to national security concerns.
- President Trump imposed a 25% tariff on imports of certain advanced AI chips, including the Nvidia H200 and AMD MI325X, via a national security order. Chinese customs agents were also instructed that Nvidia’s H200 chips are not permitted to enter China.
- A new German-Israel agreement aims to counter cyber threats and enhance security infrastructure.
Financial Crimes
NCAA Betting Scandal
Federal prosecutors charged 26 individuals in an alleged multiyear scheme to manipulate the outcomes of basketball games for illegal betting profits.
- The scheme ran from September 2022 through February 2025, fixing at least 29 basketball games in both the Chinese Basketball Association and NCAA Division I men’s basketball.
- Bribes allegedly ranged from $10K to $30K per game.
- Charges include bribery in sporting contests, conspiracy to commit wire fraud, and wire fraud; each fraud charge carries a potential sentence of up to 20 years.
Sanctioned Oil and Trade
- The US completed its first sales of sanctioned Venezuelan oil, valued at $500M. The US hopes to sell 30 million to 50 million barrels of sanctioned oil within months.
Maritime Events
Tanker Attacks in the Black Sea
Attacks on oil tankers transporting Kazakh oil in the Black Sea have prompted international calls for security measures.
- Kazakhstan urged the US and Europe to help secure oil transport after drone attacks targeted tankers heading to a Black Sea terminal on the Russian coast (Caspian Pipeline Consortium/CPC).
- At least two oil tankers were struck by drones on January 13, 2026, including one chartered by US oil major Chevron. Russia’s defense ministry stated the attack on the tanker *Matilda* was carried out by two Ukrainian strike UAVs.
- This terminal handles one percent of the global oil supply.
Sanctions Enforcement
- The US seized its sixth sanctioned oil tanker with alleged ties to Venezuela; the ship was reportedly owned and managed by a company in Russia.
