RFDELTA
RFDELTA Daily Intelligence Brief

Daily Global Threat Matrix

October 1, 2026

This edition passed RFDELTA's semantic-novelty gate: 86 of 86 current evidence items are new versus the prior report (100.0%), spanning 11 threat themes. 91 prior-window items rolled out. 3 ranked threats were generated by the out-of-taxonomy dynamic-discovery lane. Threats without distinct new evidence are explicitly labeled stable rather than rewritten.

JSONFull reportArchive
Top risk score99.00
Top 3 mean96.74
Sources86
As ofOct 1, 2026, 5:00 PM UTC
Priority score chart for the Daily Global Threat Matrix
Inference Surface

High-value lenses to monitor next

Defense / force posture / weapons flow92.23

Defense Escalation

Flags where military action, air-defense depletion, mobilization, weapons transfer or defense-industrial strain can move markets and operating risk before diplomacy catches up.

Current readRussia–Ukraine conflict and energy-infrastructure risk

Signals

  • missile and drone tempo
  • air-defense inventory pressure
  • forward deployments
  • base alerts

Decision use

Security posture, travel exposure, aerospace demand, logistics rerouting and defense supply-chain monitoring.

Space / satellite services / launch / ISR99.00

Space and Orbital Infrastructure

Turns satellite communications, navigation, earth observation and launch activity into a resilience lens for conflict, disaster response, shipping and financial-market continuity.

Current readCurrent natural-disaster and logistics-disruption risk

Signals

  • satellite outage reports
  • GNSS interference
  • launch cadence
  • ISR tasking pressure

Decision use

Continuity planning for navigation, communications, remote sensing, insurance verification and edge operations.

Cyber / enterprise exposure / critical services99.00

Cyber Exploitation

Ranks active exploitation, internet-facing platforms and remediation pressure where the blast radius can cross industries quickly.

Current readEnterprise exploitation and critical-infrastructure cyber risk

Signals

  • CISA KEV adds
  • critical CVE velocity
  • ransomware disclosures
  • public exploit code

Decision use

Patch sequencing, incident review, third-party risk and board-level operational continuity decisions.

Energy / shipping / insurance / inflation90.03

Energy and Maritime Chokepoints

Identifies where ports, tanker lanes, oil flows, war-risk insurance and strategic reserves can transmit local shocks into global prices.

Current readStrait of Hormuz, Iran and Gulf shipping risk

Signals

  • vessel attacks
  • AIS darkness
  • war-risk premiums
  • port restrictions

Decision use

Freight, fuel, inflation, supplier and treasury hedging awareness.

Geopolitics / sanctions / diplomacy92.23

Geopolitical Flashpoints

Connects diplomatic breakdowns, sanctions, regional coercion and command uncertainty to operating thresholds.

Current readRussia–Ukraine conflict and energy-infrastructure risk

Signals

  • sanction packages
  • ceasefire failures
  • leadership instability
  • military warnings

Decision use

Executive risk framing, legal exposure, market-event watchlists and regional operating posture.

Tariffs / USMCA / aerospace / industrial supply75.15

Trade and Industrial Policy

Surfaces policy cliffs and investigation pathways that can change landed cost, compliance burden and inventory behavior.

Current readTrade-policy and industrial supply-chain risk

Signals

  • tariff deadlines
  • Section 232 actions
  • USMCA review
  • retaliation risk

Decision use

Procurement timing, price setting, contract clauses and inventory planning.

Outbreaks / health systems / workforce continuity65.13

Public Health and Biosecurity

Separates local humanitarian burden from cross-border continuity risk and health-system strain.

Current readHigh-consequence infectious-disease outbreak risk

Signals

  • case acceleration
  • exported cases
  • health-worker infections
  • diagnostic capacity

Decision use

Workforce planning, travel policy, facility preparedness and health-sector exposure.

Storms / floods / earthquakes / logistics99.00

Climate and Disaster Logistics

Prioritizes acute hazards where landfall, flooding, port closure or power disruption can create near-term operational consequences.

Current readCurrent natural-disaster and logistics-disruption risk

Signals

  • GDACS alerts
  • USGS feeds
  • evacuation orders
  • port and rail closures

Decision use

Facility continuity, shipping contingency, insurance claims and supplier communication.

Macro / rates / dollar / commodities90.03

Financial Liquidity and Safe-Haven Stress

Translates the threat matrix into liquidity, volatility and safe-haven pressure without pretending it is a trading signal.

Current readStrait of Hormuz, Iran and Gulf shipping risk

Signals

  • oil and gold moves
  • dollar strength
  • Treasury duration
  • credit spread pressure

Decision use

Treasury awareness, counterparty monitoring, capital planning and scenario framing.

AI / semiconductors / cloud infrastructure76.34

AI, Chips and Strategic Technology

Frames export controls, AI tooling exposure, chip supply and data-center dependencies as strategic operating risks.

Current readEmerging semiconductors / AI infrastructure signal: Korea's monthly exports hit $120.9 bil. in Sept. on record chip sales

Signals

  • AI platform advisories
  • chip export controls
  • cloud outages
  • data-center energy constraints

Decision use

Technology procurement, vendor risk, compute strategy and compliance monitoring.

Power / water / transport / telecom74.03

Critical Infrastructure Continuity

Connects cyber, disaster and conflict signals to practical continuity questions for infrastructure-dependent operations.

Current readEmerging energy / power / critical infrastructure signal: Three Syrian power plants offline after gas pipeline explosion

Signals

  • grid outages
  • water system stress
  • rail and port disruption
  • telecom downtime

Decision use

Business continuity, site prioritization, vendor escalation and executive readiness.

Narratives / elections / institutional trust92.23

Information Operations and Trust

Tracks where narrative pressure, misinformation or institutional trust shocks can amplify otherwise manageable incidents.

Current readRussia–Ukraine conflict and energy-infrastructure risk

Signals

  • coordinated narrative spikes
  • election-adjacent claims
  • official correction cycles
  • social volatility

Decision use

Communications readiness, brand risk, public-affairs posture and stakeholder monitoring.

Crypto / sanctions / terrorist finance / theft65.13

Illicit Finance and Web3

Separates speculative market noise from infrastructure compromise, sanctions exposure and state-linked value transfer.

Current readWeb3 exploitation and illicit-finance risk

Signals

  • wallet designations
  • exchange freezes
  • bridge exploits
  • signer compromise

Decision use

Compliance monitoring, exchange/custody risk, sanctions screening and treasury controls.

Ranked Matrix

What moves first

#1
environmental / disaster / supply chain

Current natural-disaster and logistics-disruption risk

23 semantically new evidence items entered this threat since the prior report while 22 older items rolled out of the active window. New-source examples: M 4.2 - 6 km WNW of Wauna, Washington — U.S. Geological Survey (2026-09-29); M 6.6 - 80 km ENE of Tadine, New Caledonia — U.S. Geological Survey (2026-09-25); Green flood alert in Thailand — Global Disaster Alert and Coordination System (2026-10-01). Priority moved 0.00 versus the baseline. This commentary is generated from the evidence delta, not from the report date.

Score
99.00
Delta
0.00
Region
Global

Observed evidence

  • New evidence: M 4.2 - 6 km WNW of Wauna, Washington — U.S. Geological Survey (2026-09-29).
  • New evidence: M 6.6 - 80 km ENE of Tadine, New Caledonia — U.S. Geological Survey (2026-09-25).
  • New evidence: Green flood alert in Thailand — Global Disaster Alert and Coordination System (2026-10-01).
  • New evidence: Green flood alert in Mexico — Global Disaster Alert and Coordination System (2026-09-26).
  • New evidence: Green earthquake (Magnitude 5.6M, Depth:8km) in Costa Rica 30/09/2026 21:55 UTC, 40 thousand in MMI IV. — Global Disaster Alert and Coordination System (2026-09-30).

Watch triggers

  • Current official alerts, evacuations, casualties and sustained transport or utility disruption
L20261001-e088e76396b3: U.S. Geological SurveyL20261001-55587ce2bf8e: U.S. Geological SurveyL20261001-6a731caaa1fa: Global Disaster Alert and Coordination SystemL20261001-c9d29a850bb9: Global Disaster Alert and Coordination SystemL20261001-99ee04c8aa7a: Global Disaster Alert and Coordination System
#2
cyber / operational / infrastructure

Enterprise exploitation and critical-infrastructure cyber risk

21 semantically new evidence items entered this threat since the prior report while 21 older items rolled out of the active window. New-source examples: CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability — Cybersecurity and Infrastructure Security Agency (2026-09-30); CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability — Cybersecurity and Infrastructure Security Agency (2026-09-29); CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability — Cybersecurity and Infrastructure Security Agency (2026-09-27). Priority moved 0.00 versus the baseline. This commentary is generated from the evidence delta, not from the report date.

Score
99.00
Delta
0.00
Region
Global

Observed evidence

  • New evidence: CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability — Cybersecurity and Infrastructure Security Agency (2026-09-30).
  • New evidence: CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability — Cybersecurity and Infrastructure Security Agency (2026-09-29).
  • New evidence: CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability — Cybersecurity and Infrastructure Security Agency (2026-09-27).
  • New evidence: CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability — Cybersecurity and Infrastructure Security Agency (2026-09-27).
  • New evidence: CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability — Cybersecurity and Infrastructure Security Agency (2026-09-25).

Watch triggers

  • New actively exploited vulnerabilities, ransomware incidents and critical-infrastructure compromises
L20261001-8701b09d0df6: Cybersecurity and Infrastructure Security AgencyL20261001-28bf6811d2f9: Cybersecurity and Infrastructure Security AgencyL20261001-e989b6882b98: Cybersecurity and Infrastructure Security AgencyL20261001-842166bbd1d5: Cybersecurity and Infrastructure Security AgencyL20261001-df5f856f70d2: Cybersecurity and Infrastructure Security Agency
#3
geopolitical / conflict / energy / defense

Russia–Ukraine conflict and energy-infrastructure risk

5 semantically new evidence items entered this threat since the prior report while 5 older items rolled out of the active window. New-source examples: Ed Sheeran Told U2 He Didn't Want to 'Get Into Politics' on Song About Ukraine's War With Russia — ohnotheydidnt.livejournal.com (2026-10-01); Russia Extends Diesel Export Ban for Energy Producers for Another Month — theepochtimes.com (2026-10-01); Paradox in Ukraine — Climbing toward a future beyond the war (Wicked Gravity) — dailycamera.com (2026-10-01). Priority moved 0.00 versus the baseline. This commentary is generated from the evidence delta, not from the report date.

Score
92.23
Delta
0.00
Region
Ukraine / Russia / Europe

Observed evidence

  • New evidence: Ed Sheeran Told U2 He Didn't Want to 'Get Into Politics' on Song About Ukraine's War With Russia — ohnotheydidnt.livejournal.com (2026-10-01).
  • New evidence: Russia Extends Diesel Export Ban for Energy Producers for Another Month — theepochtimes.com (2026-10-01).
  • New evidence: Paradox in Ukraine — Climbing toward a future beyond the war (Wicked Gravity) — dailycamera.com (2026-10-01).
  • New evidence: Jet-powered drones outpace Ukrainian defenses in Russia war — journal-advocate.com (2026-10-01).
  • New evidence: Ukraine rolls out drone-stopping razor fence to thwart attacks — newscientist.com (2026-10-01).

Watch triggers

  • Verified missile, drone, energy-infrastructure or maritime escalation
L20261001-1c7c2e74773e: ohnotheydidnt.livejournal.comL20261001-e1032a5fb079: theepochtimes.comL20261001-ef5f09a154d9: dailycamera.comL20261001-b1596172ddbf: journal-advocate.comL20261001-27ec57265a13: newscientist.com
#4
geopolitical / energy / maritime / macro

Strait of Hormuz, Iran and Gulf shipping risk

5 semantically new evidence items entered this threat since the prior report while 5 older items rolled out of the active window. New-source examples: Dollar Two-Month High Holds as US-Iran Tensions Lift Oil — en.shafaqna.com (2026-10-01); Donald Trump Oil Stock Investments Gained Up to $4.4 Million While He Was Making Wartime Decisions About Iran — financial-news.co.uk (2026-10-01); Trump the environmentalist? How his Iran war exposed the fragility of dirty energy | Peak Oil News and Message Boards — peakoil.com (2026-10-01). Priority moved -2.20 versus the baseline. This commentary is generated from the evidence delta, not from the report date.

Score
90.03
Delta
-2.20
Region
Persian Gulf / Middle East / Global

Observed evidence

  • New evidence: Dollar Two-Month High Holds as US-Iran Tensions Lift Oil — en.shafaqna.com (2026-10-01).
  • New evidence: Donald Trump Oil Stock Investments Gained Up to $4.4 Million While He Was Making Wartime Decisions About Iran — financial-news.co.uk (2026-10-01).
  • New evidence: Trump the environmentalist? How his Iran war exposed the fragility of dirty energy | Peak Oil News and Message Boards — peakoil.com (2026-10-01).
  • New evidence: Baystreet.ca - Just One Commodity Vessel Left the Strait of Hormuz on Wednesday — baystreet.ca (2026-10-01).
  • New evidence: Iran slams US for 'contradictory' statements on Strait of Hormuz talks — malawi24.com (2026-10-01).

Watch triggers

  • Commercial-shipping advisories, transit interruptions, vessel incidents and insurer restrictions
L20261001-10e29a42acc8: en.shafaqna.comL20261001-dacda5217781: financial-news.co.ukL20261001-949d5c696fbf: peakoil.comL20261001-9edce4fffdcd: baystreet.caL20261001-b762169b7d60: malawi24.com
#5
health / public policy / operations

Measles outbreak and vaccination-pressure risk

5 semantically new evidence items entered this threat since the prior report while 5 older items rolled out of the active window. New-source examples: Fifth measles death in Pa., third in Lancaster County announced by state Department of Health — radio.wpsu.org (2026-10-01); One measles case could upend a campus for weeks. Colleges urge faculty to locate proof of immunity now. — actionnewsjax.com (2026-10-01); Doctors speak on importance of measles vaccine — wjactv.com (2026-10-01). Priority moved +6.52 versus the baseline. This commentary is generated from the evidence delta, not from the report date.

Score
89.87
Delta
+6.52
Region
United States / Global

Observed evidence

  • New evidence: Fifth measles death in Pa., third in Lancaster County announced by state Department of Health — radio.wpsu.org (2026-10-01).
  • New evidence: One measles case could upend a campus for weeks. Colleges urge faculty to locate proof of immunity now. — actionnewsjax.com (2026-10-01).
  • New evidence: Doctors speak on importance of measles vaccine — wjactv.com (2026-10-01).
  • New evidence: Northern Cape measles cases rise to 767 as health department intensifies response — ofm.co.za (2026-10-01).
  • New evidence: Uganda Launches Five-Day Measles-Rubella Vaccination Campaign for Children — allafrica.com (2026-10-01).

Watch triggers

  • Verified case growth, new jurisdictions, exposure notices and vaccination-policy changes
L20261001-1b56b6c5bac4: radio.wpsu.orgL20261001-75b23d46f72f: actionnewsjax.comL20261001-e6f674350007: wjactv.comL20261001-bec66e1045c9: ofm.co.zaL20261001-b40110998c67: allafrica.com
#6
semiconductors / AI infrastructure / dynamic discovery

Emerging semiconductors / AI infrastructure signal: Korea's monthly exports hit $120.9 bil. in Sept. on record chip sales

6 semantically new evidence items entered this threat since the prior report. New-source examples: Korea's monthly exports hit $120.9 bil. in Sept. on record chip sales — koreatimes.co.kr (2026-10-01); S. Korea's exports hit record $120.9 billion in Sep on robust chip sales — prokerala.com (2026-10-01); S. Korea's exports hit record high in September on record-breaking AI chip demand-Xinhua — english.news.cn (2026-10-01). Priority moved 0.00 versus the baseline. This commentary is generated from the evidence delta, not from the report date. This is an RFDELTA dynamic-discovery early-warning candidate. Its score is capped while the cluster remains GDELT/media-derived; primary or operational corroboration is required before confidence is promoted.

Score
76.34
Delta
new
Region
Emerging / multi-source

Observed evidence

  • New evidence: Korea's monthly exports hit $120.9 bil. in Sept. on record chip sales — koreatimes.co.kr (2026-10-01).
  • New evidence: S. Korea's exports hit record $120.9 billion in Sep on robust chip sales — prokerala.com (2026-10-01).
  • New evidence: S. Korea's exports hit record high in September on record-breaking AI chip demand-Xinhua — english.news.cn (2026-10-01).
  • New evidence: South Korea's monthly exports hit record as chip boom rolls on — moneycontrol.com (2026-10-01).
  • New evidence: South Korea's monthly exports top $120 billion for the first time on record chip sales — aol.com (2026-10-01).

Watch triggers

  • Primary-source or official confirmation, additional independent publishers, observable operational effects, or a second-day persistence signal
D20261001-366e2e0615da: koreatimes.co.krD20261001-e61848eb5dd8: prokerala.comD20261001-7d35b151c679: english.news.cnD20261001-3a486da62111: moneycontrol.comD20261001-610d5b2dd882: aol.com
#7
policy / trade / industrial supply chain

Trade-policy and industrial supply-chain risk

5 semantically new evidence items entered this threat since the prior report while 5 older items rolled out of the active window. New-source examples: Agricultural officials discuss trade, USMCA's future in Calgary — jcpost.com (2026-10-01); Export Decline Fuels Belize's Trade Deficit | Greater Belize Media Export Decline Fuels Belize's Trade Deficit — greaterbelize.com (2026-10-01); FarmX proposes Rs 1,000 cr agri manufacturing, export hub in Odisha: DyCM — orissapost.com (2026-10-01). Priority moved -5.18 versus the baseline. This commentary is generated from the evidence delta, not from the report date.

Score
75.15
Delta
-5.18
Region
United States / North America / Global

Observed evidence

  • New evidence: Agricultural officials discuss trade, USMCA's future in Calgary — jcpost.com (2026-10-01).
  • New evidence: Export Decline Fuels Belize's Trade Deficit | Greater Belize Media Export Decline Fuels Belize's Trade Deficit — greaterbelize.com (2026-10-01).
  • New evidence: FarmX proposes Rs 1,000 cr agri manufacturing, export hub in Odisha: DyCM — orissapost.com (2026-10-01).
  • New evidence: Bangladesh needs to reform its trade policy to boost exports — thedailystar.net (2026-10-01).
  • New evidence: PM Modi, Trump discuss trade, energy ties amid tariff concerns over Russian oil purchase — hindustantimes.com (2026-10-01).

Watch triggers

  • New tariff, import, export, USMCA or Section 232 decisions with operational impact
L20261001-11c85c3b0b60: jcpost.comL20261001-ae4103baf359: greaterbelize.comL20261001-efeddea81fa2: orissapost.comL20261001-3b7f7f0f8e65: thedailystar.netL20261001-73ffee2b0b89: hindustantimes.com
#8
energy / power / critical infrastructure / dynamic discovery

Emerging energy / power / critical infrastructure signal: Three Syrian power plants offline after gas pipeline explosion

5 semantically new evidence items entered this threat since the prior report. New-source examples: Gas pipeline explodes in Syria, knocks three power plants offline - Dominican Republic Post – Caribbean News, Business, Travel & Culture — dominicanrepublicpost.com (2026-10-01); Three Syrian power plants offline after gas pipeline explosion — bignewsnetwork.com (2026-10-01); Gas pipeline explodes near power station outside Damascus — dailysabah.com (2026-09-30). Priority moved 0.00 versus the baseline. This commentary is generated from the evidence delta, not from the report date. This is an RFDELTA dynamic-discovery early-warning candidate. Its score is capped while the cluster remains GDELT/media-derived; primary or operational corroboration is required before confidence is promoted.

Score
74.03
Delta
new
Region
Emerging / multi-source

Observed evidence

  • New evidence: Gas pipeline explodes in Syria, knocks three power plants offline - Dominican Republic Post – Caribbean News, Business, Travel & Culture — dominicanrepublicpost.com (2026-10-01).
  • New evidence: Three Syrian power plants offline after gas pipeline explosion — bignewsnetwork.com (2026-10-01).
  • New evidence: Gas pipeline explodes near power station outside Damascus — dailysabah.com (2026-09-30).
  • New evidence: Gas pipeline explosion knocks 3 Syrian power plants offline-Xinhua — english.news.cn (2026-09-30).
  • New evidence: Gas pipeline explosion reported near Damascus in Syria — news.az (2026-09-30).

Watch triggers

  • Primary-source or official confirmation, additional independent publishers, observable operational effects, or a second-day persistence signal
D20261001-acab31df165d: dominicanrepublicpost.comD20261001-4894fc3cfead: bignewsnetwork.comD20261001-65ab8a666e61: dailysabah.comD20261001-df1a617f0ffa: english.news.cnD20261001-1ab401c2d537: news.az
#9
semiconductors / AI infrastructure / dynamic discovery

Emerging semiconductors / AI infrastructure signal: Senate fails to advance data center legislation | Northwest Arkansas Democrat-Gazette

3 semantically new evidence items entered this threat since the prior report. New-source examples: Senate fails to advance data center legislation | Northwest Arkansas Democrat-Gazette — nwaonline.com (2026-10-01); AI Data Center Bill Fails in Senate—Which Democrats Voted to Block GOP Legislation? — newsweek.com (2026-09-30); Senate fails to advance data center and lawmaker stock trading bills before campaign break — finance.yahoo.com (2026-09-30). Priority moved 0.00 versus the baseline. This commentary is generated from the evidence delta, not from the report date. This is an RFDELTA dynamic-discovery early-warning candidate. Its score is capped while the cluster remains GDELT/media-derived; primary or operational corroboration is required before confidence is promoted.

Score
66.33
Delta
new
Region
Emerging / multi-source

Observed evidence

  • New evidence: Senate fails to advance data center legislation | Northwest Arkansas Democrat-Gazette — nwaonline.com (2026-10-01).
  • New evidence: AI Data Center Bill Fails in Senate—Which Democrats Voted to Block GOP Legislation? — newsweek.com (2026-09-30).
  • New evidence: Senate fails to advance data center and lawmaker stock trading bills before campaign break — finance.yahoo.com (2026-09-30).

Watch triggers

  • Primary-source or official confirmation, additional independent publishers, observable operational effects, or a second-day persistence signal
D20261001-2316ee667d20: nwaonline.comD20261001-49526a61ca39: newsweek.comD20261001-5d1db04d83a9: finance.yahoo.com
#10
health / humanitarian / cross-border operations

High-consequence infectious-disease outbreak risk

4 semantically new evidence items entered this threat since the prior report while 5 older items rolled out of the active window. New-source examples: Ebola case drop in DRC may mask continued spread: Africa CDC — bignewsnetwork.com (2026-10-01); Congo Ebola epidemic passes 8,000 cases and nears 4,000 deaths as attacks on health workers mount — wsws.org (2026-10-01); WHO sees 'encouraging signs' in Congo Ebola fight, but warns cases in one eastern region are surging — abcnews.com (2026-10-01). Priority moved -15.71 versus the baseline. This commentary is generated from the evidence delta, not from the report date.

Score
65.13
Delta
-15.71
Region
Global

Observed evidence

  • New evidence: Ebola case drop in DRC may mask continued spread: Africa CDC — bignewsnetwork.com (2026-10-01).
  • New evidence: Congo Ebola epidemic passes 8,000 cases and nears 4,000 deaths as attacks on health workers mount — wsws.org (2026-10-01).
  • New evidence: WHO sees 'encouraging signs' in Congo Ebola fight, but warns cases in one eastern region are surging — abcnews.com (2026-10-01).
  • New evidence: Congo-Kinshasa: Early Access to Care and Oxygen Decisive for Ebola Patients' Survival - WHO — allafrica.com (2026-10-01).

Watch triggers

  • Verified Ebola or Marburg cases, cross-border spread and official public-health measures
L20261001-fae7699cb93c: bignewsnetwork.comL20261001-ee00a8222895: wsws.orgL20261001-810da7575a15: abcnews.comL20261001-215c1f65b0d0: allafrica.com
#11
cyber / digital assets / financial crime

Web3 exploitation and illicit-finance risk

4 semantically new evidence items entered this threat since the prior report while 5 older items rolled out of the active window. New-source examples: Bitcoin bulls just had a monster quarter. So did crypto hackers: Crypto Daily — coindesk.com (2026-10-01); Crypto Hack Losses Hit $768M in September — cointelegraph.com (2026-10-01); Ex-National Crime Agency officer ordered to repay more than £1.8m following Bitcoin theft — aol.co.uk (2026-10-01). Priority moved -11.16 versus the baseline. This commentary is generated from the evidence delta, not from the report date.

Score
65.13
Delta
-11.16
Region
Global

Observed evidence

  • New evidence: Bitcoin bulls just had a monster quarter. So did crypto hackers: Crypto Daily — coindesk.com (2026-10-01).
  • New evidence: Crypto Hack Losses Hit $768M in September — cointelegraph.com (2026-10-01).
  • New evidence: Ex-National Crime Agency officer ordered to repay more than £1.8m following Bitcoin theft — aol.co.uk (2026-10-01).
  • New evidence: North Korean Hackers Stole $10.7 Million In Crypto. Fake Job Interviews Helped Them Get In. — ibtimes.com (2026-09-30).

Watch triggers

  • Verified crypto exploits, theft, sanctions exposure and illicit-finance enforcement
L20261001-b87cda8bc3c7: coindesk.comL20261001-2fa2948df29a: cointelegraph.comL20261001-7368a1cc94d2: aol.co.ukL20261001-b2c10952c464: ibtimes.com
Method

How the matrix is scored

RFDELTA scores each threat on severity, immediacy, cross-border transmission, momentum, confidence and operating impact. The matrix is designed for prioritization: what deserves leadership attention, monitoring time and operational preparation first.