Brazil
In Brazil’s 2026 presidential runoff, incumbent Luiz Inácio Lula da Silva and his supporters accused Meta of systematically favouring far-right opponent Flávio Bolsonaro. The controversy escalated after Mr Lula was temporarily barred for nearly 24 hours from boosting feed posts on Instagram, whilst Mr Bolsonaro’s digital campaign operated normally. Lula’s campaign formally petitioned the TSE, arguing that Meta engaged in algorithmic bias and foreign political pressure. In response, Brazil’s Superior Electoral Court (TSE) ordered Meta to ensure equal operational treatment between the candidates under threat of fines. On 16 October, Meta dismissed the accusations as unfounded, attributing the disparities to automated anti-fraud mechanisms, prompt safeguards, and a wider global data outage. In a formal submission to the TSE on 20 October, Meta denied allegations of partisan bias in the presidential election runoff between Luiz Inácio Lula da Silva and Flávio Bolsonaro, asserting that its platforms treat both candidacies equally and without discrimination. – Digital Watch Observatory UN warns Meta’s restrictions harm elections
Democratic Republic of the Congo
As the deadly Ebola disease outbreak reached an eighth province of the Democratic Republic of the Congo (DRC), investigators pursued all leads on Thursday to assess the risk of the disease spreading in Nigeria. Authorities in Abuja confirmed their first case of infection in an individual arriving from Uganda, which borders the worst-hit provinces in DRC. “The source of exposure is still not known and the travel history of the patient is being pieced together now in terms of her movement from Uganda up to Nigeria,” said Dr Patrick Otim, from the UN World Health Organization (WHO)’s Emergency Response programme, in an online update. “This is rapidly evolving. As we get more information, we’ll try to determine where she was exposed. And then it’s at that point where we can say whether there is any transmission happening”. Nigeria is the fifth country this year after DRC, France, Uganda and Kenya to confirm the presence of Ebola disease caused by Bundibugyo virus. The original DRC outbreak was declared in mid-May where it has led to more than 4,600 deaths and a total of 9,552 confirmed infections. Around six in 10 of these deaths have occurred outside health centres, indicating the continuing difficulty of halting community transmission. The latest DRC province to confirm infections is Nord Ubangi, which borders Central African Republic, where ongoing armed violence continues to uproot thousands of people, increasing the difficulty of halting transmission. – UN News DR Congo: Ebola responders under pressure as outbreak expands
France
A patient in France has died after being infected with Shamonda virus, the first recorded human case of the disease. The virus is mainly found in livestock, especially cattle, sheep, goats, horses and alpacas. It is thought to be spread by the bites of midges – tiny biting flies – though the World Health Organization (WHO) has said further studies are needed to understand how it is transmitted. There are currently no commercially available vaccines against Shamonda virus, according to the internationally recognised World Organisation for Animal Health (WOAH). – UN News First human case of Shamonda virus reported in France as patient dies
Israel – West Bank
Israeli Prime Minister Benjamin Netanyahu ordered his Likud party to cancel all political events on Friday morning after a shooting attack in the occupied West Bank, the party said, days before national elections. – AFP Israel’s Netanyahu orders party to cancel political events after West Bank attack
Israel’s military said its soldiers shot and killed two men who had launched an attack near the city of Hebron in the occupied West Bank on Friday morning. At least five people were injured, including some critically. The military set up roadblocks and closures in Palestinian towns in the area. – The Associated Press Israel’s military says it killed two who had launched an attack in the occupied West Bank
Nepal
The deadly flash flood that tore through Nepal in August is a “defining moment” for both the country and the international community, according to the head of the UN field agency which builds roads, schools and clinics in crisis zones. UN Project Services chief, Jorge Moreira da Silva, briefed journalists in New York by videolink after joining teams from UNOPS in Nepal, describing the glacier collapse on 26 August as one of the most destructive and deadliest climate disasters ever. Survivors told him of a wall of water more than 100 metres high, travelling at 180 kilometres per hour, which devastated 60 kilometres of valley in a matter of seconds. “We are not dealing with a normal flood,” he said. – UN News Nepal’s deadly glacier flood a ‘defining moment’ for the international community
Russia – Ukraine (and beyond)
Ukrainian interceptors still cannot use the internet at high speed to shoot down Russian attack drones or conduct mid-strike operations as of Friday morning, Ukrainian officials and a drone operator said, despite U.S. President Donald Trump saying SpaceX founder Elon Musk had lifted speed restrictions on his Starshield service. “Morning tests show the speed limits of 140–160 km/h are still there, and the navigation isn’t working properly,” a Ukrainian government official told POLITICO on condition of anonymity. “As of this morning, instances of connectivity loss at speeds of 161 km/h are still being observed. There is currently no confirmation that the restrictions have been lifted,” a defense ministry official told reporters on Friday. – Politico Starlink still restricted for Ukraine despite Trump saying Musk lifted speed limits
Volodymyr Zelensky told CNN on Thursday that there’s “not something personal” driving his latest estrangement from President Donald Trump. Unfortunately for Ukraine’s wartime president, nothing could be further from the truth. Everything about Trump’s presidency is personal. Trump has substituted his own values — the flexing of dominance, the courting of strongmen and the pursuit of cash-spinning deals — for those that guided previous modern presidents as they secured democracy and faced down tyrants. The result is that Zelensky now confronts one of the most critical — and hard to believe — questions about the war: Does Ukraine’s fate now depend not only on its capacity to fend off Russian aggression but also on the possibility that the US has joined Moscow’s camp? Trump makes no secret of his personal distaste for Zelensky, who blamelessly helped precipitate his first impeachment. So it is no surprise that he’s adopted Russia’s demand for Ukraine to get a new president. Trump’s personal political interests also shape US foreign policy: His diesel deal that could send billions of dollars to Russian President Vladimir Putin’s war machine came as he faced pressure to show midterm voters he can ease high fuel prices. So did his demand that Ukraine sheath one of its most effective tactics: attacks on Russian oil refineries. – CNN Why Zelensky insists it’s not personal with Trump — even though it is | CNN Politics
A Russian-made satellite called Kosmos 2612 got very close to ICEYE-X36 last week, a commercial Earth-observation satellite that may support countries like Ukraine. CNN reports it may have come within less than a mile. Orbital monitoring company LeoLabs says the behavior is consistent with rendezvous and proximity operations, meaning maneuvers designed to bring two spacecraft together. “A rare move by a Russian-made satellite may have brought it within less than a mile of a commercial Earth-observation satellite that may be used to provide national security services to countries such as Ukraine.” states CNN. “It’s not clear what, exactly, the Russian satellite, called Kosmos 2612 or Cosmos 2612, intended to accomplish with its close approach. But the behavior was consistent with rendezvous and proximity operations, or maneuvers carried out in orbit that are designed to bring two spacecraft together, said orbital monitoring services company LeoLabs, which tracks space junk and activity in Earth orbit, in a statement.” – Security Affairs Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine
United Arab Emirates
The United Arab Emirates has temporarily closed all beaches and coastal areas in Umm al-Quwain after detecting an oil spill from a tanker, the Ministry of Climate Change and Environment said on Friday. The ministry confirmed that its technical monitoring and environmental assessment system had detected the spill affecting beaches in the emirate. It also reassured residents that odors reported in Sharjah, Ajman and Umm al-Quwain posed no health risks. – Al Arabiya UAE closes Umm al-Quwain beaches after tanker oil spill, says odors pose no health risk
US
U.S. Ambassador to Israel Mike Huckabee is questioning whether the Board of Peace can deliver on President Donald Trump’s peace plan for Gaza without more planning and resources from the U.S. government, according to a cable the embassy sent to State Department leadership Thursday that was obtained by POLITICO. The cable, which has not been previously reported, was signed by Huckabee and voiced concern that neither the organization nor the U.S. Embassy in Jerusalem have the personnel to move forward with plans to disarm and rebuild the Palestinian enclave. – by Politico Huckabee expresses doubt about viability of Board of Peace plans
North Dakota Sen. Kevin Cramer said Thursday that he had concerns about Elon Musk’s influence over national security matters after Ukraine was blindsided by a disruption of a satellite communications service developed by Musk’s SpaceX. “We’re putting too many eggs in one company’s basket when it comes to our space assets,” the Republican member of the Armed Services Committee said. He added about Musk that he was concerned about the power of “one individual and one company over America’s ability to protect the domain of space, which is a war-fighting domain.” – by Politico Inside Congress Live
When Christine Brenden, an Iowa paralegal who staunchly supports President Donald Trump, went to fill her gas tank a year ago, it cost around $40. Now, she said, the cost has jumped to $60. Standing in line to see Trump speak at an airport in Sioux City on Thursday, Brenden predicted fuel prices would only jump further if, as Trump has hinted, he resumes the war with Iran after November’s midterm elections. “I bet it would skyrocket again,” she said. As Trump embarks on a frenetic campaign blitz, hoping to rally base enthusiasm behind Republican candidates, he routinely teases that a decisive end to the war is just around the corner. But in Iowa — where the GOP is trying to defend a Senate seat and several US House seats — the prospect of a new, intensive round of bombing received mostly negative reviews among the Republicans CNN spoke with, both those attending Trump’s event and those who decided to skip it. “He started something, I don’t know how he’s going to finish it. I think it’s time for Israel, Saudi Arabia, some of the other countries to either jump in or jump out,” said Scott Rhinehart, a retired lawyer, outside the Sioux City post office. He said he was a loyal Republican, but wasn’t attending Trump’s rally. By some measures, Iowa has been among the states hardest hit by the consequences of the Iran war. High gas and diesel prices have hurt the state’s farmers, making it more expensive to transport their products, and two service members who were from the state have died in the conflict. The GOP Senate nominee, Rep. Ashley Hinson — who is set to appear with Trump Thursday night — has struck a delicate balance as she fights for a seat in a state Trump won by double digits two years ago. She voted against a House resolution, which two vulnerable Iowa GOP lawmakers backed, that would limit Trump’s powers to continue fighting the war. But Hinson’s been outspoken in calling the war too expensive and calling on Trump to bring it to a “successful and immediate end.” – CNN Why these Iowa GOP voters are wary of Trump resuming the Iran war after the midterms
US – Russia
A Malta-flagged tanker carrying 40,000 metric tons of Russian diesel is heading toward New York following an agreement with US President Donald Trump, LSEG data showed on Friday. Trump has made several moves hoping to bring down diesel prices ahead of November 3 US mid-term elections including waiving parts of a new sanctions law against Russia and threatening Europe with a US diesel export ban unless countries released more from their emergency reserves. The medium-sized tanker Agioi Fanendes was loaded with 40,000 metric tons of ultra-low sulphur diesel in the Russian Baltic port of Primorsk on October 22, according to shipping data. It is expected to arrive in the United States on November 7. – Reuters Russian diesel heads to US after Putin-Trump deal, data shows
Tech World
The South African Human Rights Commission (SAHRC) has released its report on children’s privacy and safety online, following a stakeholder conference held in Johannesburg on 28 March 2026. The report, Children’s Rights to Privacy and Safety on Online Platforms: Legislative Gaps and the Case for Reform, examines whether South Africa’s existing legal framework is keeping pace with the risks children face on digital platforms. – Digital Watch Observatory South Africa calls for stronger child online safety laws
During the October plenary session of the European Economic and Social Committee (EESC) which took place on October 21 and 22, attendees conducted a debate on European technological sovereignty which brought up questions about industrial competitiveness, economic resilience, and control over critical digital infrastructure. The EESC highlighted that the European Union needed to strengthen its capabilities in strategic technologies like AI and semiconductors as well as develop its digital workforce. – Digital Watch Observatory European technological sovereignty debated by EESC
The Council of the European Union agreed its position on the Digital Omnibus proposal on 21 October 2026. The proposals, which are part of the Omnibus VII legislative package, aim to simplify certain rules on data protection, privacy and cybersecurity while maintaining strong protection for personal data. They cover data protection, cookies, data sharing and incident reporting, seeking to make the EU’s digital rules clearer and easier for businesses, public administrations and citizens to apply. Negotiations will begin once the European Parliament adopts its position. – Digital Watch Observatory EU Council agrees position on digital rulebook changes
China’s Ministry of Industry and Information Technology (MIIT) has published a new action plan to strengthen carbon emissions management across the industrial and information technology sectors between 2026 and 2030. The plan includes the development of zero-carbon computing facilities alongside factories and industrial parks, bringing digital infrastructure into the country’s broader decarbonisation framework. – Digital Watch Observatory China targets zero-carbon computing facilities
The World Bank Group has launched its first digital strategy, bringing together its public- and private-sector financing, investment and policy advice to help developing countries expand digital access, strengthen skills and create employment opportunities. The strategy identifies four priorities: improving connectivity, making devices and data more affordable, expanding digital services and skills, and building countries’ readiness to adopt AI. – Digital Watch Observatory – World Bank unveils digital strategy for jobs and AI
The UK’s Environment Agency has called for greater transparency and stronger consideration of water efficiency in datacentre development, warning that existing monitoring arrangements provide an incomplete picture of the sector’s water consumption. In written evidence submitted to Parliament, the agency said data centres are not required to report site-level water use to the regulator and suggested that major non-household water consumers should publish their consumption and efficiency measures. – Digital Watch Observatory UK agency calls for data-centre water reporting
Cybersecurity, Surveillance
INTERPOL announced the results of Operation Serengeti III, a multinational cybercrime crackdown that led to 1,462 arrests, disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. The operation brought together law enforcement agencies from 21 countries between June 29 and August 31, 2026, targeting online fraud, ransomware, business email compromise (BEC), scams and digital extortion. “One of Africa’s largest cybercrime enforcement operations saw law enforcement agencies from 21 countries arrest 1,462 suspects, disrupt 10,909 malicious networks and recover more than USD 105 million in illicit funds.” reads the agency’s announcement. “Authorities identified 65,929 victims targeted by cybercriminal networks, underscoring the scale and sophistication of today’s digital threats. Financial investigations linked criminal activity to losses exceeding USD 385 million ”. The scale of the operation is striking. Investigators identified 65,929 victims, while financial investigations linked the criminal activity to losses exceeding $385 million. The figures highlight how cybercrime continues to generate substantial profits by combining technical capabilities with familiar forms of deception. – Security Affairs INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
Microsoft published a detailed technical report naming Storm-0940, a China state-aligned group, as the actor behind the ConnectWise Cloud Backup supply chain compromise. The group used ARTEX, an open-source AI-driven penetration testing framework, to run attacks at machine speed against hundreds of organizations across aerospace, defense, energy, financial services, government, manufacturing, and more. “Several of these Storm-0940 ARTEX-driven attacks have resulted in the actor obtaining privileged access to an organization’s cloud infrastructure – including multiple instances where the time from initial targeting to privileged access was less than 3 hours.” reads the report. “Microsoft assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multi-tenant application”. Storm-0940 has been active since 2021 and has historically relied on password spraying and OAuth application abuse to get into Microsoft 365 environments. Adding ARTEX changed the scale of what they could do. In some attacks, the time between initial targeting and achieving privileged cloud access was under three hours. – Security Affairs Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
A critical vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 of 10), in Signal ’s calling library could allow a malicious caller to interfere with call termination, potentially leaving the victim’s microphone and camera active after they believe the conversation has ended. The flaw affects versions before 2.72.0 of the library RingRTC, which the messaging app uses to provide voice and video calling. It highlights a security problem that deserves attention beyond a single messaging application: ending a call should be an immediate control action, not something that can be delayed by traffic coming from the other participant. According to the technical report published on GitHub, the vulnerability stems from how RingRTC handles events in the finite-state machine (FSM) that manages a call. The application places events in a queue for processing, but a malicious peer can flood that queue with events and prevent the local hang-up operation from being handled in a timely manner. – Security Affairs Signal Vulnerability Could Keep Calls Alive After Users Hang Up
CISA, the FBI, the US Secret Service, Germany’s Landeskriminalamt Rheinland-Pfalz, and two UK law enforcement agencies jointly published an advisory this week on SafePay, a ransomware group they describe as one of the most active operations currently running. The group has breached at least 600 organizations across critical infrastructure sectors since August 2024, spanning North America, South America, Europe, and Australia. “Since August 2024, SafePay ransomware group’s operations have affected a wide range of businesses and critical infrastructure in North America, South America, Europe, and Australia. SafePay ransomware was among the most active ransomware groups in 2026. The SafePay threat actors have impacted at least 600 separate victims from multiple critical infrastructure sectors.” reads the joint advisory, “The authoring agencies encourage organizations to implement the recommendations in the Mitigations section of this advisory to reduce the likelihood and impact of SafePay ransomware incidents.” – Security Affairs FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
Attackers attempted to exploit two critical PHP vulnerabilities four days before the flaws became public, according to Amazon Threat Intelligence. “Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619.” reads the report published by Amazon team.”The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability was under embargo, the targeting of a honeypot from an anonymized IP address suggests the activity was conducted by a threat actor, though it remains unclear how the actor acquired exploit information prior to disclosure”. The activity began on October 17, 2026, and appeared in telemetry from MadPot, AWS’s network of honeypots designed to attract and study malicious activity. The company said the first attempt targeted a honeypot from an IP address linked to a commercial anonymization network. The vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, were still under embargo at the time. – Security Affairs PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports
