— Aramco's tower in Riyadh's financial district is damaged during a Houthi missile attack: the first time the district has been hit since the fighting resumed in July. Riyadh blames falling shrapnel; the Houthis claim a direct hit.
— Back-to-back elections shake the US–Israel alliance: Netanyahu's bloc loses its majority, Democrats sweep Congress, and Trump says he will end $3.8 billion a year in military aid. Gadi Eisenkot now has the mandate to form a government.
— A Finnish court jails a Russian captain and his boatswain for deliberately dragging an anchor across two Baltic cables, and rules that it can try the case even though much of the damage lay outside territorial waters.
— Japan announces a 10-billion-yen emergency cybersecurity package, with AI-equipped expert teams and a new legal power to reach into hackers' servers.
— The FBI blames North Korea for the $6.3 billion theft from Binance, the largest crypto heist on record; Pyongyang denies it and keeps firing missiles.
I.
Riyadh: the war reaches the financial district
On Sunday morning, 8 November, loud explosions were heard in Riyadh minutes after a civil defence alert. The Saudi-led coalition said it had destroyed two ballistic missiles fired by the Houthis towards the capital, then two cruise missiles over Riyadh and the south, after a further ballistic missile aimed at the Eastern Province. Shortly afterwards, eyewitnesses told AFP that the Aramco tower in the King Abdullah Financial District (KAFD) had been damaged. A Reuters witness saw windows blown out across several floors.
What actually hit the building is disputed. The Saudi energy ministry spoke of an "attempted attack" on an administrative building, with falling shrapnel causing minor damage and no casualties. One witness told AFP they saw a projectile strike the tower but could not say what it was. The Houthis claim direct hits on the financial district, on King Khalid airport and on Aramco storage tanks. No independent assessment has settled the question, so "damaged in a Houthi attack" is accurate, while "direct hit" is not established.
Whatever the cause, the target matters. KAFD is the showcase of Saudi Arabia's economic reforms, home to the Public Investment Fund, the stock exchange and firms such as Goldman Sachs, and AFP reports that this is the first time the district has been hit since the 2022 truce collapsed in July. The attack came hours after the education ministry announced that schools in Riyadh would return to in-person teaching after weeks of remote classes. An October strike on the capital's airport killed 13 people.
The cost is rising on both sides. The Houthi-run health ministry says coalition air strikes killed 33 people, including 13 children, in a village near Sanaa on 7 November; Al Jazeera could not verify the figure. The UN counts more than 1,600 dead and about 300,000 displaced in Yemen since July. Meanwhile, The Wall Street Journal reports that the Houthis demanded $51 billion and recognition as Yemen's rulers to stop the attacks. A senior Saudi official called that report "pure fabrication". Hitting a symbol of Saudi investment gives the Houthis leverage that a damaged refinery alone does not: it tells foreign capital that Riyadh's business district is within range.
Key terms — et leur équivalent français
shrapnel
éclats (de missile, d'obus) — indénombrable en anglais
Israelis voted on 27 October, Americans on 3 November, and the two results point the same way. Netanyahu's bloc fell from 68 seats to 53 in the 120-seat Knesset, while Democrats won both chambers of Congress in a vote driven in part by anger over the Iran war. On election day, Trump said he had agreed with Netanyahu to end $3.8 billion in annual US military aid after this year, although the current memorandum of understanding runs to September 2028, and explicitly linked the decision to the US political mood. He gave few details and said arms sales would continue. Vice President JD Vance, explaining Republican losses, cited voters who want a change in "our relationship with Israel".
In Israel, President Isaac Herzog has tasked former military chief Gadi Eisenkot, rather than Netanyahu, with forming a government. He has 28 days, with a possible 14-day extension. The arithmetic is awkward: his alliance holds 48 seats, Netanyahu's bloc 53, and Arab-led parties a record 19. Eisenkot has ruled out governing with the Arab parties, yet Ahmad Tibi expects a minority government with their outside support. Netanyahu, still caretaker prime minister, has been challenging certified results and claims the vote was "stolen"; he now warns that a government "dependent on Islamists" would destroy the state from within.
How much will really change in Washington? Michigan elected Abdul El-Sayed, the first Muslim senator, who wants to end military aid, despite about $30 million from AIPAC's super PAC to stop him. Senate support for blocking arms sales had already risen from 27 votes in July 2025 to 40 in April 2026. But the limits are real. AIPAC says more than 234 candidates it backed have won, Newsweek notes that El-Sayed's victory does not show how many voters share his view on Israel, and Trump can veto any arms ban: overriding him takes two-thirds of both chambers. Expect hearings and conditions on funding rather than a sudden break.
Eisenkot promises to rebuild bipartisan support, but Yael Sternhell of Tel Aviv University warns that he "can't just be a nicer man": he will need new policies. For analysts, the point is that the alliance no longer rests on one party's goodwill, or on one leader's relationship with one president.
Key terms — et leur équivalent français
to task (someone) with
charger (quelqu'un) de — tasked with forming a government
caretaker prime minister
Premier ministre chargé des affaires courantes
outside support
soutien sans participation au gouvernement
to sweep (both chambers)
remporter haut la main (les deux chambres)
memorandum of understanding (MoU)
protocole d'accord
to override a veto
passer outre un veto
super PAC
comité américain de dépenses électorales, sans plafond
Helsinki: prison for dragging an anchor across the Baltic
Overshadowed by the elections, a verdict in Finland may matter for years. On Thursday 5 November, Helsinki District Court sentenced the Russian captain of the cargo ship Fitburg, Andrei Maksimenko, to three and a half years in prison, and its Azerbaijani boatswain, Vusal Majidov, to two years and ten months, for aggravated sabotage. On New Year's Eve 2025, while sailing from St Petersburg to Israel under the flag of St Vincent and the Grenadines, the ship damaged two telecommunications cables between Finland and Estonia.
The court found that the men acted intentionally: they dragged the anchor chain along the seabed for about 130 kilometres over several hours and must have known that it was down. Seven other cables and a gas pipeline were put at risk. The two men must also jointly pay about €1.9 million in damages. Both deny any wrongdoing, and the captain says he will appeal, so the judgment is not final.
The legal point is the real story. Much of the damage occurred in Estonia's exclusive economic zone, outside any state's territorial waters, and the defence challenged Finland's right to try the case. The court ruled that it had jurisdiction because the acts were intentional and their effects were felt in Finland. That is a sharp contrast with the Eagle S, the tanker suspected of cutting cables at Christmas 2024: in October 2025, the same district court dismissed that case for lack of jurisdiction, before the Court of Appeal reversed the decision this August and sent it back. For years, an anchor on the seabed has been a nearly perfect deniable weapon. Helsinki has made it a riskier one.
Two cautions. The reports on the verdict show no evidence linking the crew to the Russian state: the court convicted two individuals, and did not identify a sponsor. And courts act only after the damage is done. Speaking to the European Parliament on 3 November, NATO's Christian Buck said incidents have fallen sharply since the Baltic Sentry mission began in January 2025, but he also acknowledged that NATO cannot block ships in peacetime. Jurisdiction remains with national governments, which is why a district court in Helsinki now counts as part of Europe's maritime defence.
Key terms — et leur équivalent français
boatswain (bosun)
maître d'équipage
to drag an anchor
traîner son ancre sur le fond
seabed
fonds marins
to sentence (someone)
condamner (quelqu'un) à une peine — a sentence : une peine
exclusive economic zone (EEZ)
zone économique exclusive (ZEE) — droits économiques, pas de pleine souveraineté
jurisdiction
compétence (d'un tribunal) — faux ami partiel
deniable
que l'on peut nier — plausible deniability : possibilité de nier de façon crédible
Tokyo: an emergency plan against a wave of breaches
On Friday 6 November, Prime Minister Sanae Takaichi announced an emergency cybersecurity package worth 10 billion yen ($63 million), after dozens of companies and government agencies suffered unauthorised access to their systems and leaks of client data. "At this very moment, cases of unauthorized access and data breaches are occurring," she told ministers, calling for a rapid response in the era of AI-generated attacks and urging agencies and companies to improve their preparedness.
The package creates three kinds of team. The Ministry of Economy, Trade and Industry is to set up a "top gun" group of experts by the end of November, who will use AI to counter hackers and find weaknesses in networks, working with technology companies and AI developers in friendly countries. A "cyber rescue team" drawn from the public and private sectors will provide a first response to companies under attack, and a separate team will help vulnerable firms shore up their defences. If national security is at stake, officials from the Defence Ministry, the National Police Agency and the National Cybersecurity Office will be deployed together.
The most significant measure is the least visible. The government will strengthen its ability to access servers used by hackers, as a preemptive measure, under "active cyber defence", which AP reports was legalised in October. For a country whose post-war constitution has made it cautious about offensive action, this is a notable shift: the state moves from protecting its own networks to acting on someone else's.
Two limits are worth noting. The sum is modest for a national programme, so the package is better read as a signal and a way of organising existing talent than as a major investment. And the AP report names neither the attackers nor the victims. Until attribution is published, it is impossible to say whether this wave is the work of criminals, a state, or both.
Key terms — et leur équivalent français
data breach
violation de données, fuite de données
leak
fuite
active cyber defence
cyberdéfense active — neutraliser une menace à la source
On 29 October, hackers stole about $6.3 billion from Binance, the world's largest cryptocurrency exchange, most of it in roughly 20 minutes according to the blockchain analysis firm TRM Labs. It appears to be the largest cryptocurrency theft ever recorded, more than four times the $1.5 billion taken from Bybit last year. The entry point was ordinary: a compromised laptop belonging to a single engineer, which gave the intruders access to a system able to authorise withdrawals. Malicious software then deleted traces of their activity.
On 31 October, the FBI attributed the theft to TraderTraitor, a North Korean group it also blames for Bybit. It published a list of wallet addresses and asked exchanges to block any transactions linked to them. North Korean actors were already converting the stolen assets, mainly into Ethereum, ahead of laundering in stages. Binance says it has replaced about 95 per cent of the funds from its own reserves and that customers will not foot the bill. The firm Elliptic estimates that $2.85 billion has been frozen or seized, which would limit the real gain.
Kim Yo Jong, the leader's sister, dismissed the accusation as "a trite provocation" and ruled out talks with Washington. On 2 November, Pyongyang tested a new cluster warhead for its strategic cruise missiles; on 4 November, it fired several missiles towards the Sea of Japan, its fourth weapons launch in a month. Whether the launches were a response to the FBI cannot be shown: North Korea has been testing at a fast pace all year.
The strategic point is the scale. Michael Bosack, a former UN Command official, says the haul equals nearly a quarter of North Korea's estimated annual GDP, and a 2024 UN report said cyber proceeds had helped fund its weapons programmes. For a heavily sanctioned state, stealing has become a form of state revenue. The FBI has not set out its evidence in the reports we read, and President Trump said at first, "We don't know if it's North Korea". However, TRM Labs and Elliptic had already pointed to Pyongyang on the basis of their own tracing. For companies, the lesson is simpler and uncomfortable: a multi-billion-dollar loss began with one laptop.
Key terms — et leur équivalent français
heist
casse, vol spectaculaire
exchange
plateforme d'échange (de cryptomonnaies)
compromised
piraté, dont la sécurité est atteinte — faux ami avec « compromis »
Corroboration means checking a claim against sources that are independent of each other. Two outlets repeating one news agency count as one source, not two. This week's stories show why that matters. In Riyadh, the ministry, the witnesses and the Houthis each describe the same damage differently, and each has reasons of its own. On Israel, AIPAC counts more than 234 winning candidates, while Responsible Statecraft, cited by Al Jazeera, finds that $55.3 million of its $84.1 million in spending went to losing candidates; both can be true. The court in Helsinki established intent, but the reports on its verdict show no link to any state. Tokyo's breaches have, so far, no named culprit in the report we read. On Binance, the FBI's finding carries more weight because private firms reached the same conclusion through their own tracing. The discipline is simple: separate what is established from what is claimed, and say which is which.
Single-source reporting — information de source unique ; to stand up (a claim) — étayer, confirmer ; hearsay — ouï-dire.
The week ahead
9–15 November: what to watch
Monday 9 – COP31 opens in Antalya. The UN climate conference runs until 20 November, with Türkiye as host and energy security in the background as Hormuz remains contested.
Monday 9 – US Congress returns. The outgoing Republican majority has until 3 January to finish its business before the Democrats take over.
Tuesday 10 – Ukraine talks in Abu Dhabi. US envoy Steve Witkoff has announced a new round between the US, Russia and Ukraine. Treat with caution: an earlier round expected in October never took place.
Thursday 12 – European Political Community, Dublin. About 50 European leaders meet on Ukraine, security and energy. EU leaders stay on Friday for an informal meeting on artificial intelligence and technological competitiveness.
13–18 November – ASEAN meetings in Manila. On the agenda: regional security, the South China Sea, trade and Myanmar.
Sunday 15 – China and Cabo Verde. Beijing tightens its rules on drones, according to Caixin, and Cabo Verde holds a presidential election.
Also this week. G7 foreign ministers meet, Paris hosts its Peace Forum, and General Caine, the US Joint Chiefs chairman, visits Colombia. Exact dates were not confirmed at the time of writing.
Watch: Israel and Saudi Arabia. Whether Eisenkot wins over the ultra-Orthodox parties or turns to Arab support, and whether Houthi strikes keep reaching Riyadh's commercial heart.