Morning Brief, Friday 16 October

Ukrainian officials said military Starlink receivers used on fast drones stopped working overnight from 13 to 14 October, then returned with a 160 km/h speed cap on the Starshield service. Reuters cited two US officials and one Western official saying the instruction came from the White House to the Pentagon, while a senior US official denied that Donald Trump had issued such an order. Elon Musk said Starshield is controlled by the US government and that speed or usage limits sit with the US military and ultimately the president.

Volodymyr Zelensky told the Financial Times that Ukraine would resume strikes on Russian oil refineries after a three-day pause requested by Washington. He said Russia kept striking Ukrainian energy infrastructure during the pause and accused the United States of withholding intelligence to press Kyiv into stopping. Moscow and Kyiv have accused each other of violating Donald Trump’s proposed moratorium on attacks on energy facilities.

The cap matters because Ukrainian interceptor drones are built to chase Russian Shahed drones at much higher speeds. First-generation interceptors reached 250 km/h, and the newer Litavr+ model reaches 400 km/h, so a 160 km/h ceiling cuts into both interceptions and long-range missions behind Russian lines. Security analyst Mykhailo Samus described the pattern as deliberate.

European allies now face a practical problem before winter: Kyiv is asking for air defence, intelligence and financing at the same time that Washington is using energy prices and diesel diplomacy to push for restraint. Zelensky is due to address EU leaders in Brussels on 16 October, with air defence and the protection of energy infrastructure on the agenda.

Two tankers burned near the Danube delta within hours of each other, deepening fears over commercial shipping in the Black Sea. The Comoros-flagged Yara J caught fire in Romanian territorial waters on 14 October and its crew was rescued. Early on 15 October the San Marino-flagged Wine Trader caught fire near the Sulina channel; later reports put the toll at five rescued and seven still missing. Romanian authorities launched a search operation, while the defence ministry said a drone briefly entered Romanian airspace southeast of Sulina at 1:34 a.m. before disappearing from radar.

Romanian President Nicusor Dan said Russian drones hit the tankers, while other Romanian authorities had not yet formally named drones as the cause. A NATO source cited by Reuters attributed the attacks to Russia, and NATO Secretary General Mark Rutte said the alliance had increased counter-drone capabilities along its eastern flank. Bulgaria had already summoned Russia’s ambassador after strikes on ships off its coast, although Sofia said it lacked clear proof of who carried them out. Bulgarian Prime Minister Rumen Radev made his case bluntly.

In Pakistan, a private school roof collapsed in Peshawar during lessons, killing at least 34 people, 33 children and a teacher, according to the latest ANSA count. Police arrested the school owner, and officers said the building had weak floor slabs and appeared overloaded. In Oregon, a 16-year-old gunman entered Silver Rail Elementary School in Bend and killed three children and a teacher before being shot dead by a community member who had followed him inside.

Both school cases now move to investigation rather than rescue. Pakistani authorities expect an initial inquiry report within four days, while police in Bend have not yet said whether the shooter had any link to the elementary school.

EU leaders arrived in Brussels with the 2028-2034 budget still far from settled. The Irish presidency’s latest plan sets spending at €1.62 trillion, down from the European Commission’s €1.76 trillion opening bid, but net contributors still called it too large. Sweden’s Ulf Kristersson said the proposal would lift Sweden’s net contribution by almost 60%, while Germany’s Friedrich Merz said no member state could afford contributions at that level.

Seventeen countries in the Friends of Cohesion group, including Spain, Italy and Poland, pushed back from the other side and demanded protection for farm and regional funds. Those two areas make up about two thirds of the budget, so cuts hit national spending plans quickly. Leaders made little progress after more than 11 hours of talks, and European Council President Antonio Costa was asked to prepare a new proposal before a special leaders’ meeting on 26 November.

Energy prices also pulled leaders into a shorter-term argument. Reports from the summit said governments discussed relief for households and businesses after fuel and gas costs climbed during the war in Iran and disruption around the Strait of Hormuz. Ursula von der Leyen wants leaders to examine bloc-wide strategic gas reserves, but officials had not yet defined how such a system would work or who would pay for it.

Trade with China gave the summit another defensive edge. Bloomberg reported that the EU is preparing a deterrent that could cut a rival off from the single market if it attacks the bloc’s economy, and officials are studying import surges in sectors such as chemicals and industrial machinery. A recent deal capped Chinese hybrid and plug-in hybrid car exports to the EU at 350,000 vehicles next year, giving Brussels a template for more quotas if talks with Beijing stall.

Citizen Lab researchers said the Israeli advertising company Discover-Tech used manipulated online ads to deliver spyware to phones and laptops without any click by the user. The method, which the researchers call AdFection, used real-time bidding auctions to identify targets and then serve malware hidden in ordinary-looking ads. Citizen Lab said the ads reached devices linked to the UN, NATO, the European Union and governments in several countries.

The reported scale was large even if the number of infections remains unclear. Discover-Tech allegedly displayed 442 million ads across more than 120,000 websites and, through partners, more than 75,000 apps. The ads appeared on sites such as the BBC and the New York Times and inside apps including Duolingo, Badoo and Grindr. Citizen Lab also said at least 45 Al Jazeera devices were infected in 2024 and 2025 through ads delivering spyware attributed to Candiru, a spyware maker blacklisted by the US government.

Google said it blocked Discover-Tech from its ad platforms and suspended the firm from its global vendor list after a joint investigation with Citizen Lab and Confiant. Confiant said Candiru-linked ads made up only a tiny share of Discover-Tech’s total ad volume, but that is thin comfort for anyone placed in the target set. Bill Marczak of Citizen Lab described the risk plainly.

The consequence falls on publishers, app stores and ad exchanges, which now face pressure to prove that automated advertising pipes can screen for more than fraud and bad brands. Citizen Lab stressed that seeing an ad does not prove infection, but it said the system at least collected data to build user profiles for possible targeting.