Signals are elevated across cyber, infrastructure, energy, and military channels. No public source has confirmed AI involvement yet.
Confirmed AI involvement: none publicly reported yet. AI-shaped signals: watching.
No public source links these signals to AI/autonomy use.
No new visible signals since last run; continuing GPS interference in Russia/Ukraine.
Independent public signals line up in a theater, but AI use and intent are still unconfirmed.
Ship tracking is readable: 9 Chinese ships near Taiwan; GFW active.
Iran / Gulf / Red Sea: 6 public signal(s) align across cyber, gps, telemetry, thermal. Public signals line up here, but no one has publicly named who or what is behind them — and lining up is not proof. Thermal anomalies are proxy indicators only; they can reflect fires, industrial activity, weather, conflict, or sensor conditions.
Russia / Ukraine: 8 public signal(s) align across cyber, gps, telemetry, thermal. Public signals line up here, but no one has publicly named who or what is behind them — and lining up is not proof. Thermal anomalies are proxy indicators only; they can reflect fires, industrial activity, weather, conflict, or sensor conditions.
Taiwan / China: 3 public signal(s) align across gps, military. Public signals line up here, but no one has publicly named who or what is behind them — and lining up is not proof.
Cross-theater cyber/security advisory: 3 public signal(s) align across cyber. Public signals line up here, but no one has publicly named who or what is behind them — and lining up is not proof.
Israel / Lebanon / Middle East: 1 public signal(s) align across gps. Public signals line up here, but no one has publicly named who or what is behind them — and lining up is not proof.
United States: 1 public signal(s) align across gps. Public signals line up here, but no one has publicly named who or what is behind them — and lining up is not proof.
Public telemetry fusion only; correlation is not attribution.
No public indicators of AI-enabled activity in the current Shadow War snapshot.
NASA FIRMS: Satellite heat signature: 18 hotspots in Russia (satellite heat reading 367 kelvin — far hotter than a typical wildfire)
Careful: Thermal detections can be fires, industrial heat, weather effects, or conflict activity.
Next check: Look for geolocated imagery, FIRMS persistence, or credible ground reporting.
NASA FIRMS: Satellite heat signature: 30 hotspots in Iran (satellite heat reading 367 kelvin — far hotter than a typical wildfire)
Careful: Thermal detections can be fires, industrial heat, weather effects, or conflict activity.
Next check: Look for geolocated imagery, FIRMS persistence, or credible ground reporting.
gpsjam: China: GPS jamming detected — 25 zones, worst 50% aircraft affected
Careful: GPS interference can be chronic near conflict zones and military exercises.
Next check: Look for NOTAMs, official military movement, AIS/ADS-B changes, or local reporting.
CISA KEV: CISA adds actively exploited Google Chromium V8 flaw (CVE-2026-11645)
Careful: Cyber and internet telemetry does not identify the actor or prove AI involvement by itself.
Next check: Look for an official advisory, incident report, outage map, or matched physical effect.
gpsjam: Israel: GPS jamming detected — 8 zones, worst 30% aircraft affected
Careful: GPS interference can be chronic near conflict zones and military exercises.
Next check: Look for NOTAMs, official military movement, AIS/ADS-B changes, or local reporting.
gpsjam: United States: GPS jamming detected — 3 zones, worst 20% aircraft affected
Careful: GPS interference can be chronic near conflict zones and military exercises.
Next check: Look for NOTAMs, official military movement, AIS/ADS-B changes, or local reporting.
USGS: Shallow seismic event in Russia: M5.0 at 10.0 km
Careful: Earthquakes and industrial blasts can look suspicious without ground confirmation.
Next check: Look for another independent source in the same theater and time window.
CISA added CVE-2026-11645 to the Known Exploited Vulnerabilities catalog. Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google...
CISA added CVE-2026-7473 to the Known Exploited Vulnerabilities catalog. Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. Required action: Apply...
CISA added CVE-2026-20245 to the Known Exploited Vulnerabilities catalog. Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. Required...
High heat signature above normal fire range. Could indicate military strike, ammunition depot, or fuel storage fire.
High heat signature above normal fire range. Could indicate military strike, ammunition depot, or fuel storage fire.
High heat signature above normal fire range. Could indicate military strike, ammunition depot, or fuel storage fire.
Independent public signals line up in a theater, but AI use and intent are still unconfirmed.
Plain English: this page asks what machines saw, what else could explain it, and what would make it serious. These are open-source signals, not confirmed reporting.
The boat layer uses Taiwan MND plus Global Fishing Watch AIS-off checks. GFW is now queried slowly and retried region-by-region. Treat it as supporting telemetry for the AI/cyber warfare question, not as the main conclusion.
Analyst speculation, not reporting. Confidence and alternate explanations are shown so the page does not turn sensor noise into certainty. See disclaimer and methodology.
plain-English ship movement read from official counts and AIS-off checks
aggregate AIS-off gaps in tight maritime chokepoints
official PLA aircraft and ship activity around Taiwan
military aircraft count surges in monitored theaters
maritime dark-ship news canary via Wikipedia
GPS interference zones and aircraft impact
satellite thermal hotspots in monitored theaters
country-scale internet traffic drops
internet censorship and connectivity measurements
newly cataloged actively exploited vulnerabilities
space-weather context for GPS, grid, radio, satellite signals
disaster context near monitored theaters
humanitarian reports for impact confirmation
seismic events that can explain or accompany infrastructure signals
European grid-frequency stress
undersea cable incident canary via edit velocity
BGP route visibility for key networks
media-volume context, used only as weak corroboration
edit-velocity canary on conflict pages