The week opens in Tehran. Today is the centrepiece of Iran's six-day funeral for Ali Khamenei: the main procession runs roughly 10 kilometres from Imam Hossein Square to Azadi Square from 6am local, with the largest crowds yet expected (CNN) and the city sealed, airspace fully closed today, offices shut through Monday, much of the centre closed to vehicles (Euronews). The programme moves to Qom on Tuesday, Najaf and Karbala on Wednesday, and burial in Mashhad on Thursday. Indirect US-Iran talks stay paused until after the burial; in the Strait of Hormuz, traffic is steady but not increasing, per CNN, and the strait's security is expected on the agenda at this week's NATO summit in Ankara. Watch Thursday-Friday for whether the talks restart.
The Red Sea's quiet broke over the weekend. A bulk carrier came under fire from a skiff 30 nautical miles southwest of Hodeida on Sunday, the attackers withdrawing to an AIS-dark mother ship; no group has claimed it (AP). The same weekend brought what a government officer called the deadliest Houthi attack on government-aligned forces in years, 16 dead and 22 wounded per medical officials, and Houthi threats against Saudi airports. Treat the corridor as live, not dormant; the full read is on the Threat & Risk desk.
In the US, DHS confirmed hackers breached the Homeland Security Information Network, the platform that carries threat intelligence and event-security coordination for federal, state, local and private-sector partners, with the intrusion window put at late May to early June, no attribution reported, and the timing sitting inside the World Cup security operation (BleepingComputer). If your teams touched HSIN-connected workflows since May, assume exposure and review.
On the industry desk, two structural moves: Johnson Controls is selling ADT's UK residential business, 160,000-plus monitored customers, to Australia's Intelligent Monitoring Group for £180m (Small Caps), and Securitas has pointed its 2030 strategy at intelligence-led security with a 10 per cent annual EPS growth target (Securitas). Recurring revenue and advisory capability are where the market is pricing value.
On regulation, the SIA's sequence is now explicit: final Martyn's Law Section 12 guidance in autumn 2026, the Act expected in force from spring 2027, and a new strategy that moves licensing toward quality of service and a business approval scheme (GOV.UK). Start building the evidence base now.
And on tradecraft, EASA reissued its GNSS interference bulletin on 3 July: spoofing is now judged the bigger safety risk than jamming, with new reporting phraseology and EFB guidance for the corridors executive aviation actually uses. The Threat Level desk turns to Haiti, where the violence is breaking out of Port-au-Prince into the provinces. Full detail and sources are on each desk.
