Russia let American Stephen Hubbard go free while Steve Witkoff sat down with Vladimir Putin; governments across Europe pulled websites offline over two critical flaws in PHP, the code behind a big chunk of the web; and Emmanuel Macron says some foreign leaders’ takes on France’s riots are just plain “stupid.” Ten stories as of Wednesday morning, October 21.
1. St Petersburg / Russia, and Oslo / Norway. Putin announced during talks with U.S. envoy Steve Witkoff that Stephen Hubbard, a 74-year-old former teacher from Michigan, had been freed and taken to Pulkovo Airport, BBC News reported. Hubbard was sentenced in 2024 to almost seven years in a penal colony, accused of serving in a defence unit in Izyum, eastern Ukraine; Washington had classed him as wrongfully detained. President Trump said he was “on his way back home” and “there was no ‘swap’ necessary.” Witkoff told Putin, “you are a humanitarian also sir, and I salute that.” Afterward the Kremlin said Witkoff’s proposals “lacked substance,” but Putin agreed “in principle” to resume three-way talks with Ukraine and the U.S. after November 10, and adviser Yuri Ushakov said a possible first-ever meeting of the leaders of China, Russia and the United States “is being prepared,” per DW. Still in Oslo, Volodymyr Zelenskyy pitched freezing the front line as step one: “Right now we have to freeze, and I think this is (the) real way to end this war.” Putin also said the first diesel shipment under the new U.S. deal leaves Russia in two to three days.
2. Helsinki / Finland, The Hague / Netherlands, London / UK, and Washington. Finland temporarily shut down its government’s public web services and the Dutch cyber-security agency took its own website offline after two critical vulnerabilities were found in PHP, the programming language that runs a large share of the internet, BBC News reported. A fix came out Wednesday afternoon. Researchers at Calif and Wiz found the flaws using OpenAI’s technology; Wiz called them the “most severe vulnerabilities ever discovered” by AI and estimates “roughly 70%” of the internet is affected, a figure the BBC couldn’t verify. The White House said federal agencies are assessing the impact, and Japan’s Prime Minister Sanae Takaichi urged people to check whether their sites run PHP. Britain’s National Cyber Security Centre says the bug could allow unauthenticated remote code execution and that anyone on any PHP version should update right away. Its earlier alert put it bluntly:
3. Doha / Qatar, and Paris / France. Speaking in Doha, Macron said “manipulation of information” after Saturday’s riots led to “comments that are as unacceptable as they are stupid, from many people, including foreign leaders.” Asked if he meant Donald Trump, he said, “Among others,” The Guardian reported. He said AI-generated images showed “scenes that never actually happened in France.” Israel’s Benjamin Netanyahu, who faces an election next week, had spoken of an “invasion of extremist Islam.” Nearly 150 people have been jailed and more than 800 brought before the courts since the riots, per BBC News. The yellow vest movement has filed plans for a march through Paris on Saturday, and Macron says he’ll meet French intelligence services before then, Al Jazeera reported. Markets are jittery too: France’s benchmark 10-year bond yield passed 5%, its highest since 2002.
4. Abuja / Nigeria, and Nairobi / Kenya. Nigeria confirmed an Ebola case in a woman who travelled from Uganda to Abuja; she developed symptoms on October 7 and 44 close contacts have been identified, BBC News reported. Uganda says she only transited there and that it has no confirmed active cases, per The Guardian. Africa CDC chief Jean Kaseya said the Bundibugyo outbreak “has already become the most geographically extensive in history,” with a fatality rate near 50%; it has infected more than 9,500 people and killed more than 4,600. Kenya now has nine confirmed cases, all linked to a first patient who came from DR Congo and died, and the U.S. has warned its citizens against travel there, according to BBC News. There’s no approved vaccine or treatment for this strain.
5. Aden and Taiz / Yemen, and Riyadh / Saudi Arabia. A powerful blast was heard in Aden as the Houthis claimed a ballistic missile strike on a Saudi-led coalition camp, with smoke rising near the airport; it’s the third attack on the city in a week, Al Jazeera reported. In besieged Taiz, a city of more than 900,000, Oxfam warns the crisis is becoming “unmanageable” as water, fuel and fresh food run out, and the World Food Programme says wheat flour reserves are nearly exhausted, per The Guardian. Turkey is planning a mandate to send military personnel to Saudi Arabia, a ruling party official said, Reuters reported, joining Britain and France in sending help. Houthi attacks on airports in Riyadh and Abha this month killed 19 people, the coalition says, per Al Jazeera.
6. Tehran / Iran. Iran’s security chief Mohsen Rezaei told Pakistan’s army chief, Field Marshal Asim Munir, that “even a particle of enriched uranium will not exit Iran at all,” according to Fars news agency, as reported by Al Jazeera. Tehran wants the U.S. to lift its naval blockade, waive sanctions and release frozen assets, and says it would reopen the Strait of Hormuz in return. Trump has demanded “zero uranium enrichment,” while Vice President JD Vance says the focus is a “long-term” and “verifiable commitment” that Iran won’t rebuild its nuclear program. Nearly eight months into the war, a permanent ceasefire still looks a ways off.
7. Nahalin / occupied West Bank. Israeli forces detained Brad Lander, the Democratic congressional nominee and former New York City comptroller, along with about 80 American and Israeli rabbis and activists who were helping Palestinians pick olives near the settlement of Beitar Illit, NPR reported. Two Israeli lawyers told NPR it’s the largest mass detention of activists in the West Bank in at least a decade. The military said the harvest there hadn’t been coordinated in advance and that Lander “was released once the matter was brought to our attention.” Lander said he was let go with a “warning,” apparently because of his public profile, while several dozen others remained in custody, per Al Jazeera. “Harvesting olives is not a crime under any law,” he said.
8. Brasília / Brazil, and Buenos Aires / Argentina. Four days before Sunday’s runoff, both campaigns are asking the Superior Electoral Court to knock the other off the ballot: Flávio Bolsonaro’s lawyers accuse President Lula of “abuse of power” through mass government WhatsApp messages, and Lula’s camp alleges “algorithmic manipulation” by Meta in Bolsonaro’s favor, Al Jazeera reported. A new Quaest poll shows Bolsonaro’s lead narrowing, per Reuters; he took the first round 47% to 45%. Argentina’s Javier Milei piled on, writing that he hoped Lula’s “latest dirty campaign trick doesn’t involve stealing the election,” and Brazil’s foreign ministry called it “a new and unacceptable attempt at external interference,” the Buenos Aires Times reported.
9. Suva / Fiji, and Wellington / New Zealand. Israel has been accepted as a partner of the Pacific Islands Forum, the region’s main political body, after a decision by leaders at their meeting in Palau, RNZ reported. It joins the forum’s Sectoral Partnership Stream, with Israel pointing to water management, desalination, agriculture and climate adaptation. New Zealand’s Labour Party says Prime Minister Christopher Luxon has “serious questions to answer”; Luxon said it was ultimately the forum’s call and that the partnership is “lower tier,” per RNZ.
10. Geneva / Switzerland, and the Pacific. The World Meteorological Organization’s new outlook says El Niño could push central Pacific temperatures about 3.8°C above normal between November and January, peaking around December. “We have not seen in our records 3.8,” WMO Secretary-General Celeste Saulo said, as officials likened it to a “wrecking ball” for floods and droughts, Rappler reported. The WMO flagged flood risk in southern Africa from November and dry conditions in Southeast Asia. Separately, the UN Environment Programme’s Emissions Gap Report 2026 says warming is set to pass 1.5°C; getting back down by 2100 would take emissions cuts of 18% by 2030, 45% by 2035 and 69% by 2040 from 2025 levels, while current national pledges point to about 2.6°C this century.
Coming Up
Confirmed dates on The Watch: October 25, Brazil’s presidential runoff (Flávio Bolsonaro vs Lula) and Serbia’s snap parliamentary election. October 27, Israel’s election for the 26th Knesset, and the Fed’s two-day meeting opens in Washington (October 27–28). Serbia’s vote is newly added to The Watch. Full board at the link.
