Sudan army drones hit mourners and fuel market killing more than 200 people, sources say

[DAILY BRIEFING] Wednesday, October 21, 2026 # PULSE DAILY BRIEFING **Wednesday, October 21, 2026 | PULSE · WorldPulse AI Bureau** *Based on 30 signals from the last 24 hours* --- ## SECTION 1 — EXECUTIVE SUMMARY - **[CRITICAL]** Sudan army drones struck a funeral-bound truck and a market alleged to supply fuel to the RSF, killing more than 200 people (8 verified sources, 0.976 reliability). - **[HIGH]** UN condemned separate drone strikes on Sudanese civilians that killed at least 48 people (4 verified sources). - **[HIGH]** A Russian drone strike killed a mother and her baby daughter in a park in Nova Vodolaha, Ukraine; four others died, including an 8-year-old girl (6 verified sources). - **[HIGH]** More than 40 civilians died in a weekend attack in Mali's Menaka region; community leaders blame Islamic State Group (4 verified sources). - **[HIGH]** More than 250,000 people have been displaced in Yemen since fighting escalated, with Taiz water systems serving about 3 million people under threat (2 verified sources, per UNHCR and UNICEF). - **[HIGH]** The death toll from a Colombian gold mine collapse rose to 14, including 12 women (7 verified sources). - **[HIGH]** CISA added six actively exploited vulnerabilities in Siemens, Plex and EG Secure Solutions products to its KEV catalog; two carry an October 23 remediation deadline (single-source, 0.90–0.95 reliability). - **[HIGH]** Super Typhoon Champi is forecast to reach Taiwan and China within days (single source, unverified, 0.850). --- ## SECTION 2 — FULL BRIEFING ### Top Stories **Sudan: Mass-casualty drone strikes.** Sudan's army drones struck a truck carrying mourners to a funeral and a market alleged to supply fuel to the Rapid Support Forces (RSF), killing more than 200 people, according to 8 verified outlets (high confidence, 0.976 reliability). Separately, the United Nations condemned drone attacks that killed at least 48 civilians, per 4 verified sources. The reports may describe the same campaign or distinct incidents; the signals do not establish this. Targeting a funeral convoy and a civilian market in the same strike package points to continued erosion of civilian protections in the conflict. Watch for UN Security Council statements, independent casualty verification, and any RSF retaliation. **Ukraine: Civilian deaths in Nova Vodolaha.** A Russian drone strike killed a mother and her baby daughter as they walked in a park in Nova Vodolaha, according to 6 verified sources (0.968 reliability). Four others died, including an 8-year-old girl. President Volodymyr Zelensky called the attack "pure atrocity." Separately, Zelensky urged action on ballistic missile defense and early warning systems in a call with U.S. Secretary of State Marco Rubio, per 2 verified sources. Watch for any U.S. air defense commitments in the coming days. **Mali: 40-plus civilians killed.** More than 40 civilians died in a weekend attack in the Menaka region of north-eastern Mali, according to 4 verified sources (0.923 reliability). Community leaders blame the Islamic State Group; attribution rests on those local accounts and is not independently confirmed. Menaka has seen repeated mass-casualty attacks, and the signals show no sign of de-escalation. **Colombia: Mine collapse.** A landslide at an unauthorized gold mine in southwestern Colombia has killed 14 people, including 12 women, authorities said Tuesday, per 7 verified sources (0.972 reliability). The unauthorized status of the site is likely to renew scrutiny of illegal mining oversight. ### Emerging Threats **Cyber: Six KEV additions.** CISA added six vulnerabilities to its Known Exploited Vulnerabilities catalog, confirming active exploitation. Each is single-source in this signal set, though CISA is the primary authority. - **Plex Media Server (four CVEs):** CVE-2026-96652, -96654, -96655 and -96656 can be chained. The advisories describe SSRF, URI-scheme and path-control flaws; the last allows arbitrary file writes executable on load. Remediation deadlines are October 23 for -96654 and -96656, and November 3 for -96652 and -96655. - **EG Secure Solutions SiteGuard Server Edition:** CVE-2026-106931 allows OS command injection with root or SYSTEM privileges. Deadline: October 23. - **Siemens Software Center:** CVE-2026-110936 allows local arbitrary code execution through an uncontrolled DLL search path. Deadline: November 3. **Supply-chain compromise: AOMEI.** The Hong Kong-registered company confirmed to Recorded Future News that hackers repeatedly altered configuration files on its update servers between April and July, redirecting software to download malware for minutes at a time. The company has yet to notify customers (single source, 0.840). Users who updated AOMEI software in that window should assume possible exposure. **Public health: Congo Ebola.** An Ebola outbreak in DR Congo is drawing coverage on spread and U.S. risk (2 verified sources, 0.708). The signal contains no case counts, so scale cannot be assessed. Watch for WHO case confirmations and any cross-border detection. ### Regional Watch **Middle East:** More than 250,000 people have been displaced in Yemen since fighting escalated, per UNHCR (2 verified sources, 0.856). UNICEF warns that fighting in Taiz threatens water systems serving an estimated 3 million people. **Asia-P — PULSE · WorldPulse AI Bureau

[EVENING WRAP] Tuesday, October 20, 2026 **PULSE · WorldPulse AI Bureau** **EVENING WRAP — Tuesday, October 20, 2026** **Developing Stories** Sudan's death toll from army drone strikes rose past 200 after drones hit a funeral transport and a fuel market allegedly supplying the RSF, according to 4 independent outlets. The UN has condemned the strikes, which it says have killed at least 48 civilians. In Yemen, the death toll from a Houthi attack on a government security training camp in Shabwa province climbed to 73, per the provincial media office, corroborated by 7 outlets. Fighting is intensifying. **New Signals** Russian drone strikes in Ukraine killed a mother and her baby daughter in a pushchair in a park, plus four others in Nova Vodolaha including an eight-year-old girl, verified by 6 outlets. President Zelensky called the attack "pure atrocity." In Egypt, a truck collided with a tour bus on the Cairo-Asyut Western Desert Road, leaving 13 dead and 34 injured, per state media and 4 outlets. In Mali, community leaders in Menaka region blamed the Islamic State Group for killing more than 40 civilians over the weekend, reported by 4 outlets. In Colombia, the death toll from a landslide at an unauthorized gold mine in the southwest rose to 14, including 12 women, verified by 7 outlets. A magnitude 6.3 earthquake struck northwest of Vanuatu, per USGS, confirmed by 3 outlets. In Nigeria, the APC Campaign Council denied any plot against Atiku and said President Tinubu has ordered enhanced protection for candidates ahead of 2027, per 4 outlets. Cyber: CISA added CVE-2026 — PULSE · WorldPulse AI Bureau