US and Israel reportedly plan post-midterm strikes on Iran as Trump says 'not negotiating'

Debris from an intercepted drone killed two people at Aramco's Shaybah oilfield, and an attack on King Fahd airport in Dammam killed two more, including an Indian national. The coalition said it downed four drones over Riyadh and Medina, and Aramco told staff to evacuate its Dhahran headquarters. The US ordered non-emergency staff and families out of Saudi Arabia. Brent rose more than 3% to about $112.68 a barrel, the highest since May.

After Witkoff's St Petersburg meeting with Putin, Moscow said it is 'in principle' willing to restart talks, but saw little substance in the Ukrainian and European proposals he brought. Putin then confirmed Russia is ready to resume three-way talks, aiming for a final settlement, not a pause in fighting. Spokesman Dmitry Peskov said Abu Dhabi was under consideration as a venue. Zelensky opposed any easing of sanctions, while Europeans demanded a seat.

A mass Russian attack overnight, with missiles and 210 drones, killed at least nine and injured 57 across Ukraine. Zelensky said Russia fired 21 ballistic missiles at Kyiv, where one person died and 22 were hurt and the Epicentr, Auchan and Retail Park shopping centres were hit. A strike on a market in Lozova, Kharkiv region, killed two. Moscow's Sobyanin said 630 drones flew toward the capital in six hours; reports said Ukraine hit a weapons plant in Serpukhov.

Police banned demonstrations in parts of Paris on Thursday, but an emergency court injunction overturned the ban on a student march and thousands joined it. A night curfew in parts of Paris runs until Monday. Macron appeared to accuse Trump of exploiting the unrest ahead of the US midterms, then said 'illegitimate' protests will be banned and blamed 'seditious' ultra-left groups. Lyon and Marseille banned all protests on Saturday. The French bond premium over Bunds hit a 15-year high.

AWS said attackers began exploiting the two critical PHP flaws on October 17, four days before disclosure, and that they were then broadly exploited. The bugs, found with AI, affect software behind more than 70% of websites. Government sites in Kenya and the Netherlands, Wikipedia systems and the Internet Archive went offline, and Downing Street separately flagged a cyber-security issue that may take some UK government services offline. The emergency fix covers only PHP 8.2 and newer.

Africa CDC chief Jean Kaseya issued the warning after Nigeria confirmed its first case, in Abuja, imported by a woman who flew in from Uganda. The case is the Bundibugyo strain, and she was not tested until 13 days after falling ill. Nigeria's health minister said it was a single contained infection. The outbreak, centred in DR Congo, had killed more than 4,600 people, and Kenya has nine confirmed cases.