Nightwatch
HomeMapNewsMilitary PulseSituation ReportsDaily ReportsList ViewVideosCyber Threats
Sign In
Contact Support
Intelligence archive
Historical intelligence

Situation Report

Archived operational intelligence briefing retained for historical analysis.

Intelligence brief / archived issue

Situation Update (UTC)

Key reported developments

  • Ukrainian Air Force confirms the "Повітряна тривога" (Air Alert) civil-defense app was subjected to hostile influence, pushing false radiation, chemical, and "street fighting" alerts to Kyiv users. The Air Force official statement at 21:02:20 UTC reads: "The Air Alert app was likely subjected to hostile influence. There is NO radiation threat! Stay calm, follow our channel messages!" The Kyiv City Military Administration (КМВА) issued identical text at 21:04:07 UTC. РБК-Україна (20:57:14 UTC) quoted former Civil Protection Department head Andriy Kovalenko attributing the incident to unauthorized access. STERNENKO reported the app was "temporarily turned off" at 21:05:54 UTC. The false notifications displayed: radiation danger (trefoil icon), chemical threat (gas-mask icon), street fighting (AK-47 silhouette), each instructing "Do not go outside." A separate injected Russian-language message claimed "nuclear alarm across all Ukraine, Oreshnik is flying." No official statement confirms the attack vector (API compromise, push-spoofing, or insider access). (Event time: alerts timestamped 22:49 local; source: Повітряні Сили ЗС України, 21:02:20 UTC; КМВА, 21:04:07 UTC; РБК-Україна, 20:57:14/15 UTC; STERNENKO, 20:49:54/21:05:54 UTC; confidence HIGH for the incident's occurrence and official denial; LOW for the specific hack vector and attribution to any named actor.)

  • Two new Ukrainian Air Force UAV alerts issued. (1) Jet-powered UAV heading toward Dolynska, Kirovohrad Oblast, from the south (20:48:05 UTC); (2) UAV toward Chuhuiv, Kharkiv Oblast (21:11:55 UTC). STERNENKO stated at 20:55:50 UTC that "the only threat currently in airspace is Shaheds," suggesting jet-powered tracks may have concluded. No interception or impact outcomes reported for either alert. (Source: Повітряні Сили ЗС України, 20:48:05/21:11:55 UTC; STERNENKO, 20:55:50 UTC; confidence HIGH for alert issuance.)

  • Bulgarian presidential second-round exit polls and concession. Рыбарь (20:57:20 UTC) reports exit polls at polling-station closure: incumbent Yotova 50.7–52.5%, rival Gurov 43.4–44%. ТАСС (21:02:59 UTC) reports Gurov acknowledged defeat. This follows the baseline's earlier parallel-count data (Yotova 58.2%, Gurov 38.6% per BNT/Myara). The two sets of figures differ; neither is an official CEC result. (Sources: Рыбарь, 20:57:20 UTC; ТАСС, 21:02:59 UTC; confidence MEDIUM for exit-poll reporting; MEDIUM for concession statement.)

  • Zelensky publicly states Ukraine has not received an official G20 invitation but would support a Trump-led peace initiative. РБК-Україна (20:50:10/11 UTC) reports Zelensky saying "certain signals" indicated Trump "could invite" Kyiv to the US-hosted G20 summit and "possibly" table an initiative to end the war; Ukraine would support an official invitation. No intermediary, date, or channel for the "signals" is named. (Source: РБК-Україна, 20:50:10/11 UTC; confidence MEDIUM for the quote as attributed to a named outlet; LOW for the underlying diplomatic "signals" as uncorroborated.)

  • Russian channel ТАСС claims all obligations during the Oleshky humanitarian pause were met by both sides. ТАСС (21:05:14 UTC) quotes Lantratova stating compliance. The baseline reported a Kherson OVA warning of possible intensified shelling after the pause expiring at 22:59 on 1 November. The claim of full compliance is a Russian-side assertion with no Ukrainian-side confirmation in this batch. (Source: ТАСС, 21:05:14 UTC; confidence LOW — single-source Russian claim.)

  • LOSTARMOUR animated strike-schema map claims 633 Geran/Gerber drones and 230 UMPK glide bombs struck Sumy Oblast alone overnight 31 Oct–1 Nov. Colonelcassad (21:01:04/05 UTC) reposts the video. Additional claimed totals: Kharkiv Oblast 83 FPV, 7 UMPK, 2 cruise missiles; Zaporizhzhia Oblast 49 FPV, 19 UMPK, 3 cruise missiles. These figures are extraordinarily high relative to the Ukrainian General Staff's 1 November aggregate (4,724 kamikaze drones across all fronts) and are not independently corroborated. Specific timestamps in the animation: 07:45 Chuhuiv outskirts, 08:10 Sumy and Malyn (Zhytomyr), 08:25 Pereyaslav (Kyiv Oblast), Dykanka (Poltava Oblast), Chuhuiv. (Source: Colonelcassad, 21:01:04/05 UTC; confidence LOW — pro-Russian mapping channel with track record of inflated totals; no independent verification.)

  • Russian milblogger claims Ukrainian strike on Russian-held elevator position at Ternovate, Guliaipole sector, Zaporizhzhia Oblast. Сливочный каприз (21:09:24/25 UTC) reports positional combat and a claimed VSU strike on a Russian position at a grain elevator in Ternovate, with geotag 47.82760, 36.12492 and a front-line map showing approximately 1.02 km distance markers. No Ukrainian-side confirmation, damage assessment, or casualty figures provided. (Source: Сливочный каприз, 21:09:24/25 UTC; confidence LOW — single-source Russian milblogger claim.)

  • Ukrainian military-adjacent channel criticizes anti-drone heavy-machine-gun mounts on vehicles. Два майора (20:49:10 UTC) posts photos of large-caliber machine guns bolted to vehicle bodies, noting that the mounts will tear the structure apart under sustained fire and criticizing procurement quality in the context of "MOG" (Mobile Defense Groups) reporting pressures. No specific unit, location, or incident is identified. (Source: Два майора, 20:49:10 UTC; confidence MEDIUM for the equipment-quality observation as a visual assessment; LOW for any operational significance.)

Reported situation by area

Kyiv: The Air Alert app compromise is the dominant development. False radiation, chemical, and street-fighting alerts were pushed to users. The Air Force and КМВА issued official denials. The app was temporarily disabled per STERNENKO (21:05:54 UTC). ЦАПЛІЄНКО (21:07:19 UTC) relayed the Air Force recommendation to use an alternative Telegram bot (@golovnamapabot) while the app is potentially compromised. Николаевский Ванёк (21:03:52 UTC) noted the Air Force denied the radiation threat but made no specific statement about the "street fighting" alert. No actual combat, radiation release, or chemical incident in Kyiv is reported or confirmed. Previously reported (baseline): emergency electricity disconnections on 1 November; right-bank water supply restored; resident complaints of 15–20-hour blackouts. (Confidence HIGH for the app incident and official denial; LOW for the "street fighting" alert's specific mechanism.)

Kirovohrad Oblast / Dolynska: Air Force jet-powered UAV alert at 20:48:05 UTC heading from the south. No outcome reported. Previously reported (baseline): jet-powered UAV alert toward Kropyvnytskyi at 20:13:57 UTC. (Confidence HIGH for alert issuance.)

Kharkiv Oblast / Chuhuiv: Air Force UAV alert at 21:11:55 UTC. No outcome reported. Previously reported (baseline): 8 Russian attacks on Southern Slobozhanskyi axis; 3 Russian assault actions toward Kupiansk. (Confidence HIGH for alert issuance.)

Sumy Oblast: LOSTARMOUR/Colonelcassad claims 633 Geran drones and 230 UMPK struck the oblast overnight 31 Oct–1 Nov, with specific timestamps for explosions at Sumy and Malyn (Zhytomyr). These figures are uncorroborated and implausibly high. Previously reported (baseline): Air Force UAV alert toward Vorozhba/Bilopillya at 20:35:50 UTC; 7 Russian attacks and artillery shelling of 10 settlements for 31 October. (Confidence LOW for the LOSTARMOUR totals; HIGH for the prior alert.)

Guliaipole / Ternovate, Zaporizhzhia Oblast: Сливочный каприз (21:09 UTC) claims positional combat and a Ukrainian strike on a Russian elevator position. Geotag provided. No Ukrainian corroboration. Previously reported (baseline): 6 Russian attacks toward Yehorivka, Kopani, Hirke, Dobropillia repelled. (Confidence LOW for the strike claim.)

Sevastopol (occupied Crimea): Colonelcassad (20:59:08 UTC) reposts blackout rotation schedules dated 27 October (historical, not new). No new outage or strike reported. (Confidence MEDIUM for the schedule's existence as a repost; no operational significance in this batch.)

Bulgaria (non-conflict context): Exit polls and concession reported. Relevant to the information environment as both Ukrainian and Russian channels frame the outcome. (Confidence MEDIUM for poll data; the framing is editorial.)

Other areas: No new combat, strike, or alert information in this batch for Donetsk ground axes, Pokrovsk, Kostiantynivka, Lyman, Sloviansk, Kramatorsk, Kupiansk, Orikhiv, Kherson front, or western Ukraine beyond the LOSTARMOUR claims. Silence does not establish that conditions are unchanged.

Reported strikes and air-defense activity

  • Jet-powered UAV toward Dolynska, Kirovohrad Oblast (from south): Air Force alert at 20:48:05 UTC. No interception or impact reported. (Source: Повітряні Сили ЗС України; confidence HIGH for alert.)

  • UAV toward Chuhuiv, Kharkiv Oblast: Air Force alert at 21:11:55 UTC. No outcome reported. (Source: Повітряні Сили ЗС України; confidence HIGH for alert.)

  • STERNENKO assessment (20:55:50 UTC): "Currently in airspace, the only threat is Shaheds." This implies jet-powered UAV tracks may have concluded or passed, but no interception or shoot-down is confirmed. (Confidence MEDIUM as a single-channel situational note.)

  • LOSTARMOUR animated map (via Colonelcassad, 21:01 UTC): Claims overnight strikes across Sumy, Kharkiv, Zaporizhzhia, Kyiv, Poltava, Zhytomyr oblasts with specific explosion timestamps (07:45 Chuhuiv, 08:10 Sumy/Malyn, 08:25 Pereyaslav/Dykanka/Chuhuiv). No Ukrainian Air Force, General Staff, or local-source corroboration of these specific events in this batch. (Confidence LOW.)

  • No air-defense engagement results (interceptions, shoot-downs, confirmed impacts) are reported in this batch for any of the two new UAV alerts or the five prior alerts from the baseline.

  • No new physical strike damage is reported in this batch for any Ukrainian oblast. The Dnipropetrovsk and Donetsk outage figures from the baseline remain the most recent infrastructure-damage evidence.

Reported Russian activity

  • App compromise / false-alert injection: Multiple Russian-language channels (Операция Z, Два майора, НгП раZVедка, Alex Parker Returns) amplified the false Kyiv alerts. Операция Z (20:52:10/11 UTC) presented radiation and chemical alerts as "official Ukrainian" while the attached image contained a Ukrainian denial one minute later. НгП раZVедка (21:09:13 UTC) claimed "a significant part of Kyivans already panicked." Alex Parker Returns (20:54:08/09 UTC) posted a crude radiation graphic with the celebratory caption "Кажется началось!" ("It seems to have started!"). The Ukrainian Air Force attributed the incident to "hostile influence" without naming an actor. No forensic evidence, attack vector, or attribution to a specific group is provided by any source. (Confidence HIGH that the amplification occurred; LOW for the "hack" mechanism; LOW for attribution to any named actor.)

  • LOSTARMOUR strike-schema publication: Pro-Russian mapping channel produced an animated video claiming massive overnight drone and glide-bomb strikes. (Source: Colonelcassad, 21:01:04/05 UTC; confidence LOW.)

  • Oleshky pause compliance claim: ТАСС/Lantratova (21:05:14 UTC) states both sides met all obligations during the humanitarian pause. No Ukrainian-side confirmation. (Confidence LOW.)

  • Information-operations themes: Colonelcassad (20:45:11 UTC) claims Reuters reports Chinese military aircraft ferrying precision equipment to Iran for weapons production — a geopolitical item unrelated to the Ukraine front, presented without link or corroboration. Военкор Котенок (21:07:39 UTC) reports needles found in Halloween sweets in Germany (per DPA/Segodnia.ru) — a non-conflict item framed with sensationalist language. Alex Parker Returns (21:03:30 UTC) reports a fraud trial in Chechnya involving fictitious injury payments to 30 soldiers — an internal Russian military-justice story. (Confidence LOW for the Reuters/China claim as uncorroborated; MEDIUM for the Germany and Chechnya items as relayed from named outlets.)

Reported Ukrainian activity

  • Air Force alerts: Two new UAV alerts issued (Dolynska 20:48 UTC; Chuhuiv 21:11 UTC). Five prior alerts from the baseline remain without reported outcomes.

  • Official Air Alert app denial and mitigation: The Air Force (21:02:20 UTC) and КМВА (21:04:07 UTC) issued identical statements denying any radiation threat and attributing the false alerts to "hostile influence." ЦАПЛІЄНКО (21:07:19 UTC) relayed the Air Force recommendation to use an alternative Telegram bot. STERNENKO (21:05:54 UTC) reported the app was temporarily taken offline.

  • WarArchive / National Guard artillery post (21:00:56/57 UTC): A professionally shot night photo shows an 8×8 wheeled armored vehicle (identified in the analysis as a BTR-4 variant or similar) with a turret-mounted howitzer firing, overlaid with National Guard insignia. Caption: "Good night friends, see you tomorrow!" No location, date, or target information. (Confidence MEDIUM for the image's authenticity as unit content; LOW for operational context.)

  • Оперативний ЗСУ (20:56:39/40 UTC): Published a vulgar parody mocking the Russian fake "Oreshnik is flying" alert. No operational information.

  • Оперативний ЗСУ (21:09:36 UTC): Fundraising post for SSO (Special Operations Forces) equipment, including a Monobank jar link, card numbers, PayPal, and a raffle for a Springfield Saint AR-15. No operational content.

  • Dnipropetrovsk, Donetsk, Kyiv utility restoration: No new restoration or damage-update information in this batch beyond the baseline figures.

Civilian and infrastructure impact

  • Kyiv civilian information environment: The false Air Alert app notifications (radiation, chemical, street fighting) were pushed to residents. The Air Force and КМВА confirmed no actual radiation threat. No reports of civilian injury, evacuation, or property damage from the false alerts appear in this batch. The app was temporarily disabled. Whether any residents acted on the false alerts (e.g., sheltering, purchasing iodine) is not documented. (Confidence HIGH for the incident; no corroborated civilian harm.)

  • No new civilian casualty reports are supplied in this batch for any oblast. The baseline figures (Vasyshevo: 5 injured; Pavlohrad: 8 injured including 3 children; Kramatorsk: 1 killed, 8 wounded; Chernivtsi: 1 hospitalized; Rivne: 4 injured) remain the most recent evidence and are not updated here.

  • No new infrastructure damage beyond the baseline is reported. The Donetsk (276,000+ subscribers) and Dnipropetrovsk (60,000+ subscribers) outage figures remain unchanged in this batch.

Information environment and disputed claims

  • App compromise mechanism: The Air Force states "hostile influence" without specifying whether the incident was a server-side API breach, push-notification spoofing, DNS hijacking, or social engineering of app administrators. РБК-Україна quotes Kovalenko's hypothesis of "unauthorized access." The injected Russian-language message ("Oreshnik is flying") and the language shift from Ukrainian to Russian are consistent with external tampering but do not constitute forensic proof. Multiple channels (Два майора, НгП раZVедка, Alex Parker Returns) use the word "взлом" (hack) as a definitive causal claim; this is unverified. (Confidence LOW for the specific mechanism.)

  • LOSTARMOUR strike totals vs. Ukrainian General Staff: LOSTARMOUR claims 633 Geran drones in Sumy Oblast alone overnight. The General Staff's 1 November aggregate is 4,724 kamikaze drones across all fronts. The LOSTARMOUR figure for a single oblast is implausibly high relative to the national total and is not corroborated by any Ukrainian Air Force or local reporting in this batch. (Confidence LOW for LOSTARMOUR totals.)

  • Oleshky pause compliance: ТАСС/Lantratova claims full compliance by both sides. The baseline reported a Kherson OVA warning of possible intensified shelling after the pause. No Ukrainian-side statement confirms or denies compliance. The earlier baseline noted a one-minute time discrepancy (22:59 vs. 23:00) for the pause expiry. (Confidence LOW for the compliance claim.)

  • Ternovate strike claim: Сливочный каприз attributes a strike to Ukrainian forces against a Russian elevator position. No Ukrainian-side confirmation, damage imagery, or independent corroboration. The channel's date format ("01.11.26") and map markers ("2026.xx.xx") are noted as anomalous by the source's own analysis, raising questions about template errors. (Confidence LOW.)

  • Bulgarian election framing: Both Ukrainian channels (Оперативний ЗСУ, ЦАПЛІЄНКО from baseline; Рыбарь in this batch) and Russian channels (ТАСС) frame the Yotova result through a Ukraine-war lens. Рыбарь (20:57:20 UTC) provides a more nuanced analysis, noting Yotova's association with Radev but observing Sofia joined the "Drone Deal" and is positioned as a mediator rather than a radical pivot. Exit-poll figures differ between sources (BNT/Myara: 58.2/38.6; Рыбарь: 50.7–52.5/43.4–44). Neither is an official CEC result. (Confidence MEDIUM for the concession; LOW for reconciling the two poll sets.)

  • Zelensky G20 statement: The "signals" of a possible Trump invitation are described vaguely with no intermediary, date, or channel. The photo is a generic diplomatic portrait not tied to the quoted remarks. (Confidence MEDIUM for the quote's attribution to RBC-Ukraine; LOW for the underlying diplomatic claim.)

  • Chinese-Iranian military flights (Colonelcassad/Reuters): Presented as a one-line claim without link, article text, or corroboration. Not a Ukraine-war development. (Confidence LOW.)

Evidence limitations and unresolved questions

  • App compromise vector and attribution: The Air Force says "hostile influence" but does not name an actor, specify the technical mechanism, or provide forensic evidence. Whether the app was genuinely breached or the screenshots are fabricated remains unresolved. The app was reportedly taken offline, but no official statement from the Ministry of Digital Transformation, CERT-UA, or the app developer is included in this batch.
  • LOSTARMOUR strike-schema reliability: The claimed volumes (633 drones in one oblast overnight) are not corroborated. The animation's date format ("2026") and the source's own analysis flag potential template errors or deliberate misdirection.
  • UAV alert outcomes: Two new alerts (Dolynska, Chuhuiv) and seven prior alerts from the baseline remain without reported interception, shoot-down, or impact outcomes.
  • General Staff aggregate figures: The 1 November totals (4,724 kamikaze drones, 1,744 artillery strikes, etc.) remain official Ukrainian one-sided reporting with no independent verification in this batch.
  • Ternovate / Guliaipole: No Ukrainian-side confirmation of the claimed strike or positional combat. The date format anomaly in the source's own analysis is unresolved.
  • Oleshky pause: No Ukrainian-side confirmation of compliance or of the claimed UAV launches from Mykolaiv/Odesa oblasts (baseline, Два майора, 20:33 UTC).
  • Dnipropetrovsk reconciliation: The baseline's ~100,000 vs. Hanja's 60,000+ subscriber figures remain unreconciled. No new restoration data in this batch.
  • Sevastopol blackout schedule: Colonelcassad reposts a 27 October schedule; no current Sevastopol outage data is provided.
  • Weather conditions (Open-Meteo, 21:00 UTC): Fog at Kharkiv/Vovchansk (8.8 °C, code 45, cloud 98%, wind 0.7 m/s); overcast at Pokrovsk (8.8 °C, cloud 97%), Svatove (9.8 °C, cloud 100%), Orikhiv (8.6 °C, cloud 86%); partly cloudy at Kherson (7.9 °C, cloud 71%). Light rain forecast for Kharkiv/Vovchansk (precip probability 58%). These are ambient observations; no tactical implications are drawn.
  • Dempster-Shafer analytic support: A single belief score is present: "Military Action: Drone Strike by Russia on civilian infrastructure in Kharkiv region" at 0.434538, with "Uncertainty" at 0.565462. This is an internal analytic score, not independent corroboration of any specific claim. Its presence aligns with the Chuhuiv UAV alert but does not confirm an impact.
  • Silence on other sectors: The absence of new messages regarding Pokrovsk, Kostiantynivka, Lyman, Sloviansk, Kramatorsk, Kupiansk, Kherson front, Chernihiv, Rivne, Zhytomyr, and western Ukraine does not establish that conditions there are unchanged. The prior baseline and daily report remain the most recent evidence for those areas.
  • No prior baseline reconciliation: The previous situation report is present and used as a dated historical baseline. All carried-forward information is labeled as previously reported.
Previous (2026-11-01 20:45:19.435637+00)