· · · ·

Information War Update Oct 29, 2026: Iran Eyes US Vote, Brown Fake

Information war: Iranian officials describe US midterm plans, an intern denies the fake Brown video, and CISA orders urgent Linux and VMware fixes.

ByPeter
Information war map for Oct 29, 2026 marking Tehran, Cleveland, Washington and Miami
Places named in this report, Oct 28–29, 2026; numbers match the footnotes, and markers are approximate. Markers show where claims or cases were reported. Map: Peter's World; data: Natural Earth

Information War · at a glance

  • 4fronts covered
  • 40cited sources

Key Takeaways: 4 things to know

  1. Iranian officials told a British newspaper that Tehran is preparing to disrupt the US midterm elections, a claim no government has confirmed (see Iran and the Elections).
  2. A former Sherrod Brown intern pictured in the fake Cleveland news video said the claim was “completely false,” and researchers again tied it to Russia (see Russian Operations).
  3. Brazilian senator Flávio Bolsonaro called himself “president-elect” and alleged fraud without evidence after fleeing Brazil, then deleted the wording, Brazilian media reported (see Brazil).
  4. The Cybersecurity and Infrastructure Security Agency ordered federal agencies to fix an actively exploited Linux kernel flaw by October 31 (see Cyber Front).
Report detailsDetails
  • Iranian officials describe plans to stir division around the US midterms, a real former intern denies the fake Brown video, and Brazil’s fugitive senator alleges fraud without evidence.
Information war map for Oct 29, 2026 marking Tehran, Cleveland, Washington and Miami
Places named in this report, Oct 28–29, 2026; numbers match the footnotes, and markers are approximate. Markers show where claims or cases were reported. Map: Peter’s World; data: Natural Earth

Publisher: Peter’s World | Edition: Information War Update, Thursday, October 29, 2026 | Coverage window: Oct 28, 2026, ~12:00 PM ET to Oct 29, 2026, ~9:00 AM ET | Data cutoff: Oct 29, 2026, ~9:00 AM ET | Times: ET unless stated | Sources: CISA and the State Department first, then specialist outlets, wire reports and regional media

This information war update for October 29, 2026, covers Iranian officials’ account of plans to stir division around the US midterm elections, new denials in the fake Sherrod Brown video case, Flávio Bolsonaro’s unproven fraud claims and new federal cyber warnings.[1] It follows the October 28 information war update; the War Room and the Information War News Hub give context.

Iran and the Elections

Iranian officials quoted by a British newspaper said Tehran tried to interfere in Israel’s vote and is preparing to disrupt the US midterm elections on November 3, Iran International reported on October 29.[2] One official told the newspaper that Tehran had explored efforts to “recruit agents” in both countries’ election processes, and the officials said Iran was not backing a particular candidate.[3] They said they wanted to see a “divided America and a divided Israel.”[4] The officials are unnamed, and no US or Israeli agency has confirmed the claims; Middle East coverage of Israel’s coalition fight is in today’s Iran war update.[5]

Russian Operations

Update to our October 28 report: Haya Akbik, who interned for Brown several years ago and whose photo appears in the fake Cleveland 19 segment, told the Associated Press that the claims attributed to her were false.[6] “It’s my name, it’s my reputation being used to make this accusation, and it is completely false,” she said.[7] A digital forensics expert quoted by the AP called the clip “a relatively basic technology fabrication.”[8] X removed the first posts and suspended the accounts, but copies were still circulating on October 27, the AP reported.[9]

Clemson University researcher Darren Linvill tied the Brown and Talarico videos to Storm-1516, a pro-Kremlin network active since at least 2023, Straight Arrow News reported on October 28.[10] Linvill said the posts are “an attempt to make Western liberal democracy appear corrupt.”[11] Russia’s embassy in Washington did not immediately respond to the AP and has denied election interference in the past.[12]

Brazil

In a letter posted after his arrival, Flávio Bolsonaro called himself the “president-elect” and alleged fraud without evidence. He then replaced those words with “leader of Brazil,” g1 reported.[13] His Liberal Party has recognized the result.[14] His travel and the legal case against him are covered in today’s Americas report.

Cyber Front

CISA added two actively exploited flaws to its must-patch catalog on October 28: one in Broadcom’s VMware ESX that can let an attacker with admin access act without being logged, and one in the Linux kernel.[15] CISA said the Linux flaw can be chained with two others to plant web shells and run commands as root, and set an October 31 deadline for federal agencies, against November 11 for the VMware flaw.[16] The deadlines apply under a binding directive for federal civilian agencies.[17]

The same day, 11 countries including the United States, Japan and South Korea, together with the European Union, issued a joint statement backing sanctions on the North’s overseas workers, cyber activity and military cooperation with Russia.[18]

Fact-checks of viral claims

  • False: 1
  • Unverified: 2
Fact-checks of viral claims
DateClaimWho said itVerdictEvidenceSource(s)
2026-10-28Four former female staffers accused Sherrod Brown of sexual assault.Fake Cleveland 19 segment on XFalseThe former intern pictured said the claim was “completely false”; researchers tied the video to Storm-1516 (update to our October 28 verdict).co.ibtimes.com [19]
2026-10-28Brazil’s presidential election was fraudulent, and Flávio Bolsonaro is the “president-elect.”Flávio BolsonaroUnverifiedHe offered no evidence, deleted the wording, and his own party has recognized the result.g1.globo.com [20]
2026-10-29Tehran is preparing to disrupt the US midterm elections.Unnamed Iranian officials, via a British newspaperUnverifiedNo US or Israeli agency has confirmed the account.iranintl.com [21]

Date = date the claim was checked. Verdicts follow the cited fact-checkers and official records; “Unattributed viral post” means the report names no original author. Full citations are in the footnotes.

Domestic Affairs

In the United States, the fake Brown video circulated in the final week of Ohio’s Senate race, in which Brown is challenging Republican Sen. Jon Husted.[22][23]

War Crimes and Civilian Harm

Allegations are attributed; findings are not established unless stated.

Not applicable: no war crimes or civilian harm tied to information operations were reported in this window.

Statements by Officials

United States statements come first; statements by other governments, companies and state-linked voices follow and are labeled. Quotes are verbatim and attributed.

United States

No new statements by US officials on these campaigns were found in the window; CISA’s catalog entries are the day’s official US action.[24]

Other governments

Quotes: Other governments
DateSpeakerRole/OrgQuoteContext/TopicSource
2026-10-29Unnamed Iranian officialIranian government (quoted by The Telegraph)“A divided America and a divided Israel”Iranian aims for the US and Israeli electionsiranintl.com [25]

What to Watch

  • Whether US agencies respond to the Iranian officials’ account before November 3.[26]
  • Whether X and other platforms remove copies of the fake Brown video.[27]

Seven lenses

Analysis

About the framework

This analysis applies the Seven Lenses of Geopolitical Power to the day’s information fights.[28]

Geography & Strategic Position

The day’s claims ran from Tehran to Ohio to Brazil, all tied to elections that have just ended or are days away.[29][30]

Military & Security

An Iranian official also warned that Iran’s response to any renewed attack “will not be limited only to American assets.”[31]

Alliances & Diplomatic Networks

The joint statement on North Korea shows US allies treating cyber activity as a sanctions issue alongside arms ties with Russia.[32]

Economic & Industrial Power

CISA’s deadlines bind only federal civilian agencies, so private owners of the same software must act on their own.[33]

Technology & Critical Infrastructure

CISA gave agencies three days for the Linux flaw, which can be chained to run commands as root.[34] The Brown video shows that cheap edits can still do damage.[35]

Domestic Politics & Information

Storm-1516 used real people’s names and photos, turning private citizens into unwilling props.[36] Flávio Bolsonaro’s deleted post shows how fraud claims can spread before they are withdrawn.[37]

Strategic Leverage & Outcomes

Attribution in the Brown case still comes from private researchers rather than governments.[38] The Iranian account is unverified, so its main effect for now is to raise alarm before the vote.[39]

Analysis by Peter’s World using the Seven Lenses framework. Numbered notes link to the footnotes at the end of this report. Scores, where shown, are judgments, not measurements.

Additional sources

Footnotes

  1. [1] Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Published: Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  2. [2] Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Published: Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  3. [3] (statement) Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Statement made Oct 29, 2026 (unnamed Iranian officials, quoted by The Telegraph); published Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  4. [28] Peter’s World, “Seven Lenses of Geopolitical Power”, https://petersworld.org/seven-lenses-of-geopolitical-power/. Published: 2026. Retrieved: 2026-10-29.
  5. [29] Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Published: Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  6. [30] g1, “Após fuga, Flávio se diz ‘presidente eleito’, apaga post e passa a se chamar de ‘líder do Brasil'”, https://g1.globo.com/politica/noticia/2026/10/28/apos-fugir-do-brasil-flavio-fala-em-fraude-na-eleicao-e-se-autoproclama-presidente.ghtml. Published: Oct 28, 2026, 4:24 PM ET. Retrieved: 2026-10-29. Portuguese-language; summary in our words.
  7. [31] (statement) Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Statement made Oct 29, 2026 (unnamed Iranian officials, quoted by The Telegraph); published Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  8. [32] US Department of State, “Joint Statement on Democratic People’s Republic of Korea (DPRK) Sanctions”, https://www.state.gov/releases/office-of-the-spokesman/2026/10/joint-statement-on-democratic-peoples-republic-of-korea-dprk-sanctions/. Published: Oct 28, 2026. Retrieved: 2026-10-29. Released by Australia, Canada, France, Germany, Italy, Japan, the Netherlands, New Zealand, South Korea, Britain, the United States and the European Union.
  9. [33] Cybersecurity and Infrastructure Security Agency (CISA), “BOD 26-04: Prioritizing Security Updates Based on Risk”, https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk. Published: Jun 10, 2026. Retrieved: 2026-10-29. Background on the binding directive for federal civilian agencies.
  10. [34] Cybersecurity and Infrastructure Security Agency (CISA), “Known Exploited Vulnerabilities Catalog (entries CVE-2026-41709 and CVE-2026-46300, added Oct 28, 2026)”, https://www.cisa.gov/known-exploited-vulnerabilities-catalog. Published: Oct 28, 2026. Retrieved: 2026-10-29. Official US government catalog; due dates from the catalog data feed.
  11. [35] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  12. [36] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  13. [37] g1, “Após fuga, Flávio se diz ‘presidente eleito’, apaga post e passa a se chamar de ‘líder do Brasil'”, https://g1.globo.com/politica/noticia/2026/10/28/apos-fugir-do-brasil-flavio-fala-em-fraude-na-eleicao-e-se-autoproclama-presidente.ghtml. Published: Oct 28, 2026, 4:24 PM ET. Retrieved: 2026-10-29. Portuguese-language; summary in our words.
  14. [38] Straight Arrow News, “Inside the Russian propaganda group injecting false sexual assault allegations into contentious Senate races”, https://san.com/cc/inside-the-russian-propaganda-group-injecting-false-sexual-assault-allegations-into-contentious-senate-races/. Published: Oct 28, 2026, 5:22 PM ET. Retrieved: 2026-10-29.
  15. [39] Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Published: Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
Show 25 more sources
  1. [4] (statement) Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Statement made Oct 29, 2026 (unnamed Iranian officials, quoted by The Telegraph); published Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  2. [5] Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Published: Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  3. [6] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  4. [7] (statement) International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Statement made Oct 27-28, 2026 (Haya Akbik, former intern for Sherrod Brown, to the Associated Press); published Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  5. [8] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  6. [9] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  7. [10] Straight Arrow News, “Inside the Russian propaganda group injecting false sexual assault allegations into contentious Senate races”, https://san.com/cc/inside-the-russian-propaganda-group-injecting-false-sexual-assault-allegations-into-contentious-senate-races/. Published: Oct 28, 2026, 5:22 PM ET. Retrieved: 2026-10-29.
  8. [11] (statement) Straight Arrow News, “Inside the Russian propaganda group injecting false sexual assault allegations into contentious Senate races”, https://san.com/cc/inside-the-russian-propaganda-group-injecting-false-sexual-assault-allegations-into-contentious-senate-races/. Statement made Oct 28, 2026 (Darren Linvill, Clemson University Media Forensics Hub); published Oct 28, 2026, 5:22 PM ET. Retrieved: 2026-10-29.
  9. [12] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  10. [13] g1, “Após fuga, Flávio se diz ‘presidente eleito’, apaga post e passa a se chamar de ‘líder do Brasil'”, https://g1.globo.com/politica/noticia/2026/10/28/apos-fugir-do-brasil-flavio-fala-em-fraude-na-eleicao-e-se-autoproclama-presidente.ghtml. Published: Oct 28, 2026, 4:24 PM ET. Retrieved: 2026-10-29. Portuguese-language; summary in our words.
  11. [14] g1, “Após fuga, Flávio se diz ‘presidente eleito’, apaga post e passa a se chamar de ‘líder do Brasil'”, https://g1.globo.com/politica/noticia/2026/10/28/apos-fugir-do-brasil-flavio-fala-em-fraude-na-eleicao-e-se-autoproclama-presidente.ghtml. Published: Oct 28, 2026, 4:24 PM ET. Retrieved: 2026-10-29. Portuguese-language; summary in our words.
  12. [15] Cybersecurity and Infrastructure Security Agency (CISA), “Known Exploited Vulnerabilities Catalog (entries CVE-2026-41709 and CVE-2026-46300, added Oct 28, 2026)”, https://www.cisa.gov/known-exploited-vulnerabilities-catalog. Published: Oct 28, 2026. Retrieved: 2026-10-29. Official US government catalog; due dates from the catalog data feed.
  13. [16] Cybersecurity and Infrastructure Security Agency (CISA), “Known Exploited Vulnerabilities Catalog (entries CVE-2026-41709 and CVE-2026-46300, added Oct 28, 2026)”, https://www.cisa.gov/known-exploited-vulnerabilities-catalog. Published: Oct 28, 2026. Retrieved: 2026-10-29. Official US government catalog; due dates from the catalog data feed.
  14. [17] Cybersecurity and Infrastructure Security Agency (CISA), “BOD 26-04: Prioritizing Security Updates Based on Risk”, https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk. Published: Jun 10, 2026. Retrieved: 2026-10-29. Background on the binding directive for federal civilian agencies.
  15. [18] US Department of State, “Joint Statement on Democratic People’s Republic of Korea (DPRK) Sanctions”, https://www.state.gov/releases/office-of-the-spokesman/2026/10/joint-statement-on-democratic-peoples-republic-of-korea-dprk-sanctions/. Published: Oct 28, 2026. Retrieved: 2026-10-29. Released by Australia, Canada, France, Germany, Italy, Japan, the Netherlands, New Zealand, South Korea, Britain, the United States and the European Union.
  16. [19] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  17. [20] g1, “Após fuga, Flávio se diz ‘presidente eleito’, apaga post e passa a se chamar de ‘líder do Brasil'”, https://g1.globo.com/politica/noticia/2026/10/28/apos-fugir-do-brasil-flavio-fala-em-fraude-na-eleicao-e-se-autoproclama-presidente.ghtml. Published: Oct 28, 2026, 4:24 PM ET. Retrieved: 2026-10-29. Portuguese-language; summary in our words.
  18. [21] Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Published: Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  19. [22] Straight Arrow News, “Inside the Russian propaganda group injecting false sexual assault allegations into contentious Senate races”, https://san.com/cc/inside-the-russian-propaganda-group-injecting-false-sexual-assault-allegations-into-contentious-senate-races/. Published: Oct 28, 2026, 5:22 PM ET. Retrieved: 2026-10-29.
  20. [23] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  21. [24] Cybersecurity and Infrastructure Security Agency (CISA), “Known Exploited Vulnerabilities Catalog (entries CVE-2026-41709 and CVE-2026-46300, added Oct 28, 2026)”, https://www.cisa.gov/known-exploited-vulnerabilities-catalog. Published: Oct 28, 2026. Retrieved: 2026-10-29. Official US government catalog; due dates from the catalog data feed.
  22. [25] (statement) Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Statement made Oct 29, 2026 (unnamed Iranian officials, quoted by The Telegraph); published Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  23. [26] Iran International, “Iran plans to disrupt US midterm elections – Telegraph”, https://www.iranintl.com/en/202610295364. Published: Oct 29, 2026, 5:17 AM ET. Retrieved: 2026-10-29. Relays a British newspaper report; unverified.
  24. [27] International Business Times (relaying the Associated Press), “Russia-linked AI deepfakes use Americans’ identities to target Democratic Senate candidates ahead of midterms”, https://co.ibtimes.com/russia-ai-deepfakes-senate-candidates-2365. Published: Oct 28, 2026, 7:29 AM ET. Retrieved: 2026-10-29.
  25. [40] Peter’s World, “Information War Update Oct 28, 2026: Fake Brown Video, Scam Charges”, https://petersworld.org/information-war-update-oct-28/. Published: Oct 28, 2026. Retrieved: 2026-10-29.

Sources

Related coverage

More from the War Room today

Recommended articles