The U.S. military completed the withdrawal of its remaining troops and equipment from Iraq, with the final personnel leaving an air base in Irbil, in the semi-autonomous Kurdish region, under an agreement reached between Baghdad and Washington in 2024. The withdrawal ended more than two decades of U.S. military involvement in Iraq, which began with the 2003 invasion, followed by a withdrawal in 2011 and a return in 2014 to support Iraqi forces against the Islamic State. The mission was wound down as the Islamic State was reduced to scattered sleeper cells. Iraqi Prime Minister Ali al Zaidi described the withdrawal as the beginning of a new phase focused on Iraqi sovereignty, stronger institutions and an Iraqi led security effort. Iran and Iran backed Iraqi militias welcomed the departure and described it as a victory, while officials warned that they could seek greater influence over Iraq’s security and political affairs. Iraqi and Kurdish officials also expressed concern about potential security gaps resulting from the loss of U.S. intelligence, logistical, drone and air defense support, particularly as the Islamic State could exploit the reduced U.S. presence to regroup. Iraqi security forces reported that a suspected Islamic State cell was preparing suicide attacks to coincide with the withdrawal. The Kurdish regional government said the region had experienced more than 1,000 drone and ballistic missile attacks during the recent U.S. Iran conflict, while seven of the 18 U.S. service members reported killed during the conflict were in Iraq. Iraq had initially linked the 30 September deadline for the U.S. withdrawal to the disarmament of non state armed groups, but powerful Iran backed militias rejected disarmament or imposed conditions, leading to the militia disarmament deadline being extended to June 2027. Since 2003, about 4,500 Americans have been killed in wars and military operations in Iraq.

Authorities in the UAE shared with Israel a list of passengers and crew, including nationalities, before a FlyDubai flight from Dubai to Tel Aviv on 30 September 2026, but Israeli authorities did not identify any security concerns involving the passengers or crew. The flight carried 182 people, including eight crew members. During the flight Omani copilot Hamam al Hammami attacked the Indian captain, Smit Machchhar, with the cockpit crash axe and attempted to seize control of the aircraft in what the United Arab Emirates described as a terrorist attack. The aircraft entered a severe descent and nearly crashed before Machchhar managed to open the cockpit door, allowing passengers and other crew members to overpower the attacker and help stabilize the aircraft. The plane made an emergency landing in Tabuk, Saudi Arabia, after part of the rudder was damaged during the extreme descent. Machchhar and al Hammami were later taken to the United Arab Emirates, while the passengers returned to Israel on a separate flight. Al Hammami had previously been barred from flying in Oman because of concerns over extremist views and security risks and was subsequently employed by the United Arab Emirates based airline. It remains unclear how he passed security checks and was permitted to operate a flight carrying Israeli passengers to Israel. On 4 October 2026, Australian counterterrorism investigators were reported to be examining possible connections involving al Hammami. Investigations by authorities in the United Arab Emirates, Saudi Arabia and Israel, with assistance from the United States and Oman, remained ongoing, and no confirmed connection to a militant organization had been established. Netanyahu ordered a review of security arrangements concerning foreign civil aviation to Israel.

At around 9 am local time, FlyDubai flight FZ1073, carrying more than 150 passengers from Dubai to Tel Aviv, issued a hijacking distress signal while flying over Saudi Arabia near the Jordanian border, prompting Israeli fighter jets to be scrambled. The incident followed a violent confrontation between the captain and first officer, during which the captain was stabbed and reportedly lost consciousness after being attacked by the Omani co pilot. The aircraft subsequently descended approximately 15,000 feet in just over one minute before Israeli passengers overpowered the copilot. A replacement pilot who was onboard the aircraft then made an emergency landing in Tabuk, western Saudi Arabia. Israeli authorities categorically described the incident as a failed jihadist attack. The distress signal was later cancelled after the aircraft was diverted to Saudi Arabia. FlyDubai confirmed that the aircraft landed safely in Tabuk and that all passengers and crew were safe. The airline said it would send a special aircraft from the United Arab Emirates to return the Israeli passengers to Israel. As the incident evolved, all FlyDubai flights landing at Ben Gurion Airport were diverted to a separate area and inspected by security forces to rule out the possibility that the incident was part of a wider event. The Israeli Transportation Ministry later stopped all flights operated by the carrier to Tel Aviv until further notice.

Police arrested five British men in their 20s from London after receiving a call at 12:45 am local time. about three suspicious vans travelling toward RAF Fairford in Whelford, Gloucestershire, an airbase operated by the United States and used by American bombers during operations against Iran. The men were initially arrested under the Explosives Act and later on suspicion of preparing a terrorist act. Army explosive ordnance disposal specialists examined the three vans using a bomb disposal robot. A 400 meter cordon was established, and about 85 households in Whelford were evacuated to a nearby recreation center as a precaution. Authorities said the incident was contained and continued investigating the circumstances, including a possible connection to Iran, Russia or non-state militant groups. The following day, the five men were released on bail under stringent conditions but remained under investigation. Authorities examined multiple lines of inquiry, including whether the suspected offences involved proxies or individuals knowingly or unknowingly working for a foreign state. Investigators had not concluded that the incident was state backed, and Iran denied involvement. Authorities also reported that no viable explosives had been found. The evacuated residents were allowed to return home after the scene was declared safe, while the investigation continued.

At least 11 people were killed and 30 were injured in an explosion near Aman Mela in the Darazinda area of Dera Ismail Khan, Khyber Pakhtunkhwa province. According to security officials, a suicide bomber rammed an explosives laden vehicle into a roadside security and police checkpoint. Local emergency response teams rushed to the site to treat the wounded and transport them to nearby hospitals. The victims included security personnel, police officers, and civilian passersby. The Tehreek e Taliban Pakistan claimed responsibility for the attack, highlighting the continuing rise in militant violence targeting security forces in the region near the Afghan border.

At around 4:00 am local time, four masked men entered a family home in Vendin le Vieil, northern France, and kidnapped the parents and their two children, aged 8 and 12. The father, an IT worker in the cryptocurrency sector, was taken to another room and forced to provide access codes and transfer approximately €40,000 in cryptocurrency. The family was held for more than three hours, and the father was assaulted while the 12 year old girl was struck in the face. The four suspects took identity documents, mobile phones and a computer before fleeing the scene in a vehicle and remained at large. The investigation is examining how the perpetrators identified the family and learned that the father held cryptocurrency. Under French law, cryptocurrency holders are required to declare their holdings to the tax authorities. Reports indicate that victims in similar cryptocurrency related kidnappings are often identified through leaked personal data obtained in cyberattacks, which can expose victims' identities, addresses and information about their cryptocurrency holdings. An example of this occurred in August 2026, when the tax data of more than half a million people was leaked. The data, obtained by cybercriminals, was sold to kidnapping gangs, which use it to identify potential targets. (criptotendencias.com, 20 September 2026)