Air & OSINT · 27 September 2026 · Evening edition

Fairford airspace restricted after suspected bomb plot near US bomber base

A suspected bomb plot near RAF Fairford brought reported airspace restrictions, evacuations and a counterterrorism investigation around the airfield hosting US bombers. The Aviationist reported that police had confirmed arrests and evacuations in nearby Whelford while explosive ordnance disposal teams examined vehicles, following increased security at the base. Separately, flight watchers identified four tankers preparing for another Coronet East movement toward the Middle East, although the accompanying fighters and final deployment details remained unconfirmed. 1 2

Restrictions around Fairford as investigators examine vehicles

UK Defence Journal, citing Gloucestershire Constabulary, reported that officers were called after three suspicious vehicles were seen travelling towards RAF Fairford. Steve Lookner's account of the police announcement said five men were arrested on suspicion of Explosives Act offences, a 400-metre cordon was established and around 85 households were evacuated. A later post relayed counterterrorism police's confirmation that the men were also arrested on suspicion of preparing a terrorist act; that is an allegation, not a finding of guilt. 3 4 5

The immediate aviation consequence was a reported restriction around Whelford. ArmchairAdml quoted NOTAM J3453/26 describing a temporary restricted area with a four-nautical-mile radius. A Kai Greet post shared by The Aviationist said the restriction extended to 9,500 feet and would end news-helicopter coverage. Separately, FaytuksNetwork described aerial footage showing B-1B bombers on separate hardstands at Fairford; the post did not establish when or why that parking arrangement had been adopted. 6 7 8

DefenceGeek reported that Fairford had moved to Force Protection Condition Charlie earlier in the week and Delta the previous evening, citing observations of strengthened barriers and armed patrol vehicles. Its conclusion that intelligence services had advance information was an interpretation, not a disclosed intelligence assessment. GlobalOSINTHQ quoted a USAF spokesperson saying the 501st Combat Support Wing was taking protective measures but declining to discuss specific force-protection arrangements. 9 10

Responsibility remained unresolved in the reporting. Faytuks, citing Sky News, said investigators were examining a possible Iranian link. Lookner separately quoted Reuters reporting that a source familiar with the investigation considered an Iran-linked motive most likely, while Russian sabotage and an Islamist plot were also being examined. These were reported lines of inquiry, not an established attribution. 11 12

Four identified tankers point to another Coronet East movement

DefenceGeek identified the prospective Coronet East 118 tanker element as KC-46A GOLD22, serial 16-46021, hex AE5BC6; KC-135R GOLD23, 60-0359, AE04A2; KC-46A GOLD32, 21-46090, AE63C6; and KC-135R GOLD33, 59-1516, AE04E6. The account described the movement as preparing to deploy towards CENTCOM and suggested it would likely replace aircraft leaving the Middle East. That replacement role remained the author's assessment: the post did not identify the fighter unit or confirm completion of the deployment. 2

Other tracking posts supplied narrower aircraft identifications rather than evidence of a wider operational change. An ArmchairAdml post shared by MATA_osint identified RC-135 Rivet Joint 62-4138, hex AE01CD, with callsign OLIVE 38; the shared text cut off during its departure description, leaving no complete route to report. WarWatchIntel separately reported an E-6B Mercury, hex AED810, over Kansas. Neither observation by itself establishes a connection to the Fairford incident or a change in strategic alert status. 13 14

Maritime-patrol sightings included a P-3C BMUP arrival at Misawa, relayed by airsuperiorx from a spotter who could not identify its unit and only suspected it had come from Kadena. SkyGlass12 also reported a Portuguese P-3 using callsign ORIO01 near Aljustrel and an Indian P-8 using GZ27S near Varsoli. Its suggested surveillance missions were speculative; those alerts supplied locations and identifiers, not confirmed tasking. 15 16 17

Ukrainian strike footage and conflicting accounts from Yemen

Osinttechnical described footage of a Ukrainian MiG-29 releasing two French AASM rocket-boosted guided bombs against a Russian bridge over the Seym River in Kursk Oblast. The post did not provide a strike date or establish the resulting damage. Another post from the account described a MiG-29UB scrambling for an intercept earlier this month, so it should not be read as evidence of a new sortie on the publication day. 18 19

In Yemen, GlobalOSINTHQ relayed conflicting accounts of a reported Saudi airstrike in Taiz: media aligned with the Presidential Leadership Council said the Al-Istiqbal military camp was hit and Houthi fighters killed, while Houthi-run media said a central market was struck and several people killed. The supplied account did not resolve the target or casualties. The same aggregator described September 25 satellite imagery showing scorching around an oil depot at Saudi Aramco's South Terminal in Yanbu, but its attribution to a September 24 Houthi missile or drone attack was explicitly tentative. 20 21

Canada advances airborne-warning talks without a purchase contract

The Aviationist reported that Canada had advanced negotiations with Saab for GlobalEye after selecting the company as its preferred supplier for a future airborne early-warning and control system. The distinction was important: the term sheet established a negotiating framework, not a formal purchase contract. 22

Elsewhere, SkyGlass12 reported that ten 4th Fighter Wing F-15Es had returned from Operation Epic Fury displaying Mortal Kombat-themed nose art and 45 drone-kill markings. Those markings are the reported visual record on the aircraft, not an independently verified tally of engagements. The account also said Indonesia expected another batch of Rafales from 2027, a future delivery claim rather than a completed arrival. 23 24