The overnight cycle is running two Iran stories that contradict each other. Vance arrived in Geneva for the first direct US-Iran talks since the June ceasefire, signalling a diplomatic lane is open. Trump simultaneously threatened to impose US tolls on Strait of Hormuz shipping if a full deal is not reached within 60 days. The Hormuz strait, the narrow passage through which roughly 20 percent of globally traded oil moves, has never been subject to unilateral US toll authority; the legal basis for the threat is unclear and the operational mechanism does not exist. Iran then announced it is closing the strait over Israeli strikes in Lebanon, a claim that will test whether the Geneva track survives the week. A Singapore energy-desk credit officer reassesses Hormuz-exposed letter-of-credit exposure this morning, not at quarter-end. The FortiBleed credential campaign detailed in today's cyber column sits underneath all of this: 86,644 compromised FortiGate devices mean the attack surface for critical infrastructure along the Gulf corridor is live, and credential resets alone will not close it given the GPU-assisted cracking capacity behind the campaign. The PBOC FIMA repo facility and HKEX's August CGB futures, covered in today's HK finance column, show Hong Kong repositioning for yuan liquidity flows that do not require Gulf stability to function. Watch the Geneva session outcome before end of day HKT. If Vance walks or Iran walks, the 60-day clock on the Hormuz threat starts running in earnest.