Saturday, 25 July 2026

Houthi missile and drone swarm sets Jizan refinery ablaze, strikes Yanbu — oil holds above $100 after a 40% July climb

Houthi forces struck Saudi Aramco-affiliated facilities in Jizan and Yanbu with dozens of ballistic and cruise missiles and drones — the group's first direct attack on Saudi oil infrastructure since 2022, framed as retaliation for Saudi strikes on Hodeidah and Kamaran Island. Satellite fire-detection picked up the Jizan blaze in the early hours; the refinery processes roughly 400,000 barrels per day, and Yanbu carries outsized weight as the Red Sea export corridor Saudi Arabia has depended on since Hormuz closed. Brent held above $100, up roughly 40 percent in July alone. The threshold that matters here is doctrinal: the campaign has moved from harassing tankers to burning fixed energy infrastructure, a category of target that cannot be rerouted, reflagged or insured around. For European organisations the exposure arrives through energy prices and supply-chain friction rather than direct threat — but for any firm with personnel, projects or contractors in the Gulf, the widened target set changes site-risk assumptions for industrial facilities across the region. Critical-infrastructure operators everywhere should also note the method: saturation with cheap munitions against high-value fixed assets is a template, and templates travel.

Mission Support's advisory and intelligence team helps organisations translate energy-infrastructure escalation into site-risk and continuity decisions.

After thirteen nights, quiet: no new US strikes announced as Washington signals talks are "getting more serious"

The US military concluded a thirteenth night of strikes on Iran and then announced nothing for the following night — the first gap in the campaign in two weeks — while President Trump signalled that talks with Tehran are "getting more serious." Read together with the Houthi refinery strikes of the same day, the picture is a conflict bifurcating: the state-to-state front may be edging toward a negotiated pause while the proxy front escalates against Saudi Arabia. That combination is treacherous for planners because headline de-escalation will tempt organisations to relax exactly as the residual threat becomes less predictable and less attributable. The sober posture for the coming days: treat the strike pause as unconfirmed until it survives contact with the weekend, keep regional travel approvals at their current threshold, and watch two tells that history says matter — whether CENTCOM's silence extends past 48 hours, and whether Iran's proxies in Iraq and Yemen mirror the pause or exploit it. Duty-of-care obligations do not pause on a signal; they pause on a pattern.

Van driven into crowd at Berlin Pride festival: one dead, at least sixteen injured

A van was driven into a crowd gathered for the closing party of Berlin's Pride festival in the Tiergarten area at around 10 p.m., killing one person and injuring at least sixteen, several seriously; the driver initially fled the scene and police launched a major manhunt overnight. The attack struck at the most difficult moment of any large open-air event to protect: the closing phase, when formal perimeters dissolve, crowds are dense but dispersing, stewarding is winding down and attention has moved to egress logistics. European event security has invested heavily in hostile-vehicle mitigation since the attacks of the last decade, but that investment concentrates on the advertised core — parade routes, stages, entry corridors — while the informal edges of an event remain reachable by anyone with a vehicle and intent. The immediate operational lesson for every event organiser in Europe, with a summer of festivals and Amsterdam's WorldPride opening this same day, is to extend vehicle-mitigation thinking to the dispersal phase and the unofficial gathering points, and to rehearse the first-minutes response — casualty care, crowd direction, scene control — that determines outcomes before emergency services arrive in force.

Mission Support's manned guarding teams cover the phases formal event perimeters miss — dispersal, informal gathering points and overnight transitions.

China puts export controls on fourteen European companies — defence and dual-use supply chains in the crossfire

Beijing added fourteen European entities to its export-control list — among them Germany's Rheinmetall, Czech truck maker Tatra, French drone developer Cavok UAS and optoelectronics firms in Poland and Lithuania — prohibiting the export of Chinese dual-use items, including certain rare-earth materials, to the named companies with immediate effect. The move retaliates for the EU's latest Russia-sanctions package, which targeted Chinese and Hong Kong companies. The strategic message for European industry is that defence-adjacent supply chains are now an active front in economic statecraft, and exposure is no longer limited to the fourteen names on the list: their suppliers, subcontractors and logistics partners inherit the disruption, and any European firm in defence, drones, optics or advanced materials should assume it can be listed next. The security dimension compounds the commercial one — companies scrambling to re-source restricted inputs under time pressure are precisely the companies most vulnerable to too-good-to-be-true intermediaries, grey-market brokers and the counterintelligence risks that come with both. Procurement urgency is an attack surface; treat new suppliers found this quarter with proportionate due diligence.

Mission Support's TSCM services protect the meeting rooms and facilities where re-sourcing and defence-programme decisions are discussed.

WorldPride opens in Amsterdam: fourteen days of city-wide events, Europe's largest crowd-security operation of the summer

Amsterdam's first WorldPride opened its fourteen-day run, with hundreds of events across the city building toward the Canal Parade on 1 August and a closing march a week later. As a security operation it is unlike a stadium event or a festival site: the venue is the city itself — canals, squares, parks and hospitality districts — with open access as a founding principle and visitor volumes that will strain transport nodes, emergency-service response times and the surveillance picture for two full weeks. The operation stacks every discipline at once: crowd management on water as well as land, hostile-vehicle mitigation at density points, protection considerations for high-profile guests and delegations, and a hospitality sector running at maximum occupancy with all the access-control compromises that brings. For businesses inside the event footprint the practical preparations are unglamorous but decisive: brief staff on changed access and delivery windows, verify that camera coverage and alarm response arrangements are actually functioning before the peak weekends, and agree escalation contacts with neighbours and the municipal security network. The evening's news from Berlin, hours after the Amsterdam opening, put the entire European Pride calendar under a sharpened threat picture from day one.

Mission Support's hospitality security services support venues and hotels operating at peak occupancy during major events.

Minor arrested placing explosive at Wormer home — the residential end of the Netherlands' explosives wave

Dutch police arrested a minor in the act of placing an explosive at a home in Wormer, a town that had already experienced a blast earlier in July — a small case that illustrates two large trends in the national picture. First, explosive attacks have spread beyond commercial premises into residential intimidation, frequently connected to conflicts in the drug economy, extortion of family members or coercion of witnesses. Second, the perpetrators are increasingly minors, recruited through social media as expendable outsourced labour for a few hundred euros — a model police have warned about all year, because it decouples the attack from the instigator and floods the pipeline with actors too young for meaningful deterrence. For individuals who find themselves targeted — business owners in dispute, professionals connected to criminal proceedings, family members of involved parties — the pattern argues for taking the first incident or threat seriously as the start of a campaign rather than a one-off: residential CCTV with actual monitoring, lighting and approach-line hardening, agreed police contact and, where the threat justifies it, a professional residential-security assessment. The recruitment-of-minors model means the person placing the device has no history with the target; deterrence has to work on the approach, not the relationship.

Mission Support's personal and executive protection services include residential security assessments for individuals under credible threat.

Rotterdam man caught mid-campaign after 740,000 smishing texts impersonating the Tax Authority, Chamber of Commerce and Microsoft

Police announced the arrest of a 22-year-old Rotterdam man caught literally mid-campaign — hundreds of fraudulent text messages were being sent from his equipment as officers entered, with victim data still arriving. Investigators link him to at least 740,000 smishing messages sent in a five-week window, impersonating the Tax Authority, the Chamber of Commerce and Microsoft; his infrastructure was seized and the linked phishing sites taken down. The scale is the story: one individual, operating alone from a home, ran a fraud campaign reaching three-quarters of a million recipients — industrial social engineering at retail cost. For organisations the relevant exposure is that exactly these lures — Belastingdienst payment demands, KvK verification requests, Microsoft security alerts — arrive on employees' phones, including the phones that carry corporate mail and authenticator apps, and SMS sits outside most corporate filtering entirely. Practical counters: include smishing scenarios explicitly in awareness programmes, establish a frictionless internal reporting channel for suspicious texts, and ensure finance teams verify any payment-detail change through a known second channel regardless of how official the message looks. The arrest removes one operator; the tooling he used is commodity and the next campaign is already running.

Mission Support's cyber security services help organisations build the awareness and verification routines that defeat industrial-scale social engineering.