Wednesday, 30 September 2026

Russia Launches Largest Attack on Ukraine's Energy Infrastructure Since Spring

Russia has launched its largest attack on Ukraine's energy infrastructure since spring, according to the BBC. Al Jazeera reports that strikes on the Kyiv region killed four people and targeted the power grid. The effect reaches beyond Ukraine. Repeated damage to generation and distribution pushes blackouts towards the winter months. Any organisation with staff, suppliers or clients in the country now faces longer outages and less predictable transport. Test backup power, fuel reserves and communications that do not depend on the local mobile network. Update duty-of-care plans for extended blackouts, and set clear thresholds for relocating personnel, with a named person who decides. Supply-chain managers should map which Ukrainian partners rely on a single substation or data centre. Companies elsewhere in Europe with Ukrainian colleagues should expect welfare and continuity questions to grow as the cold season starts. Review these arrangements this week, not after the next strike.

Flydubai Flight to Israel Diverted to Saudi Arabia After Cockpit Incident

A Flydubai flight bound for Israel was diverted to Saudi Arabia after an emergency alert. Reports differ on the detail: Al Jazeera describes an attack on the pilot, Euronews a fight between pilots, and NOS a dive after a fight in the cockpit. DW reports that a pilot is being investigated over a possible attempt to crash the Tel Aviv-bound aircraft. The investigation is at an early stage, and motive and sequence are unconfirmed. The story matters because it involves an insider on the flight deck, a threat that screening at the gate does not address. It also touches a route already sensitive to regional tension. Airlines, corporate travel managers and executive-protection teams should not draw conclusions on cause. They should confirm which carriers their principals use on Middle East routes, keep flexible rebooking options and hold a ready communications line with travellers. Wait for official statements from the airline and aviation authorities before changing travel policy.

Our executive protection teams plan travel movements and fallback routes for principals flying through sensitive regions.

South Korea Blames North for DMZ Landmine Blasts, Pyongyang Calls Claim a 'Farce'

South Korea says landmine blasts in the demilitarised zone injured three of its soldiers, calls them a violation of the armistice and demands an apology from Pyongyang. North Korea denies the claim and calls it a 'farce'. Al Jazeera reports that the two sides have exchanged threats. Who laid or triggered the mines is contested, and the coverage cites no independent finding. For corporate security teams the direct operational impact is limited, but the episode adds friction on a peninsula where one misread incident can escalate quickly. Companies with staff, factories or logistics in South Korea should confirm that their emergency contact trees and evacuation guidance are current. Travel managers should follow official advisories rather than social media claims, and brief travellers on border-area restrictions. Shipping and aviation planners in the region should watch for changes in notices to mariners and airmen. Keep the response proportionate: review plans, but do not relocate anyone unless the authorities change their guidance.

Dutch Chief of Defence Warns Europe Faces 'Window of Vulnerability' Until 2030

The Guardian's Europe live blog reports that the Dutch chief of defence has warned Europe faces a 'window of vulnerability until 2030'. This is a single report of a public warning, and the summary gives no detail on the assumptions behind the date. Even so, a serving chief of defence putting a year on the exposure is a planning signal. Companies in defence supply chains, critical infrastructure and logistics should expect more requests about readiness, stockpiles and security vetting. Boards can use 2030 as a planning horizon for hybrid threats such as sabotage and cyber intrusion, although the headline does not list them. Review continuity plans for dependence on a single supplier or site, check how staff with access to sensitive systems are screened, and run exercises that assume sabotage or prolonged loss of energy and communications. Record who decides in a crisis and how you reach personnel if normal channels fail. Take the results to the board and refresh the risk assessment yearly.

Our advisory and intelligence work turns strategic warnings like this into concrete site and supplier risk reviews.

Russian FSB-Linked Hackers Scale Up Phishing Against Ukraine Supporters

The Record reports that Russian FSB-linked hackers are scaling up phishing attacks against people who support Ukraine. The headline gives no detail on volumes or victims, so the scale is unverified beyond the outlet's own account. The target group is broad: NGOs, aid organisations, logistics firms, consultants and officials who work with Ukraine may all appear on such lists, including in Europe. Phishing from state-linked actors tends to be patient and tailored, using believable meeting invitations or documents rather than mass spam. Organisations with a Ukraine connection should brief staff on targeted lures, enforce phishing-resistant multi-factor authentication for email and cloud accounts, and make sure suspicious messages can be reported in one click. Executives and assistants deserve particular attention, because their inboxes carry meeting details and travel plans. Treat any unexpected request from a known contact to switch platform or open a shared document as suspect until confirmed through another channel. Review mailbox forwarding rules and recent sign-in logs for unusual activity.

Our cyber security team hardens email and identity controls for organisations targeted by state-linked phishing.

Iranian Regime Stepping Up Pressure on Iranians Abroad, Including in the Netherlands

NL Times reports that the Iranian regime is stepping up pressure on Iranians abroad, including in the Netherlands. The headline does not specify the methods or the source of the assessment, so the detail is thin. Pressure on diaspora communities can include intimidation, surveillance and threats against relatives at home, and it affects employers as well as individuals. Companies with Iranian-born staff, or that host dissidents, journalists and researchers, carry a duty of care they may not have mapped. Managers should offer a confidential channel for staff to report approaches, threats or unusual contact, and avoid asking colleagues to explain themselves. Security teams should review whether public staff profiles, event announcements and travel schedules expose people unnecessarily. Event organisers should check venue access control and attendee lists before gatherings connected to the Iranian community. Anyone facing a credible threat should be pointed to the police, and the report should be logged internally with dates and details so a pattern becomes visible.

Our personal protection specialists assess exposure and daily routines for individuals who face targeting from a foreign state.

Two More Suspects Arrested in Overasselt Fatal Shooting Investigation

Police have arrested two more suspects in the investigation into the fatal shooting in Overasselt, according to both NL Times and NOS. NOS refers to violence in Overasselt, while NL Times specifies a fatal shooting. Neither headline gives details on motive, the victim or the total number of people held, so those points remain unclear. Fatal shootings in smaller communities generate rapid rumour, and speculation on social media can misidentify people and complicate the police inquiry. Employers, venues and event organisers in the area should expect questions from staff and visitors, and should direct them to official police communications. Check on the welfare of employees with a personal link to the case and offer support where needed. Review your own incident-response and communications plan: who speaks, who is informed first and how quickly. Avoid sharing unverified claims internally or externally, and pass any relevant information you hold to the police rather than posting it publicly.

Dutch Cabinet Ready to Cut Schiphol Flights by 4 Per Cent, Overnight Flights by 10

NL Times reports that the Dutch cabinet is ready to cut Schiphol flights by 4 per cent and overnight flights by 10 per cent. The wording 'ready to' points to an intended decision rather than a finished one, and the timing, legal route and airline response are not in the headline. Even a modest reduction changes the operating picture for organisations that depend on Schiphol: fewer slots can mean tighter capacity, less flexibility on last-minute bookings and fewer late-evening or overnight options for executives and freight. Corporate travel managers should identify which routes their travellers use at night and prepare alternatives via other hubs or rail. Logistics planners handling time-critical or high-value cargo should discuss contingency options with their forwarders. Security teams should expect shifts in passenger flows and staffing patterns at the airport and reassess arrival and departure routines for protected travellers. Track the cabinet's formal announcement before altering policy, and record which of your itineraries depend on the affected time windows.