Saturday, 10 October 2026

Trump announces deal for Russian diesel as Zelensky calls it a gift to Putin

President Trump has announced a deal to release Russian diesel to the US and world markets. DW reports it was agreed with Putin. Zelensky called it a gift to Putin, and BBC analysis ties the move to mounting pressure to curb fuel prices. NOS reports that Russia kept attacking residential buildings in Ukraine regardless, with 15 dead. The deal shows that domestic fuel costs now weigh on Washington's sanctions choices. That creates uncertainty for companies with any Russian exposure. Rules on what may be bought, from whom and through which intermediaries could shift quickly, and European governments may be pressed to follow or to object. For security and compliance teams the practical risk sits in the supply chain: sanctions screening, contract clauses and payment routes may need a fresh look. Review fuel and logistics contracts for origin and indexation terms, brief the board on possible supply swings, and keep sanctions counsel close until written guidance is published.

Iran's IRGC strikes tanker and threatens to target vessels beyond Hormuz

Euronews reports that Iran's Revolutionary Guards (IRGC) struck a tanker and threatened to target vessels beyond the Strait of Hormuz. The threat comes from a party to the conflict and no second outlet has confirmed it, so treat it as a claim until shipping authorities respond. If the IRGC widens its reach, exposure moves from the Gulf to the wider routes that carry European energy and goods. Even a limited extension tends to change war-risk cover terms, charter decisions and crew willingness to sail. Companies with cargo, charters or crews in the region should not wait for formal confirmation. Map which shipments transit the area, check what your insurers require once threat levels change, and agree rerouting triggers with forwarders in advance. Review crew safety and communication plans, and brief travelling staff in the Gulf region. Decide now who may authorise a diversion, so that a decision at night does not depend on one person.

Our advisory intelligence team tracks maritime threat signals and turns them into routing and crew-safety decisions for your operations.

Flydubai attacker's 'drift towards extremism' began in Australia, UAE says

The United Arab Emirates says the Flydubai attacker began a drift towards extremism and terrorism in Australia, according to BBC. Euronews reports that the co-pilot planned a suicide attack at Tel Aviv airport, inspired by 9/11. The detail that matters for employers is the attacker's position: an airline insider, with the access and trust that come with it. Radicalisation that develops abroad and out of sight of the employer is hard to catch through standard vetting at hiring. Aviation and other sectors with privileged access, such as ports, energy and data centres, should treat this as a case study in insider risk. Review what happens after onboarding: periodic re-screening where the law allows it, clear and safe routes for colleagues to report concerns, and a defined process for assessing them. Check that airside and restricted-area access follows role and need. Rehearse a response to a threat that comes from within the workforce, not from the perimeter.

Japan confirms arrest of Russian Qilin operative, extradition to Germany

Japan has confirmed the arrest of a Russian Qilin ransomware operative, with extradition to Germany, The Record reports. Only one outlet in our set carries the story, and details of the charges are not yet public. Arrests of this kind rarely end a ransomware group, which usually continues with other members. They do, however, create two short-term effects for European organisations. Court filings in Germany may reveal victims, methods and infrastructure, and the group may respond with new leak publications or attempts to show it is still active. Companies that have dealt with Qilin, or that use the same remote-access and backup tooling its affiliates tend to target, should use the news as a prompt to test their defences. Check that backups are offline and recently restored in a test, confirm that remote-access accounts use strong authentication, and review who is authorised to approve a ransom decision. Make sure legal counsel and your national cyber authority contact are in your incident plan.

Our cyber security team tests ransomware readiness, from backup recovery to the decision chain during an incident.

US unveils sanctions on ICC; Dutch PM Jetten calls them 'highly regrettable'

The United States has unveiled sanctions on the International Criminal Court, which the court condemns as an assault on the rule of law, BBC reports. NL Times adds that Dutch Prime Minister Jetten called the measures highly regrettable and seeks dialogue. The court sits in The Hague, so the effects reach Dutch and European service providers, banks, law firms and suppliers that work with it. Sanctions of this type can restrict US-linked payments, software and banking relations for designated persons, and they can pull third parties into compliance questions. The headlines do not set out who is designated, so the first step is to read the official notice rather than rely on summaries. Organisations with ICC contacts or contracts should map direct and indirect links, ask banks and cloud providers how they will treat affected accounts, and take legal advice on any conflict between US measures and European rules. Brief staff who travel to the US on possible entry or screening questions.

Arson near railway bridge halts all trains between Rotterdam and Delft

Arson near the Delfshaven railway bridge has halted all trains between Rotterdam and Delft, according to NOS and NL Times. Neither report, as far as the headlines show, names a motive or a suspect, so it is too early to link the fire to sabotage or to any wider campaign. The practical effect is immediate: commuters, visitors and freight in the Rotterdam region face disruption on a Saturday, and alternative routes will be crowded. The case also shows how exposed rail assets are to a single fire, and how a local act can stop a whole corridor. Companies with sites, events or staff movements around Rotterdam and Delft should check live travel information before relying on trains, and arrange coaches or car alternatives for scheduled groups. Operators with property next to rail lines should review fencing, lighting and camera coverage, and agree how to report suspicious activity to police and the rail operator. Update staff only through confirmed channels until police communicate a cause.

Our alarm and mobile response service sends officers to verify alarms and secure sites along exposed infrastructure.

KPN outage leaves many university hospitals hard to reach

NOS reports a KPN outage that left many Dutch university hospitals hard to reach. The headline gives no cause, duration or confirmation of patient impact, and no second outlet in our set carries it. Whatever the origin, the event shows a familiar dependency: critical services that rely on one telecom provider for their public phone lines can lose contact with patients, partners and emergency services at once. Hospitals are the visible case, but the same weakness exists in care homes, municipalities, security control rooms and any business whose customers or alarm partners reach it by one network. Organisations should check their own exposure today. Find out which numbers, alarm lines and remote connections depend on a single provider, and whether a backup route through a different network is in place and tested. Make sure staff know an alternative way to contact each other and the emergency services, and keep a printed list of those numbers. Do not assume a cyber attack until the provider says so.

Our training and resilience programmes rehearse how your teams keep working when a key communications provider fails.

Youths in Heerenveen tie gas bottles to fireworks

NOS reports a group of young people causing nuisance in Heerenveen, who are said to tie gas bottles to fireworks. The report is a single local source and the headline gives no information on injuries, damage or arrests. The behaviour matters because it is far more dangerous than ordinary fireworks nuisance: a gas bottle turns a loud bang into a possible explosion with fragments, and the risk reaches bystanders, emergency staff and nearby buildings. The New Year period is some weeks away, so this is an early signal of the kind of misuse that municipalities and police usually see around that time. Property managers, retailers, schools and event organisers in the area should look at their exposure now. Secure gas bottles and other storage so they cannot be taken, check camera coverage of car parks and public frontages, and agree a clear route to the police and municipal enforcement officers for reporting. Staff who work evenings should be told not to approach groups handling fireworks or gas.