Sunday, 11 October 2026

Riyadh airport attack kills 12 as Houthis warn passengers off Saudi airports

An attack on Riyadh airport killed 12 people and wounded more than 300, Euronews reports, calling it another alleged Houthi strike. Al Jazeera says fighting in Yemen is expanding and the Yemeni capital is under attack, while DW reports that the Houthis have warned passengers not to use Saudi airports. NOS notes broad condemnation of a 'dangerous escalation'. A public warning against civilian airports makes air travel in the region a declared risk, not a background one. Organisations with staff or visitors moving through Saudi Arabia should list every itinerary touching Saudi airports in the next two weeks. Check whether routings via other Gulf hubs are workable, confirm emergency contacts and ground transport at the destination, and agree in advance who can order a postponement. Follow airline and insurer notices closely, because suspensions and war-risk exclusions can change within hours. Brief travellers on what to do if an airport is evacuated.

Our advisory and intelligence team turns regional incident reporting into travel go/no-go advice for your staff and executives.

Trump calls for a new Ukrainian president and an election after Zelensky condemns diesel deal

Since yesterday's coverage of the Russian diesel deal, the dispute has turned personal: Trump now says it is 'time for Ukraine to get new president' and calls for an election, after Zelensky condemned the deal. Al Jazeera also carries the election call, and The Guardian reports that Streeting says Britain stands behind Zelenskyy. For organisations the risk is not a single decision but a widening gap between Washington and European capitals over Russia policy. That gap affects sanctions enforcement, energy supply assumptions and the stability of Ukrainian counterparties. Review exposure to Russian-origin fuel and to Ukrainian partners or contractors. Confirm that sanctions screening can absorb a change in US or EU measures at short notice, and set trigger points for revisiting contracts and travel to the region. Assign one owner to track official statements from Washington, Kyiv and Brussels. Keep communication with affected staff factual and short.

Yandex says Vladimir data centre shut down after drone attack

Yandex says a data centre in Vladimir was shut down after a drone attack, according to Al Jazeera. The claim comes from the company itself, and no independent confirmation appears in the reports available today. If accurate, it shows that digital infrastructure inside Russia is now a physical target, with outages that can spread to services far from the site. For European organisations the direct exposure is limited but real: some run Russian-linked platforms, cloud services, payment routes or subsidiaries. Map which business processes depend on providers hosted in Russia or Belarus. Test what happens if those services go dark for several days, including data access and customer communication. Also review your own data-centre sites and colocation providers against drone and sabotage scenarios, covering perimeter detection, power redundancy and failover. Treat the Yandex statement as unverified until independent reporting supports it.

Our cyber security specialists test how your operations behave when a critical hosting provider fails.

Poland on alert over possible attack on prime minister and defence minister

Poland is on alert amid a possible attack on the prime minister and the defence minister, DW reports. The headline gives no detail on the source, nature or credibility of the threat, so treat it as an unverified warning until Polish authorities say more. Even so, an alert at that level usually brings tighter security around officials, government buildings and events where they appear. Organisations hosting or attending meetings with Polish government figures in the coming days should expect changed access rules, route closures and short-notice cancellations. Review the protection arrangements for any delegation or executive travelling to Poland, including advance work on venues, vehicle routes and local contacts. Keep a point of contact with the organisers and agree a fallback plan if a visit is postponed. Brief drivers and hosts on revised timings. Avoid sharing schedules for such visits on open channels.

Our executive protection teams plan routes, venues and fallback options for leaders visiting a country on security alert.

Woman injures three in third Polish school knife attack in a week

A woman injured three people in a knife attack at a Polish school, the third school knife attack in Poland in a week, BBC reports. The headline does not give a motive or link the incidents, and nothing in it suggests coordination. Repeated attacks in a short period can still prompt copycat risk and public anxiety, and schools, parents' groups and nearby businesses may change their routines. Organisations that run schools, childcare, training centres or events for young people in Poland should check access control at entrances, visitor registration and lockdown procedures. Make sure staff know how to raise an alarm, who calls the emergency services and where people shelter. Drills matter more than documents here: run a short walk-through this month and fix the gaps. Companies with Polish employees who have school-age children may also see more absences and questions from staff.

Our training and resilience programmes rehearse lockdown and alarm procedures with staff before an incident occurs.

Neighbourhood police officer allegedly sold names and addresses from police systems

A neighbourhood police officer allegedly sold names and addresses taken from police systems, NL Times reports. Buyers and scope were not given in the headline, so both are unknown. The case shows how an insider with legitimate access can turn a trusted database into a source of targeting data, which matters most for executives, high-profile families and people under threat. Organisations whose leaders have a public profile or a history of threats should ask what they can reasonably check. Ask your security adviser to review how exposed home addresses are in public and semi-public records, and whether sensitive individuals are flagged for additional protection. Tighten your own internal access, log reviews and alerts for unusual queries in customer and HR systems, since the same insider logic applies. Prepare a short procedure for notifying affected people if their data may have been exposed.

Our advisory team assesses how findable your leaders' home addresses and routines are, and closes the gaps.

Record tanker rates push up Dutch fuel prices

Record tanker rates are pushing up Dutch fuel prices, NL Times reports. The headline does not say what is driving the rates, but yesterday's brief covered an IRGC strike on a tanker and threats to vessels beyond Hormuz, and shipping costs tend to rise when maritime risk does. For Dutch organisations the effect arrives through transport, logistics and field operations: fleet fuel costs, freight and courier contracts, and diesel supply for sites that rely on generator backup. Review fuel clauses in logistics contracts, confirm backup generator fuel stocks and supplier delivery terms, and identify critical sites that would struggle if deliveries slipped. Prepare alternative suppliers and routes for time-sensitive shipments. Expect more fuel theft if prices stay high, so check lighting, fencing and monitoring around tanks and vehicle depots.

Defence ministry wants to reach young people on TikTok, but government rules forbid it

The Dutch defence ministry wants to reach young people on TikTok, but government rules forbid it, NL Times reports. The conflict shows a recurring tension: recruitment and public communication go where young audiences are, while security policy restricts the platform on official channels. The headline does not state the reasons for the ban, so avoid assuming them. For organisations, the practical question is how your own policy handles TikTok on corporate devices and accounts. Check whether staff in sensitive roles use the app on phones that hold work email or access corporate systems, and whether marketing teams have separate, managed devices for it. Decide who approves exceptions and document the reasons. If your organisation recruits young talent, consider other channels where you keep control of devices and data. Review the policy at least annually as official guidance changes.