Monday, 12 October 2026

Trump announces 'energy ceasefire', Ukraine says Russian strikes followed within hours

Donald Trump has announced an 'energy ceasefire' between Russia and Ukraine, but Ukraine says Russia launched strikes within hours of the announcement. Euronews reports that the Baltic states remain on alert, and Al Jazeera examines Trump's love-hate ties to Russian oil. Separately, Germany's Wadephul called the new EU sanctions an 'unprecedented' blow to Russia. For companies, the gap between announcement and behaviour is the signal. A ceasefire that exists only on paper leaves refineries, power grids and fuel logistics exposed, and it keeps sanctions and diesel import policy politically unstable. Expect continued volatility in fuel and energy contracts, and further pressure on energy infrastructure around the Baltic. Organisations with energy-intensive operations or Eastern European supply chains should treat the announcement as unverified until both governments confirm terms. Review fuel and backup-power contingencies, check whether suppliers depend on Russian-origin product, and brief site managers on the disruption scenarios that are plausible over the coming week.

Riyadh airport toll rises to 13 as Saudi Arabia vows 'serious response' to Houthis

Update since yesterday: the Riyadh airport death toll has risen to 13 from 12, Houthis claim further attacks, and a Saudi minister vows a 'serious response'. DW reports fears of a wider Middle East conflict, while Euronews says the UAE is calling for stronger Gulf defence as allies back Riyadh. The Houthis had already warned passengers off Saudi airports, so civil aviation is now an explicit target. Organisations with staff in or transiting through Saudi Arabia should expect further disruption, including closures, rerouting and sudden cancellations. A Saudi counter-strike could widen the conflict to other Gulf states and to shipping lanes. Establish today where travellers are and who can reach them. Agree alternative routings through other hubs, and brief travellers to keep documents and funds accessible. Set a clear decision point for withdrawing non-essential staff, and review insurance and evacuation arrangements with your provider before the next escalation rather than after it.

Our advisory and intelligence team tracks Gulf developments and turns them into travel and staffing decisions for your organisation.

Ukraine strikes third Yandex data centre, disrupting digital services across Russia

New since yesterday: The Record reports that Ukraine has struck a third Yandex data centre, after the Vladimir facility was reported shut down following a drone attack. According to the report, digital services across Russia are disrupted. This is a single-source report, and the extent of the damage has not been independently verified. Data centres are becoming a recurring target in this war, which turns physical infrastructure into a lever of economic and information pressure. The same logic applies to facilities in Europe, where hosting sites carry critical services and sometimes sit close to contested borders. Operators and tenants should review the physical protection of data halls, power feeds and cooling, and test failover between geographically separate sites. Customers of cloud and hosting providers should ask where their workloads and backups physically run, and whether one regional outage could take out both. Add drone and sabotage scenarios to the next continuity exercise.

Cyberattack hits French supermarkets, cooling systems set to 50 degrees

NOS reports a cyberattack on French supermarkets in which cooling systems were set to 50 degrees. The report does not name an attacker, and no other provided outlet has confirmed it yet. The detail matters: this is manipulation of operational technology, not data theft. Chilled and frozen stock can be ruined within hours, so the damage is physical, financial and reputational at once. Retailers, food producers and cold-chain logistics firms across Europe should treat refrigeration controllers as targets. Confirm that building-management and cooling systems are segmented from corporate IT and from vendor remote access. Add independent temperature sensors with their own alerting, so a changed setpoint is noticed even when the control system is compromised. Rehearse a manual override, and agree in advance who decides to discard stock and who informs authorities and customers. Check that maintenance suppliers use unique credentials and multi-factor authentication for every remote session.

Our cyber security team tests whether operational technology such as cooling controls is isolated from corporate networks and vendor access.

Poland detains man suspected of planning to assassinate PM Tusk

Update since yesterday's alert: BBC reports that Poland has detained a man suspected of planning to assassinate Prime Minister Donald Tusk. The report covers the detention and the suspicion only, and the headline gives no charges or motive. Separately, BBC reports Tusk saying the recent school stabbings were driven by online glorification of violence. The two stories share an environment of online radicalisation and a high threat level towards public figures in Poland. For companies with executives, delegations or events in Poland, one arrest reduces a specific risk but does not close the wider one, since plots against public figures often involve more than one person. Review travel and event plans for staff who will meet senior officials. Keep routes and schedules strictly need-to-know, check venue access control, and monitor open sources for threats aimed at participants. Agree escalation steps with local contacts, and confirm that your protection team receives liaison updates from the police.

Our executive protection team plans movements and venue security for principals visiting Poland during a period of heightened threat.

Possible hack behind outage at Albert Heijn, 'cybersecurity incident'

NL Times reports that a hack may be behind an outage at Albert Heijn, with the disruption described as a 'cybersecurity incident'. The cause is not confirmed, and that description should be read as preliminary. The timing is notable, because NOS reports a cyberattack on French supermarkets the same day. Nothing in the reporting links the two, and they should not be treated as one campaign without evidence. For a retailer, an outage reaches tills, stock systems, deliveries and online orders at once, and suppliers feel it within hours. Dutch retailers and their suppliers should check whether they depend on shared IT providers, and test whether stores can trade offline. Confirm your incident contacts, including the NCSC and legal counsel, and prepare customer and supplier messaging in advance. Treat supplier portals and remote-access accounts as the first places to look for a compromise, and keep logs from those systems intact for investigators.

Belgian football talent recruited 'soldiers' for Overasselt attack

NL Times reports that a Belgian football talent recruited 'soldiers' for the attack in Overasselt. The headline gives few details, so the nature of the attack and the roles of those involved should be treated as reported, not established. The recruitment element is the useful signal. It points to violence being delegated to helpers who are drawn in through personal and online networks, which makes them hard to anticipate. Organisations in the Netherlands and Belgium cannot rely on profiling to predict who might be used. Review how access is granted to contractors, temporary staff and delivery personnel at sensitive sites. Brief reception and security teams to recognise reconnaissance of premises, and report unusual interest in routines or staff to the police. Make sure employees know whom to call when someone offers money for small favours that involve the workplace, a colleague or an address.

Participants of Almere Pride Walk threatened and harassed, police investigating

NL Times reports that participants of the Almere Pride Walk were threatened and harassed, and that police are investigating. The headline does not say where the incidents happened or whether there are suspects. Public events with a visible identity can attract intimidation, and the exposure often sits on approach and dispersal routes rather than at the main gathering. Organisers, municipalities and corporate sponsors that take part should use this as a prompt to revisit event security. Plan stewarding at start, route and exit points, brief marshals on de-escalation and on capturing evidence, and agree a direct line to the police. Tell participants how and where to report incidents. Companies that send employee groups should confirm duty-of-care arrangements, including how people get home safely, and avoid publishing detailed routes and timings more widely than necessary. Document any incident immediately, so that the police can act on it.

Our manned guarding teams provide stewarding and route security for public events and employee groups.