Thursday, 15 October 2026

Ukraine regains Starlink military access as Musk points to Washington over drone slowdown

Yesterday's brief reported Starlink limits at the front line. Today Ukraine says access has returned, but accounts differ. NOS reports full access to the military branch of Starlink. The Record says Starshield is only partially restored after restrictions disrupted drone missions. Elon Musk, meanwhile, says the US government may be behind the slowdown of Ukrainian drone speeds. If so, a commercial dispute becomes a political one. Kyiv had earlier said SpaceX was limiting its access. Who imposed the limits, and on what basis, remains unverified. Treat both versions as provisional until Kyiv or SpaceX publishes specifics. The practical issue is dependency: one privately controlled satellite service can shape operations, and its terms can change within days. Organisations using satellite links for remote sites, vessels or crisis communications should list which services rest on a single provider, check the conditions under which access can be restricted, and test a fallback on a different technical path.

Russia says Ukraine has resumed strikes on its oil refineries

Russia says Ukraine has resumed attacks on its oil refineries, and NOS reports that Moscow has announced an attack on one refinery. The claim comes from the Russian side, and independent damage assessments are not part of today's coverage. Euronews reports that Russia and Ukraine blamed each other over Trump's 'energy ceasefire' after a deadly Kyiv strike. That suggests the proposed pause has not held. NOS also asks whether Russia can still export diesel after years of refinery attacks. For businesses the exposure is indirect but real. Refinery strikes can tighten diesel and product markets, and retaliation against Ukrainian power infrastructure raises the risk of further civilian outages. Companies with fuel-intensive logistics in Europe should check fuel supply clauses and price-adjustment terms, review contingency stocks at key sites, and brief management on how targeting of energy infrastructure can extend to sabotage and cyber activity against European operators.

Ransomware gangs reportedly add physical threats and family stalking to extortion

Dark Reading reports that ransomware gangs are adding physical threats and the stalking of victims' families to their extortion playbook, and asks how far the shift has gone. The scale is not yet established. The direction matters anyway. Pressure on a family at home hits a decision-maker harder than a locked file server, and most incident response plans cover systems, not people. Home addresses, children's schools and travel patterns are often easier to find than corporate credentials. Security directors should add a personal-safety branch to the ransomware plan: who is told, who contacts the family, and when the police are involved. Reduce the public footprint of senior staff and their relatives, brief executives on what to do if they are approached or followed, and agree in advance how a threat against a person is escalated outside normal IT channels.

Our executive protection work covers the personal safety of senior staff and their families, which is where this shift in extortion tactics applies pressure.

Two ships on fire after possible drone attacks off the Romanian coast

NOS reports that two ships are on fire after possible drone attacks off the Romanian coast. It is an early account from a single source, and the headline names neither the attacker nor the vessels. Romania is an EU and NATO member. A confirmed attack on shipping near its waters would bring the Black Sea risk closer to European operators. Ships, ports and cargo owners in the area face crew-safety, insurance and delay exposure, even if the cause turns out to be different. Operators with vessels or cargo in the western Black Sea should confirm crew safety and positions, check war-risk cover terms and notification duties with their insurers, and agree alternative routing and port calls now. Shore-side teams should know which updates to expect and who decides on diversions.

Our advisory and intelligence team tracks maritime and Black Sea risk so operators can adjust routing and exposure early.

EU leaders open summit with China, Ukraine and the budget on the agenda

EU leaders meet for a summit that DW says will focus on China, Ukraine and the bloc's budget. Euronews opens its coverage with an interview with Kallas as the meeting begins. The agenda matters beyond Brussels. China language in the conclusions can feed into export controls, investment screening and supply-chain due diligence. Ukraine decisions affect sanctions and defence support, and the budget debate shapes how much money flows to security and resilience programmes. No outcomes are known yet, and summit texts often change late. Treat leaked drafts with caution until the Council publishes its conclusions. Companies with exposure to China, sanctioned jurisdictions or defence supply chains should read the conclusions as they appear, check which suppliers and customers could fall under new measures, and agree in advance who owns the compliance and security response.

Albert Heijn supplies stores again, but home delivery stays offline

Since yesterday, Albert Heijn has fully resumed supplying its stores, but home delivery is still offline. NOS reports the store resupply as complete, and NL Times adds that the website is still down. Yesterday's brief covered the cyber problems and a phishing warning, so recovery is moving from containment to restoration, with customer-facing systems last in line. Retail is exposed to this kind of disruption because shelves, logistics and online orders depend on the same chain of systems. The phishing warning also remains relevant, since criminals often exploit a known outage with fake delivery or refund messages. Retail and logistics firms should test whether stores can trade and be resupplied if central systems fail, prepare customer notices and verified contact channels before an incident, and train staff to treat unexpected 'order problem' messages as suspect during recovery. Suppliers should confirm how orders reach them while systems are limited.

Our cyber security service helps retail and logistics firms plan, test and recover the systems that stores and supply chains depend on.

Police find 50 heavy explosives in basement storage unit under Utrecht flat

Utrecht police have found 50 heavy explosives in a basement storage unit beneath a residential flat, NOS reports. The headline gives no owner, motive or link to a wider case, and none should be assumed. What it does show is how a shared residential space can hold dangerous material without neighbours knowing. Basement storage units are rarely inspected and often have shared or weak access control. For property managers, housing associations and landlords, the practical question is who has access to which units and how misuse would come to light. Landlords and managers should review access control and key registers for storage areas, set a clear route for residents to report suspicious activity or smells, and agree with local police how a find of this kind is handled and communicated. Corporate teams with offices or staff housing in mixed-use buildings should check that evacuation and communication plans cover an incident next door.