Friday, 23 October 2026

Israel prepares full closure of West Bank after shooting

Netanyahu says Israel is preparing a full closure of the West Bank after an attack in Palestinian territory. The BBC reports that five Israelis were wounded and two suspected Palestinian attackers were killed in a shooting. Al Jazeera describes a gun battle in which the Israeli military killed two people. Scope and duration of the closure have not been published. For organisations, the exposure is practical. Staff, contractors and visitors in Israel and the West Bank may face sudden checkpoint delays, route changes and unannounced restrictions. Tension often rises in the days after a closure order, which affects event planning and site security for regional operations. Security directors should confirm where travelling personnel are today, refresh movement plans with alternative routes, and agree trigger points for suspending non-essential travel. Local partners should be asked for current checkpoint information before every movement. Test duty-of-care and emergency contact chains now, while conditions are still calm enough to fix gaps.

Mission Support's advisory and intelligence team turns regional incident reporting into movement guidance for travelling staff.

Oil spill hits UAE beaches as tanker attacks multiply near Hormuz

Update on yesterday's Hormuz coverage: the threat has moved from seafarers' fears to physical damage ashore. Euronews reports that tanker attacks near Hormuz are multiplying and that an oil spill has reached beaches in the UAE. The report names no responsible party, and a second outlet has not yet confirmed the figures on attacks or the size of the spill. Even so, the pattern matters for shipping lines, energy buyers and coastal operators in the Gulf. Repeated attacks raise the risk of delays, rerouting and contract disputes. Sites on the Emirati coast may face clean-up work and restricted access. Companies with cargo, crew or facilities in the Gulf should check which vessels and shipments transit Hormuz, review crew welfare and evacuation arrangements, and ask legal and insurance teams to confirm force majeure and war-risk clauses. Keep a daily maritime threat briefing running for as long as the attack tempo stays high.

Microsoft blames ConnectWise supply chain attacks on Chinese state hacker using AI agents

Microsoft attributes the ConnectWise supply chain attacks to Storm-0940. The Record describes the actor as a Chinese state hacker using AI agents called ARTEX, and Dark Reading carries the same attribution. The headlines give no victim list or technical detail, so the scale is unclear. The structural risk is clear enough. A supply chain attack reaches customers through a trusted supplier, which bypasses controls aimed at outsiders. A state-linked actor using automated agents also points to faster and broader reconnaissance than manual intrusion allows. Organisations that depend on managed service providers should ask each provider in writing whether ConnectWise tooling is in use and what logging and access controls surround it. Review remote management accounts, rotate credentials wherever exposure is possible, and look for unusual logins or software deployments originating from provider accounts. Confirm notification duties in contracts, and prepare an incident response route that does not rely on the provider's own tools.

Mission Support's cyber security team reviews supplier access and remote management exposure for organisations that rely on service providers.

Austria expels four Russians over espionage

Austria is expelling four Russians on suspicion of spying, NOS reports. The headline gives no names, roles or details of the alleged activity, so the scope of the case is not yet public. Expulsions of this kind show that European counterintelligence services keep acting against Russian intelligence activity on their territory. They often prompt retaliation, which can affect diplomatic staff and companies on both sides. For corporate security teams the exposure reaches beyond diplomats. Intelligence officers pursue business travellers, conference delegates, hotel guests and executives with access to policy or technology. Organisations with Austrian or wider European operations should review who attends sensitive meetings, brief travelling executives on approach and elicitation techniques, and treat unsolicited contacts at industry events with caution. Keep confidential discussions out of public venues where possible. Ask staff to report suspicious approaches internally, so that patterns become visible across sites and business units before they turn into a loss of information.

Storm Austen leaves thousands of homes without power in France and England

Storm Austen has left thousands of households in France and England without electricity, NOS reports. The headline gives no figures beyond "thousands" and no restoration times. A power cut is a security problem as well as a continuity problem. Alarms, access control, CCTV and gates often depend on battery backup that lasts only hours, and dark or unattended premises become easier targets. Staff may also be unable to reach sites, which slows any response. Organisations with sites in the affected regions should check now whether backup power for security systems is working and how long it will last. Confirm that alarm receiving arrangements will flag a loss of mains supply, and agree who attends if a site falls dark overnight. Review manual procedures for doors, barriers and visitor control. Make sure the same checks are done at Dutch sites before the next weather front, since storms of this kind can cross borders quickly.

Albert Heijn restarts grocery deliveries nearly two weeks after cyberattack

Albert Heijn customers can order home delivery again, NOS and NL Times report, nearly two weeks after a cyberattack. The headlines give no detail on the method or on what data, if any, was affected. The length of the outage is the lesson. A customer-facing service at one of the country's largest retailers was unavailable for almost two weeks, which shows how long recovery can take even for a well-resourced company. Organisations with online ordering or delivery channels should map which systems each channel depends on, and agree in advance what the manual or reduced fallback looks like. Rehearse the executive decisions: when to take a service offline, who speaks to customers, and who approves restoration. Verify restored systems before reopening them to customers. Expect opportunistic phishing that exploits customer confusion during and after an outage, and brief customer service teams on how to spot it and where to escalate.

Dutch intelligence reportedly watched Kushner's hacked iPhone, according to book

According to a book, the Dutch military intelligence service MIVD watched on a hacked iPhone as Jared Kushner, Donald Trump's son-in-law, received many millions. NOS and NL Times both carry the claim. The headlines offer no confirmation from the service or the Dutch government, so the account should be treated as an allegation. The story still matters for companies. It shows that the phone of a senior business figure can be a primary intelligence target, and that a compromised handset exposes finances, contacts and plans in one place. Executives, board members and deal teams should assume their devices attract state-level interest. Keep sensitive discussions and documents off personal phones, separate travel devices from daily ones, and apply the vendor's strongest lockdown settings to high-risk users. Have devices inspected after travel to high-risk locations or after any unexplained behaviour. Update operating systems promptly, and rehearse how a suspected device compromise is escalated and handled.

Mission Support's TSCM specialists inspect executive devices and meeting spaces for signs of surveillance and compromise.

Dutch embassy in Cairo closes after days of protests

The Dutch embassy in Cairo has closed after days of protests against the Netherlands, NL Times reports. The headline does not say what triggered the protests or when the embassy will reopen, and no second outlet has confirmed the closure. A closed mission reduces consular support for Dutch citizens at the moment tension is highest. It also signals that the host authorities or the embassy itself judged the risk significant enough to act. Dutch companies and employees in Egypt should treat this as a duty-of-care trigger. Confirm where staff and families are, and review travel advice from the Dutch foreign ministry. Avoid areas where protests have been taking place, and plan routes and timings with local security advisers. Keep a low profile in public and on social media, and prepare an alternative consular contact in case of an emergency. Decide in advance what conditions would lead to postponing travel or relocating staff.

Mission Support's embassy and diplomatic services team supports staff safety planning for organisations operating around closed or reduced missions.