Wednesday, 28 October 2026

Qatar urges Iran to reopen Hormuz as fuel costs bite

Qatar has urged Iran to show goodwill by ending threats to the region and reopening the Strait of Hormuz, Euronews reports. The appeal frames the strait as still restricted, and Qatar is a Gulf state with a direct stake in the outcome. Separately, Al Jazeera reports that an oil spill in Hormuz has forced the closure of beaches in the UAE. Fuel costs are already visible far from the Gulf: BBC and NOS report a luxury cruise ship stranded in Cambodia because of soaring fuel prices. For European organisations the exposure is indirect but real: freight and travel budgets, insurance conditions on Gulf routes, and the safety of staff and clients in the region. Check which shipments and itineraries depend on Gulf transit, and set trigger points for rerouting before prices or access change. Review duty-of-care arrangements for travellers and expatriates in the UAE and neighbouring states, and confirm that evacuation and communication plans work if flights or ports are disrupted at short notice.

Our advisory intelligence team maps how Gulf shipping and travel disruption reaches your routes, suppliers and people.

Egypt's parliament approves military support for Saudi Arabia amid Houthi attacks

Egypt's parliament has approved military support for Saudi Arabia amid Houthi attacks, Euronews reports. The report does not specify what form the support takes, when it starts or where it would operate, so the scale is unknown. The vote still signals that Cairo is prepared to be openly tied to the defence of the kingdom, which widens the number of governments the Houthis may treat as adversaries. It also lands while Qatar is appealing to Iran over Hormuz, so Red Sea and Gulf risks are moving at the same time. For companies with staff, assets or supply lines in Saudi Arabia, Egypt or the Red Sea corridor, the practical question is whether Houthi targeting will broaden. Update country risk ratings and confirm that travel approvals carry current threat advice. Test shelter and evacuation procedures at Saudi sites, and agree in advance who can suspend travel and on which indicators. Review maritime insurance and routing assumptions with your logistics partners.

External Teams chats anchor 15-minute malware delivery

Dark Reading describes an access method in which attackers flood a target with email, then reach the victim through external Microsoft Teams chats and deliver malware within about fifteen minutes. The route is described as repeatable, which makes it attractive to criminals: it relies on a person accepting help from a seemingly legitimate contact rather than on a software flaw. Such lures usually pose as IT support. The email flood creates the pressure, and the chat offers the apparent fix. Organisations whose Teams tenant accepts messages from outside domains may be exposed through configuration alone. Restrict external Teams communication or allow-list trusted domains, and alert on first-contact chats from unknown tenants. Brief the service desk and staff that genuine support does not request remote access after an unsolicited chat. Agree a call-back procedure to verify any helper, and make sure staff know to report a mailbox flood immediately instead of waiting it out.

Our cyber security team reviews collaboration-tool settings and trains staff to recognise help-desk impersonation.

Norway and Finland leaders hold rare call with Putin

The leaders of Norway and Finland held a rare phone call with Vladimir Putin, according to BBC, Al Jazeera and Euronews. The headlines give no detail on the agenda or any outcome, so the content of the call remains unknown. Two Nordic states that border Russia opening a direct channel with Moscow is notable in itself, and it comes while a ceasefire in Ukraine's Kherson region is being extended. For organisations with Nordic operations, the immediate effect is uncertainty rather than change: border, energy and cyber risk assessments should not be lowered on the strength of one call. Watch for official readouts from Oslo, Helsinki and the Kremlin, and compare them for differences in tone. Review the exposure of Finnish and Norwegian sites to hybrid pressure such as cyber intrusions, GPS interference and sabotage, and keep incident escalation routes current. Treat any easing of rhetoric as unconfirmed until it shows in behaviour.

Serbian police shoot dead assailant at Israeli embassy in Belgrade

Serbian police shot dead an assailant at the Israeli embassy in Belgrade, DW reports. NOS adds that the person killed was a minor boy. The headlines do not state a motive or whether anyone else was hurt, so those points remain open. An attack on an embassy in a European capital matters beyond Serbia: it raises the baseline for Israeli and Jewish institutions across the continent. Organisations that host or neighbour diplomatic missions, or run events linked to Israel, should review access control, vehicle standoff and the response time of their guards. Confirm that staff know lockdown and evacuation steps, and agree how information from police will reach your site. Avoid speculation about motive until Serbian authorities publish their findings, and brief spokespeople accordingly. Where a site draws protest activity, check that guards and local police share one contact point and one escalation route.

Our embassy and diplomatic services team advises on perimeter, access control and guard response for missions and their neighbours.

Zelensky in The Hague to meet Prime Minister Jetten and the King

President Zelensky is in The Hague today and will meet Prime Minister Jetten and the King, NOS reports. NL Times adds that the Dutch government is pledging further support. A visiting head of state at war draws protest, hostile intelligence interest and disruption risk to a city centre already busy with institutions. For companies near the government quarter, expect road closures, security cordons and a heavier police presence for the day. Hybrid actors often use such visits for disinformation and for cyber or drone nuisance activity, although none has been reported. Brief staff on expected disruption, adjust deliveries and visitor schedules, and keep communication channels ready for short-notice changes. Event organisers and hotels in the area should check guest screening and plan for temporary access limits. Executives with a public profile on Ukraine support should review their own routines and social media exposure this week.

Our personal and executive protection team adapts routes and routines for principals exposed during high-profile visits.

World War II explosives found at Eindhoven Airport

Unexploded ordnance from the Second World War has been found at Eindhoven Airport, according to NOS. The headline gives no detail on the type, quantity or effect on flights, so the operational impact is unclear. Such finds are common in the Netherlands and are handled by the Defence explosive disposal service under fixed procedures, usually with cordons and evacuation zones. Even so, an airport is a dense site: delays, cancelled transfers and blocked access roads can hit travellers and cargo within hours. Companies with staff flying from Eindhoven or with premises near the airport should check airport and local authority notices before travelling. Review business continuity plans for a short-notice evacuation zone, including who decides, how staff are alerted and where they gather. Construction and excavation contractors should confirm that ordnance risk surveys are complete before ground works start.

Dozens of servers seized in Limburg over child abuse material

Dutch authorities have seized dozens of servers in Limburg to stop the distribution of child sexual abuse material, NOS reports. The headline gives no detail on suspects or hosting companies. The action shows that enforcement targets infrastructure as well as individual offenders, which puts hosting providers and data centres in scope when abusive material sits on their hardware. Hosting and cloud companies should check that abuse reporting channels work, that responses to law-enforcement requests are fast and documented, and that customer due diligence covers resellers. Legal teams should know in advance how a seizure order affects shared tenants, backups and the data of unrelated customers. Businesses that rent server space should confirm where their data sits and ask what continuity arrangements exist if a neighbouring tenant draws a police action.