Saturday, 31 October 2026

Revolutionary Guard reports three tankers on fire in Strait of Hormuz as talks continue

Iran's Revolutionary Guard says three tankers are on fire in the Strait of Hormuz while talks continue. The claim comes from a party to the confrontation and has not been independently confirmed, so the cause, the vessels and the damage remain open questions. The strait carries a large share of the world's seaborne oil, and real disruption moves freight rates, war-risk cover and fuel prices within hours. Separately, Iranian lawmakers are calling for withdrawal from the NPT, which adds political pressure to the negotiations. Companies with cargo, crew or contracts exposed to the Gulf should confirm vessel positions with their operators now and check whether war-risk clauses have been triggered. Energy-intensive businesses in Europe should review fuel and supply exposure for the coming week. Crew welfare plans and escalation contacts need to be current before markets open on Monday.

Our advisory team can brief your crisis cell on Gulf exposure and agree escalation triggers before markets open.

US approves sale of 500 Patriot missiles to Ukraine

Washington has approved the sale of 500 Patriot missiles to Ukraine. President Zelenskyy thanked the US for the deal but warned that delivery could take years. The gap between approval and arrival is the real story. Ukraine's air defence needs interceptors now, so the deal strengthens Kyiv's position politically before it does militarily. For Europe, the sale shows continued US involvement in Ukraine's defence and may increase pressure on European producers and stockpiles to cover the interim. For corporate security teams, the relevant risk is continued strikes and the hybrid activity that can follow Western arms announcements: cyber probing, sabotage and disinformation aimed at logistics and defence-linked firms. Companies in the defence supply chain should review access control at their sites, vet visitors and contractors, and brief staff on approaches by unfamiliar contacts. Everyone else should test their incident reporting lines this week.

North Korea is prime suspect in Binance hack as exchange tries to recover $6.3bn

What changed since yesterday: attention has moved from the scale of the Binance theft to its likely author. BBC reporting names North Korea's elite hackers as the prime suspect, and Binance says it is trying to recover the $6.3 billion. This is a suspicion, not a settled attribution. The Guardian separately explains how crypto theft funds North Korea's nuclear programme, which makes this a sanctions and security matter as well as a financial crime. Firms that hold, process or bank crypto assets face compliance exposure if stolen funds pass through their systems. Laundering routes often run through exchanges, mixers and cross-chain bridges, so transaction monitoring should pick up newly published flagged addresses quickly. Expect the same operators to approach staff with fake recruiter and investor offers. Review key management and signing approvals, require independent verification for large transfers, and brief finance and engineering teams on social engineering through professional networks.

Our cyber team reviews signing approvals and key management against the social-engineering methods used in state-linked thefts.

US cancels G20 family photo after European diplomats refuse to appear with Russia

European and other Western diplomats have refused to be photographed alongside Lavrov at the G20 gathering in the US, and the US has cancelled the family photo. Australia and the UK are among those who declined, according to the Guardian. BBC reports protests over the presence of the Russian minister. The cancellation avoids a visible confrontation but shows how much of the G20 now turns on Russian participation. Expect more friction over communiqués, side events and seating. The practical effect for organisations is limited but real. Delegations, diplomatic staff and company executives at multilateral events will meet protest, and such events draw demonstrators and targeted online hostility. Organisers and travelling executives should review venue access control, protest routes and movement plans, and keep principals away from predictable choke points. Event teams should also brief attendees on how to report threats and what to do if a protest blocks an exit route.

Our diplomatic services team supports delegations with venue security and movement planning at contested multilateral events.

Police deployed as Poland's top court stand-off reaches the building itself

A stand-off over control of Poland's top court has reached the building itself. BBC reports police were deployed, DW reports protesters clashing with police over a sacked court chief, and NOS says the president pushed his way into the Constitutional Court. Control of the institution is now disputed, which makes the standing of its rulings uncertain. That matters to business because the court rules on the constitutionality of laws that touch regulation, investment and contracts, and doubt over its legitimacy can delay disputes and unsettle investors. It also raises the chance of repeated demonstrations around the court. Firms with staff or offices nearby should expect disruption, avoid scheduling gatherings in the area and brief employees on how to leave a demonstration safely. Legal and compliance teams should track any contested ruling and note which counterparties or licences depend on it.

Online calls for Gen Z unrest turn into riot police and arrests in Zoetermeer

What changed since yesterday: online calls for weekend disorder have produced the first street incidents. Riot police were called in at Zoetermeer's centre, where ten people were arrested, and shopkeepers in The Hague are boarding up their stores after online calls for a Gen Z protest. DW separately expects large Gen Z protests in German cities, which may point to a coordinated online trend rather than isolated local events. The risk to organisations is opportunistic damage and crowd disorder in retail and hospitality zones, with little warning from social media. Retailers, venues and property managers in city centres should confirm tonight's staffing, secure glazing and stock, and agree a clear rule on when to close. Keep staff out of confrontations and hold a direct line to local police. Check after-hours alarm response, since shuttered premises often have reduced visibility from the street.

Our guarding teams can reinforce shopfronts and venues in city centres during periods of announced unrest.

Dutch supermarket chains including Albert Heijn and Aldi prepare for long power outages

Dutch supermarket chains including Albert Heijn and Aldi are preparing for long power outages, NL Times reports. Retailers planning for an extended loss of grid power suggests outage scenarios have moved from theory into routine continuity planning. Food retail is a useful benchmark because it depends on refrigeration, payment systems, door control and alarms, all of which fail together when power goes. For other organisations the question is how long a building can function and stay secure without mains power. Check what the backup supply actually covers, how long it lasts and who refuels it. Test whether access control, CCTV and intruder alarms keep working, and whether doors fail open or closed. Confirm how staff communicate when networks are down, and plan for guard presence where electronic protection would lapse. Exercise the plan with a realistic outage rather than a paper review.

We run resilience exercises that test how your site and teams cope with extended power loss.

Privacy watchdog warns of AI deciding which debt collectors contact first

The privacy watchdog has warned about the use of AI to decide whom debt collectors contact first, NL Times reports. The detail matters because automated ranking of people in debt can shape how often and how hard someone is approached, a decision with real personal consequences. Under European data protection rules, automated decision-making that significantly affects individuals draws scrutiny, and the EU AI Act adds its own duties for higher-risk systems. Any organisation that scores, prioritises or contacts customers with algorithmic tools should expect the same questions. Map where automated ranking is used, record who can override it, and check that the lawful basis and transparency notices match actual practice. Ask vendors for documentation of how the model reaches its output. Involve the data protection officer before deployment, not after a complaint, and keep logs that let a human reviewer explain any individual outcome.