Monday, 2 November 2026

Iran says it can reopen Hormuz in two days if US meets conditions

Yesterday's brief reported mediators keeping US-Iran talks alive. Today Iran adds conditions. According to Euronews, Iran says it can reopen the Strait of Hormuz in two days if Washington meets its conditions, and Al Jazeera reports Tehran saying talks could resume 'within a short period' if its demands are met. Both claims come from Iranian officials, and the headlines do not say what the conditions are or whether Washington has responded. Treat them as positioning, not a deal. The wording does confirm that Hormuz is being used as a bargaining chip, which ties energy and shipping risk to diplomatic signals rather than a fixed timetable. For organisations with exposure to Gulf shipping, energy supply or staff in the region, the practical step is to keep contingency plans active and not to plan on a reopening. Review insurance triggers and rerouting options, confirm duty-of-care contacts for travelling staff, and name one owner who tracks official statements from both capitals and decides when plans change.

Fake nuclear warnings issued after Ukrainian and Russian air alert apps hacked

BBC, The Guardian and DW report that air-alert and emergency apps in Ukraine and Russia were hacked. The Guardian describes a fake nuclear and chemical threat alert sent to Ukraine's emergency app, and the BBC says fake nuclear warnings were issued. DW notes that both countries report attacks on their apps. The headlines do not attribute the intrusions. What matters is the channel: these apps are trusted, push-based and reach many phones at once, so a hijacked message can trigger panic, movement of people or competing narratives before a correction lands. Similar alerting platforms exist across Europe, from public warning systems to corporate mass-notification tools. Organisations should check who can publish to their own emergency messaging, require multi-factor authentication and a second approver for broadcasts, and keep a pre-agreed channel for rapid retraction. Brief crisis teams and front-desk staff to verify any unexpected alert against a second source before acting. Rehearse the correction message so it can go out within minutes, not hours.

Al-Jawf becomes new hotspot in Yemen war as coalition intercepts missile

Al Jazeera reports that al-Jawf has become a new hotspot in Yemen's war between government forces and the Houthis, and that the Saudi-led coalition intercepted a missile as fighting raged there. Only Al Jazeera carries these reports in this set, so details on casualties and the origin of the missile remain unconfirmed. The risk lies in spillover. An interception shows that missile fire can still reach beyond the front line, and a new front can draw in more fighters and more cross-border fire. Companies with staff, contractors or cargo tied to Saudi Arabia, Yemen or adjacent shipping routes should review their exposure now. Confirm current travel guidance, check that evacuation and medical plans still work with present flight and road conditions, and make sure local contacts can report changes quickly. Track whether further interceptions are reported, since a pattern would change the exposure assessment for regional operations and justify tighter movement rules for staff on the ground.

Our advisory and intelligence team turns regional conflict reporting into clear exposure assessments for travelling and deployed staff.

Second wave of suspected cyberattacks hits supermarket freezers across Europe

A second wave of suspected cyberattacks has hit supermarket freezers across Europe, according to The Guardian and The Record. BBC reports six countries affected, and Al Jazeera cites overheating fridges in Sweden and Ireland. The Guardian adds Irish and Estonian stores, NL Times reports dozens of Delhaize locations in Belgium, and NOS reports that 17 Dutch businesses had cooling temperatures altered, while NL Times says the large supermarkets were unaffected. The headlines name no attacker. The pattern matters beyond retail: refrigeration controllers are operational technology, often managed remotely by third parties, and a changed setpoint can spoil stock before anyone notices. Food, pharma and hospitality operators share that exposure. Organisations should confirm which cooling assets are reachable from the internet or through vendor portals, rotate remote-access credentials, and enable alerts on setpoint changes. Prepare a manual temperature-logging routine and a stock-loss decision tree, so staff know when to discard, relocate or call the supplier. Ask your refrigeration vendor in writing what access it holds.

Our cyber security team assesses remote-access exposure of operational technology such as refrigeration controllers and vendor portals.

Spanish island La Palma without power after storm, government activates emergency plan

NOS reports that the Spanish island of La Palma has lost electricity after severe weather and that the Spanish government has activated its emergency plan. The headline gives no figures on duration or affected households, so the scale is still unclear. Island grids have limited interconnection, which means a single failure can take out power, payments, telecoms and fuel pumping together, and recovery depends on shipped-in equipment. For organisations with staff, guests or assets on La Palma, the question is how long they can operate unaided. Confirm that generators are fuelled and tested, that critical systems have battery backup, and that staff have a way to communicate when mobile networks degrade. Hospitality and property managers should agree guest welfare, transport and evacuation options with local authorities. Others should contact local teams directly instead of relying on public updates, and set a clear threshold at which non-essential staff are moved off the island if the outage lasts.

Our training and resilience programmes let site teams rehearse prolonged power and communications loss before it happens.

Suspects in Overasselt fatal shooting armed with military-grade fully automatic guns

NL Times reports that the suspects in the fatal shooting in Overasselt were armed with military-grade, fully automatic firearms. The headline does not say whether arrests have been made, so the picture is incomplete. The weapon type matters. Automatic fire shortens the time anyone has to react, and ordinary site procedures rarely plan for it. Organisations in the region, and those handling cash, valuables or high-profile occupants, should review their incident protocols. Staff should be briefed to avoid confrontation, move to protected areas and call the emergency services first. Check that alarm monitoring, lockdown routines and access control work as designed, and that contact details for local police liaison are current. Brief guards and reception on what to report and what to leave alone. Wait for official updates from the Dutch police before changing wider site arrangements, and discourage staff from passing on unverified details internally or on social media, where rumours can distort the real threat level quickly.

Nine in 10 Dutch want stricter rules on camera glasses, survey finds

A survey reported by NL Times finds that nine in ten Dutch want stricter rules on camera glasses. The result signals public unease and, in time, probably regulation, though the headline does not say what rules are proposed. For organisations the issue is already practical. Camera glasses look like ordinary eyewear, can record video without obvious signs, and can enter boardrooms, labs, hospitals and hotels unchallenged. Existing visitor rules that ban phones may not cover them. Companies should update device policies to name smart glasses explicitly, brief reception and security staff on how to recognise them, and set clear expectations for sensitive meetings. Consider device-free rooms, signage and secure storage for visitors' wearables. Pair policy with periodic technical inspection of sensitive rooms, so covert recording or transmitting devices are found, not merely prohibited on paper. Record the findings, and review the policy whenever new consumer devices reach the market in volume.

Our TSCM specialists inspect meeting rooms and offices for covert recording and transmitting devices, including wearables.

More reports of rogue energy product sellers: 'Don't fall for sales talk'

NOS reports more complaints about rogue sellers of energy products and quotes the warning 'Ga niet op praatjes in', meaning do not fall for sales talk. The headline does not name the channel or any company, so it is not yet clear whether approaches come by phone, online or at the door. Energy fraud matters to businesses as well as households. Finance and facilities teams handle contract switches, solar and battery offers and meter-related requests, and fraudsters impersonate suppliers to obtain signatures or bank details. Staff who work from home are also targets. Organisations should route every energy contract change through a named procurement owner, verify suppliers by calling a number taken from an independent source, and refuse same-day decisions. Remind reception and facilities staff not to admit unannounced technicians without checking with the building manager. Log every suspicious approach, report it to the relevant authorities and the police, and share the pattern with colleagues so the same script does not work twice.