Tuesday, 3 November 2026

US strikes Iran's Qeshm Island as Tehran warns of a 'new battlefield'

New since yesterday's Hormuz story: the US has struck Iran's Qeshm Island, and Washington calls the action a series of 'defensive strikes'. Iran warns of a 'new battlefield', while President Pezeshkian signals more diplomacy and Vance voices optimism about a deal. Yesterday Iran said it could reopen Hormuz within two days if the US met its conditions. Today's strikes make that timetable harder to trust, and escalation alongside talks looks set to continue. The timing, on the day of the American midterms, adds domestic political pressure on both sides. For corporate security teams the exposure is indirect but real: shipping and energy supply chains, staff and contractors in the Gulf, and regional events, as the postponed Asian Cup in Saudi Arabia shows. Review travel approvals for the region, confirm that evacuation triggers and contact trees are current, and brief senior travellers before departure rather than after an incident.

Our advisory and intelligence team turns Gulf escalation signals into concrete travel and exposure decisions for your organisation.

Russian strike on Ukrainian aid centre kills at least 29, Kyiv says

Kyiv says a Russian bombing of a humanitarian aid centre killed at least 29 people. The Guardian puts the toll at least 31, so figures remain fluid. NOS separately reports more than 100 injured in the Kharkiv region, where a hospital was attacked. The strikes land as Zelenskyy meets Merz in Berlin to discuss air defence and energy support ahead of US-led negotiations with Russia. For security directors the relevance is twofold. Attacks on aid and medical sites show that humanitarian logistics and the staff running them are exposed. And the diplomatic calendar gives no sign of a pause in strikes while talks are prepared. Organisations with staff, contractors or partners in Ukraine, or supply chains touching the front regions, should recheck movement protocols, shelter and medical evacuation arrangements, and communication fallbacks. Treat casualty figures as provisional and update site risk assessments as verified reports come in.

Our advisory and intelligence work supports duty-of-care planning for staff and partners operating near the front.

North Korea denies FBI claim it was behind record Binance hack

The FBI attributes the record Binance hack, reported by Euronews at €5bn, to North Korea. Pyongyang denies it, calls the US charge a 'provocation' and, according to Euronews, test fired missiles the same day. Attribution therefore rests on a US claim that outsiders cannot yet test. The operational lesson comes from Dark Reading's analysis, which frames the case as an attack-path warning: one compromised laptop, billions lost. State-linked actors target individuals with privileged access as well as the perimeter. Organisations should map which endpoints, admin accounts and approval workflows connect to their most valuable assets, then test those paths with realistic exercises. Limit standing privileges on laptops used for treasury, payments or cloud administration, require hardware-backed authentication for sensitive approvals, and rehearse a fast containment decision so a single device compromise cannot quietly become a board-level loss.

Our cyber security team tests the attack paths from individual endpoints to your most valuable systems.

Bomb threats hit flights in Poland, Spain, Bulgaria and from UK and Danish airports

Bomb threats disrupted flights in several countries. NOS reports that flights in Poland, Spain and Bulgaria were targeted, while the Guardian's live blog lists four separate flights from London, Copenhagen, Manchester and Israel as affected. The reports provided do not establish whether the threats are linked or credible. That uncertainty is the operational problem: airlines and airports must treat each call seriously, which means searches and delays even when the threat proves hollow. Organisations with travelling executives or time-critical shipments should expect knock-on delays and check rebooking options before departure. Travel managers should be able to locate staff in transit quickly. The same logic applies to premises: a short written procedure for receiving a threat call, assessing it and deciding on evacuation prevents improvised decisions under pressure. Do not amplify unverified claims internally. Rely on airline and airport notices.

Our resilience training drills staff in receiving and assessing bomb threats before a real call arrives.

UK cyber chief warns of 'unprecedented rise' in cyberattacks in coming months

The head of the UK's National Cyber Security Centre warns of an 'unprecedented rise' in cyberattacks in the coming months, The Record reports. The headline names no actor, sector or technique, so read it as a planning signal rather than a specific alert. Even so, a warning of this kind from a national authority deserves attention from European organisations with UK subsidiaries, suppliers or customers, because attacks rarely respect borders. The practical response is preparation now, not after the first incident. Confirm that critical patches are applied and that backups can be restored within a tested time. Review remote-access paths and third-party connections. Check that the incident response plan states who can decide to shut systems down and who speaks to regulators, customers and staff. Brief the board now: decisions during an attack take longer when roles are unclear, and every hour of delay adds disruption.

One killed, one hurt in car shooting in Rotterdam neighbourhood; three arrested

A shooting inside a car in a Rotterdam neighbourhood left one person dead and another injured, according to NL Times. Three people have been arrested. The report gives no motive and few details, so the picture remains incomplete. Shootings in residential streets affect more than the people involved. Neighbouring businesses, residents and staff arriving or leaving at shift change are all exposed to the aftermath, from police cordons to the possibility of retaliation. Arrests do not automatically remove that risk while the motive is unknown. Companies with sites, depots or staff parking nearby should brief employees using official police updates rather than social media. Review lighting and access control at entrances and exits, and check that CCTV retention is long enough and footage can be exported quickly if police ask for it. Lone workers and night shifts need a reliable way to raise an alarm. Keep management informed of any changes to police presence or area measures.

Police free man held hostage in Zwijndrecht; two arrested

Police freed a man held hostage in Zwijndrecht and arrested two people, NL Times reports. The report gives no information on motive, the relationship between those involved or the condition of the man, so none of that should be assumed. Hostage-taking and unlawful detention are rare in everyday corporate life, but they matter for organisations whose staff, executives or clients may be targeted over money, debts or pressure. Two practical points follow. First, employees should know how to raise the alarm discreetly and who receives it, with the police called first. Second, families and colleagues of someone missing or out of contact need a clear point of contact and a rule on when a disappearance is escalated. Share nothing about an ongoing case on social media. For high-profile individuals, review routines, travel patterns and public information that make them predictable, and agree a duress code with those closest to them.

Our personal and executive protection work reduces the predictability that makes high-profile individuals a target for coercion.