Monday, 9 November 2026

Nvidia investigates its chief executive over links to an alleged Chinese spy

Nvidia has opened an internal investigation after reports that chief executive Jensen Huang was the target of foreign intelligence, linked to an affair with a woman identified as Alice Huang, an alleged Chinese spy. China rejects the claims as baseless. President Trump has called Huang an 'honorable guy'. These remain allegations, and no finding has been published. The case matters beyond one company. Senior executives at firms holding sensitive technology are recurring targets for personal approaches, and relationships are one of the oldest routes in. The risk sits in private life, outside the corporate perimeter, where standard security controls rarely reach. Organisations with valuable intellectual property should brief senior leaders on approach patterns, set clear reporting channels for suspicious contacts, and agree in advance how a disclosure is handled without stigma. Travel to high-risk jurisdictions deserves particular attention. Boards should also confirm who owns the response if a leader is compromised, so that an investigation does not start from improvisation.

Our advisory intelligence team briefs executives on hostile approach patterns and sets up reporting routes for suspicious contacts.

Syria says it is sending troops to Saudi Arabia in the fight against the Houthis

What changed since yesterday: Syria now confirms it is sending troops to Saudi Arabia, according to Al Jazeera, as Riyadh fights the Houthis. Yesterday the Houthis claimed 33 killed in a Saudi air strike, and a missile hit an oil company building in Riyadh. The deployment rests on a Syrian statement, and scale, role and location have not been independently established. If confirmed, it widens the circle of states drawn into the Saudi-Houthi war and raises the odds of further Houthi strikes on Saudi energy and urban targets. Organisations with staff, assets or contractors in Saudi Arabia and the wider Gulf should review duty-of-care plans now. That means refreshing evacuation triggers, confirming that travellers' locations are known in real time, and agreeing alternative routing if airspace or shipping routes close. Procurement teams should ask energy and logistics suppliers how a disruption in the kingdom would reach them.

Trump says US has 'won' Iran war as Rubio reports no progress in talks

President Trump says the United States has 'won' the Iran war, but Rubio reports no progress in talks, according to Euronews. The two statements point in different directions, and both come from parties to the conflict. Euronews also reports that Trump plans to meet Putin and Xi in China next week to discuss ending the war. None of this has been independently confirmed. A declared victory without a negotiated settlement leaves the underlying risks in place: Gulf shipping, energy supply and the chance of renewed strikes. A summit could change that, but it could equally produce statements without results. Companies with exposure to Gulf routes or energy-price swings should not plan around an early settlement. Keep contingency routing, insurance conditions and supplier alternatives under weekly review, and set clear triggers for escalation, such as fresh incidents near Hormuz or a collapse of the talks. Brief travellers and regional staff on those triggers before the summit, not after it.

Kraków shooting suspect has died in hospital, police say

What changed since yesterday: the suspect in the Kraków main-square shooting, in which a gunman killed six, has died in hospital, police say. Poland had already opened a terrorism probe. The death rules out a trial, so questions about motive, planning and possible accomplices now rest with investigators alone. Expect further official statements rather than closure. BBC also reports a colleague's account that a surgeon who happened to be having lunch nearby saved a police officer's life. That detail shows how much depends on trained people being present in the first minutes. Operators of venues, events and offices in busy public areas should test their own first-minutes plan: lockdown and evacuation decisions, trauma first-aid kit and trained staff, and a direct line to emergency services. Companies with staff in Kraków should confirm welfare and offer support. Review how guards and reception staff are briefed to recognise and report pre-attack behaviour.

Our manned guarding teams are briefed to spot and report pre-attack behaviour at busy sites.

Pro-Russian hackers target European officials and offer rewards for personal information

The Record reports that pro-Russian hackers are targeting European officials and offering rewards for personal information about them. A bounty changes the threat. It invites outsiders, insiders and opportunists to collect and sell addresses, family details and routines, and it turns a cyber nuisance into a physical-safety question. The offers are the hackers' own claims, and their effect on officials has not been established. Contractors, advisers and companies working with European governments sit one step from the target and often hold less protection. Staff in those roles should expect phishing, impersonation and approaches by phone built from leaked personal details. Practical steps: remove home addresses and family details from public registers and data broker sites where possible, separate personal and work accounts, brief households on suspicious contact, and agree a reporting route to security. Monitor for exposure of senior staff's personal data and act on it quickly.

Our cyber security team maps where senior staff's personal data is exposed and closes the gaps.

Dutch royal couple begins state visit to Qatar, first trip to the Middle East

The Dutch royal couple is on a state visit to Qatar, their first trip to the Middle East, NOS reports. State visits typically bring business delegations, media and public attention. That makes them an opportunity for Dutch companies and also a moment of heightened exposure for the people travelling. The regional context matters: Saudi Arabia is fighting the Houthis and the Iran talks have reported no progress. Qatar is not named as a target in any of today's headlines, and nothing here points to a specific threat to the visit. Companies and individuals joining or following the visit should still check current travel advice, keep itineraries and meeting details on a need-to-know basis, and use secure channels for sensitive discussions. Brief delegates on social-engineering approaches, device handling at borders and what to do if a contact seems too eager. Agree an escalation route with a duty officer at home before departure.

Our close protection teams plan low-profile movement for executives joining delegations in the Gulf.

Dutch defence company to make firearms to an Israeli design

A Dutch defence company will manufacture firearms to an Israeli design, NOS reports. The headline gives few details, so the scale, customer and licensing arrangements are unknown. What matters for security managers is the exposure. Defence production with an Israeli link is politically contested in Europe, and the company, its suppliers and its neighbours may attract protest, activist attention or hostile cyber activity. Firearms manufacture also carries strict export-control and end-use obligations, and any partnership across borders adds technology-transfer and sanctions checks. Companies in the supply chain should review site security and protest plans, confirm that vetting covers staff with access to designs, and test whether intellectual-property controls would survive a leak. Compliance teams should map every export licence and end-user certificate tied to the project before orders are accepted. Communications leads should prepare a factual statement in advance so that staff and local residents hear from the company first.

Human rights under pressure from government oversight of demonstrations, NOS reports

NOS reports a warning that human rights are under pressure from government oversight of demonstrations. The headline does not say which measures are meant, so the detail needs checking against the source report. The direction of travel still matters to organisations that host events, own premises near protest routes or employ security staff at demonstrations. Tighter conditions, stricter permit rules or more monitoring can change how municipalities handle protests, and they raise legal and reputational stakes for anyone who restricts or records protesters. Private security staff operate within tight legal limits around lawful assembly, and a decision seen as heavy-handed can become the story. Review protest-day instructions with your legal adviser and security provider: proportionate response, clear limits on filming and data retention, and a single decision-maker on site. Keep contact with the municipality and local police current, and record decisions as they are made so they can be explained afterwards.