Tuesday, 10 November 2026

US, Russia and Ukraine open Abu Dhabi talks as Russian strikes hit Ukraine hours earlier

US, Russian and Ukrainian delegations began talks in Abu Dhabi on Tuesday. US officials say they want a 'final end' to the war and describe 'some flexibility' on both sides. The Guardian reports that Russia launched deadly attacks on Ukraine only hours before the session opened. That pairing is typical: military pressure runs alongside diplomacy, and neither side wants to negotiate from visible weakness. For European organisations the talks matter on two fronts. A ceasefire framework would change assumptions about sanctions and energy that many risk registers still treat as fixed. A breakdown would leave the current threat to infrastructure and supply chains in place. No outcome has been announced, and the flexibility described so far comes from US officials, not from the belligerents themselves. Security teams should not plan around a single scenario. Keep existing mitigations against sabotage and disinformation in place, brief executives on both outcomes, and agree in advance which signals, such as a joint statement, trigger a review of exposure in Ukraine-adjacent markets.

Our advisory intelligence team turns diplomatic signals like these into scenario-based exposure reviews for your markets and travel programme.

Trump calls Iran war 'effectively over' while Tehran denies planned talks

Since yesterday's claim of victory, the message from Washington has shifted: Trump now says the Iran war is 'effectively over' and that further US attacks are 'highly unlikely'. Tehran denies that talks are planned. Qatar, after a White House meeting, says it sees 'progress' in US-Iran contacts. These accounts do not fit together. The one solid point is that Washington is signalling de-escalation, while Iran has not confirmed what it would accept. For organisations with Gulf, shipping or aviation exposure, a declared end is not a settlement. Pauses in a conflict like this can break quickly, and cyber retaliation cannot be ruled out. Keep travel advisories and insurance assumptions for the region at their current level until both governments confirm direct contact. Review routing for staff and cargo near the Gulf, check that crisis contacts at local partners are current, and agree beforehand what evidence would justify changing your regional risk rating.

Russian hackers compromised government email servers to steal NATO and EU correspondence

The Record reports that Russian hackers compromised government email servers and used them to steal NATO and EU correspondence. Reporting so far gives no full list of affected bodies, so the scope is unclear. The pattern matters for private organisations. Any company that corresponds with ministries, alliance bodies or EU institutions has messages sitting in a government mailbox that an intruder can read. Your own exchange may be exposed even if your systems were never touched. Treat sensitive communication with public bodies as potentially compromised. Review what has been sent by plain email, move high-value discussions to protected channels, and check mail gateway logs for unusual forwarding rules or logins. Executives and government-affairs staff are the likeliest targets of follow-on phishing that reuses stolen context, so brief them to verify unexpected requests by phone. Ask your government counterparts directly whether affected parties have been notified, and record the answer in your own incident log.

Our cyber security team reviews mail gateways and executive exposure so stolen correspondence cannot be turned into targeted attacks.

France blames Iran for fridge cyberattacks, says some caused fires

France blames Iran for cyberattacks on supermarket refrigeration systems and says some of them caused fires. Iran rejects the claim. The attribution therefore rests on a government statement that has not been independently verified, and both The Record and the BBC carry accusation and denial. The fires are the notable detail: they turn an IT incident into a physical safety event, with stock loss, store closures and risk to staff and customers. Any business that runs connected cooling, heating or building controls shares that exposure, including hospitality, logistics and food retail. Whoever is responsible, the weakness is probably the same: operational devices reachable from the internet with default or shared credentials. Inventory every connected device in your estate, remove direct internet access, change default passwords, and confirm that temperature alarms and fire detection work independently of the network. Agree with facilities teams who may switch equipment to manual operation during an incident.

Police officer killed in Oviedo after backpack explosion

A police officer has died and another was injured after a backpack exploded in Oviedo, northern Spain. The BBC reports the blast, and DW says it followed a neighbourhood dispute that escalated. The reports provided do not link it to terrorism, and nothing in them points to a wider network. The relevance for security managers is local. Officers and security staff are often called to disputes that look routine, and a bag in the hands of an agitated person changes the risk at once. Frontline guards, concierge teams and facility managers should have a clear rule for such calls: keep distance, do not handle bags, withdraw and alert the police. Review lone-working procedures for staff who deal with tenant or neighbour complaints, and check that incident reporting is fast enough for a supervisor to intervene. Brief teams on de-escalation and on recognising the moment an argument becomes a threat, and rehearse the withdrawal drill this quarter.

Dutch supervisor worries about cyber incidents: banks may soon be targets too

A Dutch supervisor has voiced concern about cyber incidents and warns that banks may soon become targets as well, NOS reports. The report as provided gives no incident details, but the message is clear enough: the financial sector is in view, and disruption there carries an immediate economic and reputational cost. For Dutch organisations the exposure is often indirect. Payment providers, software suppliers and managed-service partners sit between you and the bank, and a failure there reaches you first. Boards should ask how the business would operate if banking access were interrupted for a day, covering payroll, supplier payments and card acceptance. Test that scenario in a tabletop exercise this quarter and confirm who can authorise manual payment routes. Check that incident-reporting duties under sector rules are assigned to named people, update contact trees for banks and critical suppliers, and verify that backups of financial data are held offline and can actually be restored.

Our cyber security team runs incident-response exercises that test how your business keeps operating when banking or payment services fail.

Dense fog disrupts more than 175 flights at Schiphol

Dense fog covered large parts of the Netherlands on Tuesday and affected more than 175 flights at Schiphol, NL Times reports. Fog is routine in November, but its operational effects are not trivial. Delays and cancellations cascade through crew schedules, ground handling and onward connections, and terminals fill with stranded passengers. For corporate travel managers the immediate task is duty of care. Know where your travellers are, rebook early because alternative seats disappear quickly, and consider rail or road for short European legs when airport queues grow. Executives with tight schedules need a named contact who can reroute them without waiting for a call centre. Low visibility also raises road risk, so chauffeur and transfer schedules should allow extra time, and drivers should have clear authority to slow down or delay a journey. Review whether your travel policy states who decides when a trip is postponed, and confirm that traveller contact details are current before conditions worsen again.

Dutch PM speaks on violence against Jews at Kristallnacht service, not on the Red Line Protest

The Dutch prime minister addressed violence against Jews at a Kristallnacht commemoration, but according to NL Times did not address the Red Line Protest. The distinction matters for security planning. Commemorations and demonstrations draw emotional crowds, and public statements by political leaders shape the mood around both. Organisations that host events, run venues near protest routes or serve Jewish communities should expect higher attention in the coming days. The reporting offers no specific threat, so this is a matter of readiness, not alarm. Review event risk assessments for any gathering with a political or commemorative theme. Agree arrangements with the municipality and police on access, crowd flow and communication. Check that staff know whom to call and how to decide on closing an entrance quickly. For venues close to demonstrations, plan staffing that allows a visible but calm presence, and brief teams not to engage with participants in debate. Keep a written record of decisions so changes in the situation can be traced.

Our manned guarding teams provide calm, visible presence at venues and events where commemorations or demonstrations raise attention.