Thursday, 12 November 2026

Ukraine reports new Starlink disruption as US envoys meet Putin

Ukraine says its military Starlink service has been disrupted again, on the day US envoys met Putin in Moscow. The BBC also reports Ukrainians living without light, water or heating after Russian strikes on the power grid. The Starlink claim comes from Kyiv, and the headlines do not say who caused the disruption. Both developments matter beyond the front line. Satellite links support military command, and the grid supports every business and household still operating in Ukraine. Strikes on energy and communications can continue while diplomats talk, so a meeting alone should not be read as de-escalation. For European organisations the exposure is mostly indirect: Russian-linked cyber and sabotage activity tends to rise around diplomatic moments, and Ukrainian suppliers and staff face real continuity problems. Ask partners in Ukraine about backup power and alternative communications this week. Check whether your own continuity plans depend on a single satellite provider, and test a fallback channel before you need it.

Nvidia CEO Jensen Huang resigns amid alleged affair with suspected Chinese spy

Nvidia chief executive Jensen Huang has resigned, DW and NOS report, amid a scandal over an alleged affair with a suspected Chinese spy. The Guardian's briefing says much about the relationship remains unknown, and the allegations are unproven. Al Jazeera had earlier reported the board weighing his future. Even so, the case shows how personal relationships can become an intelligence channel into the companies that build advanced chips. Executives at semiconductor, AI and defence-adjacent firms are natural targets for approaches that begin socially. Boards should not wait for a scandal to decide how such risks are handled. Review how your organisation briefs senior leaders on elicitation and honeytrap approaches, and whether there is a confidential route to report unusual contacts without career penalty. Check that travel and conference programmes include counterintelligence guidance for leaders with access to sensitive technology. Avoid drawing conclusions about the individuals involved until verified facts emerge.

Mission Support's advisory and intelligence team helps leadership teams assess counterintelligence and elicitation risks around senior executives.

N-able takes N-central platform offline after discovery of 33 flaws

N-able has taken its N-central platform offline after the discovery of 33 flaws, Dark Reading reports. N-central is a remote monitoring and management tool used by managed service providers, so one platform can hold privileged access to many client networks. The headline does not say the flaws were exploited, but a vendor pulling a product offline is a serious step. Past attacks on remote management tools show how quickly a single weakness can spread to dozens of customers. Organisations that use an MSP running N-central should ask the provider today whether their environment is affected, what the outage means for monitoring and patching, and when fixes are due. Treat the gap in monitoring as a risk in its own right: confirm that your endpoint protection and alerting still work independently. Review the accounts and remote-access rights your provider holds, and be ready to tighten them if the vendor reports signs of compromise.

Mission Support's cyber security service reviews how managed-provider access and remote-management tools are exposed in your environment.

Belgium also sees signs of Iran behind cyberattack on cooling systems

Belgium also has indications that Iran is behind a cyberattack on cooling systems, NOS reports. The word 'also' suggests another government had already pointed at Tehran, though the material available to us does not say which one or how far the damage went. Cooling systems are an unglamorous target with real consequences: data centres, cold-chain logistics, hospitals and industrial sites all depend on them, and many are managed through building or industrial control networks that were never designed for exposure to the internet. This is a single-outlet report resting on official indications, not a final attribution. Operators should treat it as a prompt to act now. Inventory every cooling and building-management system reachable from outside, remove direct internet exposure, and segment these networks from corporate IT. Confirm that staff can run critical cooling manually, and agree who decides to shut systems down if an intrusion is suspected. Ask suppliers whether they monitor the same systems for you.

Mission Support's cyber security service can assess how exposed building and industrial control systems are to outside access.

Poland shuts down ePUAP government services platform after cyberattack

Poland has shut down ePUAP, its government services platform, following a cyberattack, according to The Record. The platform is the channel through which citizens and companies file documents and use online public services, so an outage reaches well beyond the IT department. The headline does not name an attacker or describe the method, and responsibility should not be assumed. A shutdown is a defensive choice that trades availability for containment, and it can last longer than first announced. Companies with Polish subsidiaries, clients or regulatory filings should check which of their processes run through ePUAP and agree manual or in-person alternatives with the relevant authorities. Check deadlines that could fall during the outage and document any delay for compliance records. Expect criminals to exploit the confusion: warn staff about fake messages claiming to come from Polish authorities and offering restored access. Verify any such message through a known official contact before acting.

Bomb threat at Calais station disrupts Eurostar services

A bomb threat at Calais station briefly disrupted Eurostar services on Thursday, NOS and NL Times report. NL Times puts delays at up to 90 minutes. The reports do not say the threat was credible or that a device was found, and the disruption was described as temporary. Even so, a single threat at a border-adjacent station shows how easily a transport corridor can be slowed. The route links the Netherlands, Belgium, France and the UK, and executives and staff use it for time-critical travel. Travel managers should build buffer time into itineraries that depend on a Eurostar connection, and keep an alternative route by air or road ready for meetings that cannot move. Brief travellers on where to find official updates and to follow station staff instructions during evacuations. Security teams at offices near major stations should check how they would respond if a nearby threat closes access routes. Record the delay and any missed commitments so you can review whether the contingency worked.

128,000 email addresses of Vrienden van Amstel exposed in data leak

The email addresses of 128,000 members of Vrienden van Amstel have been exposed in a data leak, NOS reports. The headline mentions email addresses only, and it does not say how the leak happened or whether other data was involved. Email addresses alone still matter: they are the raw material for targeted phishing, especially when the sender can pose as the brand the recipient already trusts. It follows yesterday's report of a cyberattack on Dutch sports clubs, which suggests a steady run of consumer-data incidents in the Netherlands. Organisations that run loyalty or membership schemes should check what they hold, where it is stored, and who can access it, including at third-party marketing suppliers. Under the GDPR, a breach likely to harm individuals must be reported to the Dutch Data Protection Authority within 72 hours, so confirm your incident process can meet that clock. Warn staff who are members of consumer schemes to treat unexpected brand emails with suspicion.

Brief manhunt after apparent gunshot at Tilburg Ibis hotel; one arrested

Police launched a brief manhunt in Tilburg after an apparent gunshot at the Ibis hotel, and one person has been arrested, NL Times reports. Few details are available: the headline says the shot was 'apparent', and nothing is stated about injuries, motive or whether guests were targeted. Treat the incident as unresolved until police give more information. Hotels are open, high-turnover buildings where guests, visitors and staff mix with limited screening, and a weapons incident there shows how fast a routine stay becomes an emergency. Hospitality operators should confirm that staff know how to raise an alarm, lock down or evacuate, and who speaks to police and guests afterwards. Check that CCTV covers entrances and corridors, and that footage can be handed to investigators quickly. Corporate travel managers should confirm how they account for employees staying in affected hotels, and have a clear way to reach them.

Mission Support's hospitality security service plans staff response, access control and incident handling for hotels and venues.