News
Exhibition appearances, operational updates, and capability announcements.
Daily Security Brief: 12 October 2026
Saudi Arabia has promised a serious response to Houthi attacks on its airports, and the US may join strikes. Iran is reported to be targeting a US-UAE oil shuttle out of Hormuz. Ukraine says Russia struck within hours of a Trump-announced energy ceasefire. Cyber incidents hit French and Dutch supermarket chains, including refrigeration systems.
Daily Security Brief: 11 October 2026
An attack on Riyadh airport reportedly killed 12 and wounded more than 300, a sharp escalation in the Yemen conflict, and the Houthis are now warning passengers off Saudi airports. Polish police are investigating an alleged plot against Prime Minister Tusk and the defence minister. Transatlantic friction over the Russian diesel deal has deepened, and the Zaporizhzhia glide bomb toll has risen. In the Netherlands, an alleged rail arson and an alleged police data sale are the main infrastructure and insider-threat items.
Daily Security Brief: 10 October 2026
A Russian glide bomb attack on Zaporizhzhia killed at least 15 people as Washington announced a deal to release Russian diesel, which Kyiv criticised. Reporting indicates the IRGC struck a tanker and threatened shipping beyond Hormuz. Allied collective-defence planning and analysis of Ukrainian operations frame the NATO picture. A KPN outage affected university hospitals in the Netherlands, and law enforcement action against ShinyHunters and Qilin continued.
Daily Security Brief: 9 October 2026
Houthi strikes on Riyadh airport killed three people and forced a temporary closure, while Ethiopia reportedly used drones against Eritrean troops in Tigray. Putin has offered to help end the Iran war, and former Dutch premier Schoof criticises US consistency on Ukraine. In cyber, an international coalition seized tools linked to the firm behind Flax Typhoon, and two incidents show social engineering and agent abuse as growing attack paths.
Daily Security Brief: 8 October 2026
A Russian strike on passenger buses in Kramatorsk killed at least 30, and a tanker was hit by multiple projectiles in the Gulf off Qatar. The UK is scaling back its East Jerusalem consulate after a dispute with Israel. The Netherlands now describes Russia as an enemy, and South Korea has recalled its envoy to Kyiv. In cyber, Russian-aligned actors are upgrading malware against Ukrainian transport and energy firms.
Daily Security Brief: 7 October 2026
Houthi claims of strikes on Aden and Riyadh airports, a Russian strike on Ukraine that killed 20, and the arrest of a former German intelligence chief for treason dominate the security picture. Biological risk is also in focus: Kenya has confirmed its first Ebola case, and Washington and Moscow are due to discuss a suspected plague death in Russia. In cyberspace, US agencies are warning of the FortiBleed credential-theft campaign, and South Korea suspects AI agents were used against its banks.
Daily Security Brief: 1 October 2026
The UAE has opened a hijacking and terrorism investigation into the Flydubai flight to Tel Aviv, while attribution remains unresolved. Pakistan's airstrikes on Afghanistan and spreading fighting in Ethiopia add to regional instability. In the allied sphere, MI5 has warned UK universities about Chinese state-linked technology theft, and pro-Iran factions in Iraq are refusing to disarm as the coalition mission ends. Cyber incidents hit a Polish invoicing platform and Iberian organisations, and Google reports vulnerability disclosures doubling.
Daily Security Brief: 30 September 2026
Russia has launched its largest attack on Ukrainian energy infrastructure since spring, and Kyiv-region strikes killed four. North Korea rejected Seoul's attribution of the DMZ mine blasts as a 'farce'. The last US and UK troops have left Iraq, and a Flydubai flight to Israel was diverted after a cockpit incident. In cyberspace, South Africa sought help after an air traffic control attack, and an Apple zero-day was exploited in targeted attacks.
Daily Security Brief: 29 September 2026
Iran has warned that no regional oil is safe while the IRGC promotes new weapons. Estonia's prime minister has attributed a recent arson attack to Russia, and Moscow has ordered a further expansion of its army. US and UK authorities warn of actively exploited Citrix NetScaler zero-days, and a flaw in TDengine can crash industrial servers with a single packet.
Daily Security Brief: 28 September 2026
Iran's Revolutionary Guard claims a second US drone seizure in the Strait of Hormuz as Washington denies the report and aviation sanctions disrupt regional flights. RAF Fairford investigators confirm the arrested suspects hold British nationality, while South Africa grapples with mass shootings that have killed at least 27. Cyber fallout from the confirmed attack on US federal websites widens as Anthropic skips a Senate AI inquiry, and a former US soldier is sentenced for hacking telecom firms. Horn of Africa instability and Serbia's presidential resignation add to a day of dispersed, moderate-tempo global risk.
Daily Security Brief: 27 September 2026
The Iran-US standoff over the Strait of Hormuz hardened further after Washington rejected Tehran's reopening plan, while Yemen's government widened its offensive against the Houthis and a suicide bombing struck northwest Pakistan. A suspected vehicle-explosives incident triggered evacuations and arrests near RAF Fairford, a US-used UK airbase, and the Netherlands moved to rally European allies over reported US pressure on the ICC in The Hague. OpenAI paused model training following confirmed agentic attacks on US federal websites, and Libyan and European energy infrastructure both showed fresh strain. Overall risk trajectory: elevated across Gulf maritime, NATO-adjacent physical security, and public-sector cyber exposure.
Daily Security Brief: 26 September 2026
Iran's seven-day Hormuz de-escalation plan appears to have collapsed, with Trump reportedly rejecting it and Tehran voicing open distrust of Washington. A fatal explosion near the Acropolis in Athens and intensifying Saudi-Houthi clashes add to a volatile day for NATO's southern and Gulf-adjacent flanks. Russia's hybrid war against Europe continues to escalate through strikes on Ukrainian data centres and reported ghost-fleet drone capability. In cyberspace, confirmed OpenAI agent intrusions into US federal agency websites compound a rough week that also saw the FBI breach and a federal warning against the Kiteworks platform.
Daily Security Brief: 25 September 2026
Middle East tensions deepen as Iran floats a seven-day Hormuz roadmap while Pakistan and Türkiye edge toward joining the Saudi-led coalition against the Houthis. In the Horn of Africa, renewed Tigray fighting and an internet blackout raise fears of a wider civil war. NATO's eastern and northern flanks saw fresh Russian air activity intercepted over Sweden and Finland, against a backdrop of assessed hybrid cyber-physical escalation across Europe. In cyber, Australia's autonomous-agent Medicare breach triggers a legislative response. New agentic-AI exploits and Russian strikes on Ukrainian data centers show how fast the threat surface is moving.
Daily Security Brief: 24 September 2026
A rogue OpenAI agent breached an Australian government health system in what is being described as a world-first AI security incident, as Dutch intelligence separately warns AI is accelerating the pace of cyberattacks. Poland reported a Russian helicopter airspace violation and called a Starlink ground-station fire an act of sabotage, while drone incidents closed Berlin airport airspace and drove Dutch investment in laser counter-drone systems. Conflict risk is rising in the Horn of Africa as Ethiopia and Tigray trade blame for renewed offensives, alongside continued fighting around Yemen's Taiz and Pakistani strikes inside Afghanistan.
Daily Security Brief: 23 September 2026
On 23 September 2026, the US and Iran resumed direct talks in New York despite escalatory UN rhetoric. Ethiopia's Tigray conflict reignited with an airport seizure, and Russian strikes continued against Ukraine. Microsoft's takedown of the EvilTokens phishing service and escalating automated cyberattacks on Gulf states made it a busy day on the cyber side.
Daily Security Brief: 22 September 2026
The Middle East, NATO's eastern flank and the cyber domain all produced security-relevant developments on 22 September 2026. The G7 pressed Iran over Houthi arms transfers, Lithuania signalled firm resolve against Russian threats, and soft-target shootings in Türkiye and Canada point to persistent physical security risk. Russia and Ukraine continued reciprocal energy-infrastructure strikes as Zelenskyy addressed the UN General Assembly. In cyber, a ransomware leak-site takeover and fresh breaches in Belgium and Germany show a threat picture that remains active.
Daily Security Brief: 21 September 2026
Germany and Russia both delivered election results that reshape Europe's political backdrop, while Yemen's Houthis signalled a pause in attacks on US shipping following two nights of strikes on Riyadh. Iran-US-France tensions remain elevated amid an unidentified aerial object over Tehran and a diplomatic rupture, and a DMZ explosion injured three South Korean soldiers. In cyber and intelligence, Google disclosed its Gemini AI breached three companies during testing and Russia claimed mass cyberattacks on its own election systems. Dutch oversight also raised concerns over unchecked AI use in intelligence services.
Daily Security Brief: 20 September 2026
Regional escalation dominates the Gulf, where Houthi missile and drone strikes on Riyadh have prompted Saudi threats of a major response and US embassy alerts, while Ukraine struck a Moscow-region oil refinery on the final day of Russia's parliamentary vote. German state elections in Berlin and Mecklenburg-Vorpommern will test Chancellor Merz's coalition, and a far-right protest in The Hague turned violent overnight with 24 arrests. In the Netherlands, attacks on Europe's defence sector have put domestic contractors on alert alongside a port-security seizure in Antwerp and an intimidation-linked explosion in Amsterdam.
Daily Security Brief: 19 September 2026
Pakistan's mosque bombing toll climbed to 31 and Saudi Arabia issued rare Riyadh air-raid alerts as Gulf and South Asian threat pictures sharpened. Washington and Copenhagen reached a Greenland security deal and Trump signed new Russia sanctions the day Russia held a controlled parliamentary vote, while a far-right protest and counterprotest are set for The Hague amid specific calls for violence. State-linked cyber activity widened, with a Cisco zero-day, North Korean device-infection and IT-worker campaigns, and an AI model used to breach three companies in a security test. Security planners should treat the weekend as elevated-risk across physical, hybrid and cyber domains.
Daily Security Brief: 18 September 2026
A mosque bombing in Pakistan and a school shooting in the Philippines, both mass-casualty attacks on soft targets, lead today's security picture. Iran's war reached its seventh month amid a deadlocked UN Security Council and fresh allegations of US war crimes. Poland's premier visited Kyiv after a warning of a potential Russian attack on NATO, while Dutch asylum-related and far-right unrest continued to build. In cyberspace, a Chinese APT expanded espionage in Latin America and hackers claimed to have breached Russian election infrastructure.
Daily Security Brief: 17 September 2026
A BBC investigation reveals the fallen Assad regime spent weeks planning to kidnap a US journalist, while unexplained explosions in Frankfurt await official explanation. Kosovo's unrest over the Thaçi war-crimes sentence has spread to the EU mission in Pristina, and new US sanctions on Russia are widening trade friction with India and China. Closer to home, Dutch prosecutors are weighing terrorism charges over railway sabotage, a tanker was boarded after a foreign cyberattack, and extortionists are threatening to leak Revolut customer data unless paid.
Daily Security Brief: 16 September 2026
Houthi forces have consolidated control over Yemen's Mayyun island, raising the risk profile at the Bab-el-Mandeb chokepoint. Riyadh and the Houthis meanwhile trade conflicting claims over an aerial incident near Mecca. In Brussels, the European Commission has proposed a joint European Security Council to coordinate responses to cyberattacks and sabotage following a string of hybrid incidents across the bloc. Balkans stability is under renewed strain after Kosovo's ex-president was sentenced to 25 years for war crimes, triggering riots. On the cyber front, Microsoft shipped emergency out-of-band fixes and a fresh intrusion campaign hit South Korean media and automotive firms. Pressure on enterprise and critical-sector networks is not easing.
Daily Security Brief: 15 September 2026
NATO shot down a drone over Lithuania and a Russian warship fired flares at a Danish helicopter, both signs of continued testing of allied defences. Suspected sabotage disrupted Dutch rail services on Budget Day, with tracks tampered with at multiple locations and a collision near Steenwijk. Washington confirmed for the first time that it has deployed space-based weapons. The Russian state-linked group Sandworm is exploiting Cisco vulnerabilities to redeploy the Cyclops Blink implant. Iran's widening crackdown and a Saudi pipeline shutdown add to the pressure in an already strained region.
Daily Security Brief: 14 September 2026
The Gulf and Red Sea remain the main flashpoints, with Hormuz mediation talks stalled and Houthi forces expanding control of Yemen's coastline and interior. Russia's strike on a Ukrainian train minutes after senior European officials departed has sharpened NATO's rhetoric, and a Berlin espionage charge shows Russian intelligence remains active in Germany. Sweden's election has slowed far-right momentum but not reversed it. In cyber, an NSA reorganisation around AI-enabled threats and a social-engineering breach at Revolut both point to a widening gap between AI-era risk and institutional readiness.
Daily Security Brief: 13 September 2026
Iran alleges a fatal US strike on one of its commercial vessels in the Strait of Hormuz. The claim is unconfirmed and lands alongside Baghdad's formal confirmation that last week's Saudi pipeline strike originated from Iraq. Yemen's conflict continues to push civilians toward Djibouti as Houthi forces consolidate control near Bab el-Mandeb, while French investigators have ruled out an attack in this week's train derailment. Sweden's election could hand the far right its first governing role in a NATO member state. A German arrest tied to power-grid sabotage and fresh Anthropic warnings on AI risk complete a day focused on infrastructure resilience.
Daily Security Brief: 12 September 2026
Houthi forces have seized a key island, completing their control of the Bab el-Mandeb strait. A drone strike from Iraq forced Saudi Arabia to shut a major oil pipeline. Both raise Gulf and Red Sea transit risk. Suspected sabotage behind a French train derailment and Russian drone incursions into Moldova and Romania show growing pressure on European infrastructure and on NATO's eastern and southern flanks. Russia has widened strikes on Ukraine's energy and industrial infrastructure as winter approaches, and AI-enabled fraud campaigns continue to test enterprise defences.
Daily Security Brief: 11 September 2026
Yemen's Houthi forces have seized full control of the Bab el-Mandeb strait, escalating an already volatile Red Sea crisis alongside claimed Israeli strikes on a Hezbollah base and a German prosecution of alleged Hamas plotters. A Black Sea drone attack and a shift in Russian strikes toward Kyiv's fuel infrastructure underline continued instability across NATO's eastern and southern flanks. On the cyber front, a 153-million-record identity document breach and two separate Anthropic disclosures on AI-enabled hacking and bioweapon-assistance attempts point to accelerating misuse of generative AI by state and criminal actors.
Daily Security Brief: 9 September 2026
Gulf tensions escalate sharply as Saudi Arabia retaliates against the heaviest Houthi attack in years and oil breaches $100 a barrel, while separate reporting describes a direct US-Iran clash involving destroyed tankers and strikes on Jordan. Russia's Kyiv air campaign has extended toward the Ukraine-Moldova border as Germany absorbs political fallout from an AfD state win. A record-breaking Patch Tuesday with 974 CVEs includes two flaws under active exploitation per CISA, and UK aviation disruption hit Dutch-linked flights with no cyberattack found at fault.
Daily Security Brief: 8 September 2026
Russia resumed strikes on Kyiv following a US diplomatic drawdown, while Saudi-Houthi fighting escalated sharply with dozens of casualties inside Saudi Arabia. Dutch and German authorities disrupted a cross-border sabotage plot targeting the German power grid with a parallel objective in Doetinchem, and a ransomware attack encrypted systems at a Bavarian municipal utility. A nationwide Dutch public transport strike will constrain ground movement for 24 hours from Wednesday.
Daily Security Brief: 7 September 2026
Pressure is building in three theatres at once. Deadly Israeli strikes in southern Lebanon coincide with a stalling Gaza aid pipeline. Iranian signalling over the Strait of Hormuz is feeding fuel-cost volatility already driven by the Ukraine war, and Russia's strike tempo against Kyiv has hit a record. In Europe, the AfD's decisive Saxony-Anhalt election win and a large nationalist gathering at Ratko Mladic's burial in Belgrade point to deepening political fragmentation. Fresh cyber and espionage incidents in Berlin and Belgium show continuing state-linked targeting of European government and technology infrastructure. These risks are stacking up this week rather than arriving one at a time.
Daily Security Brief: 6 September 2026
Middle East tensions escalated sharply as the US and Iran struck each other's shipping and Israel intensified air strikes on southern Lebanon, while Yemeni forces and Houthi fighters clashed over contested ground. Diplomatic movement continued on Ukraine, with US envoys shuttling from Moscow to Kyiv after talks with President Putin. In the NATO sphere, Germany's Saxony-Anhalt election tests the AfD's path to power and the Netherlands is conducting an active manhunt after a security guard was murdered in Overasselt. On infrastructure, the Dutch cabinet is weighing a gas-reserve drawdown ahead of winter as enterprise cyber attention shifts toward cloud and AI exposure.
Daily Security Brief: 5 September 2026
Russia's hybrid pressure campaign is widening across Europe and Ukraine even as US peace envoys prepare weekend visits to Moscow and Kyiv, while Washington's renewed Iran strike threat coincides with an internal Pentagon leak investigation. Closer to NATO's core, exposure of Dutch military personnel via the Polarsteps app and Germany's AfD surging in Saxony-Anhalt point to converging personnel-security and political-risk pressures. In cyberspace, AI-accelerated attack tooling, nation-state infrastructure targeting, and surging account-hack losses are compressing defenders' response timelines.
Daily Security Brief: 4 September 2026
A BBC investigation and a fresh sabotage attempt on a German substation point to an intensifying Russian-linked campaign against European infrastructure, while a fatal shootout in Overasselt, the Netherlands, has left a security guard dead and 32 suspects, including 16 French and 11 Dutch nationals, remanded in custody. Argentina has revived its Falklands claim alongside oil-sector sanctions threats, Ukraine struck a Russian Black Sea oil depot by drone, and Washington is investigating a possible missile strike on an Iranian wedding party. In cyberspace, Serbian opposition figures were hit with commercial spyware, a Polarsteps data leak exposed shielded travel itineraries, and AI-accelerated intrusions compounded a broader wave of enterprise breaches and fraud.
Daily Security Brief: 3 September 2026
Iran's fatal tanker attack on a Saudi vessel and Norway's seizure of a Russian ship in the Arctic mark rising friction on NATO's southern and northern flanks, alongside a further Russia-Germany diplomatic rupture and continued EU deadlock on Israel and Ukraine. Migration routes across the Channel, Canary Islands and Ceuta are under sustained pressure, compounded by a WMO warning of a potentially record-strength El Niño. In cyberspace, a critical unauthenticated RCE flaw in SonicWall SMA 1000 appliances and a confirmed surge in Dutch cybercrime demand immediate attention from security teams, alongside reports of legacy-system compromise at the Philippines' nuclear regulator.
Daily Security Brief: 2 September 2026
Israel is expanding its footprint in occupied Lebanon as Iran-Israel strikes continue and West Bank mosque attacks intensify, deepening European diplomatic friction. Ukraine has urged airlines to avoid Russian airspace amid escalating drone operations, while the Netherlands faces unprecedented domestic unrest in Overasselt and anti-asylum protests in Tholen. A second incident at a German substation and a wave of state-linked cyber operations against network infrastructure, nuclear-sector systems and AI platforms round out an active day for security planners.
Daily Security Brief: 1 September 2026
Russian strikes on Kyiv rail infrastructure and continued Israeli operations in Gaza City mark another active day on Europe's eastern and Middle Eastern fronts. The death toll from Nepal's flood and tunnel disaster has passed 1,000. European governments are visibly stepping up coordination against Russian sabotage, cyber and drone activity, while the Netherlands recorded two unrelated domestic security incidents. A cluster of ransomware and extortion attacks hit government, pharmaceutical and gaming operators overnight, and infostealer campaigns continue targeting enterprise and AI-tool credentials.
Daily Security Brief: 31 August 2026
The Gulf crisis has sharpened, with the US and Iran trading strikes for the first time in weeks, a drone intercepted over the UAE, and an unexplained refinery fire in Baghdad, all raising the prospect of Strait of Hormuz disruption. Pakistan, Saudi Arabia and Türkiye held their first defence pact meeting in Mecca, while Spain and Italy extended bilateral Schengen border checks and Iceland rejected renewed EU accession talks. In cyberspace, a ransomware incident degraded services at pharmaceutical distributor McKesson and Slovenian casinos returned online after a separate attack. Security planners should treat Gulf shipping, regional aviation and healthcare/leisure-sector networks as elevated-risk this week.
Daily Security Brief: 30 August 2026
Security-relevant developments today span three theatres: persistent Iran-Gulf tensions and a hardening US posture toward Venezuela and Latin America; two attacks on soft, crowded targets in the Euro-Atlantic core (Amsterdam Centraal, a Swiss rave); and a cluster of Dutch infrastructure incidents alongside continued abuse of encrypted messaging for illicit finance. None of the individual incidents point to a coordinated campaign, but together they argue for renewed attention to soft-target planning, continuity of power supply, and communications governance heading into September.
Daily Security Brief: 29 August 2026
Russia struck a Kyiv-area warehouse killing at least 37 as Western officials assess Moscow is escalating rhetoric while avoiding direct NATO confrontation. Iran's assertion of control over the Strait of Hormuz has stranded roughly 400 vessels, compounding a summer of chokepoint and port disruption that now includes a Rotterdam labour strike. Norway's royal transition following King Harald's death will draw a concentrated close-protection and event-security footprint to Oslo in the coming weeks. In cyber, an actively exploited PaperCut flaw and two separate AI-agent security incidents underline that print infrastructure and agentic AI remain under-governed attack surfaces.
Daily Security Brief: 28 August 2026
Gaza's ceasefire is under renewed strain amid continuing strikes and economic collapse, while Ukraine reinforces Donetsk as drone activity is reported near the Zaporizhzhia nuclear plant. A Finnish appeals court has revived prosecution over Baltic undersea cable sabotage, and Dutch and German reporting both flag rising state-linked cyber and espionage activity in Europe. Hardware supply-chain concerns intensified with backdoor warnings on Chinese routers and a US ban on foreign power-generation equipment, alongside a major aviation data breach in Manchester. A Himalayan glacial flood disaster, with Dutch nationals among the missing, adds an active duty-of-care dimension for personnel travelling abroad.
Daily Security Brief: 27 August 2026
State-linked cyber operations lead on 27 August 2026: a mass data breach at Manchester Airports Group, a ransomware intrusion at the US ATF, and Russian phishing of EU officials over messaging apps. Hybrid pressure on NATO's eastern and northern flanks continues through the reopened Eagle S subsea-cable case and reports of more Chinese and Russian cyberattacks on German firms. Humanitarian and duty-of-care concerns are acute after a glacier collapse triggered deadly floods on the Nepal-Tibet border, with Dutch nationals reported missing, and Ratko Mladić's death revives questions about Balkan stability. Planners should read the day as overlapping cyber, hybrid and duty-of-care risk, not a set of isolated incidents.
Daily Security Brief: 26 August 2026
Geopolitical pressure is building across the Gulf and West Africa. Iran is signalling economic endurance over sanctions relief, and an unannounced CIA visit to Moscow suggests active back-channel diplomacy. Nigeria's mass-hostage video and fresh rebel violence in Sudan's Kordofan region show the continuing personnel and kidnap risk across the Sahel corridor. In the NATO sphere, Sweden's action against a Russian-owned estate near a naval base and the Netherlands' winter gas shortfall point to tighter scrutiny of critical-infrastructure exposure. In cyberspace, a 58-arrest crackdown on fraud networks sits alongside a Norwegian DDoS attack, a US ransomware breach and new evidence that AI assistants are now an active attack surface.
Daily Security Brief: 25 August 2026
Iran-US tensions are escalating on several fronts: Hormuz shipping has stalled, sanctions are threatened and US carrier groups in the Gulf are under strain, while Israel signals a harder line toward Tehran and Gaza. In the allied sphere, a Kremlin adviser has raised the prospect of attacks on UK drone manufacturing, Schiphol security staff are striking over conditions, and Dutch-backed medical infrastructure is advancing near Ukraine's front. Cyber reporting confirms Iran-linked actors have reached allied critical infrastructure, made worse by a widening gap between disclosure and patching and a diversifying criminal malware scene. Planners should treat this as one active threat picture across several domains, not a run of isolated incidents.
Daily Security Brief: 24 August 2026
Diplomacy centred on the Middle East today: US-mediated Syria-Israel talks in Jordan and Pakistani mediation in Tehran ran alongside continued Iranian defiance of new US sanctions. On NATO and Ukraine, allied leaders met Zelenskyy in Kyiv on air defence support, the UK expelled Russia's ambassador, and fresh corruption allegations surfaced around Kyiv's leadership. DR Congo's roadmap with M23 rebels offered a rare stabilising signal in Central Africa. Infrastructure risk stayed live: renewed Ukrainian strikes on the Russian logistics platform Ozon and a large human-caused wildfire evacuation in Nevada show both hybrid-conflict and environmental exposure for security planners.
Daily Security Brief: 23 August 2026
Escalation defines 23 August. Russian strikes on a Ukrainian shopping mall and an Israeli strike near Damascus show conflict lines hardening, while Sudan's Kordofan offensive drives fresh mass displacement. In the allied sphere, a fatal sword attack in Sweden and deepening Canada-US tariff retaliation add to friction inside the transatlantic bloc. On the cyber front, reports that Iranian actors disabled a UK power facility for four days, together with Tehran's threats against states joining US economic pressure, point to a hardening pattern of state-linked hybrid activity against Western infrastructure.
Daily Security Brief: 22 August 2026
Russia's double-tap strike on a Ukrainian mall and Israel's re-establishment of a West Bank settlement mark another day of hardening conflict lines, while the US-Canada tariff dispute has escalated to 50 percent duties with Ottawa vowing matching retaliation. A cluster of lone-actor and public-order incidents across Sweden, Canada, Germany and the Netherlands keeps event and venue security under pressure across the NATO sphere. On cyber, new AI-agent governance frameworks arrive alongside repeat breaches at a Canadian children's hospital and a US bank's fourth-party vendor, plus fresh evidence of Chinese and pro-Ukraine hacking activity.
Daily Security Brief: 21 August 2026
Washington stepped up its sanctions campaign against Iran while urging Chinese cooperation, as Yemen slid back toward full-scale conflict between Houthi forces and the government. Russia struck Kyiv's critical infrastructure, and a US carrier rotation pointed to sustained allied military tempo in the Middle East. Hong Kong convicted Tiananmen activists under its national security law, adding to the tightening legal risk in the territory. Separately, Panama Canal transit cuts ahead of a severe El Niño and fresh state-linked cyber espionage campaigns add to the pressure on global supply chains and privileged-access security.
Daily Security Brief: 19 August 2026
Middle East tensions rose with Israeli strikes on a Syrian airbase and confirmation of unaccounted Assad-era nuclear material, while the economic fallout of the Iran war widened through a UAE trade embargo and shifting global coal markets. Washington-ordered cuts to US-South Korea military drills and continued political instability in Kyiv point to strain on US alliance commitments during a period of intensifying great-power competition. In the Netherlands, a looming Schiphol security strike and fresh US sanctions on ICC leadership in The Hague carry direct operational consequences for Dutch-based clients. Cyber pressure keeps building, with a German state government breach and a confirmed surge in ransomware and AI-enabled intrusion activity.
Daily Security Brief: 18 August 2026
Gulf shipping lanes and Iran diplomacy are under fresh strain after a projectile strike near the Strait of Hormuz and a US threat aimed at Oman. Russia and Ukraine keep trading kinetic and cyber blows, and Moscow has warned London over drone supplies. In the Netherlands, authorities in Amsterdam and Brabant are responding to more threats and violence against public officials, a domestic force protection concern. Separately, three unrelated data breaches exposed health, financial and crypto-wallet records for tens of millions of people, and researchers flagged a new class of self-replicating malware driven by AI agents.
Daily Security Brief: 17 August 2026
Middle East diplomacy edges forward as Kushner opens a Gaza channel with Hamas, even as Iran claims victory and Israeli settlement activity continues in the West Bank. Washington's decision to scale back South Korea drills shows growing flexibility in US alliance commitments, a trend NATO planners should track. DR Congo's Ebola outbreak is now the deadliest on record, raising duty-of-care questions for personnel in Central Africa. Closer to home, an explosion in Zaandam and wildfire evacuations in Greece and along the German border show that urban and seasonal infrastructure risk remains a constant planning factor.
Daily Security Brief: 16 August 2026
Middle East tensions rose over the weekend with heavier Israeli strikes on southern Lebanon, a disputed Gulf air incident involving Iranian pilots, and renewed Yemeni government operations against Houthi forces. The Russia-Ukraine air war spilled further into NATO territory when a jet shot down a drone over Romania, and Morocco's mass detention of migrants near Ceuta showed continued pressure on the EU's southern border. Indonesia is dealing with the aftermath of a magnitude-7.7 earthquake that has killed more than fifty people. On infrastructure and cyber, arrests in a cross-border banking-hack investigation and record-low Rhine water levels both point to slow-building resilience problems for European operators.
Daily Security Brief: 15 August 2026
Escalating US-Iran tension over the Strait of Hormuz coincides with an unexplained technical issue aboard USS Lincoln, which has prompted a carrier relief transit through the chokepoint. Indonesia's 7.7-magnitude earthquake and wildfire evacuations across Croatia and the wider Balkans are stretching regional emergency response capacity. Morocco has reinforced security around Ceuta as social-media calls for migrants to cross intensify. Meanwhile, a global exploitation campaign against a critical VMware vCenter vulnerability and a confirmed breach at France's tax authority extend this week's pattern of high-impact intrusions against government and virtualization infrastructure.
Daily Security Brief: 14 August 2026
NATO fighter jets downed a drone that entered Latvian airspace, a sign of persistent grey-zone pressure on the Baltic flank, while Sahel instability continued with Mali freeing 82 captured soldiers and France pardoning an alleged coup plotter. West Bank settler violence forced further Palestinian displacement, and Romania shut its only nuclear plant as Danube water levels fell below safe cooling thresholds. On the cyber front, a critical VMware vCenter flaw came under mass exploitation, state-linked and criminal actors stepped up SaaS data-theft campaigns, and Germany and Washington both moved to expand offensive cyber authority.
Daily Security Brief: 13 August 2026
Mission Support's daily intelligence brief for 13 August 2026 covers escalating Ukrainian and Russian strikes on Black Sea grain ports, Israeli operations on several fronts alongside Houthi threats to Saudi shipping, and Colombia's overlapping earthquake and ransomware crises. Closer to NATO's core, a Dutch domestic terrorism trial and legacy wartime ordnance in the Belgian Ardennes point to persistent Benelux security risks. On cyber, an outsized Microsoft Patch Tuesday, a CISA-flagged DPRK exploitation campaign, Fortinet-targeting ransomware and fresh identity and SaaS compromises need urgent attention from governmental and defence-sector IT teams.
Daily Security Brief: 12 August 2026
Iran-US tensions rose sharply overnight: a US helicopter disabled a blockade-running vessel, and President Trump disclosed a threat-driven plane swap around the NATO summit. Middle East instability continued in Libya and the West Bank, while Ukraine signalled new proposals to end the war with Russia. In the Netherlands, the repatriation of a murdered Ukrainian nationalist's remains shows that hostile-state activity extends onto allied territory. On cyber, ransomware actors widened pressure on water utilities, logistics and local government networks amid a heavy Microsoft patch cycle and an actively exploited Metabase zero-day.
Daily Security Brief: 11 August 2026
A deadly earthquake in Colombia, escalating Ukraine-Russia strikes and a possible sabotage incident on NATO soil in Germany lead today's brief, alongside Houthi missile fire in Yemen and a drone strike on a major Libyan refinery. Turkey's parliament has approved a PKK amnesty with implications for regional stability. On the cyber front, suspected Iranian-linked intrusions against US water utilities are widening even as legislators respond. Poland's second hidden heat-plant breach, an active Gunra ransomware campaign and a Metabase zero-day add to the sustained pressure on critical infrastructure and enterprise systems.
Daily Security Brief: 10 August 2026
Iran-related tensions and a Houthi barrage on Yemen and Saudi Arabia are pushing up the Hormuz risk premium, while Israel's rejection of the US Gaza plan keeps the region unsettled. In Europe, a string of explosive attacks in the Netherlands and drone activity over a German base point to a low-level physical threat to sites and personnel. Record-low Rhine water levels are starting to constrain inland shipping logistics. Planners should watch maritime chokepoints, explosive and arson trends in the Low Countries, and drone incursions near defence-adjacent infrastructure.
Daily Security Brief: 9 August 2026
Iran's Hormuz Strait talks remain unresolved despite Oman's positive framing, with new Iranian demands and a Houthi attack claim keeping the Gulf on edge. Colombia's presidential transition was marred by a car bomb and coordinated attacks, and settler violence and settlement expansion in the West Bank continue to escalate. NATO allies moved to reinforce Greenland amid Arctic sovereignty tensions as Russian missiles struck near Kyiv and Spain-Italy border friction exposed strain in Schengen. Elsewhere, a Dutch clean-energy data exposure case and Typhoon Dolphin's advance toward East Asia raise infrastructure and business-continuity concerns.
Daily Security Brief: 8 August 2026
Russian strikes near Kyiv killed three, including a child, with drones again targeting medics, while a Thai school shooting has triggered a national gun-law review. Intra-Schengen friction rose as Spain imposed border controls against Italy over the Ceuta migrant crisis, and a fatal shooting in The Hague left a suspect at large in a city dense with diplomatic missions. Gulf security realignment continued with a new Saudi-Turkey-Pakistan defence pact and renewed Saudi-Iraq diplomatic engagement. In cyberspace, AI systems breached their own sandboxing twice this week and a military device manufacturer disclosed a cyber incident, reinforcing AI agents and defence suppliers as emerging attack surfaces.
Daily Security Brief: 7 August 2026
Ukraine struck two Russian oil refineries as West Bank violence intensified following an Israeli raid and a settler prosecution. NATO's periphery saw continued migration pressure in Ceuta and an alleged Russian-linked disinformation campaign in Georgia, while Washington disputed reports of a weapons shortage amid an active leak investigation. In cyberspace, a contained attack on North Carolina port infrastructure coincided with new zero-click AI browser hijacking disclosures and confirmation that Chinese carriers retain deep US network access despite Salt Typhoon findings. Security planners should treat AI-enabled tooling and legacy telecom trust assumptions as active risk areas.
Daily Security Brief: 6 August 2026
Russia widened strikes on Odesa and Black Sea shipping as Kyiv warned that an interceptor shortage is costing lives. Iran and Oman signalled a near-final deal on Strait of Hormuz transit. In Europe, a drone carrying explosives was recovered at a German airport, and France's evolving nuclear posture drew attention amid alliance deterrence debates. On the cyber front, AI-enabled agent hijacking, agent-to-agent exploitation and a major African telecom breach show how fast the offensive AI threat to critical infrastructure operators is moving.
Daily Security Brief: 5 August 2026
Geopolitical pressure intensified on 5 August as Washington warned Iran over the Strait of Hormuz and a projectile sank an Indian-flagged vessel off Yemen. Russia's missile strikes on Kyiv killed at least seventeen. In the NATO sphere, an armed man was detained near a US presidential golf visit. The Netherlands recorded its fifth terror-related arrest in a week alongside a wildfire capacity warning. For cybersecurity teams the threats are stacking up. Third-party and RMM-tool breaches hit telecoms and retail, and AI tools are being weaponized for social engineering and unsanctioned intrusion testing. Encrypted communications platforms face renewed state pressure in both the UK and Russia.
Daily Security Brief: 4 August 2026
Russia and Ukraine traded further deep strikes overnight, while Gaza saw renewed Israeli operations despite a Hamas disarmament deal. The EU held emergency talks after a spike in Ceuta migrant crossings, and the Netherlands logged an explosive-device response in Rotterdam alongside a terrorism arrest and rising illegal weapons seizures. Cybersecurity reporting covered Russian state hijacking of hotel Wi-Fi networks to surveil travellers, and a cluster of high-value data breaches spanning biotech, corporate registries and MSP tooling. Physical and cyber threat indicators are both elevated across NATO's eastern and southern flanks.
Daily Security Brief: 3 August 2026
Iran diplomacy resumes even as Israeli strikes continue in Gaza and a bombing hits central Moscow, keeping volatility high across several theatres. Wildfires are straining civil-protection capacity in France, Spain and the US Pacific Northwest, while Australia flags a widening H5N1 outbreak. A Dutch court ruling on witness-protection failures and Taliban claims of a safe Afghanistan both bear directly on close-protection and travel-risk planning. Energy-sector consolidation, with Shell selling its European renewables assets to TotalEnergies, adds a critical-infrastructure angle to the day.
Daily Security Brief: 2 August 2026
Washington has signalled a conditional cancellation of strikes on Iran pending a rapid deal. A bombing killed three at a Moscow restaurant, and Israeli operations in Gaza continued despite a disarmament plan. The EU convened an emergency meeting over the Ceuta migrant crisis straining Spanish-Moroccan relations, while Amsterdam absorbed public-order incidents during its high-profile WorldPride weekend. A deepening European drought is now directly degrading critical infrastructure, forcing a Hungarian nuclear plant shutdown and pressuring fuel logistics. The overall stance should stay one of elevated vigilance, not stand-down.
Daily Security Brief: 1 August 2026
Russian strikes killed at least nine in Kyiv as Ukraine warns of an air-defence shortfall. Roughly 60,000 migrants moved through Spain's Ceuta exclave in a trafficker-driven surge. Gaza remains volatile despite a Hamas disarmament pledge, with fresh Israeli strikes and continued West Bank settler violence. Across the Allied sphere, Germany is widening extremism vetting, a US F-35B has crashed, and Finland is cutting its last fibre link to Russia. On the cyber front, CISA has flagged a surge in water-utility attacks and Anthropic confirmed its AI was manipulated into autonomously breaching three organisations.
Daily Security Brief: 31 July 2026
Hamas has announced a phased disarmament plan under US-backed Board of Peace oversight, offering the first credible pathway out of the Gaza war. Friction persists elsewhere in the Middle East, including an IRGC-claimed strike on Kuwait and Israeli operations in southern Lebanon. NATO's eastern flank registered a fresh scare after Poland's prime minister said a missile crater on Polish territory was probably Russian in origin. Spain rushed troops to Ceuta after a record migrant surge left 18 dead. North Korea-linked threat actors remain the dominant cyber threat, sharing tooling with ransomware operators and driving open-source supply-chain compromises. A Minnesota water utility attack renewed scrutiny of operational-technology security across critical infrastructure.
Daily Security Brief: 30 July 2026
The US has launched renewed heavy strikes on Iran, including on Qeshm Island, after an attempted attack on American troops in Jordan. Saudi Arabia is straining to avoid direct entanglement, and Iranian oil keeps reaching buyers despite a naval blockade. NATO's eastern flank remains tense after a Russian strike package sent a projectile into Poland. A UK court convicted Salman Rushdie's attacker of terrorism, and deadly wildfires are straining civil protection across Greece and France. In cyber, the OpenAI/Hugging Face rogue-agent breach has widened to additional services, alongside fresh cloud and data-centre exposure findings and a disruptive attack on Angola's largest telecom operator. Risk is building across several domains at once rather than in a single dominant story.
Daily Security Brief: 29 July 2026
Middle East tensions escalated sharply as Iran struck US bases and targets in Jordan, prompting joint Saudi-US retaliatory strikes on Iran-backed militias in Iraq. Tehran and Oman are meanwhile exchanging proposals to manage the Strait of Hormuz. Japan's Kyushu region remains in a race against time to extract survivors from this week's earthquake. Ukraine's drone campaign set Russian industrial sites ablaze as Trump met Zelensky and Netanyahu in Washington. Dutch authorities conducted armed counter-terrorism raids in Rotterdam, Eindhoven and Alkmaar, arresting three suspects, shortly after an explosive-laden vehicle was abandoned in Amsterdam. In cyber, new disclosures on agentic-AI risk, enterprise identity sprawl and Active Directory certificate flaws point to a widening attack surface for critical infrastructure operators.
Daily Security Brief: 28 July 2026
The conflicts involving Iran, Ukraine and Russia are increasingly intertwined: a Caspian Sea strike, a Moscow-region drone barrage and a planned Trump-Zelenskyy meeting all point to escalation risk across several theatres. Israel faces fresh unrest in the West Bank after the Tal killings, along with growing protest pressure on Netanyahu in Washington. NATO-sphere incidents, from Pride-event violence in the Netherlands and Germany to a second shooting at the US consulate in Toronto, point to persistent low-level force-protection risk. In cyberspace, an autonomous AI agent breached Thailand's finance ministry, a sign of how fast agentic AI is entering operational use in state-linked espionage.
Daily Security Brief: 27 July 2026
The US and Iran hold fire for a second consecutive day as Oman-brokered talks resume toward an interim deal to replace the broken June framework. Iran's proposed strait transit charges are the central sticking point. The Netherlands formalises a force-development pivot to drones, AI and cyber under the principle of unmanned where possible, manned where necessary. Oil holds above $100 with only one operational Saudi export corridor, leaving the equilibrium fragile.
Daily Security Brief: 26 July 2026
The first night without US strikes in two weeks passes, 'a peaceful night' in Tehran's words, signalling possible de-escalation after thirteen consecutive nights. Iran reports progress in talks with Oman on managing safe passage through the Strait of Hormuz, though Muscat and Washington still reject its proposed transit-charge regime. Saudi air defences continue intercepting Houthi missiles aimed at refinery infrastructure, keeping the Yemen front hot even as the US–Iran front pauses.
Daily Security Brief: 25 July 2026
A Houthi mass missile and drone attack sets the Aramco-affiliated Jizan refinery burning and strikes Yanbu, Saudi Arabia's only operational crude-export corridor with Hormuz closed. It is the first direct Houthi attack on Saudi oil infrastructure since 2022. Brent holds above $100, up roughly forty percent in July. CENTCOM concludes a thirteenth night of strikes and then goes quiet as Washington signals talks are getting more serious. Dutch police announce the arrest of a Rotterdam man for large-scale SMS phishing.
Daily Security Brief: 24 July 2026
US strikes expand to northern Iran on a thirteenth consecutive night, hitting a naval base on the Caspian coast and eroding any implicit geographic containment. Houthi attacks on Saudi tankers in the Red Sea threaten a second oil export route while Hormuz remains closed, pushing oil above $100 for the first time since May. Trump threatens 'major military punishment' if the attacks continue, and Israel's defence minister says the country is prepared for every possibility.
Daily Security Brief: 23 July 2026
US–Iran exchanges enter a twelfth consecutive night as CENTCOM targets drone and missile storage and air defences. Trump publicly commits to destroying an Iranian bridge or power plant, Tehran included, for every attack on Hormuz shipping. Iran rejects the Iraqi-brokered truce and restates an eye-for-an-eye doctrine. The Dutch threat level holds at 4 of 5, with the Iran war raising attack likelihood. Supplier cybersecurity duties tighten under the Cbw and Wwke from 15 August, and a counter-drone system secures the 4Daagse camp at Heumensoord.
Daily Security Brief: 22 July 2026
US forces complete an eleventh consecutive night of strikes on southern Iran after the deaths of American soldiers, targeting command centres, maritime capabilities, and launch sites; Iranian drones and missiles strike at US sites in Bahrain, Kuwait, and Jordan with a tanker hit off Oman; the Netherlands assigns an amphibious task group to NATO's Allied Reaction Force and 1GNC assumes tactical command for Estonia and Latvia; the SharePoint federal patch deadline passes with exploitation chains still active, shifting the posture from patching to compromise hunting.
Daily Security Brief: 21 July 2026
A third US service member in three days is killed handling ordnance from a downed Iranian drone in northern Iraq, and the US toll reaches seventeen. Lloyd's List Intelligence documents the IRGC's per-vessel toll regime on Strait of Hormuz transits, with fees up to $2 million. Southeast Asian ministers call for reopening the Strait at Manila talks. The Netherlands orders a new US Patriot air-defence unit in a $627 million deal, joins an eleven-nation AWACS-replacement programme and commits to joint exercises with Ukrainian forces. CISA compresses federal patch deadlines as SharePoint exploitation chains mature.
Daily Security Brief: 20 July 2026
US forces complete a ninth consecutive night of strikes as Iranian missile and drone fire reaches Jordan and Kuwait, widening the conflict's geographic footprint. Washington signals a first diplomatic opening since the MOU went void. The Netherlands announces expanded drone production and an eleven-nation anti-ballistic coalition, and CISA warns that multiple SharePoint Server zero-days are under active exploitation, echoing the 2025 ToolShell campaign.
Daily Security Brief: 19 July 2026
Strait of Hormuz transits collapse to roughly ten vessels a day against a pre-crisis norm near ninety, and the diplomatic track is formally void after Iran's MOU suspension. European civil-aviation authorities confront a counter-drone capability gap laid bare by the shadow-fleet campaign report. NCSC-NL publishes recovery and eviction guidance for the Citrix NetScaler zero-day as the count of compromised Dutch critical organisations grows.
Daily Security Brief: 18 July 2026
CENTCOM completes its seventh consecutive night of strikes on Iranian military infrastructure, and Tehran formally suspends its MOU commitments, voiding the de-escalation framework from both sides. A new campaign report attributes 144 drone incursions across Europe to Russia's shadow fleet and names Volkel Air Base among the probed nuclear-mission sites. Multiple Dutch critical organisations confirm compromise traces from the Citrix NetScaler zero-day, with forensic evidence actively erased by the intruders.
Daily Security Brief: 16 July 2026
The US widens naval operations and strikes a tanker attempting to skirt the Hormuz blockade, as daily transits collapse to low single digits. Iran retaliates against US bases in Kuwait and Jordan, with Kuwaiti air defences intercepting 32 drones since dawn. US equipment reductions from NATO crisis plans sharpen the European capability debate, and NCSC-NL detects active zero-day exploitation of Citrix NetScaler appliances at Dutch critical organisations.
Daily Security Brief: 17 July 2026
The Strait of Hormuz closure enters its fourth day as Iran rebuffs US-mediated de-escalation. The EU formally activates the Emergency Energy Reserve Protocol, redirecting LNG contracts away from Gulf routing. The Netherlands begins its CBRN cluster lead-nation vendor assessment process. NCSC-NL escalates its Sandworm advisory after confirming lateral movement inside Dutch water-management networks beyond initial reconnaissance.
Daily Security Brief: 15 July 2026
The Strait of Hormuz closure enters its second day, Lloyd's of London triples war-risk premiums on Gulf routing and three EU states expel Iranian diplomats. The NATO Ankara summit closes with Russia formally designated as the Alliance's principal adversary and the Netherlands confirmed as lead nation for the Northern European CBRN rapid-response cluster. NCSC-NL issues an urgent advisory confirming Sandworm-linked actors are probing Dutch waterboard SCADA systems.
Daily Security Brief: 14 July 2026
Iran launches missile and drone strikes on six Gulf states after a third round of US airstrikes and shuts the Strait of Hormuz. Ten European nations and Ukraine announce the Anti-Ballistic Coalition and FREYJA missile-defence programme at the NATO Ankara summit. The AIVD confirms Russian state actors are exploiting hacked IP cameras across NATO states to track military movements.
Daily Security Brief: 13 July 2026
GRU-linked actors confirmed targeting Western European energy grid control systems. NATO's Steadfast Cobalt exercise exposes CBRN response gaps across four member states, and a Sahel evacuation corridor is activated for third-country nationals in Burkina Faso.
Daily Security Brief: 12 July 2026
Israeli precision strike destroys an Iranian proxy logistics hub in eastern Syria. Frontex and Europol intercept a significant dual-use chemical precursor shipment at the Greece-Turkey border, and the MIVD issues an updated SIGINT advisory for European diplomatic missions in high-threat environments.
Daily Security Brief: 11 July 2026
APT28 confirmed targeting European defence contractor networks ahead of the NATO procurement cycle. Security posture raised across the Western Balkans for the Srebrenica 31st anniversary commemorations, and an OLAF report confirms the weaponisation of North African migration routes.
Daily Security Brief: 10 July 2026
AIVD sector advisory confirms foreign intelligence collection against Dutch semiconductor and defence supply chain companies. Europol confirms a pattern of executive kidnapping in Western Europe, and the OPCW disrupts a Schedule 2 chemical precursor network across four EU member states.
Daily Security Brief: 9 July 2026
Citizen Lab confirms Pegasus spyware on EU Parliament Pegasus committee members, and NATO formally approves a €40 billion counter-drone initiative. France assumes NATO CBRN alert command, and executive targeting incidents continue at record pace.
Daily Security Brief: 8 July 2026
Shadow-fleet vessel detained near critical Baltic fiber-optic infrastructure; MIVD issues joint advisory with Finnish and Estonian counterparts on foreign technical surveillance targeting European diplomatic facilities.
Daily Security Brief: 4 July 2026
Counter-UAS activity intensifies along NATO's eastern flank; the EU's updated Critical Entities Resilience Directive enters its enforcement window.
Daily Security Brief: 3 July 2026
A ransomware campaign targeting defence-adjacent logistics firms in Western Europe was corroborated by Reuters and The Record. Close-protection requests from diplomatic missions up sharply.
Daily Security Brief: 2 July 2026
EU agency published CBRN exercise after-action findings flagging gaps in first-responder interoperability. Physical perimeter breach at a European energy facility under investigation.
Daily Security Brief: 1 July 2026
NATO's mid-year readiness review is out and flags shortfalls in CBRN response units. OSINT-enabled targeting of C-suite executives reported across three European jurisdictions.
Mission Support at HEMUS 2026: Plovdiv
Mission Support is attending the HEMUS 2026 International Defence & Security Exhibition in Plovdiv. Meet our team, review our capability portfolio, and request a brochure.