Friday, 17 July 2026

US Embassy Jerusalem issues security alert as regional hostilities continue

The US Embassy in Jerusalem issued a security alert on 17 July. It advises American citizens in the region to stay extra vigilant during the ongoing hostilities between the United States and Iran. They should keep travel documents up to date, follow official channels and review personal security plans. For professional risk managers, alerts like this do two jobs. Beyond the advice itself, they are a calibrated signal of the official threat assessment: embassies issue them when internal analysis points to a materially higher chance of incidents affecting their nationals. If you have staff in Israel and the wider region, match the embassy's stance. Check that your equivalent of a warden system works: does every employee know who calls whom, and does the list still work if the phone network degrades? Confirm that assembly points and shelters can still be reached under current movement conditions. Decide in advance when non-essential staff leave, instead of debating it mid-crisis. When diplomatic missions reduce their own presence, companies should take that signal seriously.

Our advisory and intelligence team helps you turn official alerts like this one into concrete decisions about your staff.

PLA aircraft and warships continue operations around Taiwan; six sorties cross the median line

Taiwan's Ministry of National Defense reported nine sorties by PLA aircraft, seven navy vessels and two official ships around Taiwan as of 06:00 local time on 17 July. Six of the nine sorties crossed the median line of the Taiwan Strait and entered Taiwan's northern response areas. The activity follows last week's four-day live-fire exercise, which encircled the island and disrupted civil aviation and shipping. It fits the established pattern of near-continuous joint combat patrols designed to reset what counts as a 'normal' military presence in the strait. For organisations with regional exposure, that normalisation is the operational point. Each cycle of heightened activity shortens the warning a genuine escalation would give, because the early indicators increasingly look like background noise. Contingency plans that use 'unusual PLA activity' as a trigger need sharper indicators, such as sustained exclusion zones, reserve mobilisation and cyber pre-positioning. Sortie counts no longer separate signal from routine.

Qatar intercepts second wave of Iranian air attacks; second national mobile security alert issued

Qatar's defence ministry said on the morning of Friday 17 July that it was intercepting a number of air attacks. It is the second time the country has come under Iranian fire, and a second government security alert went out to mobile phones nationwide. Jordan's armed forces separately reported intercepting three Iranian missiles aimed at its territory. The repeated strikes on Gulf states hosting US forces confirm that Iran's retaliation strategy treats host-nation territory as a legitimate target, which puts major commercial and expatriate hubs within range. The use of national mass-notification systems matters for corporate security, because employer messages now have to work alongside government alerts, not in isolation. In Qatar and neighbouring states, check that staff have government alert channels switched on. Internal crisis messages should reference and support official instructions rather than contradict them. Shelter guidance should separate ballistic missile warnings, which give minutes, from drone threats, which may give none.

We provide close protection and crisis-response support for staff in Gulf states that are now within range of these attacks.

France and Germany deepen defence cooperation; German troops to join French nuclear exercise for the first time

On 17 July the leaders of France and Germany pledged to deepen their defence cooperation. German troops will, for the first time, take part in a French nuclear exercise. It is a symbolically weighty step for European strategic autonomy. During the meeting they inspected an air base where a nuclear-capable French Rafale refuelled alongside a German Eurofighter, and both governments committed to countering growing economic competition from China. Faster European defence integration has practical effects for the security sector. Rising defence budgets are already tightening the market for cleared staff, protective services and secure logistics. Defence-industrial growth also creates new high-value sites, such as production plants, test ranges and supplier clusters, that need protection against espionage and sabotage. Firms in defence supply chains should expect stricter security requirements from prime contractors and ministries, including personnel vetting, facility accreditation and counter-intelligence awareness, arriving with the contract rather than after it.

Our advisory team helps defence suppliers put facility security and counter-espionage measures in place before a contract requires them.

Investigation details Moroccan Pegasus operation spanning 12,000 devices in over 20 countries, including European targets

An investigation published on 17 July set out the scale of the alleged Pegasus spyware operation run by Morocco's DGST domestic security service. It is based on a target list obtained by the Spanish newspaper El Confidencial. More than 12,000 devices in over 20 countries were allegedly selected for compromise in 2018–2019, including French targets and European journalists. Morocco has previously denied using the NSO Group tool. For European organisations, the lesson is less about the historical details and more about how the commercial spyware market works. State customers buy interception capability at scale, target selection reaches deep into civil society and business, and attempted compromises leave few traces a user would notice. Executives, advisers and staff handling sensitive negotiations should assume their phones are actively targeted. The practical countermeasures still work. Keep devices patched, hold high-value discussions in swept, device-free rooms, give sensitive roles hardened or dedicated devices, and arrange periodic technical screening for the people most exposed.

We run TSCM sweeps and set up device-free meeting procedures for boards and executive teams handling sensitive negotiations.

Dutch police make series of weapons and violence arrests, including two men held in Vondelpark for suspected firearm possession

Dutch police made a series of weapons- and violence-related arrests on Friday 17 July. Two men were arrested in Amsterdam's Vondelpark on suspicion of carrying firearms, and three people were detained that morning over two violent incidents, including an attempted manslaughter. Firearms in busy public spaces such as city parks sit awkwardly between organised-crime violence and spontaneous public disorder. They are also the setting where protection details, event stewards and static guards most often work. The practical lesson is about detection and readiness. Weapon indicators, such as adjusted clothing, the carrier checking the weapon by touch, and an uneven gait, are observation skills that can be trained. Spotting them early buys the seconds that decide whether an armed encounter is avoided, contained or survived. If your staff work in public-facing roles, add weapons-awareness modules to their training cycle, with clear instructions to withdraw and call the police rather than intervene.

We train security officers on public-facing posts to recognise threats such as weapon indicators, and to de-escalate.

World Music Contest draws 300,000 international visitors to Kerkrade in weeks-long large-event security operation

The World Music Contest in Kerkrade is in full swing, bringing more than 20,000 musicians and about 300,000 visitors from every continent to the Parkstad region. It is one of the largest sustained international gatherings in the Netherlands this summer, running alongside the build-up to the Vierdaagse in Nijmegen. Multi-week events of this size carry a different security profile from single-day ones. Exposure builds up over time, and the crowd is heavily international, with the consular and language issues that brings. Volunteer stewards tire in the later weeks, just as familiarity lets procedures slip. Event security managers should treat the middle of the event as the highest-risk phase for weakening access control and plan specific countermeasures. Rotate stewards between posts, hold refresher briefings between event phases and run unannounced checks on accreditation and entry screening. Keep a clear route to scale up again if the national or regional threat picture changes during the event.

We plan and staff security for large and multi-day events, including the mid-event checks a gathering like this needs.

RIVM deactivates National Heat Plan from 17 July — a marker for standing down heat protocols in outdoor security operations

The RIVM announced that the National Heat Plan is no longer active anywhere in the country as of 17 July. That closes the latest activation in a summer that has already brought several official heatwaves to the Netherlands. For operational security providers, the deactivation is a useful planning marker, but the stand-down should be structured, not sudden. Guards, event stewards, close protection officers and mobile response drivers working outdoors build up heat strain across consecutive shifts. The days after a hot spell still carry a higher risk of fatigue and dehydration. Duty managers should use the transition to review how their heat procedures actually worked. Look at hydration logistics, timing of shift rotation, changes to uniforms and body armour, and whether staff recognised the signs of heat illness. Write down the lessons while they are fresh. Climate trends make repeat activations near-certain, so heat resilience is becoming a standing skill for the security workforce rather than an exceptional measure.

We plan heat and welfare measures into every guarding and protection deployment we staff.