Monday, 27 July 2026

US and Iran hold fire for a second consecutive day as Muscat channel works toward an interim deal

Neither the United States nor Iran launched strikes for a second day running. A senior Iranian official told Reuters that Tehran will hold its fire for as long as Washington keeps up the pause, the clearest two-way signal since the June ceasefire framework collapsed. Diplomacy now centres on an interim arrangement, negotiated through Oman, to replace the broken memorandum. Security planners should read this narrowly. It is a pause with a stated condition, not a settlement, and that condition can be broken by a single Houthi launch, a maritime incident or a proxy action that neither capital fully controls. If you raised travel-risk levels, rerouted shipping or activated duty-of-care protocols for Gulf staff during the strike campaign, keep those measures in place through at least one full negotiation cycle. Don't unwind them on the first quiet weekend. The easiest mistake this week is declaring normality too early. The next easiest is failing to use the lull to restock, rotate and re-brief the people who have been on high alert for a month.

Mission Support's advisory and intelligence team helps you decide when to hold, adjust or wind down heightened security measures as a conflict calms.

Hormuz endgame turns on tolls: Iran wants mandatory fees, Oman floats a Malacca-style voluntary model

The unresolved core of the interim talks is whether ships passing through the Strait of Hormuz will have to pay. Tehran wants mandatory navigation fees under a new regime for administering the strait. Oman, which the June memorandum named to define future maritime services with other coastal states, opposes compulsory tolls. It is reportedly exploring models closer to the voluntary contributions used in the Strait of Malacca or Türkiye's Bosphorus transit charges. The commercial effects differ hugely. A mandatory fee would force every charterer, insurer and trading house into direct financial dealings with entities that may stay under sanctions. A voluntary scheme would mostly reprice risk premiums. If your supply chain runs through the Gulf, model both outcomes now instead of waiting for the negotiated answer. Include the compliance question of whether paying a mandatory Iranian transit fee would even be lawful under existing sanctions. Whatever comes out of Muscat will set a precedent that every other chokepoint state in the world is watching.

Interpol and Europol renew cybercrime cooperation as identity-based attacks overtake software flaws

Interpol and Europol have renewed their cooperation agreement and set new joint operational priorities against cybercrime. The institutional news coincides with a telling shift in the threat data. Recent European analysis shows that identity-based attacks, led by compromised credentials and phishing, have overtaken software vulnerabilities as the most common root cause of ransomware incidents. That changes where your next security euro should go. Patch discipline is still necessary, but the main way in now runs through people and credentials: stolen passwords, session tokens, MFA fatigue and ever more convincing social engineering. So identity management, phishing-resistant authentication and staff awareness cut more risk per euro than another perimeter appliance. For Dutch organisations the practical checklist is short. List which systems still accept a password alone. Close dormant accounts that still hold privileges. Rehearse the stolen-credentials scenario as seriously as the malware one. An attacker who logs in looks like an employee until the damage is done.

Mission Support's cyber security team helps you tighten identity, access and staff awareness, the routes attackers now use most.

"Unmanned where possible": the Dutch Defence Strategy's pivot to drones, AI and cyber reshapes the national security market

The Defence Strategy published at the end of June, built on the principle "unmanned where possible, manned where necessary", is turning into concrete programmes. Within five years unmanned systems are expected to make up more than half of operational capability. The plan is backed by roughly €20 billion in extra spending by 2035 and a software-first partnership with Dutch industry to build a drone ecosystem. For the civilian security sector this creates structural demand. Every new drone, AI and cyber programme widens the circle of Dutch companies holding defence-relevant information. Hostile intelligence services have shown in 2026, through documented sabotage, insider-recruitment and reconnaissance cases across Europe, that this supply chain is actively targeted. Firms taking on defence work for the first time inherit obligations most have never worked under. They include staff screening beyond the standard VOG, strict contractor and visitor rules at development sites, counter-surveillance awareness for programme staff, and technical sweeps of the rooms where designs are discussed. The strategy also makes counter-drone thinking normal far beyond the military. Airports, ports, events and corporate campuses will increasingly be expected to have an answer to the unmanned threat they now share.

Mission Support runs TSCM sweep and technical-assurance programmes for companies moving into defence and government supply chains.

Heat week ahead: peaks near 36°C on Wednesday put outdoor security operations under heat protocols

The Netherlands is entering a sustained hot spell this week, with temperatures climbing toward peaks near 36°C on Wednesday. It comes just as WorldPride fills Amsterdam's streets with two weeks of outdoor events. For security operations, heat is an operational load, not a comfort issue. Static guard posts, event stewarding, crowd management and dog teams all perform measurably worse in sustained heat. Alertness drops, rotations must be shorter, protective gear and ballistic vests raise body temperature faster, and medical incidents in crowds multiply. Those incidents use up the same response capacity that security incidents would need. If you run outdoor posts this week, shorten rotations, firm up water and shade logistics, and brief supervisors on recognising heat illness. Agree in advance with event medical services where a medical response ends and a security response begins. Control rooms should expect the classic hot-weather pattern (more alcohol, more fights, more medical calls, shorter tempers in queues) and staff accordingly. The forecast is public. An unprepared roster on Wednesday is a planning failure, not bad luck.

Mission Support's training and resilience programmes prepare security teams to work in hard conditions, including heat.