Friday, 7 August 2026

Ukraine strikes deep into Russia, hitting two oil refineries

Ukrainian forces struck two oil refineries deep inside Russian territory, continuing a pattern of long-range attacks on energy infrastructure far beyond the front line. Such strikes cut refined product supply, tighten regional fuel markets and raise the chance of Russian retaliation against energy and logistics targets. That includes possible cyber operations against Western utilities and pipeline operators. If your operations, supply chains or staff are connected to Eastern European energy markets, expect more volatility in fuel pricing and transport reliability. There is also a higher risk of collateral disruption to rail, port and pipeline infrastructure used for wider European energy flows. Treat this as a live indicator of an intensifying campaign against energy assets, not an isolated event. Stress-test your fuel supply contingencies. Diversify logistics routes where you depend on the affected corridors. Brief travelling staff on the worsening security picture in border regions. Ask your intelligence monitoring to cover both the physical strikes and the retaliatory cyber activity that usually follows within days.

Our advisory-intelligence team follows strikes on energy infrastructure and what they mean for clients with exposure in the region.

AI used to design viruses not found in nature for the first time

Researchers have for the first time used artificial intelligence to design viral genomes not found in nature, a milestone that sharpens long-standing dual-use concerns in synthetic biology. The capability to generate novel pathogens computationally lowers technical barriers that previously constrained who could attempt such work, and raises the stakes for biosecurity screening across research institutions, pharmaceutical manufacturers, and gene-synthesis suppliers. While the reported work is presented as scientific advancement, the same tools could in principle be misused to design agents that evade existing detection or countermeasures, a scenario regulators and biosecurity bodies are only beginning to address. Organisations operating laboratories, biomanufacturing facilities, or research partnerships should treat this development as an accelerant to existing hazardous-materials risk registers rather than a distant threat. Practical steps include tightening know-your-customer screening for DNA synthesis orders, auditing physical and cyber access controls around sensitive genomic data and lab systems, reviewing incident response plans for biological release scenarios, and briefing leadership on the pace at which AI is compressing the timeline between capability and misuse in the life sciences sector.

AI browsers exposed to 'PleaseFix' zero-click agent hijacking

Security researchers have disclosed a zero-click vulnerability, dubbed 'PleaseFix', that lets attackers hijack AI-powered browser agents with no user interaction at all. Separate reporting notes that no complete fix exists for the broader class of prompt-injection flaws affecting these tools. More and more organisations use agentic AI browsers for research, procurement and customer-facing automation. This kind of flaw opens a direct path to data exfiltration, unauthorised transactions and movement into connected systems, without any of the visible phishing cues that awareness training covers. The problem is structural in how these agents read web content, not a single patchable bug, so you cannot rely on a vendor fix alone. Inventory where agentic AI browser tools are in use across the business. Cut their permissions and data access to the minimum they need. Keep them away from systems holding sensitive financial or client data. Follow vendor advisories closely, because follow-on exploits are likely. Tell the staff who use these tools that the AI agent itself is now an attack surface.

Our cyber security practice reviews and hardens agentic AI tooling before it turns into an unmonitored attack surface.

Thousands of migrants remain in Ceuta as border pressure persists

Local leaders report that thousands of migrants remain in Ceuta, the Spanish enclave in North Africa, months after the latest border crisis. Pressure on this EU external frontier has not eased. Sustained migratory pressure at Ceuta and in the wider Strait of Gibraltar corridor raises the chance of periodic unrest and strain on local authorities. It also brings intermittent disruption at the border crossings used for freight and staff movement between Morocco and Spain. If you have logistics, manufacturing or travel exposure through this corridor, treat it as a standing risk factor rather than a one-off event. Transport schedules and local security conditions can both be affected. It also points to continued strain on EU migration and border management. That can change compliance and screening obligations for firms running cross-border logistics or workforce mobility programmes in the region. Keep travel and logistics advisories for Ceuta, Melilla and the Strait crossing points up to date. Build buffers into schedules for freight that depends on this route. Watch for escalation indicators that could affect staff safety or asset security nearby.

Two convicted over death of French livestreamer

A French court has convicted two men over the death of a livestreamer. The case has drawn wide attention to the lack of safeguards around content made under extreme or abusive conditions for online audiences. The ruling establishes that individuals, and by extension the organisations that facilitate or sponsor such content, can face criminal liability when they neglect their duty of care towards participants. That matters to anyone producing, sponsoring or partnering with streamers, influencers or talent for branded content, live events or stunts. It matters most where physical risk, sleep deprivation or audience-driven escalation is part of the format. Insurers, legal counsel and security teams should read this as a precedent: courts are willing to assign responsibility beyond the immediate perpetrators. Run formal risk assessments and welfare checks for any sponsored live or filmed content that involves physical risk. Put duty-of-care clauses in contracts with production partners and talent. Arrange medical and security standby on site for high-risk shoots. Check a streaming partner's safety record before you sign a sponsorship or collaboration.

Our specialist operations team sets up duty-of-care and on-site safety procedures for high-risk branded and live productions.

Man killed in Rotterdam apartment fire

A fire in a Rotterdam apartment building has left one person dead. Fire remains one of the most common and least predictable threats to occupied buildings in the Netherlands. Are you responsible for staff housing, corporate accommodation or hospitality properties in urban residential blocks? A fatal fire like this shows the gap that can open between statutory fire safety compliance and real-world response times. That gap is widest in older or densely occupied buildings. Response speed often decides whether an incident stays contained or costs a life. That puts the emphasis on monitored alarms, direct links to emergency services and the ability to get people on site fast, rather than on compliance checklists alone. If you manage residential or mixed-use property, or house executives and staff, use this as a prompt to verify a few things. Check that fire and smoke detection is monitored around the clock. Test your alarm response procedures instead of assuming they work. Make sure evacuation plans account for residents who may arrive at short notice, including protected individuals and visiting staff.

Our alarm and mobile response service gets verified, on-site intervention to monitored properties within minutes of an alert.

Firefighter hit by fire truck battling Oudorp dune wildfire

A firefighter was struck by a fire truck while battling a wildfire in the dunes near Oudorp. The incident reflects the strain that dry conditions are putting on Dutch emergency services this summer. Wildfires in dune and heathland areas are becoming a regular feature of Dutch risk. The consequences reach beyond the burn area: smoke exposure, road closures and emergency response capacity pulled away from nearby sites. Do you run facilities near coastal dunes, nature reserves or other areas thick with vegetation? For logistics hubs, data centres and tourism or hospitality venues alike, wildfire is a live operational risk, not a remote possibility. Review your site-specific wildfire and smoke contingency plans. Set up direct lines of communication with the local fire brigade before the next high-risk dry spell. Keep perimeter and access routes clear for emergency vehicles. Brief on-site security and facilities teams on the evacuation triggers tied to official drought and fire-danger advisories.

Drought pushes up Dutch energy bills as cooling water grows scarce

Persistent drought is cutting the amount of cooling water available to Dutch power plants, and that is pushing energy bills higher across the Netherlands. The cost is only part of it. Less cooling water is a direct signal of climate pressure on electricity generation, which raises the prospect of tighter margins, output limits or reliability problems during future heatwaves and dry spells. If you depend on stable, high-availability power, as data centres, manufacturing sites and logistics operations do, this is a business continuity issue rather than a purely financial one. Generation constraints can mean voltage instability or, in extreme cases, local curtailment. Security and facilities teams should treat climate pressure on infrastructure alongside more traditional threats in resilience planning. Review backup power and UPS readiness before peak heat. Assess your exposure to rising and potentially volatile energy costs. Talk to your utility providers about reliability guarantees for critical sites. Fold drought and heat advisories into the same monitoring you use for other infrastructure risks of national importance.