Tuesday, 11 August 2026

Drone attack sparks major fire at Libya's largest oil refinery

A drone attack ignited a major fire at Libya's Zawiya refinery, the country's largest, on 11 August. It shows how exposed Mediterranean energy infrastructure is while Libya's political and military scene stays fractured. Zawiya is a critical node in Libya's oil export chain and a source of refined products reaching European markets. Disruption there can ripple through regional fuel supply chains and the insurance markets covering North African assets. The attack proves something specific. Non-state actors and rival factions have both the intent and the drone capability to hit hardened industrial sites, and not only battlefield targets. That should register with anyone whose staff, contractors or supply relationships are tied to Libyan energy infrastructure. Corporate security teams should keep treating Libya as a persistently high-risk environment. Review duty-of-care obligations for staff travelling through or based near Tripoli, Zawiya or the western coastal corridor. Validate business continuity plans for supply contracts that depend on Libyan refined product. Step up monitoring of open-source and classified reporting on militia activity around energy assets. Insurers and traders should also expect swings in regional freight and war-risk premiums after the strike.

Cyberattacks on US water systems widen, Iran suspected

Dark Reading reports that a wave of cyberattacks against US water utilities has widened, with Iranian state-linked actors suspected of targeting the operational technology (OT) that controls treatment and distribution systems. The incidents are US-based, but the pattern matters directly to European and Dutch critical infrastructure operators. Iranian and Iran-aligned threat actors have a documented history of probing Western OT environments opportunistically once tooling and access prove effective in one campaign. Water, energy and other utilities across the EU share similar legacy industrial control system architectures and the same weaknesses in remote access. Treat this as an early warning rather than a distant problem. Audit remote access into OT/ICS environments. Enforce network segmentation between IT and OT. Verify that default or vendor credentials on PLCs and HMIs have been changed. Make sure incident response plans cover the physical safety consequences of an OT compromise as well as data loss. Boards should also ask critical suppliers in the water and energy sectors to confirm they have equivalent controls in place.

Mission Support's cyber security practice helps critical-infrastructure operators harden OT/ICS environments against state-linked intrusion campaigns.

Houthis launch ballistic missile strikes on Yemen's al-Makha and Marib

Houthi forces launched ballistic missile strikes on al-Makha and Marib in Yemen on 11 August. The group evidently keeps both the intent and the capability for long-range strikes well beyond the Red Sea shipping lanes that have dominated recent risk assessments. Al-Makha sits on the strategic Bab el-Mandeb approach, and Marib is a key government-held oil and gas centre. Strikes on either location affect regional energy output and the wider risk picture around Yemen's fragile ceasefire arrangements. The conflict is active and unpredictable rather than frozen. That matters for maritime, aviation, energy or personnel exposure in the Gulf of Aden, the Red Sea and the southern Arabian Peninsula. Keep maritime security advisories current for vessels transiting the Bab el-Mandeb and the Gulf of Aden. Reassess insurance and routing decisions for any shipping near Yemen. Update travel risk assessments for regional business trips to reflect the renewed missile activity, rather than outdated ceasefire assumptions. Energy traders should also watch for knock-on effects on regional oil infrastructure and pricing.

DNA traces found on explosive drone near Ukrainian aircraft in Germany

Dutch broadcaster NOS reports that German investigators have recovered DNA traces on an explosive-laden drone found near a Ukrainian aircraft in Germany. The find deepens a sabotage investigation that points to deliberate targeting of Ukraine-linked aviation assets on European soil. The case fits a broader pattern of hybrid and sabotage activity attributed to Russia-linked networks across the EU over the past two years, including attacks on logistics, defence-industry and transport infrastructure. If you operate aircraft, logistics hubs or facilities connected to Ukraine-related supply chains or defence contracts inside the EU, review perimeter and airspace security now. Counter-drone detection at airfields, depots and event venues deserves particular attention. Commission counter-UAS threat assessments for exposed sites. Tighten access control and CCTV coverage around parked aircraft and vehicles. Brief security staff to treat an unexplained small drone near a sensitive asset as a credible threat rather than a nuisance. Coordinate reporting protocols with national authorities as well, given the live criminal investigation and the chance of further related incidents.

Mission Support's specialist operations team delivers counter-UAS threat assessments and detection for aviation, logistics and event sites exposed to drone sabotage.

Turkish parliament approves amnesty for PKK members

Turkey's parliament has approved an amnesty for PKK members, a significant step in a peace process aimed at ending a four-decade conflict. That conflict has shaped security across Turkey, Iraq, Syria and the Kurdish diaspora in Europe. At home the amnesty is presented as de-escalation, but it carries second-order implications for European security planning. It may change the risk profile of Kurdish diaspora communities and related political activity in EU member states, and alter cross-border movement patterns. It may also shape Turkey's line on counter-terrorism cooperation with European partners. If you operate in Turkey, or have interests touching Turkish-Kurdish relations, energy transit through Turkey or diaspora-linked events in Europe, follow the implementation closely. Do not assume the process is complete or irreversible, because Turkish peace initiatives have stalled before. Update country risk assessments for Turkey and northern Iraq to reflect the shifting politics. Review event security plans for gatherings linked to Kurdish political organisations in EU cities. Keep contact with local intelligence sources so you spot early signs of the process breaking down.

Police seize 586kg of drugs from The Hague home, arrest nine

Dutch police seized 586 kilograms of drugs from a residential property in The Hague and arrested nine men. It is the latest in a string of large narcotics finds. Together they show how deeply organised crime networks have embedded themselves in ordinary residential and logistics settings across the Netherlands. Criminal storage and distribution infrastructure is not confined to industrial estates or the port of Rotterdam. Quiet residential neighbourhoods, rented properties and small business premises are used routinely as staging points. For security and compliance teams, the case makes the case for thorough know-your-tenant and know-your-counterparty checks when leasing, subletting or partnering with third parties on Dutch property. That applies especially in logistics, self-storage and short-term rental. Treat unusual patterns at leased or managed properties as something to escalate: irregular visitor traffic, reinforced doors, unexplained cash payments. The Dutch narcotics trade is large. Businesses close to logistics, ports or property management should keep in regular contact with local police, and build organised-crime indicators into routine due diligence.

'Taghi of Curaçao' stands trial in EBI as prosecutors cite decrypted communications

The Dutch trial of the man dubbed the 'Taghi of Curaçao', held under maximum-security conditions at the EBI, turns in part on prosecutors' use of decrypted communications as key evidence. It is the latest high-profile Dutch case built on intercepted encrypted messaging after major law-enforcement operations against criminal communication networks. We have tracked the pattern closely. Dutch and European organised crime figures have leaned heavily on encrypted devices and custom communication platforms. As law enforcement gets better at penetrating those networks, criminal organisations are changing how they work, with more counter-surveillance and more compartmentalised communication. Capable adversaries, whether criminal, corporate or state-linked, keep investing in both interception and counter-surveillance. That is the lesson for companies, executives and high-net-worth individuals working in or with the Netherlands. If you handle sensitive communications, negotiations or litigation exposure in the Netherlands, commission periodic technical surveillance countermeasures sweeps of boardrooms and executive spaces. Review how well protected the communication tools you use for sensitive discussions actually are.

Mission Support's TSCM specialists run discreet sweeps to find eavesdropping devices and protect sensitive conversations in boardrooms and executive offices.

Over 520 discrimination reports filed during Amsterdam WorldPride

More than 520 discrimination reports were filed during Amsterdam WorldPride, which gives a sense of the public-order and personal-safety risk that comes with major international events in the Netherlands. Most of those reports concern verbal incidents rather than physical violence. The volume still points to a tense environment around large LGBTQ+ events. Venues, hospitality operators and event organisers should plan for that explicitly instead of treating it as background risk. Do you host attendees, VIPs or staff connected to WorldPride and similar events? The figures argue for a visible, well-briefed security presence and clear incident-reporting channels for guests and staff. They also argue for close coordination with Amsterdam police on real-time intelligence during the event. If you send executives or delegations, or put your brand at Pride-related functions, personal security planning should cover the higher risk of harassment, alongside crowd and access control. Hospitality and event-security teams in Amsterdam can use this year's figures as a baseline for scaling protective measures at comparable future events, rather than as a one-off statistic.

Mission Support's hospitality security services put trained, visible officers and incident response at venues and events during high-profile gatherings.