Friday, 14 August 2026

Salvage Effort Launched as Tanker Leaks Sanctioned Russian Crude Off Oman

Salvage crews have started work on a tanker leaking oil off the coast of Oman. A maritime risk firm has confirmed the vessel was carrying sanctioned Russian crude when the spill happened. The case shows the growing hazard of the so-called "shadow fleet": ageing tankers with opaque insurance that move sanctioned oil outside normal shipping and insurance frameworks. More and more of them pass through the Gulf of Oman and the wider Indian Ocean approaches to the Strait of Hormuz. If you have maritime exposure through chartered vessels, port operations, offshore assets or supply chains routed through the region, sanctions-linked shipping brings higher environmental, reputational and operational risk. Substandard vessels have more accidents, salvage and clean-up can be slow, and insurers may dispute cover. Check your counterparties and charter chains for sanctions exposure. Watch vessel-tracking data for irregular transponder behaviour near your routes, and plan for regional maritime disruption. Executive travel and logistics teams working in Gulf waters should read this as a live sign of rising risk in a chokepoint that has long been sensitive.

Our advisory intelligence team tracks shadow-fleet and sanctions-linked shipping risk for clients with interests in the region.

North Korea Warns of Response as US-South Korea Drills Loom

Pyongyang has issued a sharp protest ahead of planned joint military exercises between the United States and South Korea. It is a decades-old pattern: large allied drills on the peninsula draw North Korean condemnation and, at times, retaliatory missile or artillery activity. The drills are scheduled and defensive in nature. The diplomatic friction around them, though, periodically brings higher regional tension, airspace and shipping advisories, and occasional market volatility in Northeast Asia. If you have staff, offices or supply chains in South Korea, Japan or the wider region, treat the run-up to the drills as a time for extra vigilance rather than crisis mode. Review duty-of-care plans for staff based in Seoul, check that emergency call trees are current, and follow official travel advisories as the exercises approach. Firms that rely on regional shipping lanes, or on the semiconductor and electronics supply chains concentrated in the area, should allow for short-notice disruption. The cycle repeats and is largely predictable, so planning ahead pays off.

Global Exploitation Campaign Targets Critical VMware vCenter Vulnerability

Security researchers have found an active, global campaign exploiting a critical vulnerability in VMware vCenter. vCenter is the management platform behind the virtualised infrastructure of a large share of mid-size and enterprise organisations. Because it sits at the administrative core of virtual server environments, a successful attack can give intruders broad control over your entire virtual estate. That includes the ability to access, clone or destroy virtual machines that host sensitive data, financial systems and operational technology. Threat actors move fast once a critical flaw in hypervisor management becomes known, and the scale and speed of this campaign fit that pattern. Unpatched systems have little time left. Security and IT leads should act now: confirm the patch status of every vCenter instance, limit access to the management interface to trusted networks, and check recent admin logs for unusual activity. Make sure offline, tested backups exist for critical virtual machines. If you outsource infrastructure management, ask your provider for written confirmation that affected systems have been fixed. Given how central the platform is, this needs action this week, outside the routine patch cycle.

NATO Jets Scrambled to Intercept Drone Over Latvian Airspace

NATO fighter jets were scrambled over Latvia to intercept and bring down a drone that had entered the country's airspace. It is the latest in a growing series of unexplained or unauthorised drone incursions along NATO's eastern flank. Whether they come from deliberate probing, spillover from regional conflict or opportunism, such intrusions are now a recurring feature of security in the Baltic states. NATO takes them seriously enough to respond with air defences straight away. If you run critical infrastructure, logistics hubs, ports or other facilities in Latvia, Lithuania, Estonia or neighbouring states, layered site security is worth the investment. That means drone detection where feasible, awareness of restricted airspace around sensitive sites, and agreed procedures with local authorities for reporting unidentified aerial activity. Security teams should also review contingency plans for temporary airspace closures or higher alert states, which can disrupt logistics, executive travel and event planning in the region. This grey-zone pressure on NATO's eastern border shows no sign of easing and needs steady monitoring, not one-off attention.

Flaw in Belgium's eID Authentication System Exposes Citizen Accounts to Remote Code Execution

Researchers have disclosed a serious vulnerability in Belgium's national eID authentication system. It could let attackers achieve remote code execution and take over citizen accounts. The system is a core part of digital government, used to access tax, healthcare, banking and public services. National eID and digital-identity schemes increasingly carry both public and private-sector authentication across the EU, so a flaw like this reaches well beyond the issuing government. Businesses that use eID-based identity checks for onboarding, contracts or access control inherit the same exposure. If you operate in Belgium, or elsewhere in the EU where similar eID schemes are expanding under digital-identity regulation, check how much you depend on government authentication systems run by a third party. Know what fallback verification you have if those systems are compromised or go offline. Compliance and IT security teams should confirm patch status with system integrators and assess any internal systems that trust eID-based authentication tokens. Update incident response plans to cover a compromise of external identity infrastructure, not only of your own internal systems.

Our cyber security team helps you map where third-party and government identity systems sit in your authentication chain, and what that exposes.

De Bijenkorf Warns of Month-Long Delivery Delays Following Major Data Breach

Dutch department store De Bijenkorf has warned customers of delivery delays of up to a month after a major data breach. That suggests the incident has disrupted core order-fulfilment and logistics systems and was not a contained data exposure. A cyber incident that turns into weeks of operational paralysis is increasingly common. It often costs a business more than the breach notification itself, through lost sales, pressure on customer service and the reputational damage of a visible service failure. For retailers and logistics-dependent firms, a data-breach response plan is only half the job. You also need a tested continuity plan that assumes core systems, order management, warehousing and courier links may be unavailable for an extended period. Check that backup and recovery procedures cover operational systems as well as customer data. Have customer messaging ready for a long disruption, so that you do not lose more trust. The breach came in the busy summer retail season. Use it as a prompt to test incident response readiness before the autumn and end-of-year sales, when the cost of long downtime rises sharply.

Farmer Protests Expected as Politicians' Holidays Interrupted Over Permit Revocations

Farmer protests are expected at a provincial government building in Brabant. Reports say politicians have had their holidays interrupted over the revocation of agricultural permits. It is the latest flashpoint in the long-running standoff between Dutch farmers and government over environmental and nitrogen policy. Earlier rounds brought blockades, convoys and demonstrations outside government buildings and private premises, sometimes with little warning. If you have facilities, offices or delivery routes near provincial government sites, or any visible link to agricultural or environmental policy, review site access and continuity plans for the coming days. Confirm alternative routes for deliveries and staff. Brief reception and security staff on how to handle a protest at the door, and keep in touch with local authorities about where and when demonstrations are planned. Executives publicly linked to agricultural, environmental or government policy should consider keeping a low profile when moving near protest sites. Dutch farmer protests have mostly stayed non-violent. They mobilise fast and can escalate unpredictably, though, so watching early works better than reacting once a protest is under way.

Our manned guarding teams protect sites and control access when a protest is planned or flares up without warning.

Firefighter Dies After Being Trapped Under Truck During Ouddorp Dune Fire

A firefighter has died of injuries sustained after being trapped under a truck while fighting a dune fire near Ouddorp. The tragedy also shows the higher wildfire risk in Dutch coastal and nature areas during the current heatwave and long drought. Dune and nature fires used to be a marginal risk in Dutch conditions. They are now a recurring summer hazard as dry vegetation meets extreme heat, and this incident shows the danger responders face in fighting them, including vehicles and equipment in difficult terrain. If you run facilities, hospitality venues or events near nature reserves, coastal dunes or woodland, review your fire-risk and evacuation plans for wildfire conditions specifically, alongside your ordinary building fire plans. Check that evacuation routes still work if fire service activity blocks the access roads. Agree early-warning arrangements with the local safety region, and brief staff on the health risks of wildfire smoke and heat. With the drought continuing, this risk is likely to last for the rest of the summer and needs ongoing attention.

Our training and resilience programmes help teams prepare for wildfire, evacuation and extreme heat.