Thursday, 20 August 2026

Kyiv death toll rises to 12 as Ukraine's air defences are stretched thin

At least twelve people were killed in Kyiv when renewed Russian missile and drone strikes hit the Ukrainian capital. A children's hospital was among the buildings damaged. Ukraine's air defences are showing growing strain after long, high-intensity bombardment and with interceptor stocks running low. More than four years into the war, Russia can still strike deep into Ukrainian territory with little warning. How well Western-supplied air defences hold up depends more and more on resupply, and deliveries are not keeping pace with the strikes. If you have staff, assets, supply chains or investments in Ukraine, revisit your contingency planning instead of treating the war as a stable, low-attention risk. Review evacuation and shelter-in-place procedures for any staff still working in the country. Stress-test logistics routes that cross or overfly Ukrainian and neighbouring airspace, and keep track of insurance and compliance obligations for work in a conflict zone. Firms with Ukrainian suppliers should look for single points of failure, given the risk of further damage to infrastructure in the weeks ahead.

Our advisory intelligence team tracks conflict-zone risk in real time so your operations and staff stay informed and prepared.

Trump threatens 'economic warfare' on Iran and its international partners

President Trump has promised tougher, wide-reaching economic measures against Iran and against third countries that keep supporting or trading with it, in language regional media describe as "economic warfare." The pressure is set to widen from Tehran to its network of commercial and political partners, probably through secondary sanctions with extraterritorial reach. Those can hit banks, shipping firms, energy traders and manufacturers that have no direct presence in Iran but are exposed through their counterparties. Escalating rhetoric like this usually comes shortly before rapid regulatory change. If you have trade links with the Middle East, the Gulf or Central Asia, do not wait for formal designations before you act. The first priority is a thorough review of your counterparty and supply-chain exposure to Iran-linked entities, including indirect exposure through intermediaries. Compliance and legal teams should pressure-test sanctions screening systems now, before enforcement starts. Treasury should model the effect of tighter capital controls or restrictions on correspondent banking. Boards should expect more volatility in energy markets and Gulf shipping insurance premiums as the measures take shape, and add that to their near-term risk registers.

Critical GitLab zero-click vulnerability complicates rapid mitigation

Security researchers have disclosed a critical zero-click vulnerability in GitLab, the widely used DevOps and source-code management platform. Reports say it poses significant mitigation challenges for defenders. A zero-click flaw needs no user interaction, so attackers may be able to compromise an affected instance simply because it is reachable over the network. If you run self-hosted GitLab, patch now rather than waiting for the routine update cycle. GitLab holds proprietary source code, CI/CD pipelines, credentials and secrets. A successful exploit could let attackers move into your software supply chain, insert malicious code or steal intellectual property. According to the reporting, the usual workarounds, such as switching off a single feature, may not fully close the exposure. Some environments could therefore stay vulnerable even after a first attempt at remediation. Security and engineering leads should treat this as a priority patch item. Confirm which versions are affected and apply the vendor guidance in full, not in part. Audit recent repository and pipeline activity for signs of compromise, and check whether any GitLab instance is exposed to the public internet without good reason.

Our cyber security specialists can assess your exposure and coordinate fast patch validation if you run a vulnerable GitLab instance.

Ukrainian national arrested in Croatia over Nord Stream pipeline bombings

Croatian authorities have arrested a Ukrainian man in connection with the 2022 Nord Stream pipeline explosions. It is a significant development in one of Europe's most consequential unresolved attacks on critical infrastructure. The arrest comes years after the sabotage. Subsea energy and data infrastructure in European waters remains a live target, and accountability for such attacks can surface long after the event. That keeps the method and the weaknesses it exploited relevant to today's risk planning. If you own, insure or depend on subsea pipelines, interconnectors or cables, protect them through an ongoing programme, not a one-off response to a single incident. Reassess physical and technical surveillance around fixed subsea assets. Coordinate with national authorities and undersea infrastructure protection initiatives. Review incident response and reputational communication plans in case of future sabotage. The case also shows the value of sustained investigative cooperation between European jurisdictions. If you operate across borders, check that your own security liaison with law enforcement is current and has been tested.

Pentagon survey pressing allied governments on political loyalty raises alliance-management questions

Reports say the Pentagon has sent US allies a survey probing their political loyalty. It is an unusual step that points to friction inside long-standing transatlantic and Indo-Pacific security relationships. Alliance cohesion is already under pressure from tariff disputes, Iran-related sanctions demands and diverging threat assessments. For European governments and the organisations that work within their security perimeter, this is less an immediate operational risk than an early sign of alliance volatility. That volatility can turn into policy shifts on defence procurement, intelligence sharing, technology export controls and basing arrangements with little notice. Security and government-affairs teams working with defence, aerospace or dual-use technology clients should watch how allied governments respond to this pressure. Any shift in trust could affect programme continuity, eligibility for classified contracts, or data-sharing agreements. It is also a good moment to revisit scenario plans for weaker US security guarantees in Europe, including national and EU-level efforts towards defence self-sufficiency. Treat this as a slow-moving but significant geopolitical signal to track over the coming months, rather than something to react to straight away.

US pushes Netherlands to bar ASML from selling chip-making equipment to China

The United States is reportedly preparing to press the Netherlands to stop ASML from making further sales to China. ASML, the Dutch maker of lithography equipment, is central to advanced chip manufacturing worldwide. This is the latest step in a years-long campaign to tighten Western export controls on semiconductor technology. It puts the Dutch government in a familiar and increasingly awkward position between US pressure, the risk of Chinese retaliation, and its own strategic and economic interest in one of the country's most important export companies. If you are part of the semiconductor supply chain as a supplier, customer or investor, expect export licensing for advanced technology to China to stay unpredictable. Compliance requirements are likely to tighten further, with little advance warning. Reassess your exposure to Chinese semiconductor customers or partners. Check your export-control compliance against both US and Dutch/EU frameworks. Prepare for retaliatory measures from Beijing, which have previously targeted exports of rare earths and other strategic materials. Given ASML's weight in the Dutch economy and national security, expect this to remain a live political and diplomatic issue with direct consequences for compliance planning.

Our advisory intelligence service helps exposed organisations follow fast-moving export-control and sanctions changes before they affect operations.

Man found dead in Rotterdam high-rise; police treat death as suspicious

Police in Rotterdam are investigating after a man was found dead inside a residential tower in the city centre. Early indications point to a crime rather than a natural or accidental death. Details are still limited. Incidents in dense residential and mixed-use towers raise specific access-control and building-security questions. These buildings bring together large numbers of unrelated occupants, with shared entrances and lifts, and usually less camera coverage of communal areas than a detached building. If you manage property, rent space or run a residents' association in a similar high-rise in Rotterdam or another Dutch city, use this as a prompt. Review access control, visitor management, camera coverage of common areas and your arrangements with local police for incidents. If your staff, executives or client-facing teams work in a comparable tower, check that building management has current emergency procedures and that lobby and lift security meets an appropriate standard. As the investigation continues, occupants and building operators should expect more police presence and cooperate fully so the case can be resolved quickly.

Our manned guarding teams tighten access control and visitor management in busy residential and commercial towers.

A year after Lisa's death, street safety debate exposes a gender divide in how safe the Netherlands feels

A year after the killing of Lisa, NOS reporting finds a lasting and sharp gap between how men and women experience street safety in the Netherlands. Women describe a fundamentally different, more restricted daily life when they move through public space, especially after dark. Perceived and actual risk in public is not spread evenly across a workforce or client base. Generic security messages and generic risk assessments can therefore understate the exposure felt by a large share of employees, visitors or residents. If you run premises, events, hospitality venues or campuses in Dutch cities, review your after-dark safety measures with this gender gap in mind. Check the lighting along the routes people use to arrive and leave. Offer visible guarding or an escort at shift changes and evening events. Provide clear channels for reporting harassment or unsafe encounters, and train staff in bystander intervention. HR and facilities teams should also ask women employees for structured feedback and build it into safety planning. Aggregate incident figures alone are likely to miss risks that current procedures do not cover.