Thursday, 27 August 2026

Glacial lake collapse triggers deadly Nepal-Tibet floods

Scientists now attribute this week's catastrophic flooding across the Nepal-Tibet border to the sudden collapse of a glacial lake. A wall of water and debris swept through downstream valleys with little warning. This is a growing risk for organisations with staff, supply chains or investments in the high-altitude regions of South and Central Asia. Glacial lake outburst floods are becoming more frequent as regional temperatures rise, yet they are poorly monitored and rarely included in corporate travel or continuity planning. If you have staff trekking, doing fieldwork or passing through affected valleys, first confirm headcount and communications with everyone in the region, as Dutch nationals are among those reported missing. For the longer term, organisations with recurring exposure to Himalayan or similar glacial terrain should commission dedicated environmental risk assessments. Build satellite-communication backup into travel protocols, and plan evacuation routes in advance that do not depend on a single river-valley road. Review insurance and duty-of-care policies to confirm that natural-disaster and remote-rescue cover explicitly includes this type of risk.

Mission Support's Advisory & Intelligence service monitors travel risk and supports you in a crisis when your people are in high-risk or disaster-prone regions.

Dark Caracal expands cyber-espionage malware arsenal

The Dark Caracal threat actor has added new tools for broader espionage collection to its malware arsenal, according to new threat-intelligence reporting. The group has long been linked to state-aligned surveillance operations in the Middle East and beyond. Companies and NGOs are regularly swept up in surveillance campaigns close to nation states. They may be direct targets, stepping stones in a supply chain, or incidental sources of data on employees, partners and clients. Groups like this usually prefer mobile and desktop spyware delivered through trojanised apps, spearphishing and fake updates over headline-grabbing zero-days. That makes basic hygiene unusually effective. If your executives, researchers or staff travel in or talk to contacts in higher-risk jurisdictions, review your mobile device management policies. Restrict sideloading and unofficial app sources, and refresh phishing-awareness training with espionage scenarios instead of generic financial fraud examples. Update threat-intelligence feeds with the newly reported indicators. Adjust incident-response playbooks to the slow, persistent nature of espionage intrusions, which behave very differently from smash-and-grab ransomware.

Mission Support's Cyber Security team helps you detect espionage intrusions and secure phones and laptops against state-aligned groups like this one.

Qatar mediates as Iran faces mounting US economic pressure

Qatar's prime minister travelled to Tehran this week as diplomatic activity around Iran intensifies against a background of rising US economic pressure. Mediation continues amid persistent military tension in the region. For organisations with operations, shipping interests or supply chains touching the Gulf and the wider Iranian sphere of influence, the risk is higher but fluid. Tighter sanctions enforcement and active diplomacy point to neither a quick resolution nor immediate escalation. The most immediate practical step is a sanctions-exposure review. Check counterparties, banking relationships and logistics providers with any link to Iran against the latest US and EU designations, because enforcement often follows diplomatic turning points with little warning. Maritime and energy interests should stay alert around Gulf shipping lanes. Earlier periods of US-Iran tension brought vessel seizures, GPS interference and volatile insurance markets. Corporate security and compliance should work closely together. Reassess sanctions screening, cargo routing and staff travel to the wider region on a rolling basis while the diplomatic situation stays unsettled.

Russian state hackers target EU officials via messaging apps

New reporting describes a sustained phishing campaign by Russian state-linked hackers against European Union officials. They use encrypted and mainstream messaging apps rather than traditional email, and aim to compromise accounts used for sensitive policy communications. The move to messaging apps fits a wider trend: state-aligned actors follow officials to the channels they actually use. For organisations whose phishing defences still focus on email, detection becomes considerably harder. If your staff deal with EU institutions, national ministries or policy processes, this applies to you directly. It is not a government-only concern: trade associations, lobbying functions and public affairs teams are in scope too. Require hardware-based multi-factor authentication on every messaging and collaboration account used for sensitive communications. Switch off account recovery that relies on SMS alone. Brief executives and government-relations staff on the specific lures used in these campaigns. Decide which messaging platforms are approved for business use. Fragmented, unmanaged use of consumer apps for work makes the attack surface much larger for well-resourced state actors.

Two killed in violent incident at school near Berlin

Two people were killed at a school near Berlin in what German authorities describe as a domestic violence incident, and a suspect is in custody. Early reporting frames it as domestic rather than a targeted attack. Even so, it happened in a soft-target setting where many organisations, from international schools to corporate campuses with childcare, have historically invested less than in office or retail security. It is a good prompt to revisit protection at any facility that serves children or vulnerable people covered by your duty of care. That includes the dependants of staff on international assignments. Review visitor and access-control procedures at affiliated schools and nurseries. Keep lockdown and reunification protocols current and rehearse them. Make sure on-site staff can recognise and escalate signs of domestic-violence risk among the people they serve, because such incidents often have visible warning signs. If you relocate staff to Germany or the wider region, check that family support and crisis-response arrangements cover dependants as well as the employee.

Mission Support's Training & Resilience programmes train staff at schools, campuses and childcare facilities to spot warning signs and carry out lockdown and crisis procedures.

Dutch nationals feared missing after deadly Nepal floods

Dutch authorities have confirmed that several Dutch nationals are feared missing after this week's deadly flooding in Nepal. The disaster was already drawing international attention and now has a direct national dimension. For Dutch companies, NGOs and educational institutions with staff, students or contractors in Nepal or similar high-altitude, disaster-prone regions, it is a real test of travel-risk arrangements. The first test is whether you can confirm within hours if anyone is in an affected area. The second is whether you have a working channel to the consular crisis response of the Dutch Ministry of Foreign Affairs. Use this moment to audit your travel-tracking systems. Make trip registration mandatory for higher-risk destinations, keep emergency contact and next-of-kin data current, and give travellers a 24/7 point of contact for a crisis. If you sponsor adventure travel, fieldwork or gap-year placements involving staff dependants, check your duty-of-care cover and evacuation insurance. Both should explicitly include natural disasters in the regions where your people are now.

Dutch alderman under fire after Kalashnikov photo in pro-Russian enclave

An alderman from the Dutch municipality of Oldebroek has apologised after being photographed holding a Kalashnikov rifle next to pro-Russian flags in a Russian-backed breakaway enclave. The episode quickly became a reputational and political security matter rather than a purely personal one. Corporate security and communications teams often underestimate this risk. Officials, executives or board members may travel privately to contested or sanctioned territories, or post on social media from there. Whatever their intent, the result can be disproportionate reputational, legal and even foreign-influence scrutiny. Organisations in regulated sectors, public-facing roles or with government relationships should review executive travel policies. Any trip to contested regions, breakaway territories or sanctioned jurisdictions should be flagged and reviewed in advance, not discovered afterwards on social media. Communications and legal teams need a pre-agreed protocol for a fast response when an affiliated person's private conduct creates reputational risk for the institution. That includes agreeing messaging with public affairs and, where relevant, assessing sanctions or foreign-influence legal exposure.

Arson suspected at future Dutch asylum centre for minors

Dutch police suspect arson at the planned site of a future asylum reception centre for 40 unaccompanied minors in Valkenswaard. It adds to a pattern of attacks on asylum infrastructure across the Netherlands in recent years. Facilities in the planning or construction phase, before operations and security measures are in place, face a distinct and often under-protected window of vulnerability. That is especially true for politically sensitive infrastructure such as asylum centres. Municipalities, housing corporations and contractors developing this type of facility should give the pre-operational phase its own security plan. Standard construction-site measures are not enough, given the targeting risk that has now been shown. Install temporary CCTV and remote monitoring from the earliest construction stages. Agree a threat assessment with local police that covers the specific site and local sentiment. Arrange rapid-response alarm cover that does not wait for the facility's opening date. When selecting future sites, factor local sentiment and previous incidents into risk assessments well before construction begins.

Mission Support's Alarm & Mobile Response service gets a team to the site fast when a vulnerable facility that is not yet open is targeted, for example by arson.