Saturday, 5 September 2026

Russian drone strike hits Ukrainian security service headquarters, Zelensky says

Ukrainian President Volodymyr Zelensky said Russian forces struck the headquarters of Ukraine's security service in a drone attack. Moscow is still willing to hit core state security infrastructure, even while diplomatic activity around the conflict continues. Despite periodic ceasefire talk and shuttle diplomacy, the war's operational tempo remains high, and strikes increasingly reach rear-area command, intelligence and security sites far behind the front line. If your organisation has staff, assets or supply chains touching Ukraine, any location co-located with state security functions, or seen as linked to them, carries a persistent risk. That includes logistics hubs that support the security services. Review duty-of-care plans for staff based in or transiting Ukraine, and keep evacuation and communications protocols up to date. Treat any government-adjacent site as a higher-risk zone, whatever the stated progress on a ceasefire. Review insurance and travel risk ratings in the same light, and feed monitoring of strike patterns directly into itinerary and site-selection decisions for Ukraine-linked operations.

Sabotage campaign against Europe escalates, with Russia the chief suspect

A spiralling campaign of sabotage across Europe, from undersea cable damage to arson and infrastructure attacks, is increasingly attributed to Russian state-linked actors. It is part of a broader hybrid warfare strategy against European states that support Ukraine. Unlike conventional military action, the campaign relies on deniable, low-cost operations carried out by proxies, criminal networks or unwitting recruits. That makes attribution and deterrence difficult, and it puts private-sector infrastructure, logistics providers and critical facilities squarely within the threat envelope. In practice, facilities near ports, energy assets, telecoms nodes and transport corridors should be treated as possible secondary targets, even without direct political exposure. Tighten perimeter and access controls, and screen contractors and temporary staff more thoroughly. Sweep sensitive facilities for surveillance and tracking devices, and set up a direct line to the national coordination centres that monitor hybrid threats. Test your incident reporting chain so that suspicious activity, unexplained fires or intrusions near critical infrastructure are escalated fast. Business continuity plans should assume a materially higher baseline of hybrid disruption for the rest of the year.

Mission Support's TSCM sweeps look for the surveillance and tracking devices planted in hybrid sabotage campaigns against critical infrastructure.

Enterprises given six-month warning to prepare for automated cyberattacks

Industry analysis cited by Dark Reading warns that organisations have a narrowing window, roughly six months, before AI-driven automated attack tools become widely available to threat actors. That would shrink the time between vulnerability disclosure and exploitation to a fraction of what defenders have historically relied on. Traditional patch cycles and manual triage will then no longer give adequate protection, particularly for internet-facing systems, remote access infrastructure and third-party integrations. Boards and security leads should use this as a reason to mature vulnerability management now, rather than wait for a confirmed incident. Practical steps: move from scheduled cycles to continuous, risk-prioritised patching, and expand monitoring of your external attack surface. Stress-test incident response playbooks against compressed attack timelines. Bring executive and physical security teams into cyber incident escalation, because automated attacks can disrupt building systems, access control and operational technology as well as IT networks. Review cyber-resilience budgets and staffing against this faster timeline before year-end planning closes.

Mission Support's cyber security team helps you shorten patch and response times before automated attack tools become widely available.

Germany's far-right AfD bids for first taste of power in eastern state vote

The far-right Alternative für Deutschland is positioned for a historic breakthrough in Saxony-Anhalt's state election and could get its first taste of governing power in a German state. Whatever the final result, a strong AfD showing would sharpen political polarisation and make street protests by supporters and opponents more likely. It could also change the operating environment for businesses, events and diplomatic missions across eastern Germany, both before and after the vote. If you have facilities, staff or events in the region, build election-related unrest into short-term risk planning. That covers demonstrations, counter-demonstrations and closer attention on migrant- or minority-linked businesses, which have been targeted before amid AfD-driven rhetoric. Executive protection and event security teams should review venue and travel plans around election day and the days after it. Monitor local advisory channels for protest notifications, and keep flexible contingency routes for staff movements in Saxony-Anhalt and neighbouring states, where solidarity demonstrations are likely.

Masked anti-immigration protesters blockade Port of Dover

A large group of masked protesters blockaded the Port of Dover in an anti-immigration demonstration, disrupting one of Europe's busiest ferry and freight gateways. It shows how migration-related grievances keep turning into direct action against critical transport infrastructure. Port and border-crossing blockades have outsized effects. Even short disruptions cascade into freight delays, passenger congestion and knock-on problems for supply chains that depend on cross-Channel routes. Masks and coordinated large-group tactics also raise the risk of confrontation with counter-protesters or police. If you move goods or people through Dover or similar chokepoints, build contingency routes and buffer time into logistics plans whenever protests are announced or expected. Follow port authority and transport advisories in real time. Corporate travel and event security teams should read masked, large-scale demonstrations at transport hubs as a sign that protest tactics are escalating across north-western Europe. Coordinate more closely with private security and police liaison before you schedule time-sensitive cross-Channel movements.

Mission Support's manned guarding teams help with continuity planning and on-site coordination when a protest suddenly disrupts a transport hub.

Dozens of Dutch soldiers can be tracked, home addresses exposed via Polarsteps travel app

Research has found that dozens of Dutch military personnel, including people travelling home and on NATO missions, can be tracked through the consumer travel-logging app Polarsteps. In some cases their home addresses are exposed. The risk is persistent and often underestimated. When people in security-sensitive roles use location-sharing apps privately, they can undermine operational security however strict the official communications discipline is. The weakness sits in individual devices and app permissions, not in institutional systems. The same applies to anyone whose role, travel pattern or seniority makes them a potential target: executives, diplomats, security staff and defence-linked contractors. Extend your digital hygiene policy beyond corporate devices to personal apps and social platforms. In practice, that means mandatory privacy checks of personal travel, fitness and social apps for at-risk staff, and clear guidance or limits on real-time location sharing while travelling. Run TSCM and digital footprint reviews before high-profile deployments or postings, and repeat OSINT self-assessments to see what a determined adversary could already piece together from public data.

Mission Support's TSCM and digital-footprint assessments find this kind of consumer-app exposure before someone can use it to target your people.

Second person dies following workplace accident involving hazardous materials in Zwaag

A second victim has died after a workplace accident involving hazardous materials in Zwaag. Industrial and chemical handling sites still carry acute risks, even under regulated conditions. Details of the substances and the cause are still limited. Fatal hazardous-materials incidents at Dutch industrial sites usually draw scrutiny from labour inspectorates, environmental authorities and emergency services. They often lead to wider reviews of permit compliance and safety protocols at similar facilities. If you operate or contract industrial, chemical or waste-processing sites in the Netherlands, use this as a prompt to revisit your procedures. Look at hazardous-materials handling, the use of personal protective equipment and your emergency drills. Pay particular attention to contractors and third-party staff, who may know less about site-specific hazards. Security and safety teams should also check that incident notification and first-responder access protocols are current. Staff on site, visitors and nearby residents all need clear evacuation and shelter-in-place instructions.

Wounded police officer released from hospital after fatal Overasselt shooting

A police officer wounded in a fatal shooting in Overasselt has been discharged from hospital. The armed confrontation left one person dead and a police officer injured, and details of what happened remain limited. In the Netherlands, any firearms incident against police usually prompts a formal justice-ministry review of officer safety protocols, use-of-force procedures and regional threat assessments. For private security operators and corporate risk teams, the case shows that armed violence, though statistically rare in the Netherlands, does occur outside the big cities. Liaison arrangements with regional police and emergency services are also not the same everywhere in the country. If you have staff, sites or alarm-response coverage in similar semi-rural areas, confirm current response-time expectations with the local authorities. Review the armed-incident protocols in your own crisis management plan, and make sure staff know the shelter-in-place and lockdown procedures for their specific location.