Tuesday, 22 September 2026

Gunman Wounds 11 Outside Turkish School in Western Türkiye

An attacker opened fire outside a secondary school in western Türkiye on Tuesday, wounding at least 11 people, including pupils, before police detained him. CCTV footage in circulation shows the gunman approaching the school gate at arrival time, when security around schools is usually at its most relaxed. The motive has not been confirmed, and authorities have not linked the attack to organised terrorism. Even so, it shows how exposed schools and other soft targets are during predictable daily transition windows. If you have staff, dependants or corporate campuses in Türkiye, a country with significant European business investment, review arrival and departure routines at schools, workplaces and residential compounds. Look at vehicle staging, visible guarding and rehearsed lockdown procedures. Family offices and executives with school-age children in the region should ask their local security provider for an updated threat assessment. Check that international schools serving expatriate communities have current crisis response plans in place.

Mission Support's training and resilience programmes prepare school communities and family offices to recognise and respond to active-threat scenarios.

Russian Strikes Kill Three in Ukraine as Kyiv Hits Oil Complex, Zelenskyy Addresses UN

Russian strikes on Ukraine killed at least three people on Tuesday, while Ukraine struck a Russian oil complex and President Zelenskyy addressed the UN General Assembly in New York. The exchange shows the war still escalating on the energy and infrastructure front, whatever happens on the diplomatic stage. Both sides are targeting the other's fuel and refining capacity. For European organisations, sustained strikes on Russian energy infrastructure bring secondary risk. Retaliatory cyber activity against European critical infrastructure and logistics providers has tended to track the conflict's escalation phases. Refined product markets also remain sensitive to supply disruption. If you have supply chains in or near Ukraine or Russia, or staff travelling through the region for humanitarian, journalistic or commercial work, keep travel risk advisories current. Confirm that evacuation routes are still viable. With UNGA under way and diplomatic visibility high, security and continuity teams should also expect more opportunistic cyber intrusion attempts against Western organisations linked to support for Ukraine.

Mission Support's advisory intelligence service tracks conflict-driven supply chain and travel risk for organisations exposed to the region.

Armed Group Shuts Pipeline From Libya's Largest Oil Field, Threatening Exports

An armed group has shut down the pipeline feeding Libya's largest oil field, according to Euronews, putting a significant share of the country's crude exports at risk. Armed factions and local power brokers have repeatedly used Libya's oil infrastructure as a bargaining chip in the country's fragmented politics. Blockades like this have caused short-term spikes in benchmark crude prices before. The report rests on a single outlet and has not been independently corroborated. Treat the scale and duration of the disruption as unconfirmed until there is further reporting. If you have exposure to North African energy markets, Mediterranean shipping or physical operations in Libya, follow the situation closely. Avoid non-essential travel to affected production areas until the stance of the group in control is clear. Energy traders and logistics planners should build renewed Libyan supply risk into short-term contingency plans. Firms with local staff or contractors should confirm where their people are and that communication protocols are current.

EU Regulator Fines Google Over $460 Million for Location Data Violations

An EU data protection regulator has fined Google more than $460 million for misusing location data in advertising, according to The Record. It follows a separate Dutch fine against the company over the same underlying practice, reported yesterday. Together, the actions show European regulators moving in a coordinated way against location-data monetisation. They treat it as a priority enforcement area, not an isolated national issue. If you run advertising, mobility, retail or logistics platforms that collect geolocation data on employees, customers or the public, audit your consent mechanisms, data minimisation and retention periods now. Regulators may turn their attention to smaller processors next. Security and privacy teams should apply the same scrutiny to location data from fleet tracking, access control systems, badge readers and mobile device management platforms. These systems often collect and keep detailed movement data. If consent and purpose limitation are not properly documented, they could attract comparable regulatory exposure.

ShinyHunters Seizes Clop Ransomware Leak Site, Threatens Renewed Extortion

The ShinyHunters cybercrime group has taken control of the Clop ransomware gang's extortion website and is demanding payment, according to The Record and Dark Reading. That raises the prospect that data stolen in Clop's earlier mass-exploitation campaigns, including the widespread MOVEit breach, could resurface under new extortion terms. Organisations previously listed as Clop victims, many of them European, should not assume the matter is closed just because Clop itself went quiet. A takeover like this can reset the extortion clock and expose victims to new demands or fresh data publication. Check whether your organisation, or key suppliers and partners, appeared on Clop's historical victim lists. Confirm that any data exfiltrated earlier has been fully scoped for downstream exposure, including customer notifications, regulatory filings and credential resets. The episode also shows a wider trend of ransomware infrastructure and stolen data being reused or resold between criminal groups. Breach exposure does not end when the original attacker disappears.

Mission Support's cyber security team helps organisations scope historical breach exposure and harden defences against repurposed ransomware infrastructure.

Dutch Prosecutors Seek Seven-Year Sentence in Fatal Rotterdam Drug-Lab Blast

Dutch prosecutors have formally requested a seven-year prison sentence for the suspect at the centre of the 2024 Rotterdam drug-lab explosion, according to NL Times and NOS. Three people died in the blast. The case has moved from yesterday's opening statements to a concrete sentencing demand. The explosion at the Schammenkamp site is one of the clearest recent examples of how illicit drug production has embedded itself in ordinary Dutch neighbourhoods and industrial units. Often there are no visible warning signs until something goes wrong. For property owners, landlords and facility managers, certain signals warrant screening up front rather than investigation afterwards. Look out for unexplained short-term leases, unusual ventilation changes, chemical odours or irregular visitor patterns at industrial or storage units. If you manage commercial or mixed-use property in the Netherlands, check that tenant vetting and periodic site inspections are current. Train staff to recognise and report signs of clandestine drug production before it turns into a life-safety incident.

Dutch Fire-Station Burglaries Surge to 85 This Year, Up From 17 in 2024

Burglaries at Dutch fire stations have risen sharply to 85 so far this year, up from just 17 in 2024, according to NL Times. A five-fold increase suggests fire stations are being targeted for equipment, fuel, tools or vehicle access rather than hit by opportunistic vandalism. Fire stations often hold valuable tools, breathing apparatus and vehicles. In many Dutch municipalities they are staffed by volunteers and only occupied now and then, which makes them attractive targets during quiet overnight hours. The size of the rise points either to a coordinated pattern of offending or to a wider increase in property crime against public-safety infrastructure that has gone under-addressed. Municipalities, safety regions and public-sector facility managers should review perimeter security, lighting, alarm coverage and access control at fire stations and similar emergency-service depots. Unmanned and volunteer-staffed sites come first. Where budgets are tight, alarm monitoring with rapid mobile response does more than unattended CCTV alone. It cuts the time criminals have to remove equipment before responders arrive.

Mission Support's alarm monitoring and mobile response service delivers rapid on-site intervention for unmanned or intermittently staffed facilities.

Dutch Privacy Watchdog: Posting Camera-Glasses Footage of Bystanders Is Almost Always Illegal

The Dutch Data Protection Authority has issued a warning about camera glasses, according to NOS and NL Times. Sharing footage of unsuspecting members of the public recorded on them is almost always unlawful under Dutch privacy law. Camera glasses are wearables with a built-in lens that can film bystanders discreetly. The warning reflects the fast, largely unregulated spread of consumer smart-glasses and body-worn recording devices. They make both personal privacy protection and corporate counter-surveillance harder, because they are difficult to spot and increasingly common in public and semi-public spaces. If you handle sensitive meetings, negotiations, executive movements or proprietary information, update visitor and staff policies on personal recording devices. Name smart-glasses explicitly, alongside phones and traditional cameras. Security teams sweeping boardrooms, executive vehicles or residences should treat consumer camera glasses as a credible means of covert recording. Briefings for executives and principals should cover how to recognise these devices and how to challenge their use in sensitive settings.

Mission Support's TSCM sweeps identify covert recording risks, including consumer smart-glasses, in boardrooms, vehicles and residences.