Friday, 10 July 2026

Israeli ground operation extends into southern Lebanon; diplomatic security posture across Middle East reviewed by EU missions

Israeli ground forces conducted limited incursions into three border villages in southern Lebanon on 9 July following a Hezbollah drone strike on Israeli northern settlements that caused seven civilian casualties. The operation, which the Israeli Defence Ministry described as 'targeted counterterrorism action', prompted the EU External Action Service to elevate the security posture for EU diplomatic missions and civilian personnel in Lebanon from Level 2 (Heightened Awareness) to Level 3 (Enhanced Security Measures), requiring all non-essential diplomatic staff to shelter in place or withdraw to Beirut depending on their location. The EU has approximately 340 civilian staff deployed in Lebanon across EUBAM, UNIFIL civilian components, and bilateral missions. For organisations with personnel in Lebanon or planning operations in the region, the escalation underscores the importance of real-time travel security monitoring, pre-arranged evacuation routes, and clear decision authorities for personnel withdrawal. HEAT training for staff deployed to conflict-adjacent environments remains a practical operational requirement.

Mission Support provides HEAT training and travel security assessments for organisations with personnel in conflict-adjacent regions.

LockBit affiliate deploys novel firmware-level ransomware targeting building management systems in corporate campuses

Cybersecurity firm CrowdStrike published technical analysis on 9 July of a novel ransomware variant — designated BrickLocker — deployed by a LockBit affiliate against building management systems (BMS) at five corporate campuses in the United States and Western Europe over the preceding six weeks. BrickLocker targets BMS controllers managing HVAC, access control, fire suppression, and physical security systems — encrypting firmware configuration rather than data files, which can render affected systems non-functional even after decryption. In one incident, the attack disrupted electronic access control across an entire corporate campus for 72 hours, requiring manual override of all door systems. The tactic represents a convergence of cyber and physical security risk: a successful BrickLocker attack can neutralise an organisation's physical perimeter security, create conditions for physical intrusion, and generate life-safety risks through HVAC and fire system compromise. Security teams are advised to audit BMS network segmentation, ensure BMS controllers are not reachable from corporate IT networks, and maintain offline backup configurations for all building control systems.

Mission Support's cyber security team supports BMS security assessments and IT/OT convergence risk analysis for corporate facility operators.

Global K&R premiums rise 18% in H1 2026 as kidnapping activity surges in Haiti, Ecuador, and West Africa

Lloyd's specialist insurer Markel published its mid-year Kidnap & Ransom market update on 9 July, reporting an 18% average premium increase across K&R insurance products in the first half of 2026, driven by a sustained surge in kidnapping activity in Haiti — where gang-controlled territory now encompasses approximately 90% of Port-au-Prince — and sharp increases in executive-targeted abductions in Ecuador and across the Sahel and Gulf of Guinea in West Africa. The report notes that K&R activity is increasingly affecting senior corporate professionals rather than being confined to aid workers and journalists, and that ransom demands have increased in scale and complexity with criminal groups conducting pre-abduction financial due diligence to calibrate demands against ability to pay. For risk managers, the update highlights the increasing importance of integrating K&R risk assessment into standard travel approval processes for executive travel to affected regions, ensuring duty-of-care compliance, and confirming that K&R insurance cover aligns with the specific countries and activities involved.

Mission Support provides K&R risk assessments and close protection services for executives travelling to high-risk regions internationally.

European Commission proposes mandatory security clearance framework for private contractors accessing EU critical infrastructure

The European Commission published a legislative proposal on 9 July for a Directive on Security Clearance Requirements for Private Contractors (DPSC) that would mandate security screening and background vetting for private sector contractors with access to EU critical infrastructure, classified information environments, or systems processing sensitive personal data at EU institutional level. The proposal, if adopted, would create the first harmonised EU-wide framework for contractor vetting — currently handled inconsistently across member states — and require contracting organisations to obtain certified vetting from accredited national authorities before deploying personnel in scope. The proposal has been welcomed by major EU security service providers as establishing a level playing field, while raising concerns from smaller operators about compliance costs. For the private security industry in the Netherlands and broader EU, the proposal accelerates a trend toward formalised personnel security requirements that parallel Wpbr licensing — and organisations investing now in robust vetting infrastructure will be better positioned for the regulatory environment expected to emerge by 2028.

Mission Support is an EU-licensed security provider with Wpbr-certified personnel — delivering verified vetting standards for sensitive operational environments.

EU Agency for Law Enforcement Cooperation warns of increased use of encrypted IMSI catchers by criminal networks in border regions

Europol's European Cybercrime Centre published a technical advisory on 9 July warning national law enforcement agencies and private sector security professionals that organised crime networks operating in EU cross-border regions are deploying a new generation of encrypted IMSI catchers that are significantly harder to detect using conventional counter-surveillance techniques. The devices, believed to have originated from grey-market suppliers in South-East Asia and the Middle East, use frequency-hopping spread-spectrum transmission and frequency bands outside the range targeted by most commercial TSCM equipment calibrated for older cellular standards. The advisory identifies their use in coordinating high-value cargo theft, drug trafficking, and targeted robbery operations in border corridor regions including the Netherlands-Germany-Belgium triangle. For TSCM practitioners, the advisory signals that equipment calibrated only for 2G/3G IMSI catcher signatures may no longer be sufficient — and that full-spectrum sweeps covering 4G/5G and non-standard transmission bands are necessary for comprehensive technical surveillance countermeasures in sensitive environments.

Mission Support's TSCM team uses full-spectrum equipment to detect the latest generation of concealed surveillance devices.

Frontex and EUBAM Moldova complete joint border security assessment ahead of Moldova's EU accession preparations

Frontex and the EU Border Assistance Mission to Moldova and Ukraine (EUBAM) completed a joint border security capacity assessment on 8 July covering Moldova's entire border perimeter — including the contested Transnistrian segment — as part of Moldova's accelerated EU accession preparation programme. The assessment, the most comprehensive since Moldova was granted EU candidate status, documented significant gaps in surveillance technology, border crossing infrastructure, and staff training, particularly in the Transnistrian border segments which operate under a separate informal security arrangement. The findings will inform a €340 million EU-funded border security investment programme expected to be approved by the European Parliament before the end of 2026. For security companies with capability in border management, surveillance technology integration, and training provision, the assessment signals a significant procurement opportunity in the region. For organisations already operating in Moldova or planning market entry, the accession trajectory creates a timeline for regulatory alignment with EU security standards.

NCTV publishes updated Terrorist Threat Assessment Netherlands: jihadist online radicalisation flagged as growing concern

The National Coordinator for Security and Counterterrorism (NCTV) published the second Dreigingsbeeld Terrorisme Nederland (DTN) update of 2026 on 9 July, maintaining the national terrorism threat level at Level 4 (Substantial) while introducing new assessments of online radicalisation trajectories. The update identifies accelerating jihadist radicalisering via encrypted messaging platforms — particularly amongst young men aged 16–24 in urban centres — as a growing concern, noting that the operational planning cycle from radicalisation onset to potential attack initiation has shortened in recent cases. The update also documents increased far-right network activity with international connections, particularly relating to online communities intersecting with foreign conflict narratives. For corporate security and event security professionals, the update reinforces the importance of robust counter-terrorism protocols, hostile vehicle mitigation at public-facing venues, and staff awareness training on behavioural indicators that may signal pre-operational surveillance or attack preparation.

Mission Support provides security advisory services, threat assessments, and counter-terrorism awareness training for Dutch organisations.

Gemeente Den Haag completes security upgrade of Malieveld perimeter ahead of summer diplomatic season

The Municipality of Den Haag confirmed on 9 July the completion of a security infrastructure upgrade at and around the Malieveld — the large public open space adjacent to the Binnenhof government quarter and frequently used for large public events and protests — including the installation of retractable hostile vehicle mitigation bollards, upgraded CCTV coverage, and an improved communication network connecting venue security to the Den Haag police central control room. The upgrade, part of a broader €12 million Den Haag public space security investment programme, was completed ahead of the summer diplomatic season which sees the highest concentration of state visits, ministerial meetings, and international organisation events at Den Haag venues. For security professionals coordinating protective details or event security in the Den Haag diplomatic environment, the improved physical security infrastructure at Malieveld reduces the perimeter protection burden but does not eliminate close protection requirements for individuals and delegations moving through the environment.

Mission Support provides close protection and diplomatic security services for principals and delegations operating in The Hague's diplomatic environment.

Dutch Security Industry Association (NVB) publishes annual sector report: 12% growth in managed security services, TSCM demand up 34%

The Dutch Security Industry Association (NVB) published its 2025 Annual Sector Report on 9 July, documenting continued strong demand growth across the Dutch private security market. Total sector revenue reached €2.4 billion in 2025, a 9.3% increase on 2024, driven primarily by managed security services (growing 12%), technology-integrated security solutions (growing 18%), and specialist services. TSCM-related services recorded the strongest growth rate in the specialist segment at 34% year-on-year, attributed to heightened corporate awareness of state-sponsored industrial espionage following a series of high-profile incidents and AIVD advisories. Executive protection services grew 21%, supported by elevated K&R risk awareness and increasing use by mid-sized corporates previously relying solely on standard travel insurance cover. The NVB report notes a continuing consolidation trend among Wpbr-licensed providers, with smaller operators finding it increasingly difficult to meet client demands for integrated physical-digital security capabilities. The outlook for 2026 is described as 'strongly positive', with NIS2 compliance drivers expected to generate significant additional advisory and assessment mandates.

Mission Support offers TSCM, executive protection, and advisory services — EU-licensed, operating 24/7 across the Netherlands and internationally.