• Kraków: Police finished scene work and reopened Main Market Square to residents and tourists at 1800 local (1200 ET). A police spokesperson told PAP no further closures are expected. [1][2]

• Riyadh: Windows were blown out across several floors of the Aramco Tower in the King Abdullah Financial District (KAFD). The Energy Ministry attributed the damage to debris from an attempted attack and reported no injuries. The Houthis claimed they targeted the financial district. [3][4]

• FAA (1804 ET): No ground stops. Ground-delay programs are in effect at San Diego (SAN; average 26 minutes) and Austin (AUS; average 1 hour, runway construction). [5]

Europe — Kraków Follow-Up

• Access: Police had reclosed the square Sunday morning. Radio Kraków and Wirtualna Polska, both citing Małopolska police, report it reopened at 1800 with the cordon tape removed. Kraków’s city mourning runs through Nov. 11. [1][2]

• Investigation (reported by Onet): Interior Minister Marcin Kierwiński said early reports of one or two accomplices were not confirmed. Justice Minister Waldemar Żurek said it is “highly probable” the attacker acted alone. Investigators are still examining his phones and laptops, and no motive has been established. [6]

• Memorial (reported by Onet): Kraków’s mayor has called a memorial gathering for Monday at 2000 local (1400 ET) at the corner of the Main Market Square and Sławkowska. [6]

• EP assessment: Access to the square has been restored. The reported memorial may draw crowds and media to the square on Monday evening.

Middle East — Riyadh Financial District

• Reuters, via The Straits Times, reports windows blown out across several floors of the Aramco Tower. AFP cites three eyewitnesses who saw damage, including shattered glass and façade damage; AFP could not confirm the extent. The coalition says it destroyed the launchers in Saada and Sanaa used in Sunday’s attacks. Saudi authorities have not confirmed the Houthis’ claimed strike on Riyadh airport. [3][4]

• General safety guidance (not specific to this incident): During air-raid alerts in high-rise districts, staying in an interior space away from windows reduces glass-injury risk.

United States — FAA Snapshot

• The FAA status feed was updated at 2304:17 UTC (1804 ET). It lists no ground stops and no general departure or arrival delays. LAX, SAN and LAS remain closed to unscheduled transient GA without prior permission (PPR). Recheck before departure. [5]

Sources

1. Radio Kraków, “Rynek Główny otwarty dla mieszkańców i turystów po zamachu,” Nov. 8, 2026

2. Wirtualna Polska, “Koniec policyjnych oględzin w Krakowie. Rynek Główny otwarty,” Nov. 8, 2026, 1841 local

3. The Straits Times (Reuters), “Houthi attack damages Aramco building in Riyadh’s financial district,” Nov. 8, 2026

4. AFP, “Yemen’s Houthis claim attack on Riyadh financial district, Aramco skyscraper damaged,” Nov. 8, 2026

5. FAA National Airspace System Status, update Nov. 8, 2304 UTC

6. Onet, live coverage, Nov. 8, 2026

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Kraków (Poland): Six people were killed and 15 wounded when a gunman fired from a car around Main Market Square just after 1500 local Saturday; the 24-year-old Polish suspect was shot by police and is in critical condition. Prosecutors opened a terrorism investigation, and police reclosed the square and adjoining streets Sunday for further scene work. Poland is in national mourning Nov. 8–9; Kraków through Nov. 11. [1][2][3]

• Saudi Arabia: The Saudi-led coalition says it intercepted two ballistic missiles fired at Riyadh plus cruise missiles and a drone on Sunday. The Energy Ministry says falling shrapnel caused limited damage to a Saudi Aramco administrative building in Riyadh, with no injuries. Houthi claims of hitting King Khalid International Airport are unverified. [4][5]

• U.S. posts in the Middle East: A Nov. 7 U.S. security alert warns of an “increased threat of armed attacks by Iranian-supported Houthis and Iranian efforts to target U.S. government officials in the region,” and says Iran-aligned groups may target U.S. businesses worldwide. [6][7]

• France: Saturday’s fourth weekend of protests drew 146,000 nationwide (46,000 in Paris) per the Interior Ministry; police used tear gas at Place de la Nation and blocked the banned Yellow Vest gathering at Concorde. Education unions call a new strike Tuesday. [8][9]

For solo operators: In Kraków, keep principals clear of the Old Town core, Grodzka, Stradomska and Dietla until police lift Sunday’s cordons, and expect a heavier police presence nationwide during the mourning period. [2][3] In Riyadh, follow Civil Defense alerts and plan shelter options away from glass. [4][6]

For corporate security teams: Briefing items for leadership:

1. Lone-actor risk in tourist cores: The Kraków attacker held a firearms license and had no prior record, per police. Review crowded-venue protocols for staff traveling in Europe this week. [1][2]

2. Gulf exposure: Missile and drone activity over Riyadh continues, and a U.S. alert now names threats to U.S. officials and businesses. Reconfirm evacuation and shelter plans for Saudi-based staff. [4][5][6]

3. Cyber: South Korea’s financial-sector breaches continue; Mirae Asset Securities is the latest. Expect impersonation calls and texts to follow. [12][13]

Threats to Executives & Public Figures

• U.S. officials and businesses (Middle East): The U.S. Mission to Yemen’s Nov. 7 alert, matching wording issued across the region, cites Iranian efforts to target U.S. government officials and warns that Iran-aligned groups “may target other U.S. interests overseas or at locations associated with the United States and Americans throughout the world, including U.S. businesses.” Edit USA counted at least seven U.S. posts carrying the same alert by Nov. 6. [6][7]

  • EP note: Treat U.S.-branded offices, hotels and events in the region as higher-profile; vary routines and avoid areas with heavy police presence, as the alert advises.

• Kraków attacker profile: Police say the suspect had no prior record and held a firearms license. Interior Minister Marcin Kierwiński said he appeared to hold “very radical views” and was “fascinated by far-right ideologies”; officials say that assessment is still being verified. Police found the bodies of his parents and sister at his home in Ostrowiec Świętokrzyski. [1][2][3]

Travel Advisories & Hotspots

• Poland, Kraków: Kraków’s city government says six were killed (four women, two men) and 15 injured; a tram on line 1 was also fired on at Plac Wszystkich Świętych, with no injuries. Voivode Krzysztof Klęczar said a 32-year-old British man was among the dead; Reuters, cited by Onet, reports the five injured foreigners are from Austria, Germany, Portugal, Russia and the U.K. [2][3]

  • Sunday access: Police announced the Main Market Square, adjoining streets and the escape route (Grodzka, Plac Wszystkich Świętych, Stradomska, the Gertrudy junction and Dietla/Stradomska) will be closed for several hours for further examination. St. Mary’s Basilica was to stay closed until about midday. [3]

  • Reported by Onet: Warsaw has added barriers limiting vehicle access to Krakowskie Przedmieście as a precaution. [3]

• Saudi Arabia: Coalition spokesperson Maj. Gen. Turki Al-Maliki reported intercepts of two ballistic missiles aimed at Riyadh and of cruise missiles and a drone over Riyadh and the south on Sunday; Civil Defense alerts for Riyadh, Najran, Buqayq, Al-Ahsa and Dammam were lifted afterward. Arab News counts at least 15 missiles and drones intercepted so far in November. [4][5]

  • Where sources differ: Arab News says two cruise missiles and a drone were intercepted; The National reports two cruise missiles and does not mention the drone.

Civil Unrest in Business Hubs

• France: Interior Ministry figures: 146,000 protesters nationwide, 46,000 in Paris; unions claimed 250,000 and 75,000. About 70,000 police and gendarmes deployed. Police used tear gas at Place de la Nation after projectiles and fireworks were thrown; police allege about 200 violent individuals attacked officers. Tear gas was also used in Lyon. About 100 people at the banned Concorde gathering were surrounded; coordinator Benjamin Ball and spokeswoman Azelma Sigaux were arrested. [8][9]

  • Reported by CNBC (citing AFP): At least 360 arrests nationwide. [9]

  • Next: Prime Minister Sébastien Lecornu meets unions and employers Monday; student and teacher groups have called a strike for Tuesday, Nov. 10. Shopfronts in Paris were again boarded on Saturday. [8][9]

Aviation & Transport

• Europe hoax bomb threats: Paris prosecutors are investigating the emails behind false bomb threats against dozens of flights over the past week, including possible links to foreign powers. No explosives have been found and no one has been identified. [10][11]

  • Reported by The Independent (citing the Financial Times): European intelligence services suggest pro-Kremlin activists or hacking groups produced the threats; that attribution is not confirmed. [11]

  • EP note: An in-flight threat triggers a diversion even when it is likely a hoax. Build slack into connections and keep principals’ ground transport flexible at both ends.

• Saudi airports: Houthi spokesman Yahya Saree claimed attacks on King Khalid International Airport; Saudi authorities have not confirmed any airport damage. Confirm flight status with the airline before moving to RUH. [5][7]

• FAA (checked 0600 ET): No ground stops or delay programs listed. San Diego (SAN) is closed until 1400 UTC (0900 ET) and Santa Ana (SNA) until 1415 UTC under NOTAMs. LAX, SAN and LAS remain closed to unscheduled transient GA without prior permission. [16]

Cyber & Doxxing Risk to Principals

• Mirae Asset Securities (South Korea): Attacks on Nov. 4–5 hit a mobile-web login service and internal groupware, leaking account numbers of about 3,800 customers and names, employee IDs, email addresses and mobile numbers of about 35,000 current and former staff. It is the fourth Mirae Asset Group affiliate hit since Oct. 26. The company warns of calls, texts and emails impersonating it. [12][13]

• Reported by CoinDesk — Gnosis Pay breach: The crypto debit card provider detected unauthorized access on Nov. 3 that exposed names, home addresses, card numbers and linked wallet addresses; customer funds were not affected. The company has not said how many users were hit. [14]

  • Why it matters: Data tying a home address to crypto holdings is a physical-security issue, not just fraud. If a principal used this card, review residential security and expect targeted phishing.

Severe Weather

• New York City: Mostly sunny Sunday, high near 62°F, west winds gusting to 29 mph; Monday mostly sunny, high near 59°F. No active NWS alerts for NY, NJ or CT at check time. [15]

• South Texas: Flood Watch through Monday morning for Corpus Christi, Laredo, Kingsville and surrounding counties: 2–5 inches of rain common, isolated 7–9 inches possible. WPC keeps a Slight Risk (level 2 of 4) of excessive rainfall. [17][18]

• Pacific Northwest / Northern Plains: Rounds of rain, mountain snow and strong coastal winds through Monday night; very gusty downslope winds in northern Montana today. Frost and freeze possible this morning from the Ohio Valley to the Mid-South. [18]

• Tropics: NHC (0100 ET): no tropical cyclone formation expected in the Atlantic, Caribbean or Gulf over the next 7 days. [19]

Tradecraft Tip

General guidance, not tailored advice.

After a mass-casualty attack, the first 48 hours are about cordons, not the attacker. Once a suspect is in custody, the main disruption to a principal comes from scene work, reclosures and memorials:

• Assume cordons can return the next day. Kraków police reopened parts of the square overnight, then closed it again Sunday morning for daylight forensics.

• Map the attacker’s route, not just the scene. Police closed the escape route too.

• Expect memorials and vigils to draw crowds and media to the same spot for days; plan alternate walking routes and meeting points.

• Watch for copycat threats and disinformation. Poland’s digital ministry says it is seeing a surge of false and unverified claims about the attack.

Coming Up

• Mon, Nov. 9: Poland’s national mourning ends; Kraków’s continues through Nov. 11. Lecornu’s wage talks with French unions and employers. Showers in upstate New York and interior New England. [2][3][8][18]

• Tue, Nov. 10: Education strike and protests called in France. [8]

Sources

1. Euronews, “What we know about the Krakow shooting that left six people dead,” Nov. 8, 2026 — https://www.euronews.com/2026/11/08/what-we-know-about-the-krakow-shooting-that-left-six-people-dead

2. City of Kraków (official), “Strzały w centrum Krakowa. Są zabici i ranni,” Nov. 8, 2026 — https://krakow.pl/aktualnosci/345151,29,komunikat,strzelanina_w_centrum_krakowa__sa_zabici_i_ranni.html

3. Onet, live coverage, “Rusza śledztwo po strzelaninie w Krakowie,” updated Nov. 8, 2026, 1154 local — https://wiadomosci.onet.pl/krakow/strzelanina-w-krakowie-najnowsze-informacje-relacja/p16e8gh

4. Arab News (with Reuters), “Aramco building in Riyadh targeted, Saudi energy ministry says,” Nov. 8, 2026 — https://www.arabnews.com/saudi-arabia/saudi-defenses-intercept-houthi-missiles-targeting-riyadh-southern-regions-3010424

5. The National, “Aramco building in Riyadh damaged in attempted attack, ministry says,” Nov. 8, 2026 — https://www.thenationalnews.com/news/gulf/2026/11/08/saudi-led-coalition-intercepts-two-houthi-missiles-fired-towards-riyadh/

6. U.S. Mission to Yemen, “Security Alert: Yemen – November 7, 2026” — https://ye.usembassy.gov/security-alert-yemen-november-7-2026/

7. Edit USA, “U.S. warns Americans in the Middle East of higher attack threat from Houthis and Iran,” Nov. 6, 2026 — https://www.editusa.com/news/us-embassy-security-alert-middle-east-houthis-iran-threat

8. France 24 (AFP), “Sporadic clashes between police and protesters as renewed demonstrations sweep France,” updated Nov. 7, 2026 — https://www.france24.com/en/france/20261107-sporadic-clashes-between-police-and-protesters-as-renewed-demonstrations-sweep-france

9. CNBC, “In pictures: France protests draw 146,000 as clashes erupt for fourth straight weekend,” Nov. 8, 2026 — https://www.cnbc.com/2026/11/08/france-protests-clashes-arrests.html

10. France 24 (AFP), “France investigating if bogus bomb threats against airlines linked to ‘foreign powers’,” Nov. 7, 2026 — https://www.france24.com/en/france/20261107-france-investigating-if-bogus-bomb-threats-against-airlines-linked-to-foreign-powers

11. The Independent, “Russia likely behind bomb hoaxes that grounded flights, say European intelligence,” Nov. 7, 2026 — https://www.independent.co.uk/news/world/europe/russia-bomb-threats-europe-flights-b3080924.html

12. Aju Press, “Hack at Mirae Asset Securities exposes data of 39,000,” Nov. 7, 2026 — https://www.ajupress.com/view/20261107093920797

13. SBS News, “Korea’s Largest Brokerage Hit by Cyber Attack... Data of Some 39,000 Leaked,” Nov. 7, 2026 — https://news.sbs.co.kr/english/article.do?news_id=N1008835438

14. CoinDesk, “Gnosis Pay breach exposes card numbers, home addresses and linked crypto wallets,” Nov. 7, 2026 — https://www.coindesk.com/business/2026/11/07/gnosis-pay-breach-exposes-card-numbers-home-addresses-and-linked-crypto-wallets

15. National Weather Service New York (OKX), NYC forecast and active alerts for NY, NJ, CT, checked Nov. 8 — https://api.weather.gov/gridpoints/OKX/33,42/forecast

16. FAA National Airspace System Status, update Nov. 8, 1100 UTC — https://nasstatus.faa.gov/api/airport-status-information

17. National Weather Service Corpus Christi, Flood Watch, issued 0034 CST Nov. 8, 2026 — https://forecast.weather.gov/wwamap/wwatxtget.php?cwa=usa&wwa=Flood+Watch

18. NWS Weather Prediction Center, Short Range Forecast Discussion, 0300 EST Nov. 8, 2026 — https://tgftp.nws.noaa.gov/data/raw/fx/fxus01.kwbc.pmd.spd.txt

19. National Hurricane Center, Atlantic Tropical Weather Outlook, 0100 EST Nov. 8, 2026 — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Kraków: At least six people were killed in a shooting in Main Market Square on Saturday. BBC reports 16 people, including the suspect, were taken to hospital. City officials urged residents and tourists to stay away while the investigation continues. [1][2]

• France: The Interior Ministry reported 146,000 protesters nationwide, including 46,000 in Paris; organizers gave a higher nationwide estimate of over 250,000. Clashes were reported in several cities, with roughly 350 arrests nationwide by evening. [3]

• Europe aviation: Paris prosecutors are investigating false bomb threats against commercial flights, including possible links to foreign powers. No attribution has been established; no explosives had been found in the incidents covered by the report. [4]

• U.S. aviation: The FAA feed timestamped 2038 ET lists a Seattle wind ground-delay program averaging 34 minutes, with a maximum of 2 hours 53 minutes. It lists no New York-area ground stops, ground-delay programs or departure delays. [5]

Europe — Kraków

• BBC and DW report that a 24-year-old Polish man fired from a car at random people in Main Market Square. Police shot and arrested the suspect. A British national was among the six fatalities; two police officers were among those hospitalized. [1][2]

• Prime Minister Donald Tusk described the attack as terrorism. BBC and DW also report three bodies found at the suspect’s home. Motive and the relationship of those additional victims to the suspect remain under investigation; do not treat early ideological indications as a settled finding. [1][2]

• EP assessment: Keep movements away from Main Market Square and police cordons. Confirm access directly with hotels and local transport providers before moving; do not infer a citywide closure or a reopening from the suspect’s arrest.

France — Protest Aftermath

• DW, citing AFP and dpa, reports that the authorized République–Nation march was largely peaceful before tensions at Nation. Paris police said around 200 violent individuals attacked officers after an arrest related to a trash-can fire. Police deployed tear gas. [3]

• A separate banned Yellow Vest gathering took place at Concorde. Leading figures Benjamin Ball and Solene Azelma Sigaux were taken into custody. Clashes were also reported in Toulouse, Marseille, Lyon and Bordeaux. [3]

• EP assessment: Check local conditions before using protest locations or nearby stations. These are reports of Saturday’s events, not confirmation that clashes or station closures remain active at this update.

Aviation — European Hoax Investigation

• France 24/AFP reports that Paris prosecutors are seeking the authors of emails targeting dozens of commercial flights over the past week and investigating any possible foreign-power links. Irish authorities described threats sent to media on Friday as likely part of a coordinated disruption campaign. The perpetrators remain unidentified. [4]

• EP assessment: Allow contingency time for screening and diversions. Check the operating airline before airport moves. The investigation does not establish that any particular upcoming flight is threatened.

United States — FAA Snapshot

• The FAA airport-status feed was updated November 7 at 2038:31 ET. Seattle’s listed wind ground-delay program averages 34 minutes (maximum 2 hours 53 minutes). No New York-area delay entries appear in this snapshot; that is not a guarantee that an individual flight is on time. Recheck with the airline and FAA before departure. [5]

Sources

1. BBC News, “What we know so far after Krakow gun attack,” opened this check — https://www.bbc.com/news/articles/cmd7q15drwgeo

2. DW (AP/Reuters), “Poland: Gunman kills 6 in Krakow main square,” Nov. 7 — https://www.dw.com/en/deadly-shooting-at-krakows-main-square-was-act-of-terrorism-says-polish-prime-minister-donald-tusk/a-79886489

3. DW (AFP/dpa), “France sees new round of Yellow Vest, student protests,” Nov. 7 — https://www.dw.com/en/france-sees-new-round-of-yellow-vest-student-protests/a-79884064

4. France 24/AFP, “France investigating if bogus bomb threats against airlines linked to foreign powers,” Nov. 7 — https://www.france24.com/en/france/20261107-france-investigating-if-bogus-bomb-threats-against-airlines-linked-to-foreign-powers

5. FAA National Airspace System Status, update Nov. 7, 2038:31 ET — https://nasstatus.faa.gov/api/airport-status-information

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

Correction (Nov. 8, 2026): An earlier version of this update said the Kraków suspect was 25. Polish police and prosecutors say he is 24. Sources: AP; The Guardian.

• France today: The national strike is under way. In Paris, the only approved march runs from Place de la République to Place de la Nation via Boulevard Voltaire, from 1400 to 1900 local (0800–1300 ET). Unauthorized marches formed this morning in the Marais, the 20th arrondissement and on Rue de Rivoli, and police dispersed them. The government expects 500,000 to 700,000 people to march across France. [17][18][19]

• Strait of Hormuz (Unconfirmed): The IRGC says oil tankers and a tugboat caught fire after using “unauthorized” routes through the Strait, one of them after hitting a mine. The vessels are not named. Where sources differ: Reuters (via Arab News) and Iran International report two tankers and a tug, while Al Jazeera reports three tankers and a tug. [1][2][3][4]

• Tanker hit off Qatar: UKMTO says a tanker was struck by two unidentified projectiles about 50 NM north of Madinat ash Shamal, Qatar, at 2320 UTC Wednesday (1820 ET). The condition of the crew and the extent of the damage are not yet known. [5][6][7]

• Saudi Arabia: The Saudi-led coalition says it intercepted a Houthi ballistic missile fired toward the Medina region on Thursday. Saudi Arabia has still not confirmed Wednesday’s Houthi claim of a strike on Riyadh’s airport, which kept operating. [1][3][12][13]

• Threat to President Trump: Iranian state TV aired a mock execution of an actor playing President Trump in a Tehran square, part of state-organized anti-U.S. displays after the U.S. midterms. [8][9]

For solo operators: If your principal is in Paris today, keep them away from the 11th arrondissement and Boulevard Voltaire from late morning, and away from Rue de Rivoli and the Marais, where unauthorized marches have already formed. Expect metro closures to change through the day. [17][18] For a principal in the Gulf or flying through Saudi Arabia, check flight status with the airline before leaving for the airport. [10][13]

For corporate security teams: Briefing items for leadership:

1. Gulf shipping: A confirmed projectile strike off Qatar adds to the IRGC’s claims of tankers burning in the Strait. Iran’s navy says the Strait is “unsafe and closed” to ships that do not coordinate with it. [4][5]

2. Saudi Arabia: The U.S. Embassy reissued its alert ordering non-emergency U.S. government staff and families to leave the country, and it warns of attacks on airports. [10][11]

3. Travel data: The Amadeus breach has now hit at least six Asian airlines, including Japan Airlines (92,000 customers) and Cathay Pacific (53,000 records). [25]

4. Supply chain: Bangladesh’s new garment wage board says new pay will take effect in December, but clashes went on Wednesday in Savar, Gazipur and Narayanganj. [22][23]

Threats to Executives & Public Figures

• Iran, threat to President Trump: Iran International says state TV broadcast live a mock hanging of an actor in a Trump mask by a man in a Revolutionary Guards uniform in Tehran’s Tajrish Square, as spectators cheered. MEMRI says Iran’s Channel 3 aired the mock execution on Nov. 4, the climax of a “Trump in a Cage” exhibition. The display sat under a billboard reading “We Will Kill Trump.” [8][9]

  • EP note: This is state-sponsored rhetoric, not an operational threat. Still, it raises the profile of U.S. officials and of people linked to them. Teams protecting U.S. government-linked principals abroad should review their profile and routes in places where pro-Iran groups are active.

• Iran, leadership message: Reported by Iran International: a message attributed to Supreme Leader Mojtaba Khamenei says changes in U.S. election results will not alter Washington’s hostility toward Iran. Iran International also cites two senior Iranian sources who told Reuters that Tehran fears President Trump could make up for his election losses with new military action. [4]

Travel Advisories & Hotspots

• Iran, Strait of Hormuz (Unconfirmed): Reuters, via Arab News, reports the IRGC as saying one tanker struck a mine crossing a passage south of the Strait. A supertanker caught fire leaving the eastern route, and a tugboat that came to help also caught fire. [2] Iran’s navy separately said a tanker that had switched off its tracking systems hit a mine in the eastern Strait on Thursday. [4] The IRGC also claims it captured two U.S. drones intact. None of these claims has been independently confirmed. [1][3]

  • Where sources differ: Iran International says the IRGC statement came on Wednesday, while Arab News (Reuters) says Thursday. Al Jazeera counts three tankers, while the other reports count two. [1][2][3]

• Qatar, Persian Gulf: UKMTO Warning 196-26 lists the source as “verified.” It reports a tanker struck by two unidentified projectiles 50 NM north of Madinat ash Shamal, with crew status, damage and environmental impact unconfirmed, and it tells vessels to transit with caution. [5][6][7]

• Saudi Arabia: On Tuesday, the U.S. Embassy reissued its alert ordering non-emergency U.S. government employees and family members to leave the country. It warns that Houthi attacks on airports “have the potential to escalate rapidly” and urges “extreme caution” at Saudi airports. [10][11] On Wednesday, Saudi Civil Defense issued four early warnings, including one for Riyadh that it lifted nine minutes later. [12]

• Ethiopia: The U.S. Embassy says fighting continues in Central Tigray and near the Eritrean border, and that flights to Axum and Shire remain suspended. It advises against travel to the Amhara, Tigray and Afar regions. [14]

• Ukraine: The Air Force says Russia launched 128 drones and two Kh-35 missiles overnight, starting at 1800 Wednesday, and that 105 drones were shot down or suppressed by 0800. There were hits at 18 locations. Three people were hurt in Dnipro and Samar, and infrastructure was damaged. [15][16]

Civil Unrest in Business Hubs

• France, Paris (today): The court on Wednesday upheld the prefecture’s route, République to Nation via Boulevard Voltaire, from 1400 to 1900 local. The Bastille–Concorde route is banned. [18][19] Authorities expect 40,000 to 80,000 marchers in Paris. Reported by actu.fr, citing BFMTV: the police prefecture says 400 to 600 radical or violent activists could join the march. [17]

  • Before the march, school students blocked Rue de Rivoli with trash bins until police dispersed them. [18] The police prefecture says checks at train stations turned up hammers and lighters, and one person was arrested at Châtelet. [17]

  • Reported by actu.fr: Châtelet–Les Halles station closed late this morning, and parts of metro lines 6 and 11 were suspended. This adds to the planned closures of about 30 stations from 1100. [17]

  • Action: Expect road and metro disruption across central and eastern Paris through the evening. Keep principals off the route and away from Bastille and the Marais.

• France, regions: Marches began this morning in Lyon, Marseille, Nantes, Nice, Clermont-Ferrand and Orléans. In Lyon, the prefecture expects 20,000 to 30,000 people on a route that avoids the city center. In Lille, the march starts at 1430. [18]

• France, Toulouse: The administrative court upheld the prefect’s ban on marching in the city center. The prefect had offered a route farther out. Reported by Le Nouvel Obs: local unions said they would keep their banned route. [18]

• Bangladesh, Dhaka: On Wednesday, the fifth day of protests, workers and police clashed again in Savar, Gazipur and Narayanganj, and police used tear gas and sound grenades. The new Minimum Wage Board agreed that revised pay will take effect in December, but it has not set the amount. Workers want 30,000 taka a month, up from 12,500. [22][23]

Aviation & Transport

• FAA (checked 0602 ET): No delays are listed for any U.S. airport, including New York, Washington and Los Angeles. Santa Ana (SNA) has overnight closures through Nov. 8, and LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [24]

• Paris airports: The DGAC did not order flight cuts at Roissy-Charles de Gaulle or Orly for today’s strike, although some DGAC unions called for a walkout. Expect slower check-in and security, and expect train access to the airports to be harder than flying. [20][21]

• Riyadh (RUH): Reported by The Contrail: flight tracking showed the airport operating on Wednesday after the Houthi claim, with about 15 departures canceled, similar to recent days. Etihad has extended its Riyadh cancellations through Nov. 19. [13]

Cyber & Doxxing Risk to Principals

• Amadeus breach (follow-up): The Record says Japan Airlines, Cathay Pacific, Korean Air, Asiana, Singapore Airlines and Malaysia Airlines have all reported breaches traced to Amadeus. Amadeus says booking-display data was accessible through a vulnerability, with no evidence that payment data was taken. Cathay says some records included passports, frequent-flyer numbers and emails. [25]

  • What to do: If a principal flew any of these airlines recently, change booking references where possible and treat messages that cite real trip details as phishing until verified.

• DreamHost: DreamHost says an attacker exploited its web File Manager from August to Oct. 23 and stole FTP/SFTP usernames and passwords, as well as webmail session data. Reset credentials for any principal or family-office website hosted there. [26]

• Japan, Muji: Ryohin Keikaku says about 1.09 million customer records may have leaked, including 345,000 full numbers of valid credit cards with dates of birth. Nomura Investor Relations also reported a breach of a service used by institutional investors. [27]

• CISA: CISA added an actively exploited Apple flaw (CVE-2024-27834, pointer-authentication bypass) to its KEV catalog on Nov. 4. Update principals’ iPhones, iPads and Macs. The WordPress Core flaw added on Nov. 3 has a federal patch deadline of Nov. 6. [28]

Severe Weather

• New York City: No active alerts for New York, New Jersey or Connecticut. Thursday brings patchy fog before 0700, then a 30% chance of rain, with a high near 70°F. Rain moves in tonight, with showers and thunderstorms likely after 0400 (80%). Friday brings rain (100%) and a high near 68°F, with a quarter to half an inch of rain possible each period. [29][31]

• U.S. severe: The NWS has 32 flood warnings in effect, mainly in Missouri and Kansas, Arizona, central Florida and Colorado. Flash flood warnings covered north Georgia (Fannin, Gilmer, Murray and Union counties) and southeast Tennessee and western North Carolina early this morning. Storm and high wind warnings are up in southeast Alaska. [30]

• Tropics: The NHC says a non-tropical low a few hundred miles south of Bermuda could gain subtropical traits through the weekend (30% in 48 hours, 50% in seven days). In the Pacific, a tropical depression is likely southeast of Hawaii (60% and 70%), and a low off Central America could bring heavy rain there through the weekend (40% and 60%). [32][33]

Tradecraft Tip

General guidance, not tailored advice.

Plan around the crowd you can’t see on the map. Today’s Paris march has an approved route, but the first trouble came from unauthorized marches blocks away. On a protest day:

• Plot the approved route, then mark a buffer of several blocks on each side, plus any landmark that draws breakaway groups.

• Check station closures shortly before each move. They change with the crowd, not with the schedule.

• Keep the vehicle staged on the far side of the principal’s venue from the route, with a second exit picked in advance.

• Dress the principal and team down, and avoid branded vehicles near the march.

Coming Up

• Thu, Nov. 5: Paris march, République to Nation, 1400–1900 local (0800–1300 ET). Marches across France through the day. [17][19]

• Fri, Nov. 6: Steady rain in New York City, with a high near 68°F. Federal agencies must patch the WordPress Core flaw (CVE-2026-119977) by today. [28][31]

• Sat, Nov. 7: Reported by Le Nouvel Obs: the “gilets jaunes” coordination has called an “Act IV” of cost-of-living protests and urged people to keep up blockades until then. The low south of Bermuda may turn subtropical over the weekend. [18][32]

Sources

1. Iran International, “Live: Iran braces for renewed US strikes as diplomacy hangs in the balance,” updated Nov. 5, 2026, 1033 GMT — https://www.iranintl.com/en/liveblog/202610312594

2. Arab News (Reuters), “Iran’s IRGC says two tankers and tugboat caught fire in Strait of Hormuz,” Nov. 5, 2026 — https://www.arabnews.com/middle-east/irans-irgc-says-two-tankers-and-tugboat-caught-fire-in-strait-of-hormuz-3009888

3. Al Jazeera, “Iran war live: 3 tankers on fire in Hormuz; Saudi intercepts Houthi missile,” Nov. 5, 2026 — https://www.aljazeera.com/news/liveblog/2026/11/5/iran-war-live-trump-admits-war-caused-election-loss-but-had-to-do-it

4. Iran International, “Iran’s navy says tanker struck mine, caught fire in Strait of Hormuz,” Nov. 5, 2026 — https://www.iranintl.com/en/202611051638

5. UKMTO, Warning 196-26 – Attack, Nov. 5, 2026 (incident Nov. 4, 2320 UTC) — https://www.ukmto.org/-/media/ukmto/products/20261105-ukmto_warning-196-26.pdf?rev=21551561384d4d77a20f66bf7251abad

6. Dawn (Reuters), “Tanker struck by 2 unidentified projectiles north of Qatar, crew status unconfirmed, UKMTO says,” Nov. 5, 2026 — https://www.dawn.com/news/2042327/tanker-struck-by-2-unidentified-projectiles-north-of-qatar-crew-status-unconfirmed-ukmto-says

7. AP, “Tanker struck by projectiles in the Persian Gulf off Qatar, and other Mideast news,” Nov. 5, 2026 — https://apnews.com/article/mideast-iran-war-hormuz-tankers-a35d13806844d99fda93de0a19de57fa

8. Iran International, “Iranian state TV broadcasts mock hanging of Trump live,” Nov. 5, 2026 — https://www.iranintl.com/en/202611057584

9. MEMRI TV, “Tehran’s ‘Trump in a Cage’ Live Art Exhibition Culminates with the Mock-Execution of the U.S. President,” Nov. 4, 2026 — https://www.memri.org/tv/trump-mock-execution-tehran-us-embassy-takeover-iran-embassy

10. Anadolu Agency, “US Embassy warns Americans of Houthi attacks, airport security risks in Saudi Arabia,” Nov. 4, 2026 — https://www.aa.com.tr/en/americas/us-embassy-warns-americans-of-houthi-attacks-airport-security-risks-in-saudi-arabia/4110645

11. Dawn, “US Embassy reissues Saudi Arabia alert ordering non-emergency staff to leave,” Nov. 4, 2026 — https://www.dawn.com/news/2042022

12. Anadolu Agency, “Saudi Arabia issues 4 alerts, including 1 for Riyadh,” Nov. 4, 2026 — https://u.aa.com.tr/en/middle-east/saudi-arabia-issues-4-alerts-including-1-for-riyadh/4111276

13. The Contrail, “Riyadh’s Airport Is Partly Open. Airlines Keep Pushing Back Their Return,” updated Nov. 4, 2026 — https://www.thecontrail.org/riyadh-airport-reopening-flights-permission/

14. U.S. Embassy Addis Ababa, “Security Alert: U.S. Embassy Addis Ababa, Ethiopia (November 4, 2026)” — https://et.usembassy.gov/security-alert-u-s-embassy-addis-ababa-ethiopia-november-4-2026/

15. Hromadske, “Russia attacks Ukraine with 128 drones, including 65 jet-powered UAVs, and two missiles,” Nov. 5, 2026 — https://hromadske.ua/en/war/273813-russia-attacks-ukraine-with-128-drones-including-65-jet-powered-uavs-and-two-missiles

16. Ukrinform, “ADF neutralises 105 Russian drones since yesterday evening,” Nov. 5, 2026 — https://www.ukrinform.net/rubric-ato/4181598-adf-neutralises-105-russian-drones-since-yesterday-evening.html

17. actu.fr, “Direct. Grève du 5 novembre à Paris : suivez en direct la journée de mobilisation,” updated Nov. 5, 2026, 1150 local — https://actu.fr/ile-de-france/paris_75056/direct-greve-du-5-novembre-a-paris-suivez-en-direct-la-journee-de-mobilisation-avec-nous_65014417.html

18. Le Nouvel Obs, “En direct, grève du 5 novembre,” updated Nov. 5, 2026, 1200 local — https://www.nouvelobs.com/societe/20261105.OBS119856/en-direct-greve-du-5-novembre-suivez-la-journee-de-mobilisation-sociale.html

19. France 3 Paris Île-de-France, “Grève du 5 novembre à Paris : manifestation de République à Nation, transports, services publics,” updated Nov. 4, 2026 — https://france3-regions.franceinfo.fr/paris-ile-de-france/paris/manifestation-du-5-novembre-a-paris-parcours-de-republique-a-nation-transports-services-publics-a-quoi-faut-il-s-attendre-3444207.html

20. Sortiraparis, “Grève du 5 novembre dans les aéroports : ce que prévoit la DGAC pour Roissy et Orly,” updated Nov. 4, 2026 — https://www.sortiraparis.com/actualites/a-paris/articles/357220-greve-du-5-novembre-dans-les-aeroports-ce-que-prevoit-la-dgac-pour-roissy-et-orly

21. VolClaim, “Grève du 5 novembre 2026 : pas de réduction de vols demandée par la DGAC,” updated Nov. 4, 2026 — https://www.volclaim.com/actualite-aerienne/greve-5-novembre-2026-vols-aeroports.html

22. The Business Standard, “RMG workers’ new wages to take effect in December, owners and workers agree,” Nov. 4, 2026 — https://publisher.tbsnews.net/economy/rmg/rmg-workers-new-wages-take-effect-december-owners-and-workers-agree-1592281

23. The Hindu, “Bangladesh agrees new garment pay scale from December amid protests,” Nov. 4, 2026 — https://www.thehindu.com/news/international/bangladesh-agrees-new-garment-pay-scale-from-december-amid-protests/article71667080.ece

24. FAA National Airspace System Status, checked Nov. 5, 0602 ET — https://nasstatus.faa.gov/api/airport-status-information

25. The Record, “More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus,” Nov. 4, 2026 — https://therecord.media/asian-airlines-announce-data-breach-it-provider-incident

26. BleepingComputer, “DreamHost confirms data breach exposed FTP logins and webmail sessions,” Nov. 4, 2026 — https://www.bleepingcomputer.com/news/security/dreamhost-confirms-data-breach-exposed-ftp-logins-and-webmail-sessions/

27. The Straits Times, “Credit card numbers may have leaked in cyberattack on Japan’s Muji,” Nov. 4, 2026 — https://www.straitstimes.com/asia/east-asia/credit-card-numbers-may-have-leaked-in-cyberattack-on-japans-muji

28. CISA, Known Exploited Vulnerabilities catalog (version 2026.11.04), checked Nov. 5 — https://www.cisa.gov/known-exploited-vulnerabilities-catalog

29. National Weather Service, active alerts for NY, NJ and CT, Nov. 5 — https://api.weather.gov/alerts/active?area=NY,NJ,CT

30. National Weather Service, active severe alerts nationwide, Nov. 5 — https://api.weather.gov/alerts/active?severity=Severe

31. National Weather Service New York (OKX), NYC forecast, Nov. 5 — https://api.weather.gov/gridpoints/OKX/33,42/forecast

32. National Hurricane Center, Atlantic Tropical Weather Outlook, Nov. 5, 0100 EST — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

33. National Hurricane Center, Eastern North Pacific Tropical Weather Outlook, Nov. 4, 2200 PST — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Paris, Thursday: The Paris administrative court rejected the unions’ appeals this evening. Thursday’s march must follow the prefecture’s route from Place de la République to Place de la Nation via Boulevard Voltaire, from 1400 to 1900 local. The Bastille–Concorde route is banned, and 25 metro stations close from 1100. [1][2][3]

• Strait of Hormuz (Unconfirmed): BBC Verify says it has found no evidence that the four tankers the IRGC says hit mines were destroyed. UKMTO has reported only one attack, the tanker hit off Lima, Oman, on Tuesday evening. [4][5][6]

• Saudi Arabia (Unconfirmed): The Houthis claim a ballistic missile hit King Khalid International Airport in Riyadh. There is no Saudi confirmation. [7][8][9]

• Tehran: Thousands marched in today’s embassy-anniversary rallies, burning US and Israeli flags and parading effigies of President Trump and Prime Minister Netanyahu. We found no reports of violence. [8][10]

• US, election officials: The Justice Department has charged an Oklahoma man with mailing hundreds of letters containing white powder to election officials, members of Congress and others. The powder was not toxic. [11][12]

Middle East

• Hormuz shipping (Unconfirmed): The IRGC has given no ship names, flags or locations for the four tankers it says hit mines, and Rudaw says the claim could not be independently verified. The IRGC made a similar claim about three tankers on Tuesday. [5][6]

  • Maritime Executive reports that Vanguard Tech identified the tanker hit off Lima as the Barbados-flagged Grit. That identification comes from one source. [5]

  • The IRGC also claims it shot down a US MQ-1 drone over Qeshm Island today. That claim is also unconfirmed. [8]

  • Iran’s chief negotiator, Mohammad Bagher Ghalibaf, said Americans voted “NO TO WAR” and warned that ignoring this would bring “a Nightmare.” Reuters reports that Qatari mediators expect replies from both sides on new proposals within 36 hours. [4][8]

  • Action: Plan for the Gulf threat level to stay the same. Keep shelter, evacuation and check-in plans current for principals in the region.

• Saudi Arabia: Houthi spokesman Yahya Saree claims the strike caused “significant damage” to King Khalid International Airport. He again told airlines and travelers to avoid Saudi airspace. [7]

  • BBC Arabic reports that Saudi Civil Defense warned of a “potential danger” in the Riyadh area hours before the claim, then lifted the warning. It is not clear whether a missile reached the airport. [9]

  • Action: Principals flying through Riyadh should check flight status with the airline before leaving for the airport and follow Saudi Civil Defense alerts.

• Tehran rallies: Tehran Mayor Alireza Zakani told the crowd that the US and Israel had suffered a “decisive defeat,” including in Tuesday’s midterm elections. We found no reporting yet on the 2000 gathering at Enghelab Square that was advertised on the “We will kill Trump” poster. [10]

Europe

• Paris, Nov. 5 strike: According to AFP, the court ruled that the République–Nation route is “neither unsuitable nor disproportionate.” Interior Minister Laurent Nuñez had cited the “risks” of marching near seats of power. [1][2]

  • At the prefecture’s request, the RATP will close 25 metro stations from 1100. They include Oberkampf, Saint-Ambroise, Voltaire, Charonne and Rue des Boulets along the route, as well as Concorde, Invalides, Assemblée nationale and Charles de Gaulle–Étoile. République and Nation stay open. [2][3]

  • Action: Keep principals away from Boulevard Voltaire and the 11th arrondissement from late morning on Thursday. Plan car routes around the metro closures, and expect the strike to slow traffic across the city.

United States

• White-powder letters: Robin Patrick Martin, 67, of Oklahoma City, was arrested on Monday and is charged with sending hoaxes and mailing threatening communications. CBS News reports that he sent more than 700 envelopes ahead of the 2024 and 2026 elections. He is being held until a hearing on Nov. 9. [11][12]

  • Action: Copycats are possible. Mailrooms that serve officials and executives should keep their suspicious-mail procedures in place.

Aviation

• FAA (checked 1804 ET): No delays are listed for the New York, Washington or Los Angeles airports. Atlanta (ATL) has a thunderstorm ground stop until 1830 ET, and Dallas Love Field (DAL) and San Diego (SAN) have volume departure delays. The northern New Jersey airspace flow program (FCAP93) continues through Nov. 8. Santa Ana (SNA) has overnight closures through Nov. 8, and LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [13]

Sources

1. Europe 1 (AFP), “Manifestation du 5 novembre : le tribunal administratif valide le parcours alternatif de la préfecture de police,” Nov. 4, 1638 ET — https://www.europe1.fr/police-justice/manifestation-du-5-novembre-le-tribunal-administratif-valide-le-parcours-alternatif-de-la-prefecture-de-police-1208918

2. Sortiraparis, “Manifestation du 5 novembre à Paris : le parcours imposé par la préfecture confirmé,” updated Nov. 4, 1644 ET — https://www.sortiraparis.com/actualites/a-paris/articles/357052-manifestation-du-5-novembre-a-paris-le-parcours-impose-par-la-prefecture-confirme

3. actu.fr, “RATP. Grève du jeudi 5 novembre à Paris : ces 25 stations de métro seront fermées dès 11 heures,” Nov. 4, 1359 ET — https://actu.fr/ile-de-france/paris_75056/ratp-greve-du-jeudi-5-novembre-a-paris-ces-25-stations-de-metro-seront-fermees-des-11-heures_65016375.html

4. BBC News, “Iran’s chief negotiator says Americans voted ‘no to war’,” Nov. 4, 0217 ET, updated later — https://www.bbc.co.uk/news/articles/c6d934npl9y8o

5. The Maritime Executive, “Iran Claims Strikes on Multiple Tankers, Emboldened After US Elections,” Nov. 4 — https://maritime-executive.com/article/iran-claims-strikes-on-multiple-tankers-emboldened-after-us-elections

6. Rudaw, “Iran claims four oil tankers destroyed by naval mines as Trump weighs renewed strikes,” Nov. 4 — https://www.rudaw.net/english/categories/middleeast/1080011

7. Dawn (Reuters), “Yemen’s Houthis claim they targeted Riyadh airport, no Saudi confirmation,” Nov. 4, 0924 ET — https://www.dawn.com/news/2042099/yemens-houthis-claim-they-targeted-riyadh-airport-no-saudi-confirmation

8. CBS News, “Live Updates: Iran says U.S. election results show Americans reject war, as Trump says he’d do it again,” updated Nov. 4, 1433 ET — https://www.cbsnews.com/live-updates/iran-war-us-trump-midterms-strait-of-hormuz/

9. BBC News Arabic, “الحوثيون يعلنون استهداف مطار الرياض، وحزب الله ينفي دعمهم عسكرياً,” Nov. 4, 0904 ET — https://www.bbc.com/arabic/articles/cq70pd6k6n7eo

10. Al Jazeera (AFP, AP, Reuters), “Photos: Iran marks US embassy takeover with rallies against US, Israel,” Nov. 4 — https://www.aljazeera.com/gallery/2026/11/4/photos-iran-marks-us-embassy-takeover-with-rallies-against-america-israel

11. US Department of Justice, “Oklahoma Man Charged in Connection with Sending Threatening Letters Containing Non-Toxic White Powder to Election and Government Officials Across the Country,” Nov. 3 — https://www.justice.gov/opa/pr/oklahoma-man-charged-connection-sending-threatening-letters-containing-non-toxic-white

12. CBS News, “Oklahoma man charged with mailing letters with white powder to hundreds of officials,” Nov. 3, 1746 ET — https://www.cbsnews.com/news/white-powder-letters-oklahoma-man-charged-robin-martin/

13. FAA National Airspace System Status, checked Nov. 4, 1804 ET — https://nasstatus.faa.gov/api/airport-status-information

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Iran: President Trump told Fox News that U.S. forces hit a newly built Iranian anti-aircraft site “last night,” calling it a “minor attack” that “wasn’t war.” U.S. media had reported strikes on Iran’s Qeshm Island. Iran’s chief negotiator, Mohammad Bagher Ghalibaf, says Iran is “ready for battle with its finger on the trigger,” while Qatar says talks continue. [1][2]

• Strait of Hormuz (Unconfirmed): The IRGC claims four “violating” oil tankers hit naval mines south of the Strait on Wednesday and are still burning, two other vessels were stopped, and a 56th U.S. MQ-9 was shot down at 0430 Tehran time (0100 GMT). The vessels are not named, and we found no independent confirmation. Separately, UKMTO says a tanker was hit by two projectiles off Lima, Oman, on Tuesday evening. [3][4][5][6][7]

• Tehran today: Nationwide rallies mark the anniversary of the 1979 U.S. Embassy seizure. Reported by Iran International: a rally poster reads “We will kill Trump” and advertises a 2000 gathering in Enghelab Square (1130 ET) to burn images of U.S. officials. [8][9][10]

• U.S. election: Democrats won both chambers of Congress. Ballotpedia counts at least a 231-141 House majority and 54-44 in the Senate, with seven Senate seats flipped. In Washington state, a SWAT team arrested a man accused of emailing a judicial candidate threats of a “public execution.” [11][12][13][14]

• Europe: Officials say at least seven flights and an Israel-bound cruise ship received bomb threats on Tuesday. All searches found no explosives, and the European Commission says it is too early to say whether the incidents are linked. [16][17]

For solo operators: Expect political rhetoric to stay hot after the election. Treat threats made to candidates and officials as real until police say otherwise, and keep an eye on post-election gatherings near a principal’s office or home. [11][13] If a principal is in Paris on Thursday, plan around the national strike. The march route is still not approved and a court hearing is set for 1300 local today. [20]

For corporate security teams: Briefing items for leadership:

1. Gulf: A U.S. strike, IRGC claims of mined tankers and another projectile hit off Oman all point to rising risk for shipping and for staff in the Gulf. Al Jazeera reports that Iranian officials have suggested European countries and undersea cables in the Gulf could be targets. [1][3][6]

2. Travel data: About 46,000 Singapore Airlines booking records were accessed through a breach at software provider Amadeus. For about 620 records, emails, phone numbers and travel document details may also be exposed. [25]

3. Europe infrastructure: Suspected cyberattacks on supermarket refrigeration controls have now been reported in at least 10 countries, and the EU warns of more disruption. [26][27][28]

4. Supply chain: Garment wage protests around Dhaka continued Tuesday, with clashes in Mirpur, Ashulia and Gazipur and at least 70 factories shut in Ashulia. [21][22][23]

Threats to Executives & Public Figures

• U.S., Washington state: Kelso Police say a Cowlitz County judicial candidate received an email threatening “a public execution if they did not concede the election immediately.” Police linked it to Edward M. Williams, 37, also known as Darryl E. McWilliams, who they say had recently threatened to shoot officers who came to his home. A SWAT team arrested him at his Castle Rock home at about 0600 local on Election Day. Officers seized several firearms, and he was booked on a felony cyber harassment charge. [13][14]

  • EP note: A threat paired with known access to firearms and threats against police is the pattern that should move a case from “monitor” to “act.” Share it with local police early.

• Iran, threat to U.S. officials: Reported by Iran International: a poster for today’s government-sponsored rally shows President Trump, Prime Minister Netanyahu, Vice President Vance and envoy Steve Witkoff in burning suits under the words “We will kill Trump,” in Persian and English. [10]

• Canada, Toronto (follow-up): At a briefing on Oct. 31, Toronto Police Inspector Kristy Smith said investigators believe the suspects may have targeted the Morton family’s Bridle Path home because of the neighborhood’s wealth, where they expected to find valuables. Police are still searching for three suspects, including Daijohn Richards. [15]

Travel Advisories & Hotspots

• Iran, Strait of Hormuz: Trump said on “Fox & Friends” that Iran “built an anti-aircraft facility... As soon as it was completed, we hit it last night.” An Israeli military spokesperson said Israel was not involved. [1][2] Mohsen Rezaei, secretary of Iran’s Supreme National Security Council, called the U.S. reply to Iran’s seven conditions for reopening the Strait “not convincing.” [1]

  • Escalation risk: Trump told the Financial Times, “We’re locked and loaded if we need to go, but there may be no reason for it.” [2] U.S. media, citing U.S. officials, have reported plans for strikes that could begin as early as Wednesday. This remains Unconfirmed by any official statement. [1]

  • IRGC claim (Unconfirmed): Reported by Anadolu, Mehr and Middle East Eye, all citing the same IRGC statement: four tankers struck mines on a “prohibited” route south of the Strait and remain ablaze, and two other vessels were detained. No ship names, flags or casualties have been given. [3][4][5]

• Oman, Gulf of Oman: UKMTO says a tanker’s company security officer reported two unidentified projectiles hit the engine room at 1900 GMT Tuesday (1400 ET), about 14 NM northeast of Lima. No casualties or environmental impact were reported. This is the second hit in that area since Sunday. [6][7]

• Iran, Tehran: State media say rallies are being held at more than 900 locations. In Tehran, the main march was to run from Palestine Square along Taleghani Street to the former U.S. Embassy. Where sources differ: Tasnim says the Tehran march began at 0900 local, while WANA had given 1030 in Tuesday’s brief. [8][9]

• Ukraine: Ukraine’s Air Force says Russia launched 310 drones overnight and 272 were shot down or neutralized by 0800. Drones hit 19 locations. Energy sites were hit in Zhytomyr and Kovel, a shopping center was damaged in Odesa, and two people were hurt in Dnipro. [18][19]

Civil Unrest in Business Hubs

• France, Paris (Thursday): Unions want to march to Place de la Concorde, but the police prefecture had not approved the route as of Wednesday morning. The Île-de-France unions asked the Paris administrative court to force a decision, and the hearing set for 0930 was moved to 1300 local (0700 ET). The start is given as 1300 (Unsa) or 1400 (CGT). [20]

• France, Lyon (Thursday): A prefectural order bans marches across much of central Lyon from 0900 to 2000, including the Guillotière bridge and the Presqu’île. The prefecture cites the violence on Oct. 17. [20]

• Bangladesh, Dhaka: On Tuesday, the fourth day of wage protests, garment workers clashed with police around Dhaka, including Ashulia, Gazipur and the capital’s Mirpur area. Police used tear gas and sound grenades, and dozens of people, including police officers, were hurt. Ashulia police said at least 70 factories had closed for the day by 1120 local. [21][22][23]

Aviation & Transport

• FAA (checked 0558 ET): Departure delays of 46 minutes to an hour at Fort Lauderdale (FLL) and 31 to 45 minutes at Miami (MIA), both for weather. No delays are listed for the New York, Washington or Los Angeles airports. Santa Ana (SNA) remains closed overnight through Nov. 8, and LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [24]

• Europe, bomb threats (follow-up): Al Jazeera says Ryanair, Wizz Air, SAS and LOT flights were targeted, with four Ryanair flights hit. London’s Metropolitan Police checked threats to aircraft at Heathrow and one at Manchester and found “no security issues.” The Greek Coast Guard evacuated the Haifa-bound cruise ship Crown Iris off Syros, with about 1,500 people aboard, and no device was found. [16] CGTN says threats hit flights to Warsaw, Sofia, Rome and Murcia, and the Commission says it is too early to link them. [17]

  • EP note: Expect added screening and short-notice diversions on intra-European flights. Build slack into connections this week.

Cyber & Doxxing Risk to Principals

• Singapore Airlines / Amadeus: Reported by CNA: SIA says about 46,000 booking records were accessed through unauthorized access to Amadeus’ platform. The data includes names, booking references, itineraries and booking classes. For about 620 records, emails, phone numbers, travel document details and KrisFlyer numbers may also have been exposed. SIA says its own systems were not breached. [25]

  • What to do: An itinerary leak tells an adversary where a principal will be. If a principal booked SIA recently, consider changing booking references and watch for phishing that cites real trip details.

• Europe, refrigeration attacks (follow-up): Attackers changed settings on store refrigeration controls overnight into Monday, and Germany, Greece and Italy reported incidents on Tuesday. The BBC lists at least 10 affected countries. Danfoss says its products were involved. The EU’s food commissioner warned of further disruption. [26][27][28]

• CISA: CISA added one Known Exploited Vulnerability on Nov. 3, a WordPress Core race-condition flaw. Teams running WordPress sites for principals or family offices should patch now. [29]

Severe Weather

• New York City: No active alerts for New York, New Jersey or Connecticut. Wednesday is sunny with a high near 72°F and a south wind of 5–12 mph. Thursday brings a 30% chance of showers after 0700. [30][32]

• U.S. flooding: The NWS has 39 flood warnings in effect, mostly in Arizona (Maricopa County), Florida (Volusia, Lake and Seminole counties), Missouri, Kansas, Iowa and Nebraska. [31]

• Tropics: The NHC says a low may form south of Bermuda in the next day or so and could gain subtropical traits late this week, with a 20% chance in 48 hours and 40% in seven days. In the eastern Pacific, a tropical depression is likely to form southeast of Hawaii (50% in 48 hours, 70% in seven days), and a system off Central America could bring heavy rain there later this week. [33][34]

Tradecraft Tip

General guidance, not tailored advice.

Protect the itinerary like you protect the principal. The Amadeus breach is a reminder that travel plans leak through third parties you never deal with directly. Simple steps help:

• Book under an assistant’s or company travel account where possible, and keep the principal’s personal email and phone off reservations.

• Share full itineraries only with people who need them, and send updates through one secure channel.

• Change routine details, such as hotels or flight times, when a booking system reports a breach.

• Treat any call or email that cites real trip details as suspicious until you have verified the sender.

Coming Up

• Wed, Nov. 4: Paris court hearing on Thursday’s march route at 1300 local (0700 ET). Tehran’s Enghelab Square gathering at 2000 local (1130 ET). The UK Supreme Court continues the Palestine Action ban appeal. SNCF’s Thursday train list is expected this evening. [10][20][35]

• Thu, Nov. 5: National strike and marches across France, with route limits in Lyon and a Paris route still pending. [20]

Sources

1. Al Jazeera, “Iran says US reply to Hormuz plan ‘unconvincing’; Trump confirms strikes,” Nov. 4, 2026 — https://www.aljazeera.com/news/2026/11/4/iran-says-us-reply-to-hormuz-plan-unconvincing-trump-confirms-strikes

2. RTÉ News, “Iran warns against return to conflict after US strikes,” updated Nov. 4, 2026 — https://www.rte.ie/news/world/2026/1104/1597895-iran-us/

3. Anadolu Agency, “Iran claims 4 oil tankers destroyed by naval mines near Strait of Hormuz,” Nov. 4, 2026 — https://www.aa.com.tr/en/middle-east/iran-claims-4-oil-tankers-destroyed-by-naval-mines-near-strait-of-hormuz/4110958

4. Mehr News Agency, “IRGC says 4 oil tankers destroyed, 56th US drone downed,” Nov. 4, 2026 — https://en.mehrnews.com/news/249151/IRGC-says-4-oil-tankers-destroyed-56th-US-drone-downed

5. Middle East Eye, “Iran’s IRGC says four tankers ablaze after hitting mines in Hormuz Strait,” Nov. 4, 2026 — https://www.middleeasteye.net/live-blog/live-blog-update/irans-irgc-says-four-tankers-ablaze-after-hitting-mines-hormuz-strait

6. Anadolu Agency, “Tanker hit by 2 projectiles off Oman: UK maritime agency,” Nov. 4, 2026 — https://m.aa.com.tr/en/middle-east/tanker-hit-by-2-projectiles-off-oman-uk-maritime-agency/4110596

7. Xinhua, “Tanker hit by two projectiles off Oman: UKMTO,” Nov. 4, 2026 — https://english.news.cn/20261104/71ec72b5c63541be89d607df7f2e85d4/c.html

8. Tasnim News Agency, “Iranians hold rallies to mark National Day of Fighting against Global Arrogance,” Nov. 4, 2026 — https://www.tasnimnews.ir/en/news/2026/11/04/3740043/iranians-hold-rallies-to-mark-national-day-of-fighting-against-global-arrogance

9. Mehr News Agency, “Iran marks Natl. Day of Fighting Global Arrogance amid threat,” Nov. 4, 2026 — https://en.mehrnews.com/news/249154/Iran-marks-Natl-Day-of-Fighting-Global-Arrogance-amid-threat

10. Iran International, “Tehran rally poster declares ‘We will kill Trump’ ahead of US embassy anniversary,” Nov. 3, 2026 — https://www.iranintl.com/en/202611031751

11. Ballotpedia News, “Democrats win U.S. House and Senate majorities,” Nov. 4, 2026 — https://news.ballotpedia.org/2026/11/04/democrats-win-u-s-house-and-senate-majorities/

12. NBC News, “Election results live updates,” Nov. 4, 2026 — https://www.nbcnews.com/politics/2026-election/live-blog/election-results-house-senate-trump-live-updates-rcna607376

13. KATU, “Man accused of threatening to kill Cowlitz County judicial candidate arrested by SWAT,” Nov. 3, 2026 — https://katu.com/news/local/man-accused-of-threatening-to-kill-cowlitz-county-judicial-candidate-arrested-by-swat-castle-rock-washington-arrest-cyber-harassment-kelso-police-election-day-political-violence-threat

14. KPTV, “Man arrested, accused of threatening to execute Cowlitz County judicial candidate,” Nov. 3, 2026 — https://www.kptv.com/2026/11/03/man-arrested-accused-threatening-execute-cowlitz-county-judicial-candidate/

15. People, “Toronto Police Discuss Possible Motive Behind ‘Brutal’ Home Invasion and Hammer Attack on CEO Family,” Nov. 3, 2026 — https://people.com/toronto-police-discuss-possible-motive-behind-brutal-home-invasion-and-hammer-attack-on-ceo-family-12216043

16. Al Jazeera, “Bomb threats disrupt flights across Europe, no explosive devices found,” Nov. 4, 2026 — https://www.aljazeera.com/news/2026/11/4/bomb-threats-disrupt-flights-across-europe-no-explosive-devices-found

17. CGTN, “EU monitoring aviation bomb threats, says too early to establish links,” Nov. 4, 2026 — https://news.cgtn.com/news/2026-11-04/EU-monitoring-aviation-bomb-threats-says-too-early-to-establish-links-1RMVkmcRLzO/p.html

18. Kyiv Post, “Russia Attacks Ukraine With 310 Drones, Energy and Infrastructure Damaged,” Nov. 4, 2026 — https://www.kyivpost.com/post/89068

19. RBC-Ukraine, “Massive Russian drone attack: Ukraine’s air defenses intercept 272 targets overnight,” Nov. 4, 2026 — https://newsukraine.rbc.ua/news/massive-russian-drone-attack-ukraine-s-air-1793774191.html

20. L’Internaute, “Manifestations du 5 novembre : à Paris et en régions des parcours contestés,” Nov. 4, 2026 — https://www.linternaute.com/actualite/societe/11312687-manifestations-du-5-novembre-a-paris-et-en-regions-des-parcours-contestes-ou-defiler-ce-jeudi/

21. The Daily Star, “Ashulia tense as garment workers continue wage protests; 70 factories shut,” Nov. 3, 2026 — https://www.thedailystar.net/news/news/ashulia-tense-garment-workers-continue-wage-protests-70-factories-shut-4314291

22. CNA, “Bangladesh garment workers stage fourth day of wage protests,” Nov. 3, 2026 — https://www.channelnewsasia.com/asia/bangladesh-garment-workers-protest-wages-6516186

23. Prothom Alo, “Garment workers clash with police in Mirpur,” Nov. 3, 2026 — https://en.prothomalo.com/bangladesh/enrrb5j68c

24. FAA National Airspace System Status, checked Nov. 4, 0558 ET — https://nasstatus.faa.gov/api/airport-status-information

25. CNA, “About 46,000 SIA booking records accessed in data breach involving travel tech company Amadeus,” Nov. 3, 2026 — https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151

26. BBC News, “Europe on alert after supermarket freezers hit by cyber-attacks in 10 countries,” Nov. 3, 2026 — https://www.bbc.com/news/articles/cwy8lm1m59mvo

27. The Hacker News, “New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food,” Nov. 3, 2026 — https://thehackernews.com/2026/11/second-wave-of-cyberattacks-hits.html

28. Anadolu Agency, “Suspected cyberattacks on refrigeration systems spread across Europe,” Nov. 3, 2026 — https://www.aa.com.tr/en/europe/suspected-cyberattacks-on-refrigeration-systems-spread-across-europe/4110333

29. CISA, Known Exploited Vulnerabilities catalog (version 2026.11.03), checked Nov. 4 — https://www.cisa.gov/known-exploited-vulnerabilities-catalog

30. National Weather Service, active alerts for NY, NJ and CT, Nov. 4 — https://api.weather.gov/alerts/active?area=NY,NJ,CT

31. National Weather Service, active severe alerts nationwide, Nov. 4 — https://api.weather.gov/alerts/active?severity=Severe

32. National Weather Service New York (OKX), NYC forecast, Nov. 4 — https://api.weather.gov/gridpoints/OKX/33,42/forecast

33. National Hurricane Center, Atlantic Tropical Weather Outlook, Nov. 4, 0100 EST — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

34. National Hurricane Center, Eastern North Pacific Tropical Weather Outlook, Nov. 3, 2200 PST — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

35. UK Supreme Court, “R (on the application of Ammori) v Secretary of State for the Home Department,” checked Nov. 4 — https://www.supremecourt.uk/cases/uksc-2026-0099

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Iran (Unconfirmed): The New York Times, citing US officials, reports that US Central Command has a plan to begin strikes on Iran as early as Wednesday. The report says no decision has been made. Other outlets are repeating the Times report, and we have not found independent confirmation. [1][2]

• Europe, aviation: Seven passenger flights across Europe were searched or diverted today after bomb threats. All were hoaxes, and no devices were found. Correction to this morning’s brief: Warsaw-Modlin Airport reopened at 1221 local time (0621 ET). [3][4][5][6]

• Saudi Arabia: The Saudi-led coalition says it intercepted three drones today, over the Makkah region, the Eastern Province and toward the south. [7][8]

• Gulf of Oman: UKMTO says a tanker was hit by two unidentified projectiles 14 nautical miles northeast of Lima, Oman. No casualties were reported. [9][10]

• US, Election Day: An election security center says threats have been limited. A bomb threat briefly emptied a polling place in Toledo, Ohio. NY polls close at 2100. [11][12]

Middle East

• Iran: According to the Times report, as relayed by Iran International and Middle East Eye, the window is narrow: three US aircraft carriers are in the region, and one is due home after early November. Officials are split between more strikes and more time for sanctions and the blockade. [1][2]

  • The Guardian reports that CENTCOM confirmed last night’s limited strikes on Qeshm Island, and that mediators expect to know within two days whether indirect talks can continue. [13] Iran’s Mohsen Rezaei wrote on X that the US response was “not convincing” and that the Strait of Hormuz would reopen only if Iran’s seven conditions are met. [13]

  • Where sources differ: The Guardian says CENTCOM confirmed the Qeshm strikes. Reuters says CENTCOM did not respond and attributes the details to unnamed US officials. [13][14]

  • Wednesday, Nov. 4: As noted this morning, anti-US rallies are expected in Iran on the embassy seizure anniversary.

  • Action: Teams with principals in the Gulf should confirm shelter locations, evacuation routes and check-in times tonight. Be ready to change travel on short notice.

• Saudi Arabia: Coalition spokesman Turki al-Maliki said a drone was destroyed over the Makkah region. He later reported two more, one over the Eastern Province and one launched by the Houthis toward the south. [7][8]

  • Where sources differ: Anadolu and AFP (via Gulf News) report that Houthi spokesman Yahya Saree denied any operation against Saudi territory today. Xinhua reports that Saree claimed a drone attack on Abha International Airport and a missile strike on King Khalid Air Base in Khamis Mushait. Those claims have not been confirmed. [7][8][15]

  • Action: Principals in Makkah, the Eastern Province or the southwest should know where the nearest shelter is and follow Saudi Civil Defense alerts.

• Gulf of Oman shipping: The tanker was hit in its engine room at about 1900 UTC (1400 ET), according to UKMTO. No environmental impact was reported, and UKMTO advises vessels to use caution. [9][10]

Europe

• Flight bomb hoaxes: The flights departed from the UK, Ireland, Denmark, Portugal and Italy. Four were Ryanair flights, and the others were Wizz Air, LOT and SAS. [3][4][5]

  • Rome Fiumicino: two Ryanair flights, from Lisbon and Dublin, were searched. Italian Eurofighters escorted the Dublin flight. [4][5]

  • Spain: a Ryanair flight from Manchester was searched in Murcia. [3]

  • Sofia: a Wizz Air flight from Bergamo and a Ryanair flight from Dublin were searched. [3][4]

  • Warsaw: LOT’s Heathrow flight was diverted to Modlin, and an SAS flight from Copenhagen landed at Chopin. [3][5]

  • On Monday, a Wizz Air flight from Luton to Sofia diverted to Budapest under a Hungarian fighter escort. [3][4]

  • The UK government called them “malicious hoax threats.” Investigators say there is no immediate evidence that a hostile state was behind them, and countries are sharing information. [3][5]

  • Action: Expect searches, diversions and delays on intra-Europe flights. Principals should carry medication, documents and chargers in personal bags in case aircraft are evacuated and bags are left on board.

• Warsaw-Modlin (correction): The airport says the bomb alert was lifted at 1221 local and normal operations resumed. A flight from Edinburgh arrived after a stop in Poznań. [6][16]

• Ukraine, Komyshuvakha (follow-up): At least 31 people were killed in Monday’s strike on a school used for aid distribution, and 20 of them are not yet identified. Latvia has called for an emergency UN Security Council meeting. [17][18]

  • Where sources differ: The Kyiv Post says 58 people were missing as of this evening, citing regional chief Mykhailo Semikin. The Guardian says Semikin put the number at 48. [17][19]

• Paris, Nov. 5 strike: The unions went to court to make the police prefecture publish any ban on the Bastille–Concorde march route before 1400 Wednesday, and to have the ban suspended. The hearing at the administrative court is set for Wednesday at 0930 local (0330 ET). [20][21]

  • Action: Plan Thursday movements in central Paris around both the declared route and a possible alternative route.

United States

• Election Day: The Elections ISAC said in its 1500 EST update that most incidents have been resolved quickly. [11]

  • Toledo, Ohio: A bomb threat at Beverly Elementary forced voters out of the polling place in the late morning. Voting resumed inside shortly after noon, and other area schools also got threats. [11][12]

  • Fulton County, Georgia: Some voters got texts falsely saying their polling place had moved. [11]

  • Westchester County, New York: Scanners couldn’t read ballots because they hadn’t been updated after a change to a local race, according to the NY State Board of Elections. Some came back online this afternoon. [11]

  • Action: NY polls close at 2100. Expect crowds and media near campaign events and watch parties tonight. Armed staff should not enter polling sites.

Aviation

• FAA (checked 1810 ET): The only New York-area delay is a staffing departure delay at Teterboro. SFO has a wind ground delay program, and IAH has thunderstorm departure delays. LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [22]

Sources

1. Iran International, “US military has plan to strike Iran as early as Wednesday - NYT,” Nov. 3, 1426 ET — https://www.iranintl.com/en/202611035095

2. Middle East Eye, “US has plans to strike Iran as early as tomorrow, report says,” Nov. 3, 1520 ET — https://www.middleeasteye.net/live-blog/live-blog-update/us-has-plans-strike-iran-early-tomorrow-report-says

3. The Guardian, “Seven planes across Europe searched or diverted after ‘malicious hoax’ bomb threats,” Nov. 3, 1232 ET — https://www.theguardian.com/world/2026/nov/03/four-planes-flying-across-europe-targeted-by-bomb-threats

4. PBS News (AP), “Flights across Europe face disruption after false bomb threats,” Nov. 3, 1653 ET — https://www.pbs.org/newshour/world/flights-across-europe-face-disruption-after-false-bomb-threats

5. BBC News, “Seven flights across Europe targeted by suspected bomb threats,” Nov. 3 — https://www.bbc.com/news/articles/c6x2wd4v04eeo

6. Warsaw-Modlin Airport, press release no. 4, Nov. 3, 1300 local — https://modlinairport.pl/aktualnosc/odwolanie-alarmu-bombowego-i-przywrocenie-normalnego-funkcjonowania-lotniska-komunikat-nr

7. Xinhua, “Saudi-led coalition says intercepted 3 drones as Houthis claim attacks on Saudi airport, airbase,” Nov. 3 — https://english.news.cn/20261104/63111060703b4708aecd77e2745d2b41/c.html

8. Anadolu Agency, “Saudi-led coalition says it intercepted Houthi drone headed toward southern kingdom,” Nov. 3 — https://www.aa.com.tr/en/middle-east/saudi-led-coalition-says-it-intercepted-houthi-drone-headed-toward-southern-kingdom/4110514

9. Iran International, “UKMTO reports tanker hit by two projectiles off Lima, Oman,” Nov. 3, 1553 ET — https://www.iranintl.com/en/202611034340

10. Middle East Eye, “Tanker hit by two unknown projectiles off Oman, UKMTO says,” Nov. 3, 1605 ET — https://www.middleeasteye.net/live-blog/live-blog-update/tanker-hit-two-unknown-projectiles-oman-ukmto-says

11. Nextgov/FCW, “Election security center reports limited threats as voting glitches fuel fraud claims,” Nov. 3 — https://www.nextgov.com/cybersecurity/2026/11/election-security-center-reports-limited-threats-voting-glitches-fuel-fraud-claims/417013/

12. 13 ABC (WTVG), “Polling location at Beverly Elementary temporarily evacuated due to bomb threat,” Nov. 3 — https://www.13abc.com/2026/11/03/polling-location-beverly-elementary-evacuated-due-bomb-treat/

13. The Guardian, “US strikes Iran’s Qeshm Island as Vance voices optimism about a deal,” updated Nov. 3, 0852 ET — https://www.theguardian.com/world/2026/nov/03/us-strikes-irans-qeshm-island

14. Reuters, “US carries out ‘defensive’ strikes on Iran’s Qeshm Island, officials say,” Nov. 2 — https://www.reuters.com/world/middle-east/us-struck-irans-qeshm-island-wall-street-journal-reports-2026-11-03/

15. Gulf News (AFP), “Saudi forces say intercepted drone, as Yemen’s Houthis announce 17 killed in two days,” Nov. 3 — https://gulfnews.com/world/gulf/saudi/saudi-forces-say-intercepted-drone-as-yemens-houthis-announce-17-killed-in-two-days-1.500734033

16. The Jerusalem Post (Reuters), “Warsaw-Modlin airport reopens after London flight reports explosive device,” Nov. 3 — https://www.jpost.com/international/article-913683

17. Kyiv Post, “Latvia Seeks Emergency UN Security Council Meeting as Komyshuvakha Death Toll Hits 31,” Nov. 3 — https://www.kyivpost.com/post/89044

18. Interfax-Ukraine, “Russian attack on Komyshuvakha highlights devastating consequences of glide bombs – UN human rights experts,” Nov. 3 — https://en.interfax.com.ua/news/general/1230795.html

19. The Guardian, “Russia bombs humanitarian hub in Ukraine, killing at least 31 people,” Nov. 3 — https://www.theguardian.com/world/2026/nov/03/russia-bombs-ukrainian-aid-centre-komyshuvakha

20. franceinfo, “L’intersyndicale saisit la justice sur le parcours parisien de la manifestation du 5 novembre,” Nov. 3 — https://www.franceinfo.fr/economie/greve/l-intersyndicale-saisit-la-justice-sur-le-parcours-parisien-de-la-manifestation-du-5-novembre_8266493.html

21. actu.fr, “Grève du 5 novembre : l’intersyndicale saisit la justice sur le parcours de la manifestation,” Nov. 3 — https://actu.fr/ile-de-france/paris_75056/greve-du-5-novembre-l-intersyndicale-saisit-la-justice-sur-le-parcours-de-la-manifestation_65010831.html

22. FAA National Airspace System Status, checked Nov. 3, 1810 ET — https://nasstatus.faa.gov/api/airport-status-information

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Iran: U.S. forces struck Iran’s Qeshm Island in the Strait of Hormuz on Monday night. A U.S. official told Axios that a U.S. fighter destroyed an IRGC missile launcher in self-defense after the IRGC fired at a U.S. aircraft. The Wall Street Journal, which first reported the strike, says it is one of a series of limited U.S. strikes in recent weeks. The IRGC says it shot down a U.S. MQ-9 and two smaller drones. [1][2][3][4]

• Iran talks: A senior Iranian official told Reuters on Tuesday that the two sides are “far” from a deal and warned of a forceful response “in the region and beyond” to U.S. strikes. Qatar’s foreign ministry says both sides are reviewing the mediators’ proposals and that differences remain. [4][5]

• Ukraine: Russian guided bombs hit a school used as an aid center in Komyshuvakha, Zaporizhzhia region, then a nearby shelter. The regional head now puts the toll at 31 dead, with about 50 missing. Zelensky says Russia fired 289 drones and 76 missiles at nine regions overnight, timed with the U.S. vote. [16][17][18]

• U.S., Election Day: Polls in New York City are open 0600–2100. In New York, firearms are banned at polling places and campaigning is barred within 100 feet of the entrance. On Monday, a suspicious suitcase emptied the San Diego County election office for about an hour and a half before it reopened. [23][24][25][26]

• Europe, aviation: A LOT flight from London Heathrow to Warsaw diverted to Warsaw-Modlin after a bomb alert this morning, and Modlin closed until further notice. A second threat was reported on an SAS flight from Copenhagen, which landed at Warsaw Chopin. [36][37][38]

For solo operators: In New York today, armed details cannot carry inside a polling place. Plan for an unarmed escort or a handoff at the 100-foot line before a principal goes in to vote. Polls close at 2100. [25][26] In Paris, plan Thursday around the national strike and a union march from Bastille. The route has not yet been approved, and the start time has been given as both 1300 and 1400. [29][30][31] Clients flying into Warsaw today should check which airport they will actually land at. [36][37]

For corporate security teams: Briefing items for leadership:

1. Gulf: The U.S. strike on Qeshm, the IRGC’s drone claims and a new hull strike off Oman all show that risk to shipping and to staff in the Gulf is rising, not easing. The U.S. Mission in Saudi Arabia remains on ordered departure. [1][6][12]

2. Ukraine: The scale of overnight strikes on power plants and hospitals points to more outages for any staff in Ukraine. [17]

3. Cyber: The breach of Florida’s student aid site exposed Social Security numbers and home addresses for up to 4.9 million people. Warn staff about follow-on phishing and treat executives’ home addresses as possibly exposed. [40]

4. Supply chain: Garment workers in Dhaka have clashed with police for several days over pay. Firms that source from Mirpur should expect disruption. [27][28]

Threats to Executives & Public Figures

• Canada, Toronto: Police have named Daijohn Richards, 23, as a suspect in the Oct. 29 home invasion at the Bridle Path home of real estate CEO David Morton. Toronto police say three armed men shot Morton and his two adult daughters and attacked Morton and his wife with a hammer. Police say an accomplice shot Richards in the shoulder during the attack. He went to hospital, where officers spoke with him, but he was discharged before they had grounds to arrest him. He is now wanted on a Canada-wide warrant on charges including robbery. [19][20]

• Turkey, Istanbul: Seven suspects were jailed and one was put under house arrest on Monday in the case of businessman Nevzat Aydın. Aydın says a man claiming to belong to the “Çirkinler” crime group called him on Oct. 28 from a Greek (+30) number, demanded €1 million and threatened to kill his child. The call came after news reports about how much money he was said to have spent. [21][22]

  • EP note: Publicity about a principal’s wealth can quickly lead to extortion. Watch press coverage of a principal’s spending, not just their schedule.

• U.S., election offices: San Diego police said a suitcase was found in the lobby of the county Registrar of Voters building in Kearny Mesa at about 1345 local Monday (1645 ET). The building was evacuated at about 1510 and reopened at about 1645 local. The county called it a precaution, and no explosive has been reported. [23][24]

Travel Advisories & Hotspots

• Iran, Strait of Hormuz: Explosions were reported on Qeshm Island on Monday, according to Iran’s state news agency IRNA. [1] The IRGC says it downed two U.S. MQM-170 drones south of the island and a U.S. MQ-9 east of the Strait. [1][4] The National, citing U.S. officials, reports that an Iranian missile brought down a U.S. drone. CENTCOM had not commented as of the BBC’s report. [1][2] Brent crude rose 0.5% to $105.25 in early Asian trading. [2]

  • Diplomacy: President Trump said Monday there is “no rush” on Iran. He also told Fox News the U.S. “might need to go after Pickaxe [Mountain],” an underground site tied to Iran’s nuclear program. [1] Qatar says its mediation team is back in Doha from Tehran. [5]

• Oman, Gulf of Oman: UKMTO Warning 193-26 says a vessel was hit by an unknown projectile 9 NM northeast of Lima, Oman, at 2020 UTC on Nov. 1 (1520 ET). The projectile left a hole in its starboard side. The crew is safe and no environmental impact has been reported. The warning was published after our Monday brief. [6][7][8]

• Saudi Arabia: Coalition spokesman Turki al-Malki said a drone was intercepted and destroyed over the Makkah region on Tuesday. [9][10] Where sources differ: CNN Arabic reports that Houthi military spokesman Yahya Saree denied any operation against Saudi territory. [11] The U.S. Mission’s Nov. 2 alert says non-emergency staff remain on ordered departure. U.S. government staff need Chief of Mission approval to use any Saudi airport. Jeddah and Dammam airports are operating with delays and cancellations. Saudi authorities warn that filming or sharing interception or impact sites can bring legal action, and U.S. citizens have been detained for it. [12]

• Iran, Tehran (Wednesday): Reported by WANA: the yearly rally outside the former U.S. Embassy is set to begin around 0700 GMT Nov. 4 (1030 Tehran, 0200 ET) and is expected to be larger this year. [14] The U.S. Virtual Embassy says not to travel to Iran for any reason and that U.S. citizens should leave now. [15]

• Haiti, Port-au-Prince: The U.S. Embassy reports ongoing security operations near Tabarre and Croix-des-Bouquets. U.S. government personnel have been told to avoid the area. [13]

• Ukraine: Interfax-Ukraine quotes regional head Mykhailo Semikin as saying 31 people were killed in Komyshuvakha, with five injured and nearly 50 missing. [16] Where sources differ: The Guardian and the Kyiv Independent, citing earlier figures from the same official, report 29 dead and 48 missing. [17][18] Overnight strikes also wounded at least 62 people in Kharkiv, where a medical facility was damaged and more than 200 patients were moved. [17]

Civil Unrest in Business Hubs

• France, Paris (Thursday): The CGT, CFDT, FO, Unsa and FSU unions have called a national strike and marches for Nov. 5. In Paris, they have asked to march from Place de la Bastille to Place de la Concorde, but the police prefecture had not approved the route as of this morning. CGT leader Sophie Binet demanded an answer on Monday. [29][30] After the looting on Oct. 17, Paris authorities allowed only routes on the edge of the city on Oct. 24 and 31, so a different route could still be imposed. Bastille and Saint-Paul metro stations are among those most likely to close. [29]

• France, rail: Four rail unions are keeping their joint SNCF strike call for Thursday. Rail workers are rallying today at SNCF headquarters in Saint-Denis from 1100 local (0500 ET) during a pay meeting. SNCF expects to publish its list of trains running on Thursday by Wednesday evening, usually from 1700 local. [31]

• Bangladesh, Dhaka: Garment workers demanding a Tk 30,000 monthly minimum wage clashed with police in Mirpur on Nov. 1, and a police vehicle was set on fire in Mirpur-11. On Monday, police stopped a march toward the Mirpur-10 roundabout and fired tear gas at groups trying to reach the main roads. Riot-control vehicles and water cannons remained on standby. [27][28]

Aviation & Transport

• FAA (checked 0605 ET): No delays are listed anywhere in the U.S. system. Melbourne, Fla. (MLB), is closed to all but emergency aircraft until 0900 ET. LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [39]

• Poland, Warsaw: The airport says a bomb alert was declared at 0954 local (0354 ET) on a flight from London Heathrow to Warsaw Chopin. The Boeing 737 MAX, which LOT confirmed as its flight, landed at Warsaw-Modlin at 1001 with 181 people aboard, and Modlin closed until further notice. [36][37] The Independent names the flight as LO286. [38] A bomb threat was also reported on an SAS flight from Copenhagen, which landed at Warsaw Chopin. Chopin stayed open. [37][38]

• Florida, Greenacres (follow-up): The NTSB says the Learjet 60 was operated by Aurora Aviation, doing business as Upper Jets. [33][34] At a county briefing Monday, officials said residents of about 77 mobile homes remain displaced, with no date to return. Rain is slowing evidence collection. Crews must drain the crater and check the road’s structure before anyone can say when Military Trail will reopen. [35]

Cyber & Doxxing Risk to Principals

• Florida: Reported by SecurityWeek: the Florida Department of Education says hackers breached its student financial aid website (FloridaStudentFinancialAidSG.org). The breach may have exposed names, Social Security numbers, birth dates, home addresses, phone numbers and emails for about 4.9 million people. The department found the intrusion on Oct. 19, says it has been contained, and has not said who did it. [40]

• Michigan State University: The BYOD ransomware gang listed MSU on its leak site Sunday. It claims to have personal data on 1.3 million current and former students. MSU says the activity looked like a credential compromise and forced password resets on Oct. 1. BYOD was also behind last week’s attack that shut down the University of New Mexico’s hospital. [41]

• What to do: Families of principals with Florida aid applications or MSU ties should freeze their credit and watch for targeted phishing that uses their real home address.

• CISA: No new Known Exploited Vulnerabilities have been added since the two Ivanti entries on Oct. 30. [42]

Severe Weather

• New York City: No active alerts for New York, New Jersey or Connecticut. The forecast calls for a sunny Election Day with a high near 72°F, a southwest wind of 6–10 mph and a low around 55°F tonight. Wednesday is mostly sunny with a high near 74°F. [43][45]

• U.S. flooding: The NWS has 43 flood warnings in effect. They cover parts of Arizona, New Mexico, Colorado, Utah, Louisiana and Florida. A flash flood warning covers Coconino County, Ariz., until 0900 MST (1100 ET). A flood watch covers Florida’s east-central coast, from Volusia to Martin counties, until 1000 ET. [44]

• Tropics: The NHC says a low may form a few hundred miles northeast of the Bahamas in the next day or so and could become subtropical late this week. It gives a 10% chance of development in 48 hours and 30% in seven days. In the eastern Pacific, a tropical depression is likely to form well east-southeast of Hawaii later this week, with a 30% chance in 48 hours and 70% in seven days. [46][47]

Tradecraft Tip

General guidance, not tailored advice.

Home invasions target people, not just property. The Toronto attack shows that a residence can be the most dangerous place for a principal. Simple measures help:

• Keep exterior doors locked and use cameras that someone actually monitors, not just records.

• Agree on one place to retreat to inside the house, with a phone and a solid door.

• Make sure family and staff know not to open the door to unexpected visitors, even ones claiming to be police or delivery workers, until they have checked.

• Review what is public about the home: listings, permits, photos and news coverage of wealth can all draw criminals.

Coming Up

• Tue, Nov. 3: U.S. Election Day. NYC polls close at 2100. Expect results-night gatherings near campaign headquarters and election offices. [25]

• Wed, Nov. 4: Tehran’s rally at the former U.S. Embassy (about 0200 ET, per WANA). The UK Supreme Court hears the Palestine Action ban appeal on Nov. 4–5; the afternoon session on Nov. 5 is closed to the public. SNCF’s Thursday train list is expected that evening. [14][31][32]

• Thu, Nov. 5: National strike and marches across France, including SNCF rail. [29][31]

Sources

1. BBC News, “US strikes Iranian island ahead of midterm elections,” Nov. 3, 2026 — https://www.bbc.com/news/articles/cx240mrm3g8vo

2. The National, “US carries out attack on Iran’s Qeshm Island,” Nov. 3, 2026 — https://www.thenationalnews.com/news/us/2026/11/03/us-strike-qeshm-iran-hormuz/

3. Iran International, “US destroyed IRGC missile launcher on Qeshm after attack on aircraft - Axios,” Nov. 3, 2026 — https://www.iranintl.com/en/202611030604

4. Al-Monitor (Reuters), “Iran-US deal still out of reach despite heightened diplomatic efforts,” Nov. 3, 2026 — https://www.al-monitor.com/originals/2026/11/iran-us-deal-still-out-reach-despite-heightened-diplomatic-efforts

5. Iran International, “Qatar says US and Iran reviewing mediation proposals amid ongoing talks,” Nov. 3, 2026 — https://www.iranintl.com/en/202611038724

6. UKMTO, “Warning 193-26 – Attack,” Nov. 2, 2026 — https://www.ukmto.org/-/media/ukmto/products/20261102-ukmto_warning_193.pdf?rev=2957426ce15244a6b6185ce851dc6782

7. Anadolu Agency, “Vessel struck by unknown projectile off Oman: UK maritime agency,” Nov. 2, 2026 — https://www.aa.com.tr/en/us-israel-iran-war/vessel-struck-by-unknown-projectile-off-oman-uk-maritime-agency/4109148

8. Roya News, “Ship hit by unknown projectile near Omani coast, UKMTO says,” Nov. 2, 2026 — https://en.royanews.tv/news/75625/Ship-hit-by-unknown-projectile-near-Omani-coast%2C-UKMTO-says

9. Anadolu Agency, “Saudi-led coalition says drone intercepted over Mecca region amid escalation with Houthis,” Nov. 3, 2026 — https://www.aa.com.tr/en/middle-east/saudi-led-coalition-says-drone-intercepted-over-mecca-region-amid-escalation-with-houthis/4109714

10. Asharq Al-Awsat, “Coalition Says Drone Intercepted and Destroyed in Makkah Region,” Nov. 3, 2026 — https://english.aawsat.com/gulf/5337019-coalition-says-drone-intercepted-and-destroyed-makkah-region

11. CNN Arabic, “Coalition announces downing of drone in Mecca; Houthis respond” (Arabic), Nov. 3, 2026 — https://arabic.cnn.com/middle-east/article/2026/11/03/coalition-claims-intercepting-drone-over-mecca-houthis-deny

12. U.S. Mission to Saudi Arabia, “Security Alert,” Nov. 2, 2026 — https://sa.usembassy.gov/security-alert-u-s-mission-to-saudi-arabia-november-2-2026/

13. U.S. Embassy Port-au-Prince, “Security Alert,” Nov. 2, 2026 — https://ht.usembassy.gov/security-alert-u-s-embassy-port-au-prince-haiti-november-2-2026/

14. WANA, “The anniversary of U.S. Embassy Seizure in Iran,” Nov. 2026 — https://wanaen.com/the-anniversary-of-u-s-embassy-seizure-in-iran/

15. U.S. Virtual Embassy Iran, “Security Alert: Iran,” Oct. 18, 2026 — https://ir.usembassy.gov/security-alert-iran-october-18-2026/

16. Interfax-Ukraine, “Death toll from Russian strikes on Komyshuvakha rises to 31 – regional administration,” Nov. 3, 2026 — https://en.interfax.com.ua/news/general/1230412.html

17. The Guardian, “Russia bombs aid centre and shelter in Ukraine, killing at least 29 people,” Nov. 3, 2026 — https://www.theguardian.com/world/2026/nov/03/russia-bombs-ukrainian-aid-centre-komyshuvakha

18. Kyiv Independent, “’Exceptionally horrific strike’ — Russian bombs hit school used as humanitarian aid center in Zaporizhzhia Oblast,” Nov. 2–3, 2026 — https://kyivindependent.com/exceptionally-horrific-strike-russian-bombs-strike-school-used-as-humanitarian-aid-center-in-zaporizhzhia-oblast-killing-24/

19. New York Post, “Canadian home invasion suspect wounded during break-in allowed to walk free from hospital,” Nov. 2, 2026 — https://nypost.com/2026/11/02/world-news/canadian-home-invasion-suspect-wounded-during-break-in-allowed-to-walk-free-from-hospital/

20. People, “Police Suspected Link to Toronto Home Invasion, but Suspect Walked Free,” Nov. 2026 — https://people.com/toronto-ceo-home-invasion-police-suspected-link-suspect-walked-free-12207542

21. 12punto, “7 suspects arrested, 1 placed under house arrest in threat case against Nevzat Aydın,” Nov. 2, 2026 — https://en.12punto.com.tr/justice-law/7-suspects-arrested-1-placed-under-house-arrest-in-threat-case-against-nevzat-aydin-157811

22. Hürriyet (DHA), “İş insanı Nevzat Aydın’a tehdit soruşturmasında 7 şüpheli tutuklandı,” Nov. 3, 2026 — https://www.hurriyet.com.tr/gundem/is-insani-nevzat-aydina-tehdit-sorusturmasinda-7-supheli-tutuklandi-43363875

23. NBC 7 San Diego, “San Diego County Registrar of Voters in Kearny Mesa reopened after suspicious package prompted evacuation,” Nov. 2, 2026 — https://www.nbcsandiego.com/news/local/san-diego-county-registrar-voters-briefly-evacuated-after-suspicious-package-found/4095632/

24. New York Post, “San Diego Registrar of Voters evacuated over possible bomb threat,” Nov. 2, 2026 — https://nypost.com/2026/11/02/us-news/san-diego-registrar-of-voters-evacuated-over-possible-bomb-threat/

25. NYC Board of Elections, “Upcoming Elections 2026,” checked Nov. 3 — https://www.vote.nyc/elections

26. New York State Attorney General, “Attorney General James Reminds New Yorkers That Federal Agents Cannot Police the Polls,” Oct. 27, 2026 — https://ag.ny.gov/press-release/2026/attorney-general-james-reminds-new-yorkers-federal-agents-cannot-police-polls

27. Prothom Alo, “Garment workers try to take to the streets through Mirpur alleys, police disperse them,” Nov. 2, 2026 — https://en.prothomalo.com/bangladesh/city/nxsdu718pp

28. The Daily Star, “Police stop garment workers’ march towards Mirpur-10,” Nov. 2, 2026 — https://www.thedailystar.net/news/news/police-stop-garment-workers-march-towards-mirpur-10-4313501

29. Sortir à Paris, “Manifestation du 5 novembre à Paris, quel parcours ?,” updated Nov. 3, 2026 — https://www.sortiraparis.com/actualites/a-paris/articles/357052-manifestation-du-5-novembre-a-paris-quel-parcours

30. L’Humanité, “5 novembre : Sophie Binet exige une réponse de la préfecture sur le parcours de la manifestation à Paris,” Nov. 2, 2026 — https://www.humanite.fr/social-et-economie/droit-de-manifester/5-novembre-sophie-binet-exige-une-reponse-de-la-prefecture-sur-le-parcours-de-la-manifestation-a-paris

31. Sortir à Paris, “Grève SNCF du 5 novembre 2026 : TGV, RER, Transilien, ce qu’on sait,” updated Nov. 3, 2026 — https://www.sortiraparis.com/actualites/a-paris/articles/355255-greve-sncf-du-5-novembre-2026-tgv-rer-transilien-ce-qu-on-sait

32. UK Supreme Court, “R (on the application of Ammori) v Secretary of State for the Home Department,” checked Nov. 3 — https://www.supremecourt.uk/cases/uksc-2026-0099

33. CBS12, “NTSB: Learjet crew reported ice, turbulence before deadly Greenacres crash,” updated Nov. 2, 2026 — https://cbs12.com/news/local/national-transportation-safety-board-share-new-details-palm-beach-county-learjet-60-emergency-operation-center-crash-greenacres-south-military-trail-co-pilot-identified-nathalia-filgueiras-florida-news

34. WPTV, “NTSB: Learjet reported icing, turbulence before deadly crash,” Nov. 2, 2026 — https://www.wptv.com/news/palm-beach-county/region-c-palm-beach-county/ntsb-news-conference-learjet-60-crash-in-palm-beach-county/11-2-26

35. CBS12, “Palm Beach County officials scramble to house residents displaced by Greenacres crash,” Nov. 2, 2026 — https://cbs12.com/news/local/palm-beach-county-officials-scramble-help-displaced-individuals-greenacres-plane-crash-military-trail-77-mobile-crash-investigation-underway-boca-raton-co-pilot-nathalia-filgueiras-florida-news

36. Anadolu Agency, “Polish airport closes after bomb threat involving flight from London,” Nov. 3, 2026 — https://www.aa.com.tr/en/europe/polish-airport-closes-after-bomb-threat-involving-flight-from-london/4109796

37. ABC News (Australia), “Polish airport closed after reports of explosive device on London plane,” Nov. 3, 2026 — https://www.abc.net.au/news/2026-11-03/warsaw-airport-closed-after-unplanned-landing-of-london-plane/107343338

38. The Independent, “Bomb alert on London Heathrow plane closes Warsaw airport,” Nov. 3, 2026 — https://www.independent.co.uk/news/world/europe/warsaw-heathrow-flight-plane-bomb-threat-b3078133.html

39. FAA National Airspace System Status, checked Nov. 3, 0605 ET — https://nasstatus.faa.gov/api/airport-status-information

40. SecurityWeek, “Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk,” Nov. 2, 2026 — https://www.securityweek.com/florida-student-aid-website-hack-puts-data-of-4-9-million-people-at-risk/

41. The Record, “Michigan State cyber incident claimed by ransomware gang behind recent hospital attack,” Nov. 2, 2026 — https://therecord.media/michigan-state-university-byod-gang-cyber-incident

42. CISA, Known Exploited Vulnerabilities catalog (version 2026.10.30), checked Nov. 3 — https://www.cisa.gov/known-exploited-vulnerabilities-catalog

43. National Weather Service, active alerts for NY, NJ and CT, Nov. 3 — https://api.weather.gov/alerts/active?area=NY,NJ,CT

44. National Weather Service, active severe alerts nationwide, Nov. 3 — https://api.weather.gov/alerts/active?severity=Severe

45. National Weather Service New York (OKX), NYC forecast, Nov. 3 — https://api.weather.gov/gridpoints/OKX/33,42/forecast

46. National Hurricane Center, Atlantic Tropical Weather Outlook, Nov. 3, 0100 EST — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

47. National Hurricane Center, Eastern North Pacific Tropical Weather Outlook, Nov. 2, 2200 PST — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Florida, Greenacres (follow-up): The NTSB says it has evidence the Learjet 60 may have started breaking up before it hit the ground, so debris could be spread well beyond the crash site. One man on the ground suffered a leg injury. This morning’s brief said no one on the ground was hurt, based on earlier county statements. [1][2][3]

• Saudi Arabia: The Saudi-led coalition says two drones were intercepted and destroyed over the Riyadh region today. That came after this morning’s interception of a Houthi ballistic missile aimed at the south. [4][5]

• Iran: The talks in Doha ended without a breakthrough. Qatari mediators traveled to Tehran tonight with a draft deal, and President Trump says a deal “could happen.” [6][7][8]

• DC, Foggy Bottom (follow-up to today’s alert): Pepco restored power to all affected customers by about 1400. It says the cause is still under investigation and there is no sign of foul play. [9][10]

• U.S., Election Day Tuesday: NYC polls are open 0600–2100. New York’s Attorney General reminds voters that firearms are banned at polling places. [11][12]

United States

• Florida, Greenacres Learjet crash (follow-up): At a news conference today, NTSB board member Tom Chapman said, “We do have some evidence that there was some breakup of the aircraft before impact.” He added that investigators are still working to confirm it. [1][2][3]

  • Investigator Timothy Monville said the debris field measures about half a mile by four-tenths of a mile and includes ball fields, businesses and homes. Pieces may be found farther away. The NTSB asks anyone who finds debris to leave it in place and contact the NTSB or local authorities. [2][3]

  • Correction to this morning’s brief: Monville said a man in a vehicle leaving the area near the crash suffered a leg injury. Investigators plan to interview him. [2][3]

  • The NTSB says the crew reported light, clear ice and moderate turbulence at 35,000 ft and was cleared to climb. Less than 30 seconds later, the aircraft announced a descent and then a mayday. Weather will be a major focus of the investigation, but conditions at altitude have not been determined. The plane was originally equipped with a cockpit voice recorder, which investigators hope to recover. [1][2][3]

  • On-site work is expected to take several days. The biggest obstacle is recovering the main wreckage from the crater in the roadway. [2][3] County Commissioner Joel Flores said about 77 mobile homes near the site were evacuated and that it is not clear when residents can return. [1][2]

  • Action: Expect closures near Military Trail and 10th Avenue North while the NTSB works on site. Check Palm Beach County updates before routing principals through the area.

• DC, Foggy Bottom (follow-up): The outage near George Washington University hit more than 1,000 Pepco customers after a problem at Pepco’s I Street Substation. D.C. Fire and EMS had responded to smoke from multiple manholes on the 1800 block of H Street NW. Pepco said power was back for all affected customers by about 1400. [9][10]

• Election Day, Tuesday, Nov. 3: NYC polls are open 0600–2100. [11] In an Oct. 27 reminder, the New York Attorney General’s office said firearms are banned at polling places and armed federal agents are not allowed there. Campaigning is barred within 100 feet of a polling place entrance. Voters can report intimidation to the AG’s Election Protection Hotline at (866) 390-2992. [12]

  • Action: Armed protection staff should not escort a principal into a polling site. Plan an unarmed escort or a handoff at the entrance.

Middle East

• Saudi Arabia: Coalition spokesman Turki al-Maliki said two drones were “intercepted and destroyed in the Riyadh region” (SPA, 1837 local time, 1037 ET). He did not say who launched them or whether there was any damage. [4][5] Earlier today, the coalition reported intercepting a Houthi ballistic missile aimed at the southern region. [5] The Houthis claim two drone attacks on Dammam airport in the past 48 hours. That claim has not been confirmed. [5]

  • Action: Principals in Riyadh should know the nearest shelter at their hotel and office, and follow Saudi Civil Defense alerts.

• Iran talks: Reuters reports that Iran’s negotiators left Doha on Sunday with a draft proposal circulating. An official briefed on the talks says Qatari mediators traveled to Tehran on Monday night to discuss it with Foreign Minister Araghchi. [6] Iran says it could reopen the Strait of Hormuz within two days if the U.S. meets its conditions, including lifting the blockade of Iranian ports and oil sanctions. [7] Trump wrote that a deal “could happen.” Reuters reports that Iranian sources still think a new U.S. attack is more likely than a deal. [6][8]

  • Where sources differ: CBS News says oil prices fell more than 7% today, while Reuters says nearly 4%. [6][8]

  • Wednesday, Nov. 4: Euronews reports that Tehran-organized anti-U.S. demonstrations are expected across Iran on the anniversary of the 1979 U.S. Embassy seizure. [7]

• Gulf shipping: The Joint Maritime Information Center (JMIC) keeps its threat level for the Strait of Hormuz at SEVERE and says more deliberate attacks are highly likely. As of its Nov. 1 assessment, it had recorded 18 confirmed attacks in the Strait since Oct. 6. [13]

Aviation

• FAA (checked 1804 ET): No delays are listed at New York, Washington or Los Angeles-area airports. Thunderstorms have caused ground stops at Miami until 1900 ET and Fort Lauderdale until 1915 ET. Fort Lauderdale also has a ground delay program averaging 1 hour 47 minutes. Palm Beach (DJT), Fort Myers and Naples have departure delays of more than an hour. San Diego has a volume ground delay program. LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [14]

Sources

1. NBC News, “Jet may have experienced ‘some breakup’ before it crashed in Florida, killing 9, NTSB says,” Nov. 2, 1516 ET — https://www.nbcnews.com/news/us-news/jet-may-experienced-breakup-crashed-florida-killing-9-ntsb-says-rcna607068

2. PBS News (AP), “Parts of a Learjet may have broken off midair before Florida crash that killed 9, investigators say,” updated Nov. 2, 1735 ET — https://www.pbs.org/newshour/nation/evidence-suggests-parts-of-jet-broke-off-before-florida-crash-ntsb-investigator-says

3. CBS12, “NTSB: Learjet crew reported ice, turbulence before deadly Greenacres crash,” Nov. 2 — https://cbs12.com/news/local/national-transportation-safety-board-share-new-details-palm-beach-county-learjet-60-emergency-operation-center-crash-greenacres-south-military-trail-co-pilot-identified-nathalia-filgueiras-florida-news

4. Saudi Press Agency, statement by coalition spokesperson Maj. Gen. Turki Al-Malki, Nov. 2, 1837 local time — https://www.spa.gov.sa/en/N2716349

5. Anadolu Agency, “Saudi-led coalition intercepts 2 drones over Riyadh region,” Nov. 2 — https://aa.com.tr/en/middle-east/saudi-led-coalition-intercepts-2-drones-over-riyadh-region/4109053

6. Reuters (via Investing.com), “Iran says contacts over ending war continue after talks finish with no breakthrough,” updated Nov. 2 — https://www.investing.com/news/commodities-news/iranians-have-left-doha-talks-draft-proposal-for-us-deal-being-circulated-4990460

7. Euronews, “Iran says it can reopen Hormuz in two days if US meets conditions,” Nov. 2 — https://www.euronews.com/2026/11/02/iran-says-it-can-reopen-hormuz-in-two-days-if-us-meets-conditions

8. CBS News, “Live Updates: Iran says ‘ball is in the U.S. court’ on deal to end war,” Nov. 2 — https://www.cbsnews.com/live-updates/iran-war-us-trump-negotiations-midterms/

9. WTOP, “Power restored in Downtown DC as Pepco deals with substation issue,” Nov. 2, 1421 ET — https://wtop.com/dc/2026/11/power-outages-in-downtown-dc-as-pepco-deals-with-substation-issue/

10. WJLA (7News), “Power restored in Foggy Bottom after hours-long outage,” updated Nov. 2, 1429 ET — https://wjla.com/news/local/power-outages-hit-foggy-bottom-crews-investigate-smoke-from-manholes-h-street-northwest-dc

11. NYC Board of Elections, Elections page — https://www.vote.nyc/elections

12. New York Attorney General, “Attorney General James Reminds New Yorkers That Federal Agents Cannot Police the Polls,” Oct. 27 — https://ag.ny.gov/press-release/2026/attorney-general-james-reminds-new-yorkers-federal-agents-cannot-police-polls

13. gCaptain, “New Wave of Attacks Hits Tankers and LNG Carrier in Strait of Hormuz and Persian Gulf” — https://gcaptain.com/new-wave-of-attacks-hits-tankers-and-lng-carrier-in-strait-of-hormuz-and-persian-gulf/

14. FAA National Airspace System Status, checked Nov. 2, 1804 ET — https://nasstatus.faa.gov/api/airport-status-information

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Gulf shipping: UKMTO says a tanker was struck on its port side by two unknown projectiles 72 nautical miles east of Ras Al Khafji, Saudi Arabia, at 2347 UTC Sunday (1847 ET). All crew are accounted for and no environmental impact has been reported. [8][9] Maritime Executive calls it at least the fifth energy vessel hit by suspected Iranian strikes since Thursday. [10]

• Cyber, Ukraine and Russia: Hackers took over Ukraine’s “Air Alert” app late Sunday and pushed fake nuclear, radiation, chemical and street-fighting warnings. Hours later, Russia’s Emergencies Ministry said its own app had been hit by a “massive cyberattack” that sent fake alerts. Ukraine’s emergency service said the national alert system was working normally again by midnight. Russia says its sirens, SMS and broadcast warnings were not affected. [24][25][26][27][28]

• Florida, Greenacres (follow-up): All nine people aboard Sunday’s Learjet 60 crash were killed. No one on the ground was hurt, but about 600 mobile-home residents have been evacuated and Military Trail stays closed indefinitely. NTSB investigators are back on site today. [1][2][3][4]

• U.S., Election Day Tuesday: Polls in New York City are open 0600–2100. State law requires at least one police or peace officer at every NYC polling site while the polls are open. [37][38] Axios, as carried by Anadolu and Iran International, reports that Israel’s prime minister is urging President Trump to strike Iran right after the vote. Trump says he is not “in much of a hurry.” [12][13]

• France: The Education Ministry says 41 high schools were blocked this morning, about 1% of the total. Student groups plan more blockades Tuesday and Thursday, and unions have called a nationwide strike and marches for Thursday, Nov. 5. [31][32][33]

For solo operators: Avoid Military Trail around 10th Avenue North near Greenacres. It is closed indefinitely, and the sheriff and the county describe the closed section differently (see Aviation & Transport). Expect detours across central Palm Beach County this week. [1][2][4] On Tuesday, keep principals’ routes clear of polling sites while the polls are open (0600–2100 in NYC), and allow extra time near schools and election offices. [37] In Paris, plan around the student march from the Panthéon at 1400 local (0800 ET) Tuesday and the union march on Thursday. [31][33]

For corporate security teams: Briefing items for leadership:

1. Gulf: One tanker was hit off Saudi Arabia and a tug in the Strait of Hormuz on Sunday. The talks in Qatar have not produced a deal. Expect the risk to shipping and to staff in the Gulf to stay high through the U.S. vote and after it. [8][10][11][13]

2. Cyber: Hackers spoofed public alert apps in both Ukraine and Russia. Remind travelers and staff in the region to confirm any alarming alert through official channels before acting, and not to click links in alert messages. [24][25]

3. Europe unrest: Thursday’s French national strike, German protests that turned violent in several cities, and housing protests in Lisbon and Porto all point to disrupted travel. Review the itineraries of staff in these cities. [20][29][31]

4. U.S.: Election Day is Tuesday. Plan for crowds and protests near polling places and election offices, and for heightened tension while results come in.

Threats to Executives & Public Figures

• United States, Michigan: Anthony Daniel Palazzolo, who is charged with threatening to kill FBI Director Kash Patel, is due back in federal court today for a detention hearing. Federal prosecutors say he messaged one of Patel’s associates that he had “put a hit out” and later threatened a Detroit FBI agent that he would “use deadly force” against government officials. [39]

• Nigeria, Sokoto: The opposition African Democratic Congress says gunmen attacked the convoy of its governorship candidate, Manir Muhammad Dan’iya, near Sokoto airport at about 2100 local time on Friday, Oct. 30. The party says shots were fired and vehicles in the convoy were smashed. Dan’iya says two DSS officers on his security detail were detained, and that he reported the incident to the Sokoto police commissioner in person. The party accuses members of two state-owned security outfits, the Sokoto Marshals and Sokoto Community Guards, of taking part. These are allegations by the party and the candidate. We found no police statement. [40][41]

• Nigeria, Ekiti (follow-up): Presidential candidate Omoyele Sowore has given police and the DSS a detailed account of the Oct. 30 attack on his team in Ado-Ekiti. He says suspected political thugs disarmed his security personnel and injured several members of his entourage. [42] Pattern: Two opposition candidates’ convoys were attacked in Nigeria on the same day. Treat any arrival or rally a candidate has announced in advance as a likely point of attack.

Travel Advisories & Hotspots

• Djibouti: On Sunday the U.S. Embassy ordered its staff to shelter in place “due to potential incoming threats” and advised U.S. citizens to do the same. It lifted the order later the same day, saying normal activities had resumed, and urged increased caution “in light of regional events.” [18][19]

• Saudi Arabia: Coalition spokesman Turki al-Maliki says air defenses intercepted a Houthi ballistic missile aimed at the southern region on Monday. Earlier, a drone launched Sunday evening was also intercepted. [16][17] Al Jazeera reports that Saudi Civil Defence issued, then lifted, alerts for Abha, Khamis Mushait, Taif and Najran, and warned residents not to film or share information about attacks. [17]

• Iran: Iranian negotiators spent a third day in Doha, where Qatar is mediating indirect talks with Washington. Foreign Minister Araghchi says a proposal could reopen the Strait of Hormuz within two days if the U.S. meets Iran’s conditions, but there is no agreement yet. [13][14][15] Trump said Saturday that the U.S. still needs to “take care of” one or two suspected nuclear sites. On Sunday he said he may have to give Tehran “the hammer.” [13][14]

• Portugal: The U.S. Embassy in Lisbon issued an alert Sunday about housing and cost-of-living protests across the country. It advises avoiding Rossio Square in Lisbon and Dom João Square in Porto. It notes that police have recently used crowd-control methods, including tear gas, and that protests can happen away from planned routes. [20] Police moved into the Rossio camp at about 0430 local time Sunday (2330 ET Saturday). [21]

Civil Unrest in Business Hubs

• France: High schools went back after the holiday this morning, with 41 blocked at 0930 Paris time (0330 ET), according to the Education Ministry. BFMTV reports no disruption in 75% of departments. [31][32] AFP reports that police are adding officers at schools after violence during earlier protests. [31]

  • Tuesday, Nov. 3: Unef wants a “journée noire” (black day) of university and school blockades. The Interfac Île-de-France student collective plans a march from the Panthéon to the headquarters of the Medef employers’ group. [31] Paris listings put the start at 1400 at Place du Panthéon. [33]

  • Thursday, Nov. 5: The unions’ nationwide strike and marches in the public and private sectors. [31][33]

  • Friday–Saturday, Nov. 6–7: The Yellow Vest (gilets jaunes) movement is calling for more strikes and blockades on Friday and protests across France on Saturday. [31]

  • The Paris curfew around République and Châtelet-Les Halles was ordered for the nights through 0600 today. [33][34] We found no announcement that it has been extended. Check with the Paris police prefecture before any evening movements.

• Germany: Police arrested more than 200 people on Saturday night after clashes followed largely peaceful Gen Z protests demanding better education. Organizers say 100,000 people took part nationwide. [29][30]

  • Hamburg: 120 people were detained and 11 officers were injured. [29]

  • Berlin: Up to 56 people were detained and 27 officers were injured. [29][30]

  • Frankfurt: Masked groups smashed windows, looted shops and threw Molotov cocktails at police. Police say a gun shop was among the stores looted. At least two firearms were stolen, and both were recovered. [29][30] Hesse’s interior minister suspects that about 100 left-wing extremists started the violence. [30]

• Portugal, Lisbon and Porto: Police used shields and batons to clear the Rossio camp, a week after a similar operation drew criticism from protesters and rights groups. [21] RTP’s live coverage reports that firecrackers went off in Rossio, and that protesters in Porto decided to spend the night in Dom João I Square with police present. [23]

  • Where sources differ: DN/Lusa, citing protest organizers, says at least 10 people were detained and six injured in Lisbon. RTP’s headline says 13 were detained across Lisbon and Porto. [22][23]

• United Kingdom, London: On Wednesday and Thursday, Nov. 4–5, the UK Supreme Court hears the appeal against the ban on Palestine Action. The Thursday afternoon session is closed to the public. [35] Expect demonstrations: police arrested 325 people at Saturday’s protest outside the U.S. Embassy. [36]

Aviation & Transport

• Florida, Greenacres Learjet crash (follow-up): The FAA says the Learjet 60 was flying from Austin to North Eleuthera in the Bahamas. All nine people on board were killed, according to Transportation Secretary Sean Duffy. The victims have not been identified. [1][3]

  • WPBF and AP report air traffic control audio captured by LiveATC.net. The pilot reported “light, clear ice that is manageable and moderate turbulence” and asked to climb. The pilot then declared a mayday, reporting “an overspeed condition descending 20,000 feet per minute.” [1][3] WPBF reports that ADS-B Exchange data shows a 27,000-ft drop in about one minute. [1] This audio and tracking data are not official findings. The cause has not been determined, and the NTSB is leading the investigation. [1][2]

  • The aircraft’s registration has not been officially released. Some outlets have published a tail number from FAA records, but we are not using it until officials confirm it.

  • The NTSB team is back at the site this morning and says it will hold news conferences when it has information to share. [2][7]

  • About 600 residents of the nearby mobile-home park have been evacuated, and officials expect the area to stay off-limits for several days. [2][7] John I. Leonard High School is closed today, and other Palm Beach County schools are open. [5][6]

  • Where sources differ on the road closure: The sheriff’s office says all lanes of Military Trail are closed between Cresthaven Boulevard and 10th Avenue North. CBS12 reports the closure will last “for weeks,” while WPBF quotes it as “until further notice.” [1][2] County officials say the closed section is between 10th Avenue North and Purdy Lane/Alameda Drive, until further notice. [4] For east-west travel, use 10th Avenue North and Purdy Lane/Alameda Drive. [4]

• FAA (checked 0608 ET): No delays are listed at New York, Washington or Los Angeles-area airports. LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [47]

• Gulf shipping:

  • Sunday’s tanker strike: Security firm Vanguard Tech, as cited by Maritime Executive, names the ship as the Largo Atom. It says the ship was hit by two drones and lost all power. That name has not been officially confirmed. [10] Maritime Executive also reports that the Qatari LNG carrier Al Mayeda, hit last week, had received Iranian safe-passage approval hours before the attack. That is according to Bloomberg’s sources. [10]

  • UKMTO 191-26 (Strait of Hormuz, Sunday): Vanguard Tech, cited by Maritime Executive, identifies the ship as the UAE-owned offshore tug Selat Storm. The name has not been officially confirmed. [10][11]

• Spain rail (follow-up): Spanish authorities have identified 66 of the 69 people killed in the Urda high-speed train crash. Of those identified, 54 were Spanish and four were U.S. citizens. [43][44] RTVE reports that 29 people remain in hospital in Castilla-La Mancha, nine of them in intensive care, and that 10 more were transferred to hospitals in Madrid and Andalusia. [44]

Cyber & Doxxing Risk to Principals

• Ukraine, “Air Alert” app: At about 2245 Kyiv time Sunday (1545 ET), the app pushed fake warnings of nuclear, radiation and chemical danger and of street fighting. One message, in Russian, read: “Don’t worry, the Oreshnik is on its way.” [24][25][28] Ukraine’s Air Force said there was no radiation threat. Journalists reported air raid sirens sounding in several regions, and in the Lviv region some sirens and loudspeakers broadcast a “radiation hazard” signal. [24][25] Regional officials warned the attack could involve phishing links. The false alerts were cleared about an hour later, and the State Emergency Service said the nationwide system was working normally by midnight. [24] By about 0200 local time, the developers were restoring service but had paused the display of targets. [24]

• Russia, Emergencies Ministry (MChS) app: The ministry says a “massive cyberattack” let hackers send fake information to the public. Russian media and regional officials shared screenshots of an alert about “nuclear warheads” being launched. [25][26][27][28] The ministry says the public warning system (sirens, SMS, TV and radio) kept working normally and that the app is only an extra service. [26] Neither government has said who carried out the attacks. Russia blamed only “malicious actors,” and it is not clear whether the two incidents are linked. [25]

• What this means for EP teams: If an attacker controls an alert channel, they can cause panic or herd people toward a phishing link. Do not let a single app alert decide your team’s actions. Confirm through a second, official channel first (see the Tradecraft Tip).

• CISA: No new Known Exploited Vulnerabilities have been added since Oct. 30. The latest additions are the two Ivanti Connect Secure flaws (CVE-2026-111357 and CVE-2026-118527). [48]

Severe Weather

• New York City: Mostly sunny today, with a high near 65°F and a southwest wind of 6–9 mph. Tonight will be mostly clear with a low around 52°F. Election Day is mostly sunny, with a high near 67°F. [51]

• Northeast: A Frost Advisory runs until 0800 ET for parts of southern New Jersey (Salem, Gloucester, Camden, Cumberland and Cape May) and southeastern Pennsylvania. There are no other active alerts for New York, New Jersey or Connecticut. [49]

• Florida: Flood Watches cover the Palm Beach, Broward and Miami-Dade metro areas, Collier County and Central Florida, including Orlando and Volusia County, until 1900 ET today. Flash Flood Warnings were in effect for Brevard County until about 0800 ET. [50] This rain affects the Greenacres crash site and the roads around it.

• U.S. Southwest and Rockies:

  • There are 62 Flood Warnings across Arizona, New Mexico, Colorado, Utah, Nevada, Louisiana and Florida. [50]

  • Flood Watches for the Phoenix and Tucson metro areas ran until 0700 ET today. A Flood Watch for Colorado’s San Luis Valley runs into midweek. [50]

  • Winter Storm Warnings are in effect for Colorado’s San Juan Mountains. [50]

  • High Wind Warnings cover mountains in New Mexico and West Texas, and Rapid City, South Dakota, through Tuesday morning. [50]

• Tropics: The Atlantic is quiet, with no storms expected in the next seven days. [52] In the eastern Pacific, a broad low well east-southeast of Hawaii has a 60% chance of forming over seven days, and a tropical depression could develop by mid-to-late week. [53]

Week Ahead (Nov. 2–8)

• Monday, Nov. 2:

  • Palazzolo detention hearing in federal court in Michigan. [39]

  • NTSB investigators back at the Greenacres crash site. [2]

  • High school blockades across France. [31][32]

• Tuesday, Nov. 3:

  • U.S. Election Day: NYC polls are open 0600–2100. [37]

  • Paris: Student march from the Panthéon at 1400 local (0800 ET), with more university and school blockades. [31][33]

  • Seoul: Turkish President Erdoğan holds a summit with South Korean President Lee Jae-myung during his state visit. [45][46]

• Wednesday–Thursday, Nov. 4–5: UK Supreme Court hearing on the Palestine Action ban in London. [35]

• Thursday, Nov. 5: French unions’ nationwide strike and marches.

  • Where sources differ on the Paris start: CGT Yvelines lists 1400 at Bastille, but UNSA says 1300 (0700–0800 ET). The route has not been announced. [33]

  • Expect transport disruption across France. [31][33]

• Friday–Saturday, Nov. 6–7: The Yellow Vest movement is calling for more strikes and blockades on Friday, and for “Act 4” protests across France on Saturday. [31]

• Sunday, Nov. 8: Paris Metro Line 6 is closed all day for works, with replacement buses running only between Charles-de-Gaulle–Étoile and La Motte-Picquet–Grenelle. [33]

Tradecraft Tip (general guidance, not tailored advice)

Check every alarming alert through a second channel. This weekend, hackers used public alert apps in two countries to push fake nuclear and chemical warnings. Whoever controls an alert channel can make people panic, send them toward a phishing link, or move them to a place the attacker chooses.

1. Before you move a principal, name two official channels. For example, local sirens or civil-defense broadcasts, the government agency’s own website or verified account, or your embassy’s alerts (STEP for U.S. citizens).

2. Do not click links in alert messages. Real emergency alerts tell you what to do. They do not ask you to download or sign in to anything.

3. Brief your team before deployment. Agree in advance what level of confirmation justifies moving to shelter or evacuating, so no one has to decide under pressure.

4. Keep the response proportionate. If a real threat is possible, take reasonable cover while you check, but do not start a long-distance evacuation based on one unconfirmed push notification.

5. Report spoofed alerts. Pass them to your security operations center and to the authorities so others aren’t caught out.

Sources

1. WPBF, “9 on board Learjet killed in crash near Greenacres,” updated Nov. 2, 0554 ET — https://www.wpbf.com/article/aircraft-incident-military-trail-and-10th-avenue-north-florida-palm-beach-county/74305687

2. CBS12, “Jet carrying nine plummets into Greenacres roadway, erupts in flames,” updated Nov. 2, 0303 ET — https://cbs12.com/news/local/explosion-fire-shut-down-military-trail-in-both-directions-military-trail-s-military-trail-diamond-road-explosion-fire-loud-boom-boom-heard-for-miles-road-closure-traffic-alert-road-damage-broken-pavement-debris

3. NBC 6 South Florida (AP), “Pilot reported icing, turbulence before nosedive in jet crash,” Nov. 1–2 — https://www.nbcmiami.com/news/local/pilot-reported-icing-and-turbulence-minutes-before-nose-diving-into-palm-beach-road/3881553/

4. WFLX, “Hundreds displaced, portion of Military Trail closed indefinitely after deadly Palm Beach County Learjet crash,” Nov. 2 — https://www.wflx.com/2026/11/02/hundreds-displaced-portion-military-trail-closed-indefinitely-after-deadly-palm-beach-county-learjet-crash/

5. WPTV, “John I. Leonard HS closed Monday after Learjet crash,” Nov. 1 — https://www.wptv.com/news/region-c-palm-beach-county/greenacres/palm-beach-county-high-school-announces-monday-closure-in-wake-of-learjet-crash

6. CBS12, “John I. Leonard High School closed Monday after deadly plane crash nearby,” Nov. 1 — https://cbs12.com/news/local/florida-plane-crash-john-i-leonard-high-school-closed-monday-after-deadly-plane-crash-nearby-greenacres-9-dead-lear-jet-military-trail-cresthaven-boulevard-10th-avenue-north-palm-beach-county-school-district

7. BocaNewsNow, “UPDATING: NTSB Investigates Palm Beach County Plane Crash,” Nov. 2 — https://bocanewsnow.com/2026/11/02/updating-ntsb-investigates-palm-beach-county-plane-crash/

8. UKMTO, Warning 192-26 – Attack, Nov. 1, 2347 UTC — https://www.ukmto.org/-/media/ukmto/products/20261102-ukmto_warning-192-26.pdf

9. Iran International, “Tanker struck by two projectiles near Saudi port in Persian Gulf - UKMTO,” Nov. 2 — https://www.iranintl.com/en/202611025952

10. The Maritime Executive, “Offshore Tug Hit in Latest Attack in Strait of Hormuz,” Nov. 1 (updated) — https://maritime-executive.com/article/offshore-tug-hit-in-latest-attack-in-strait-of-hormuz

11. Anadolu Agency, “Vessel reportedly struck by unknown projectile in Strait of Hormuz: UK maritime agency,” Nov. 2 — https://www.aa.com.tr/en/middle-east/vessel-reportedly-struck-by-unknown-projectile-in-strait-of-hormuz-uk-maritime-agency/4108246

12. Anadolu Agency, “Trump favors diplomacy with Iran as Netanyahu urges strikes immediately after Tuesday’s US midterms: Report,” Nov. 1 — https://www.aa.com.tr/en/politics/trump-favors-diplomacy-with-iran-as-netanyahu-urges-strikes-immediately-after-tuesdays-us-midterms-report/4108213

13. Iran International, “Netanyahu pressing Trump to strike Iran immediately after midterms - Axios,” Nov. 1 — https://www.iranintl.com/en/202611015366

14. CBS News, “Live Updates: Iran says ‘ball is in the U.S. court’ on deal to end war as Trump keeps his intentions veiled,” Nov. 1–2 — https://www.cbsnews.com/live-updates/iran-war-us-trump-negotiations-midterms/

15. NPR, “Gulf region on edge as Qatar leads talks with Iran to stave off new U.S. attacks,” Nov. 1 — https://www.npr.org/2026/11/01/nx-s1-6023237/gulf-leaders-meet-in-qatar-in-effort-to-stave-off-new-escalation-in-u-s-and-iran-war

16. Anadolu Agency, “Saudi-led coalition says it intercepted Houthi ballistic missile targeting southern region,” Nov. 2 — https://www.aa.com.tr/en/middle-east/saudi-led-coalition-says-it-intercepted-houthi-ballistic-missile-targeting-southern-region/4108355

17. Al Jazeera, “Saudi-led coalition intercepts a missile as fighting rages in Yemen’s al-Jawf,” Nov. 2 — https://www.aljazeera.com/news/2026/11/2/saudi-led-coalition-intercepts-a-missile-as-fighting-rages-in-yemens-al-jawf

18. U.S. Embassy Djibouti, “Security Alert – Seek Shelter,” Nov. 1 — https://dj.usembassy.gov/security-alert-seek-shelter-u-s-embassy-djibouti-19/

19. U.S. Embassy Djibouti, “Security Alert – Shelter Warning Lifted,” Nov. 1 — https://dj.usembassy.gov/security-alert-shelter-warning-lifted-u-s-embassy-djibouti-5/

20. U.S. Embassy Lisbon, “Security Alert: U.S. Embassy Lisbon, Portugal — November 1, 2026” — https://pt.usembassy.gov/security-alert-u-s-embassy-lisbon-portugal-november-1-2026/

21. Al Jazeera (with Reuters), “Police storm Portugal housing protest camp,” Nov. 1 — https://www.aljazeera.com/news/2026/11/1/police-storm-portugal-housing-protest-camps

22. Diário de Notícias (Lusa; Portuguese), “Protestos pela habitação em Lisboa: 10 detidos e seis feridos após intervenção policial,” Nov. 1 — https://www.dn.pt/sociedade/pelo-menos-10-detidos-e-seis-feridos-na-acampada-de-lisboa

23. RTP (Portuguese), “Presidente da República falou com autarcas de Lisboa e do Porto e com representantes das acampadas,” live coverage, Nov. 1 — https://www.rtp.pt/noticias/pais/policia-avancou-sobre-manifestantes-em-lisboa-e-no-porto-ha-13-detidos-e-varios-feridos_e1775987

24. The Kyiv Independent, “Ukraine’s air raid alert system hacked, Russian system targeted hours later,” Nov. 2 — https://kyivindependent.com/ukraines-air-raid-alert-system-hacked-air-force-says-as-false-nuclear-chemical-warnings-sound/

25. NBC News, “Ukraine, Russia report emergency app cyberattacks as fake alerts warn of nuclear danger,” Nov. 2 — https://www.nbcnews.com/world/ukraine/ukraine-russia-emergency-app-cyberattacks-alerts-radiation-kyiv-war-rcna606964

26. MChS Russia (Russian), “Система оповещения населения Российской Федерации функционирует в штатном режиме,” Nov. 2 — https://mchs.gov.ru/deyatelnost/press-centr/novosti/5851760

27. RIA Novosti (Russian), “Приложение МЧС подверглось кибератаке,” Nov. 2 — https://ria.ru/20261102/mchs-2128519166.html

28. Meduza, “Emergency alert apps hacked in Russia and Ukraine, sending false warnings of nuclear threats,” Nov. 2 — https://meduza.io/en/news/2026/11/02/emergency-alert-apps-hacked-in-russia-and-ukraine-sending-false-warnings-of-nuclear-threats

29. Anadolu Agency, “More than 200 arrests in Germany after Gen Z protests,” Nov. 1 — https://www.aa.com.tr/en/europe/more-than-200-arrests-in-germany-after-gen-z-protests/4107888

30. DW, “Germany’s Gen Z protests disrupted by violence on Saturday,” live coverage, Oct. 31–Nov. 1 — https://www.dw.com/en/germanys-gen-z-protests-disrupted-by-violence-on-saturday/live-79814694

31. franceinfo (with AFP; French), “Blocages des lycées et des universités, grève du 5 novembre, manifestations de gilets jaunes… Quelles sont les mobilisations prévues cette semaine ?” Nov. 2, 1048 Paris time (updated 1114) — https://www.franceinfo.fr/societe/education/blocage-des-lycees/blocages-des-lycees-et-des-universites-greve-du-5-novembre-manifestations-de-gilets-jaunes-a-quoi-faut-il-s-attendre-cette-semaine_8263529.html

32. BFMTV (French), “Lycées bloqués, appels à la grève, convergence des luttes... À quoi s’attendre pour cette nouvelle semaine de mobilisation?” Nov. 1–2 — https://www.bfmtv.com/societe/manifestations/lycees-bloques-appels-a-la-greve-convergence-des-luttes-a-quoi-s-attendre-pour-cette-nouvelle-semaine-de-mobilisation_AV-202611010357.html

33. Paris Evous (French), “Manifestations, grèves et perturbations à Paris du 2 au 8 novembre,” updated Nov. 1, 2144 Paris time — https://paris.evous.fr/citoyen/manifestations/

34. Sortir à Paris (French), “Couvre-feu à Paris : quand rouvriront République, Châtelet et les Halles ce 1er et 2 novembre ?” — https://www.sortiraparis.com/actualites/a-paris/articles/355194-couvre-feu-a-paris-quand-rouvriront-republique-chatelet-et-les-halles-ce-1er-et-2-novembre

35. UK Supreme Court, case UKSC/2026/0099, R (Ammori) v Secretary of State for the Home Department — https://www.supremecourt.uk/cases/uksc-2026-0099

36. The Guardian, “Police detain 325 people at pro-Palestine Action protest at US embassy in London,” Nov. 1 — https://www.theguardian.com/uk-news/2026/nov/01/police-detain-325-people-at-pro-palestine-action-protest-at-us-embassy-in-london

37. NYC Board of Elections, “Upcoming Elections 2026” — https://www.vote.nyc/elections

38. New York Election Law § 8-104 (via New York Public Law) — https://newyork.public.law/laws/n.y._election_law_section_8-104

39. ClickOnDetroit (WDIV), “Macomb County man accused of threatening to kill FBI Director Kash Patel,” Oct. 31 — https://www.clickondetroit.com/news/local/2026/10/31/macomb-county-man-accused-of-threatening-to-kill-fbi-director-kash-patel/

40. Vanguard (Nigeria), “Sokoto must not descend into political violence, ADC warns as Dan’iya survives airport attack,” Nov. 1 — https://www.vanguardngr.com/2026/11/sokoto-must-not-descend-into-political-violence-adc-warns-as-daniya-survives-airport-attack/

41. The Impulse News, “Sokoto State ADC Gubernatorial Candidate Escapes Assassination Attempt,” Nov. 1 — https://theimpulsenews.com/sokoto-state-adc-gubernatorial-candidate-escapes-assassination-attempt/

42. Sahara Reporters, “Sowore Details How Armed Thugs Attacked Him, Disarmed Security Team In Ekiti,” Nov. 1 — https://saharareporters.com/2026/11/01/sowore-details-how-armed-thugs-attacked-him-disarmed-security-team-ekiti

43. Anadolu Agency, “Spain identifies 66 of 69 victims of deadly high-speed train crash,” Nov. 2 — https://www.aa.com.tr/en/europe/spain-identifies-66-of-69-victims-of-deadly-high-speed-train-crash/4108649

44. RTVE (Spanish), “Tragedia de Urda | Identificados 66 de los 69 muertos,” Nov. 2 — https://www.rtve.es/noticias/20261102/accidente-urda-identificados-66-69-muertos/17295877.shtml

45. Anadolu Agency, “Turkish president to visit South Korea on Nov. 1-4,” Nov. 1 — https://www.aa.com.tr/en/turkiye/turkish-president-to-visit-south-korea-on-nov-1-4/4107960

46. Yonhap (Korean), “에르도안 튀르키예 대통령 국빈방한…3일 李대통령과 정상회담,” Nov. 1 — https://www.yna.co.kr/view/AKR20261101041900001

47. FAA National Airspace System Status, checked Nov. 2, 0608 ET — https://nasstatus.faa.gov/api/airport-status-information

48. CISA, Known Exploited Vulnerabilities catalog (version 2026.10.30), checked Nov. 2 — https://www.cisa.gov/known-exploited-vulnerabilities-catalog

49. National Weather Service, active alerts for NY, NJ and CT, Nov. 2 — https://api.weather.gov/alerts/active?area=NY,NJ,CT

50. National Weather Service, active severe alerts nationwide, Nov. 2 — https://api.weather.gov/alerts/active?severity=Severe

51. National Weather Service New York (OKX), NYC forecast, Nov. 2 — https://api.weather.gov/gridpoints/OKX/33,42/forecast

52. National Hurricane Center, Atlantic Tropical Weather Outlook, Nov. 2, 0100 EST — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

53. National Hurricane Center, Eastern North Pacific Tropical Weather Outlook, Nov. 1, 2200 PST — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Florida, Greenacres (follow-up to today’s alert): A Learjet 60 flying from Austin to North Eleuthera in the Bahamas crashed into a residential area near Military Trail and 10th Avenue North at about 1250 ET. Transportation Secretary Sean Duffy said all nine people on board were killed. No deaths on the ground had been confirmed as of the latest updates. [1][2][16]

• Russia, Moscow (follow-up): The FSB says it detained a Russian minor after checking the U.S. warning about a planned attack at the Tsaritsyno Museum-Reserve. The park reopened today. [5][6][7]

• France (follow-up): The Interior Ministry’s final count is 779 arrests nationwide for Saturday’s marches and Halloween night, up from 565 at 2100. Paris prosecutors opened an attempted-homicide investigation into the Molotov attack on gendarmes. [8][9][10]

• Strait of Hormuz: UKMTO reports that a vessel was struck by an unknown projectile, according to a mayday call relayed by another ship’s master. The vessel was not named. [11][12]

• Saudi Arabia: The Saudi-led coalition says it intercepted a Houthi ballistic missile and a drone aimed at the southern region today, with no damage or casualties reported. [13][14]

United States

• Florida, Greenacres (follow-up): The FAA says the Learjet 60 departed Austin-Bergstrom International Airport for North Eleuthera Airport in the Bahamas, and that its information is preliminary. The NTSB will lead the investigation. [1][2] Governor Ron DeSantis called the crash “cataclysmic” and said it left a large crater on Military Trail and a long debris field. [2] County officials say about 600 residents of a nearby mobile home community will be relocated while the site is treated as a crime scene, and two shelters are on standby. [2]

  • The cause has not been determined. An aviation consultant interviewed by CBS12 says flight-tracking data shows a very rapid descent from cruise altitude and raised thunderstorms as one question for investigators. That is his analysis, not a finding. [3] The Palm Beach Post (via USA Today) reports rain and lightning in the area at the time. [1]

  • The victims and the aircraft’s registration have not been officially released.

  • Where sources differ: WPTV and the Palm Beach Post place the crash near Military Trail and 10th Avenue North; CW34 says South Military Trail and Marilyn Drive. [1][2][16]

  • Military Trail is closed between 10th Avenue North and Purdy Lane/Alameda Drive until further notice, and county officials warn that the closure could be extended. Use 10th Avenue North and Purdy Lane/Alameda Drive for east-west travel and Haverhill Road and Kirk Road for north-south travel. [2]

  • Action: Route principals around central Greenacres and Military Trail this week. For flight departments and charter users, confirm operators’ thunderstorm-avoidance procedures, and expect weather delays across South Florida tonight (see Aviation). [4]

Europe

• Russia, Moscow (follow-up to Saturday’s alert): The FSB says it worked with the National Guard, the Interior Ministry and the Investigative Committee to check information from U.S. law enforcement. It detained an unnamed Russian minor who had posted TikTok photos of himself in tactical clothing and a balaclava, holding an object resembling an automatic weapon, along with photos taken at Tsaritsyno captioned “I found a place.” [5][6] The FSB says searches found the clothing at his home, plus a subscription to a neo-Nazi Telegram channel and searches about past terrorist attacks and mass killings. The Investigative Committee will decide on charges. The FSB thanked the U.S. side for the information. [5][6][7] Euronews, citing Russian media, reports that the park reopened as usual today. [7]

  • Action: The specific threat appears to be contained, but this was a lone-actor case found through social media. Keep normal crowd precautions for principals at Moscow venues.

• France (follow-up): The Interior Ministry counted 565 arrests by 2100 on Saturday and 214 more during Halloween night, for a final total of 779. It says 159 officers were injured across both periods and that the late evening passed “without major incident.” Turnout was 320,000 by the ministry’s count, down 22% from Oct. 24; youth organizers claim about 500,000. [8][9] Paris prosecutors opened an investigation for “attempted homicide” against officers after the Molotov attack at Porte de Charenton; the gendarme hit told franceinfo he is “doing rather well.” [9][10]

  • What’s next: The CFDT, CGT, FO, UNSA and FSU unions have called a national day of strikes and marches on Thursday, Nov. 5. [9][15] Student and high school groups are calling for school blockades from Monday and actions on Tuesday and Thursday. [9]

  • Action: Plan for transport disruption and street protests across French cities on Nov. 5, and expect campus disruption earlier in the week.

Middle East

• Strait of Hormuz: UKMTO warning 191-26 says the master of a merchant vessel relayed a mayday call on VHF Channel 16 reporting that another vessel had been struck by an unknown projectile. The vessel, its cargo and any casualties have not been reported. [11][12]

  • Action: Keep sea transfers in the Gulf to a minimum and follow UKMTO guidance.

• Saudi Arabia: Coalition spokesman Turki al-Maliki said air defenses intercepted a ballistic missile and then a drone launched by the Houthis toward the southern region. Anadolu reports that emergency warnings were issued early today in Abha and Khamis Mushait before the all-clear. [13][14]

Aviation

• FAA (checked 1804 ET): No delays are listed at New York, Washington or Los Angeles-area airports. Thunderstorms caused a ground stop at Palm Beach International (DJT) until 1830 ET and departure delays of up to 1 hour 30 minutes there; Fort Lauderdale, Miami, Orlando and Fort Myers also show weather-related departure delays. Las Vegas has a wind ground delay program. LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [4]

Sources

1. USA Today (Palm Beach Post), “9 on board plane killed after crash in Florida, federal officials investigating,” updated Nov. 1, 1734 ET — https://www.usatoday.com/story/news/nation/2026/11/01/florida-plane-crash-learjet-palm-beach/92552816007/

2. WPTV, “Military Trail closed after deadly Learjet crash; shelters open for hundreds displaced,” Nov. 1 — https://www.wptv.com/news/region-c-palm-beach-county/greenacres/fiery-incident-reported-near-military-trail-and-10th-avenue

3. CBS12, “Weather could have played a role in Greenacres plane crash, aviation expert says,” Nov. 1, 1637 ET — https://cbs12.com/news/local/weather-could-have-played-a-role-in-greenacres-plane-crash-aviation-expert-says-november-1-2026

4. FAA National Airspace System Status (checked 1804 ET Nov. 1) — https://nasstatus.faa.gov/api/airport-status-information

5. TASS, report on the FSB detaining a teenager over the Tsaritsyno threat, Nov. 1 — https://tass.com/politics/2211559

6. Al Jazeera, “Russia detains minor over alleged Moscow attack plot after US warning,” Nov. 1 — https://www.aljazeera.com/news/2026/11/1/russia-detains-minor-over-alleged-moscow-attack-plot-after-us-warning

7. Euronews, “Russia arrests minor after US embassy warns of ‘credible threat of a mass casualty event’,” Nov. 1 — https://www.euronews.com/2026/11/01/russia-arrests-minor-after-us-embassy-warns-of-credible-threat-of-a-mass-casualty-event

8. BFMTV (French), “Manifestations du 31 octobre: 779 interpellations en France,” Nov. 1 — https://www.bfmtv.com/police-justice/manifestations-du-31-octobre-779-interpellations-en-france-sans-incident-majeur-en-seconde-partie-de-soiree_AD-202611010262.html

9. franceinfo (French), live coverage, Nov. 1 — https://www.franceinfo.fr/economie/greve/direct-mobilisation-sociale-la-jeunesse-ne-lache-pas-declare-la-porte-parole-de-l-union-etudiante-au-lendemain-des-manifestations-du-31-octobre_8262449.html

10. CNews (French, citing AFP), live coverage, Nov. 1 — https://www.cnews.fr/france/2026-11-01/mobilisation-du-31-octobre-779-interpellations-sur-lensemble-du-territoire

11. Dawn, “UKMTO reports strike on vessel by ‘unknown projectile’ in Strait of Hormuz,” updated Nov. 1 — https://www.dawn.com/news/2041409

12. Middle East Eye, “Vessel struck by unknown projectile in Hormuz, UKMTO says,” Nov. 1, 1900 GMT — https://www.middleeasteye.net/live-blog/live-blog-update/vessel-struck-unknown-projectile-hormuz-ukmto-says

13. Anadolu Agency, “Saudi-led coalition intercepts Houthi missile, drone targeting kingdom,” Nov. 1 — https://www.aa.com.tr/en/middle-east/saudi-led-coalition-intercepts-houthi-missile-drone-targeting-kingdom/4108159

14. Iran International, “Saudi-led coalition says it intercepted Houthi drone targeting south,” Nov. 1, 1605 GMT — https://www.iranintl.com/en/202611019220

15. CGT (French), intersyndicale call for Nov. 5 strikes and marches — https://www.cgt.fr/comm-de-presse/appel-la-mobilisation-pour-les-salaires-les-services-publics-lemploi-et-lindustrie

16. CW34, “Jet carrying nine plummets into Greenacres roadway, erupts in flames,” Nov. 1 — https://cw34.com/news/local/explosion-fire-shut-down-military-trail-in-both-directions-military-trail-s-military-trail-diamond-road-explosion-fire-loud-boom-boom-heard-for-miles-road-closure-traffic-alert-road-damage-broken-pavement-debris

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• France: Police arrested 565 people nationwide during Saturday’s third day of cost-of-living protests, the Interior Ministry said. In Paris, 79 people were arrested and five officers were injured, three of them by Molotov cocktails, in clashes at Porte de Charenton at the end of the march. [1][2][3][4] The Interior Minister called the Molotov attack on an officer “attempted murder.” [1][3] The Paris curfew around République and Châtelet-Les Halles applies again tonight, 23:00–06:00 local (17:00–00:00 ET). [7][8]

• London: The Metropolitan Police say they arrested 325 people at Saturday’s pro-Palestine Action protest outside the U.S. Embassy, 320 of them for expressing support for Palestine Action, which is banned as a terrorist group. [9][10]

• New York, today: About 60,000 runners start the TCS New York City Marathon at 08:00 on the Verrazzano-Narrows Bridge. The NYPD says there are no known specific, credible threats and is deploying thousands of officers along the route. [28][29] The bridge is closed to non-emergency traffic 07:00–16:00. [30]

• Moscow: The Tsaritsyno Museum-Reserve, closed and evacuated Saturday after the U.S. Embassy warned of a credible mass-casualty threat, reopened today with no incident reported. Meduza, citing Der Spiegel, reports that Germany’s embassy sent a similar warning. [11][12][13]

• Gulf shipping: Qatar’s Nakilat says its LNG carrier Al Mayeda was hit by “unidentified objects” in the Gulf on Friday evening, with no injuries. [14][15][16] Iran’s Revolutionary Guard claims another supertanker hit a mine east of the Strait of Hormuz. Unconfirmed: the ship was not named and Reuters could not verify it. [18][19]

For solo operators: In NYC today, plan any movement around the marathon closures. Assume crossings between Brooklyn and Staten Island and the avenues along the route are off-limits until evening, and use transit where you can. [29][30][31] In Paris tonight, keep principals out of République and Châtelet-Les Halles after 23:00 and away from any unannounced gatherings after dark. [7][8]

For corporate security teams: Briefing items for leadership:

1. France: Saturday’s marches were largely peaceful, but clashes broke out in Paris, Marseille, Lyon and Toulouse as they ended. Expect the same pattern on any further protest days. [1][5][6]

2. Gulf: October was the worst month for attacks on shipping since the war began, with at least 29 ships hit, according to Al Jazeera’s count. Expect delays and higher insurance costs to continue. [17]

3. U.S.: Tuesday, Nov. 3, is Election Day. Plan for crowds and protests near polling places and election offices, and for heightened tension around results. [35][36]

4. Spain: the Madrid–Andalucía high-speed line is still closed in both directions after the Urda crash. [32]

Threats to Executives & Public Figures

• United States, Michigan: Anthony Daniel Palazzolo, charged with threatening to kill FBI Director Kash Patel and an associate, has a detention hearing set for Monday, Nov. 2, before a federal court in Michigan. He did not enter a plea at his Oct. 30 appearance and was temporarily detained. [26][27]

• Nigeria: Police in Ekiti State say they arrested 11 suspects at about 22:00 local time on Friday over the Oct. 30 attack on African Action Congress presidential hopeful Omoyele Sowore and others at a restaurant in Ado-Ekiti. They say they recovered walkie-talkies and 13 phones. [24][25]

  • Where sources differ: Sowore says government-sponsored thugs attacked him and his associates. Police first described an altercation at the restaurant, after which officers rescued him and treated him for a minor injury. [23]

  • Action: The suspects reportedly carried radios, which points to a coordinated attack. For principals on campaign or public tours, vary restaurant and venue choices and scout them in advance.

• Russia, Moscow: The U.S. Embassy’s Oct. 31 alert warned of a “credible threat of a mass-casualty event” at the Tsaritsyno Museum-Reserve. The FSB confirmed it had received the warning and said it had carried out “appropriate” measures. [11][13] The park was cordoned off and evacuated, including during an organ concert, and was open as normal today, according to its hotline. [11][12] No attack was reported, and no one has said publicly who was behind the threat. [12][13]

  • Action: Keep principals away from crowded public sites in Moscow for the coming days, even with the park reopened.

Travel Advisories & Hotspots

• Saudi Arabia: The Saudi-led coalition says its air defenses intercepted a drone in the Riyadh region on Saturday, with debris but no injuries. They also destroyed drones over the Eastern Region and toward the Southern Region. [20][21] Saudi Press Agency statements in Al-Jazirah’s Nov. 1 edition also list a Houthi drone intercepted over the Medina region and a ballistic missile launched toward the Southern Region, without giving times. [22] The coalition spokesman did not say who launched the Riyadh drone. [20][21]

  • Action: In Riyadh and the Eastern Region, keep principals indoors and away from windows when alerts sound, and don’t film intercepts or debris.

• Russia: See Moscow, above. [11][12][13]

Civil Unrest in Business Hubs

• France, Paris: The Interior Ministry put turnout at 320,000 nationwide, including 70,000 in Paris; organizers claimed 500,000. [1][3] As the authorized march ended at Porte de Charenton, a “hardcore of several hundred rioters” attacked police with paving stones and at least one incendiary device, the Paris police prefecture said. Police used tear gas and baton charges. [1] The prefecture reported 79 arrests and 5,745 police checks in the Paris area as of 21:00 local, and said the area was “calm” by late evening. [3][4] About 50 metro stations were still closed in the early evening. [4]

  • The curfew around République and Châtelet-Les Halles covered Saturday night and runs again tonight into Monday, 23:00–06:00. Residents and people traveling for work can pass with proof. [7][8]

  • Action: Keep evening plans in Paris away from the curfew zones and well clear of any marches. Expect metro closures at short notice.

• France, Marseille and other cities: Police arrested 18 people in Marseille, where a calm march was followed by a night of tension, according to the Bouches-du-Rhône police prefecture. [5][6] The Guardian reports that police fired tear gas and stun grenades in several cities as the marches ended. In Lyon, protesters threw projectiles at police, and in Toulouse, police used water cannon on an unauthorized protest. [1]

• United Kingdom, London: The Met said on X on Sunday that it had arrested 325 people, 320 of them for expressing support for Palestine Action, at the Defend Our Juries protest outside the U.S. Embassy in Nine Elms. The Guardian reported 139 arrests earlier on Saturday, while police were still making arrests. [9][10] Protesters also held a vigil outside the U.S. Consulate in Edinburgh. [9] The protests come ahead of an appeal at the UK Supreme Court on Nov. 4 against the group’s designation as a terrorist organization. [9][10]

  • Action: Expect more protests around the Supreme Court hearing. Keep principals away from Nine Elms and Westminster on hearing days.

Aviation & Transport

• FAA (checked 06:05 ET): No delays were listed at New York, Washington or Los Angeles-area airports. LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [37]

• New York City Marathon: The Verrazzano-Narrows Bridge is closed to all non-emergency traffic 07:00–16:00, and its upper level has been closed since 23:00 Saturday. The Bay Street and Lily Pond Avenue exits on Staten Island are closed until about 16:00. [30] City notices list rolling Manhattan street closures as late as 22:30, at NYPD discretion and subject to change. [31] Officials urge people to use mass transit and expect delays. [28][30]

• Spain rail: The Madrid–Andalucía high-speed line remains closed in both directions, and Renfe has suspended ticket sales until December. [32] The death toll is 69, with 56 victims identified and 31 people still in hospital. [32][33] Diario de Sevilla reported on Oct. 30, citing unnamed sources, that the line may reopen Nov. 14. Unconfirmed: there is no official date. [34]

• Gulf shipping: Nakilat says Al Mayeda is safe and operational and that the damage is being assessed. [14][15][16] In a statement on Saturday, the IRGC Navy said a supertanker struck a mine in an “unsafe area” east of the strait and urged ships to keep their tracking systems on. It gave no name and no casualty figures. [18] Reuters, as carried by World Ports Organization, reports that a fourth tanker carrying more than 2 million barrels of crude hit a mine, according to the IRGC, and that Reuters could not verify it. It is not clear whether this is the same ship. [19]

Cyber & Doxxing Risk to Principals

• CISA: No new Known Exploited Vulnerabilities were added after Oct. 30. The latest additions are still the two Ivanti Connect Secure flaws (CVE-2026-111357 and CVE-2026-118527), plus Oct. 29 additions for GitLab and Cisco Secure Firewall ASA/FTD. [38]

  • Action: Make sure IT has patched Ivanti, Cisco and GitLab systems that support executive remote access.

• U.S. elections: CNN reports that, according to people who work in elections, the channels federal officials use to warn election officials about foreign threats are at their weakest since 2016. CISA has been trying to set up a new channel with election officials, but sources say it is unlikely to have the reach it had in past elections. [35]

  • Action: Expect false claims and doctored media around the vote. Agree in advance on who checks rumors about principals and how fast you respond.

Severe Weather

• New York City: Mostly sunny today, with a high near 61°F and a light west wind of 2–6 mph, which is good weather for the marathon. Tonight is mostly clear with a low around 49°F, and Monday is mostly sunny with a high near 66°F. [41]

• Northeast: Frost Advisories cover southern Connecticut, southern Westchester, parts of Long Island, southern New Jersey and southeastern Pennsylvania until 08:00 ET. There are no other active alerts for New York, New Jersey or Connecticut. [39]

• U.S. Southwest: Flood watches cover parts of Arizona, Utah, New Mexico, Nevada and southwest Colorado. Flood warnings are in effect in Maricopa and Gila counties in Arizona and in La Plata and Archuleta counties in Colorado, and winter storm warnings cover Colorado’s San Juan Mountains. [40]

• Gulf Coast and Florida: Flash Flood Warnings were issued for parts of central Louisiana, and a Flood Warning covers the Pearl River in Mississippi. Flood watches cover the Miami, Fort Lauderdale and Palm Beach metro areas through 16:00 ET, and parts of Florida’s Treasure Coast through 15:00 ET Monday. [40]

• Tropics: No tropical cyclones are expected in the Atlantic, Caribbean or Gulf in the next seven days. [42] In the Pacific, a low expected to form well southeast of Hawaii has a 40% chance of becoming a tropical cyclone over the next seven days. [43]

Tradecraft Tip (general guidance, not tailored advice)

Big public events: plan for the closures, not just the crowd. Marathons, marches and elections close roads, bridges and transit stations for hours, often on short notice. For any principal moving today or around Tuesday’s vote:

1. Map the closures first. Get the official street-closure notice and mark which crossings and avenues are cut, and for how long.

2. Pick the route on the far side. Plan pickups and drop-offs away from the course or protest area, not at the main entrance facing it.

3. Have a no-vehicle option. When roads close, a short walk to a transit line or a second vehicle positioned outside the zone is often faster.

4. Set a rally point. Phones can fail in dense crowds. Agree on a fixed meeting place and time before the day starts.

5. Check again an hour before you move. Closures are often “rolling” and at police discretion, so the plan you made this morning may be out of date.

Coming Up

• Today, Nov. 1: NYC Marathon, starting 08:00 on Staten Island, with closures into the evening. [29][30][31] The Paris curfew covers République and Châtelet-Les Halles from 23:00 local (17:00 ET). [7][8]

• Mon. Nov. 2: Detention hearing for Anthony Palazzolo in Michigan. [26][27]

• Tue. Nov. 3: U.S. Election Day for the 2026 midterms. Poll opening and closing times vary by state. [36]

Sources

1. The Guardian, “Police clash with masked rioters after largely peaceful protests across France,” Oct. 31 — https://www.theguardian.com/world/2026/oct/31/police-clash-rioters-after-largely-peaceful-protests-across-france

2. BFMTV, “’On va rester vigilants’: interpellations, des cortèges revendicatifs calmes... Laurent Nuñez tire son bilan des manifestations du 31 octobre,” Oct. 31 — https://www.bfmtv.com/societe/manifestations/on-va-rester-vigilants-422-interpellations-des-corteges-revendicatifs-calmes-laurent-nunez-tire-son-bilan-des-manifestations-du-31-octobre_AV-202610310377.html

3. France 3 Paris Île-de-France, “Mobilisation du 31 octobre à Paris : trois membres des forces de l’ordre blessés par un jet de cocktail molotov,” Oct. 31 — https://france3-regions.franceinfo.fr/paris-ile-de-france/paris/mobilisation-du-31-octobre-a-paris-trois-membres-des-forces-de-l-ordre-blesses-par-un-jet-de-cocktail-molotov-3442341.html

4. 20 Minutes, “Manifestations du 31 octobre : La situation jugée « calme dans l’agglomération parisienne »,” live blog, Oct. 31 — https://www.20minutes.fr/societe/4259115-20261031-direct-manifestations-31-octobre-pres-demi-million-manifestants-selon-organisateurs-affrontements-fins-cortege

5. BFM Marseille, “Mobilisation du 31 octobre: un cortège calme suivi d’une nuit de tensions à Marseille, 18 personnes interpellées,” Nov. 1 — https://www.bfmtv.com/marseille/mobilisation-du-31-octobre-un-cortege-calme-suivi-d-une-nuit-de-tensions-a-marseille-18-personnes-interpellees_AV-202611010203.html

6. La Provence, “Manifestation du 31 octobre contre la vie chère : la préfecture de police fait état de 18 personnes interpellées à Marseille,” Nov. 1 — https://www.laprovence.com/article/faits-divers-justice/13851967723415/manifestation-du-31-octobre-contre-la-vie-chere-la-prefecture-de-police-fait-etat-de-18-personnes-interpellees-a-marseille

7. Économie Matin, “Paris : couvre-feu dimanche soir à République et aux Halles, les règles à connaître,” Nov. 1 — https://www.economiematin.fr/paris-couvre-feu-republique-halles-dimanche-1-novembre-2026

8. Sortir à Paris, “Couvre-feu à Paris : de nouveau reconduit ce week-end d’Halloween des 31 octobre et 1er novembre,” updated Oct. 30 — https://www.sortiraparis.com/actualites/a-paris/articles/355062-couvre-feu-a-paris-de-nouveau-reconduit-ce-week-end-d-halloween-des-31-octobre-et-1er-novembre

9. The Guardian, “Almost 140 arrested at protest against Palestine Action ban outside US embassy in London,” Oct. 31 — https://www.theguardian.com/uk-news/2026/oct/31/protest-against-palestine-action-ban-outside-us-embassy-in-london

10. The Independent (PA), “More than 300 arrested outside US embassy after supporting Palestine Action,” Nov. 1 — https://www.independent.co.uk/news/uk/home-news/allison-metropolitan-police-teachers-nine-elms-london-b3077048.html

11. MSK1.ru, “Угрозы больше нет? Открылось ли «Царицыно» после сообщения о риске теракта с массовыми жертвами,” Nov. 1 — https://msk1.ru/text/gorod/2026/11/01/76738028/

12. Meduza, “Предупреждение о возможном теракте в «Царицыно» выпускало также посольство Германии,” Nov. 1 — https://meduza.io/news/2026/11/01/preduprezhdenie-o-vozmozhnom-terakte-v-tsaritsyno-vypuskalo-takzhe-posolstvo-germanii-park-zakryli-na-sutki-on-uzhe-otkrylsya

13. ABC News (Australia), “Russia responds to US warning of Moscow attack plan,” Nov. 1 — https://www.abc.net.au/news/2026-11-01/russia-responds-to-us-intelligence-moscow-terrorist-attack/107333516

14. Nakilat, “AL Mayeda – vessel incident in the Arabian Gulf,” Oct. 30 — https://www.nakilat.com/al-mayeda-vessel-incident-in-the-arabian-gulf/

15. Gulf Times (QNA), “Qatar Gas Transport company announces one of its vessels attacked in Arabian Gulf,” Nov. 1 — https://www.gulf-times.com/article/737226/qatar/qatar-gas-transport-company-announces-one-of-its-vessels-attacked-in-arabian-gulf

16. Anadolu Agency, “Qatari LNG carrier struck by ‘unidentified objects’ in Gulf waters: Company,” Nov. 1 — https://www.aa.com.tr/en/middle-east/qatari-lng-carrier-struck-by-unidentified-objects-in-gulf-waters-company/4107810

17. Al Jazeera, “Qatar LNG carrier struck by ‘unidentified objects’ in Gulf,” Nov. 1 — https://www.aljazeera.com/news/2026/11/1/qatar-lng-carrier-struck-by-unidentified-objects-in-gulf

18. Anadolu Agency, “Supertanker hits mine, catches fire east of Hormuz: Iran’s Revolutionary Guard,” Nov. 1 — https://www.aa.com.tr/en/middle-east/supertanker-hits-mine-catches-fire-east-of-hormuz-iran-s-revolutionary-guard/4107673

19. World Ports Organization (Reuters), “Iran’s IRGC Navy Says Four Tankers Catch Fire In Strait Of Hormuz,” Nov. 1 — https://www.worldports.org/irans-irgcnavysays-four-tankers-catch-fire-in-strait-of-hormuz/

20. Dawn (agencies), “Saudi forces intercept three ‘Houthi’ drones,” Nov. 1 — https://www.dawn.com/news/2041291

21. Business Recorder (AFP), “Saudi says intercepted ‘hostile drone’ in Riyadh region,” Nov. 1 — https://www.brecorder.com/news/40446866

22. Al-Jazirah (SPA), “اعتراض وتدمير طائرة مسيرة في الرياض والمدينة المنورة والشرقية وصاروخ في الجنوبية,” Nov. 1 — https://www.al-jazirah.com/2026/20261101/ln9.htm

23. Punch, “Sowore, police trade words over Ekiti attack,” Oct. 31 — https://punchng.com/sowore-police-trade-words-over-ekiti-attack/

24. Punch, “Police arrest 11 over attack on Sowore in Ekiti,” Oct. 31 — https://punchng.com/police-arrest-11-over-attack-on-sowore-in-ekiti/

25. Sahara Reporters, “Ekiti Police Arrest 11 Suspects Over Attack On Sowore, Recover Walkie-Talkies, Charms, 13 Phones,” Oct. 31 — https://saharareporters.com/2026/10/31/ekiti-police-arrest-11-suspects-over-attack-sowore-recover-walkie-talkies-charms-13

26. ClickOnDetroit (WDIV), “Macomb County man accused of threatening to kill FBI Director Kash Patel,” Oct. 31 — https://www.clickondetroit.com/news/local/2026/10/31/macomb-county-man-accused-of-threatening-to-kill-fbi-director-kash-patel/

27. KESQ (CNN), “Michigan man charged with threatening to kill FBI Director Kash Patel,” Oct. 31 — https://kesq.com/news/national-world/cnn-national/2026/10/31/michigan-man-charged-with-threatening-to-kill-fbi-director-kash-patel/

28. NBC New York, “It’s NYC Marathon Sunday! NYPD steps up security for 60,000 runners,” Oct. 31 — https://www.nbcnewyork.com/news/local/its-nyc-marathon-sunday-nypd-steps-up-security-for-60000-runners/6565670/

29. ABC7 New York, “’No credible threats,’ security measures in place ahead of this weekend’s TCS NYC Marathon,” Oct. 30 — https://abc7ny.com/post/no-credible-threats-security-measures-place-2026-tcs-nyc-marathon/19999045/

30. ABC7 New York, “NYC Marathon weekend to bring major road and transit closures,” Nov. 1 event coverage — https://abc7ny.com/post/mta-announces-marathon-transit-changes-bridge-closures-nyc/19990919/

31. NYC Office of Citywide Event Coordination and Management, “TCS New York City Marathon and Abbot Dash to the Finish Line 5k” street-closure notice, Oct. 31–Nov. 1 — https://www.nyc.gov/assets/cecm/downloads/pdf/tcs-street-closures-marathon-2026.pdf

32. RTVE, “Accidente de tren, hoy en directo última hora: el Consejo de Ministros aprobará el próximo martes un decreto con ayudas para los damnificados,” Nov. 1 — https://www.rtve.es/noticias/20261101/accidente-tren-directo-ultima-hora-heridos/17295258.shtml

33. El Español, “Accidente de tren en Toledo | Última hora del siniestro,” live blog, Nov. 1 — https://www.elespanol.com/invertia/observatorios/movilidad/20261101/accidente-tren-toledo-ultima-hora-siniestro-numero-muertos-desaparecidos-heridos-directo-urda-oscar-puente-causas-choque-ave-victimas-fallecidos-iryo/1003744442495_10.html

34. Diario de Sevilla, “Esperan reabrir la línea Madrid Andalucía el 14 de noviembre tras el accidente de Urda,” Oct. 30 — https://www.diariodesevilla.es/andalucia/esperan-reabrir-linea-madrid-andalucia_0_2008385871.html

35. CNN, “Election officials brace for foreign threats — and an unpredictable Washington,” Nov. 1 — https://www.cnn.com/2026/11/01/politics/election-threats-federal-preparations

36. The Indian Express, “US midterm elections 2026: Election Day date, polling hours, results and when to expect winners,” updated Nov. 1 — https://indianexpress.com/article/world/us-news/us-midterm-elections-2026-date-key-races-how-to-check-results-10944538/

37. FAA National Airspace System Status, Nov. 1, 06:05 ET — https://nasstatus.faa.gov/api/airport-status-information

38. CISA, Known Exploited Vulnerabilities catalog (version 2026.10.30), checked Nov. 1 — https://www.cisa.gov/known-exploited-vulnerabilities-catalog

39. National Weather Service, active alerts for NY, NJ and CT, Nov. 1 — https://api.weather.gov/alerts/active?area=NY,NJ,CT

40. National Weather Service, active severe alerts nationwide, Nov. 1 — https://api.weather.gov/alerts/active?severity=Severe

41. National Weather Service New York (OKX), NYC forecast, Nov. 1 — https://api.weather.gov/gridpoints/OKX/33,42/forecast

42. National Hurricane Center, Atlantic Tropical Weather Outlook, Nov. 1, 01:00 EST — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

43. National Hurricane Center, Eastern North Pacific Tropical Weather Outlook, Oct. 31, 23:00 PDT — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Russia, Moscow (follow-up to today’s alert): The FSB confirmed it received the U.S. warning of a planned terrorist attack and says it is “taking appropriate action.” The Tsaritsyno Museum-Reserve was closed and evacuated, including an organ concert. No incident or casualties had been reported as of our 1800 ET check. [1][2][3][4][6]

• France: About 320,000 people marched nationwide, including 70,000 in Paris, according to the Interior Ministry. Clashes broke out at the end of several marches, and police had made 565 arrests nationwide by 21:00 (1600 ET). [8][10][11]

• France, Paris tonight: The 23:00–06:00 curfew around République and Châtelet-Les Halles is now in force (from 1800 ET). Calls for a 20:00 rally at Châtelet produced no visible gathering, and police describe the city as calm. [8][9]

• London: The Met arrested 139 people at the pro-Palestine Action protest outside the U.S. Embassy and said more arrests were expected. [12][13]

• Strait of Hormuz: Iran’s navy claims another tanker hit mines and caught fire east of the strait on Saturday. Unconfirmed: the ship was not named, and the claim could not be independently verified. [14][15]

Europe

• Russia, Moscow (follow-up): The U.S. Embassy alert warned of a “credible threat of a mass casualty event TODAY October 31” at the Tsaritsyno Museum-Reserve (Dolskaya Ulitsa 1) and said the U.S. government is coordinating with Russian authorities. [1] The FSB said it received the information “through partner channels.” [2][3] RIA, citing law enforcement, reports that the park is temporarily closed with no public access. [3] Meduza and The Moscow Times report that visitors were evacuated, including from an organ concert that was cut short. [4][5] TASS, as quoted by NEWS.ru, says it was closed “in connection with operational measures,” and NEWS.ru reports no incidents or casualties. [6] MSK1.ru reports that a second concert was canceled. [7]

  • Unconfirmed: The Telegram channel Baza, which reportedly has ties to the security services, says the park will stay closed for at least two days and that dog teams are sweeping it. [4][7]

  • Reuters notes that the U.S. warned of an attack in Moscow in March 2024, days before gunmen killed more than 140 people at Crocus City Hall. [2]

  • Action: Keep principals and staff away from Tsaritsyno through the weekend. Treat other crowded Moscow venues (concerts, malls and Halloween events) as higher risk tonight, and check in with traveling personnel.

• France (follow-up to this morning’s march ban): The Paris march ran on the authorized Porte de Bagnolet–Porte de Charenton route. Near its end, several hundred rioters threw paving stones and at least one incendiary device at police, who answered with tear gas and baton charges. [9][10] Interior Minister Laurent Nuñez said a gendarme hit by a Molotov cocktail was only lightly injured and stayed on duty. [11] The Paris police counted 61 arrests by 18:45. [8][9] Clashes were also reported in Lyon, Marseille and Rennes. [10]

  • Unconfirmed (single source): Le Parisien reports that the Paris police’s 21:00 tally was 79 arrests and five officers injured, three of them burned by a Molotov cocktail. [8]

  • Where sources differ: Organizers’ turnout figures are far higher than the Interior Ministry’s. The youth unions claim about 500,000 marchers nationwide, including 200,000 in Paris. [10][11] Arrest totals also depend on the time of the count: Nuñez gave 422 at 19:50, and the ministry reported 565 at 21:00. Nuñez warned that “the day is not over.” [8][10][11]

  • Châtelet-Les Halles station (RER A, B and D) has been closed since 20:00. Curfews are also in force tonight in parts of Marseille, Nice, Grenoble, Bordeaux, Avignon and Tours. [8][9] Le Parisien reports that a student union has called for blockades of high schools and universities on Tuesday and Thursday. [8]

  • Action: Keep principals out of the République and Les Halles curfew zones after 23:00 tonight and Sunday night, and have staff carry proof of address or work. Avoid eastern Paris and city centers in Marseille and Lyon after dark, and plan for campus disruption next week.

• United Kingdom, London (follow-up): In a post on X at 18:15 (1415 ET), the Met said it had arrested 139 people outside the U.S. Embassy in Nine Elms, most of them for expressing support for a proscribed organization, and said more arrests were expected. [13] The organizers, Defend Our Juries, estimated that about 400 people took part. They say more than 4,000 people have now been arrested since the ban took effect. [12][13] The Supreme Court is due to hear an appeal against the ban on Nov. 4. [13]

  • Action: A Section 35 dispersal order covering the embassy area runs until 23:00 London time (1900 ET). [13] Avoid Nine Elms and Ponton Road tonight, and expect more protests ahead of the Nov. 4 hearing.

Middle East

• Strait of Hormuz (new claim): In a statement carried by state media, Iran’s Army Navy said a tanker operating in a restricted zone in disregard of warnings struck mines and caught fire east of the Strait of Hormuz. [14][15] Iran International says the claim could not be verified. [14] This follows the Revolutionary Guard’s unverified claim of four tankers hit on Friday. Unconfirmed.

  • Action: Keep sea transfers in the Gulf to a minimum, and confirm that charter vessels follow UKMTO guidance.

• Saudi Arabia (Medina vs. Mecca likely explained): The discrepancy we flagged this morning appears to come from two separate claims. Anadolu reports that the coalition announced four Houthi attacks on Friday. They included a drone intercepted in the Mecca region and, in a later statement, a separate drone in the Medina region. [16] Reuters also reports the Medina interception. The Houthis deny attacking Saudi territory. [16][17]

Aviation

• FAA (checked 1805 ET): No delays were listed at New York, Washington or Los Angeles-area airports. LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [18]

Sources

1. U.S. Embassy Moscow, “Security Alert: Threat to Tsaritysyno Museum Reserve in Moscow (October 31, 2026),” Oct. 31 — https://ru.usembassy.gov/security-alert-threat-to-tsaritysyno-museum-reserve-in-moscow-october-31-2026/

2. Reuters (via Investing.com), “FSB says US warned Russia of possible Moscow attack,” Oct. 31, 12:36 ET — https://www.investing.com/news/world-news/fsb-says-us-warned-russia-of-possible-moscow-attack-4989302

3. RIA Novosti (Russian), Oct. 31, 19:10 Moscow time — https://ria.ru/20261031/tsaritsyno-2128354972.html and https://ria.ru/20261031/fsb-2128348352.html

4. Meduza (Russian), Oct. 31 — https://meduza.io/feature/2026/10/31/ssha-predupredili-rossiyu-o-vozmozhnom-terakte-v-tsaritsyno

5. The Moscow Times, Oct. 31 — https://www.themoscowtimes.com/2026/10/31/us-embassy-warns-of-potential-mass-casualty-event-in-moscow-2-a94144

6. NEWS.ru (Russian), Oct. 31, 19:55 Moscow time — https://news.ru/moskva/evakuaciya-i-zakrytie-caricyno-zhertvy-poslednie-novosti-vecherom-31-oktyabrya

7. MSK1.ru (Russian), Oct. 31 — https://msk1.ru/text/incidents/2026/10/31/76737715/

8. Le Parisien (French), live coverage, updated Oct. 31, 23:01 Paris time — https://www.leparisien.fr/societe/direct-mobilisation-du-31-octobre-nouvelle-journee-de-manifestations-dans-plusieurs-villes-lexecutif-craint-des-debordements-31-10-2026-DRJIUI3CBVHBBAGX66RVWDYPBM.php

9. actu.fr (French), Oct. 31, 20:23 Paris time — https://actu.fr/ile-de-france/paris_75056/direct-manifestation-a-paris-ce-samedi-31-octobre-parcours-bouleverse-metro-ferme-tensions-suivez-la-mobilisation_64998603.html

10. CNews (French), Oct. 31 — https://www.cnews.fr/france/2026-10-31/mobilisation-du-31-octobre-affluence-degradations-arrestations-le-bilan-des

11. BFMTV (French), Oct. 31, 22:01 Paris time — https://www.bfmtv.com/societe/manifestations/on-va-rester-vigilants-422-interpellations-des-corteges-revendicatifs-calmes-laurent-nunez-tire-son-bilan-des-manifestations-du-31-octobre_AV-202610310377.html

12. The Guardian, updated Oct. 31, 14:28 ET — https://www.theguardian.com/uk-news/2026/oct/31/protest-against-palestine-action-ban-outside-us-embassy-in-london

13. The Independent, Oct. 31 — https://www.independent.co.uk/news/uk/home-news/metropolitan-police-teachers-nine-elms-zack-polanski-palestine-b3076960.html

14. Iran International, Oct. 31, updated 20:07 GMT — https://www.iranintl.com/en/202610316926

15. Press TV (Iranian state media), Oct. 31, 17:50 UTC — https://www.presstv.co.uk/Detail/2026/10/31/779637/another-offending-tanker-catches-fire-after-striking-mines-east-of-hormuz-iran-army

16. Anadolu Agency, Oct. 30 — https://f.aa.com.tr/en/middle-east/saudi-led-coalition-intercepts-houthi-drone-in-medina-region/4106922

17. Al-Monitor (Reuters), Oct. 30 — https://www.al-monitor.com/originals/2026/10/saudi-led-coalition-says-it-downs-houthi-drone-over-medina-houthis-deny-attack

18. FAA National Airspace System Status (checked 1805 ET Oct. 31) — https://nasstatus.faa.gov/api/airport-status-information

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• France, today: The Conseil d’État overturned Friday’s lower-court ruling, so the Bastille–Nation route in Paris is banned. The only authorized Paris march runs from Porte de Bagnolet to Porte de Charenton on the city’s eastern edge. [1][2][3][4] About 70,000 police and gendarmes are deployed, and the Interior Minister’s office expects violence like Oct. 17’s “throughout the day” and “from nightfall.” [4]

• Strait of Hormuz: Iran’s Revolutionary Guard (IRGC) claims four tankers using “unauthorized” routes struck mines and caught fire on Friday, one of them carrying more than 2 million barrels. Unconfirmed: the AP could not verify the claims and the ships were not named. [14][15] Separately, the tanker hit Thursday is now named as the Panama-flagged Louise 1. Maritime security sources say a small boat attached two limpet mines to its hull, and India says all 27 Indian crew are safe. [12][13]

• Saudi Arabia: The Saudi-led coalition says it destroyed a drone targeting Riyadh on Saturday. Debris fell, with no injuries. Hours earlier it reported destroying a Houthi drone over southern Saudi Arabia. [9][10][11]

• London, today: The Met warns that anyone joining the 13:00 (09:00 ET) pro-Palestine Action protest outside the U.S. Embassy in Battersea faces arrest. Organizers told the Standard that 400 people have signed up. [6][7][8]

• U.S. threats: A Michigan man was charged Friday with threatening to kill FBI Director Kash Patel, an associate and FBI and Secret Service personnel. [17][18][19]

For solo operators: In Paris today, keep principals away from the eastern edge (Porte de Bagnolet to Porte de Charenton) from midday, and out of the curfew zones after 23:00. [1][4] Remember that masks are banned near protests, even on Halloween. [4] In London, avoid the area around the U.S. Embassy in Battersea, where a police dispersal order runs 08:00–23:00. [8]

For corporate security teams: Briefing items for leadership:

1. France: officials say the risk of unrest is “very high,” and about 350 actions are planned nationwide, with 350,000 to 450,000 people expected. [4] Shops in Paris are boarding up. Plan for evening disruption in Paris, Lyon and Bordeaux. [4]

2. Hormuz: Whatever the truth of Iran’s claims, mines and hull charges are now part of the threat. Review crew and cargo plans for the strait. [12][13][14]

3. Spain: there is still no high-speed rail between Madrid and Andalucía over the All Saints holiday weekend, and Renfe has blocked new ticket sales on the corridor until Dec. 13. [26][27][28]

4. The DHS data leak is drawing calls online to harm officers and their families, according to SITE as reported by The Washington Post. Treat staff who appear in any leak as at elevated risk. [24]

Threats to Executives & Public Figures

• United States, Michigan: Anthony Daniel Palazzolo, 42, of Chesterfield Township, was arrested Oct. 30 and charged with making threatening interstate communications, the U.S. Attorney’s Office for the Eastern District of Michigan announced. The complaint says he sent a Patel associate a Facebook message on Oct. 8 saying he had “put a hit out” on the associate and that Patel was dead too. After an FBI interview, he allegedly kept harassing a Detroit FBI agent by phone, threatening to come to the office and “use deadly force” against FBI and Secret Service officials. He was temporarily detained, with a detention hearing on Nov. 2. [17][18][19]

  • Action: The complaint describes a person who kept escalating after an FBI interview. Keep watching anyone of concern after a contact or interview, rather than closing the file.

• United States, Mississippi: Matthew Marchant, 32, a Georgia man arrested Thursday, faces a felony terroristic threat charge after Facebook posts allegedly threatened investigators, child protective services workers, an assistant district attorney and a county judge in Forrest County. Bond was set at $25,000 with an ankle monitor. Reported by WDAM. [20]

• Australia: The Australian Federal Police charged a 72-year-old North Parramatta man on Oct. 30 with using social media to threaten a federal parliamentarian. He was granted bail and is due in court Dec. 9. [21]

Travel Advisories & Hotspots

• Saudi Arabia: Coalition spokesman Maj. Gen. Turki al-Maliki says air defenses destroyed a hostile drone targeting Riyadh on Saturday, with debris but no injuries. [9][10] Hours earlier, the coalition said it destroyed a Houthi drone over southern Saudi Arabia. [9][11] Reuters also reports a drone downed over the oil-rich Eastern Region. Reported by Business Recorder (Reuters). [11]

  • Where sources differ: AFP and Reuters now describe Friday’s intercepted drone as aimed at the Medina region. Friday’s reports, cited in our Oct. 30 brief, said the Mecca region. The Houthis denied Friday’s claim. [10][11]

  • Action: In Riyadh and the Eastern Region, keep principals indoors and away from windows when alerts sound, and don’t film intercepts or debris.

• Mexico, Matamoros: In an Oct. 30 update, the U.S. Consulate said law enforcement activity in the city has subsided and the shelter-in-place order for U.S. government staff has been lifted. Tamaulipas remains Level 4, Do Not Travel. [23]

• Dominican Republic: On Oct. 30, the U.S. Embassy in Santo Domingo warned of travelers being drugged and then robbed or sexually assaulted, sometimes after meeting through dating apps or at bars, in short-term rentals and in or near hotels. [22]

  • Action: Brief traveling staff: meet strangers only in public, never leave drinks unattended, and set a visitor policy with the hotel front desk.

Civil Unrest in Business Hubs

• France, Paris: In an order seen by AFP, the Conseil d’État said banning the Bastille–Nation route and offering an alternative is “necessary” and “neither inappropriate nor disproportionate,” citing the need to “limit the risks of abuses” around the march. [2][4] Marchers are being directed to the Bagnolet–Charenton route, and the CGT union and the youth unions have called on people to join it. [1][4] The student union Fage called the ruling “a new obstruction of the right to protest.” [2]

  • A new 23:00–06:00 curfew covers some Paris sectors on the nights of Saturday to Sunday and Sunday to Monday. [4]

  • Elsewhere, Bordeaux’s march is authorized but the prefecture expects “violent actions,” Lyon’s is allowed outside the city center, and Marseille allows only declared gatherings. [4]

  • Action: Expect road closures and transit disruption across eastern Paris and confrontations after dark. Shift evening events indoors and away from the city center, and keep hotel staff briefed on lockdown procedures.

• United Kingdom, London: Defend Our Juries’ rally outside the U.S. Embassy starts at 13:00. The Met, whose operation is led by Commander Adam Slonecki, says anyone organizing, directing others or giving logistical support, not only sign holders, will very likely face enforcement action. [6][7][8] A dispersal order is in place from 08:00 to 23:00. [8] The U.S. Embassy has also issued a demonstration alert for today. [5]

  • Action: Avoid Battersea and Nine Elms this afternoon, and expect cordons and delays.

Aviation & Transport

• FAA (checked 06:05 ET): No delays were listed at New York, Washington or Los Angeles-area airports. LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [32]

• Spain rail: High-speed service between Madrid and Seville is suspended indefinitely, and Iryo and Ouigo have also halted service on the route. [27] Renfe’s alternative plan cannot start before Tuesday, Nov. 3. [26] La Vanguardia reports that private cars filled the A-4 highway as the holiday weekend began. [28] The death toll stands at 69, with 34 people still in hospital, and a funeral mass is being held in Urda at 12:00 today. [29][30] The Spanish Eye reports a provisional reopening date of Nov. 14 and a toll of at least 74. Both figures are unconfirmed, and the toll conflicts with the regional reports. [31]

• Strait of Hormuz: UKMTO has also reported a crude tanker struck by an unidentified projectile on an outbound transit, without naming it or the location. [16] Gulf Today (AP) reports a separate UKMTO alert for a vessel struck south of Iran’s Lavan island. [14] UKMTO’s weekly overview says 59 of 81 projectile strikes since July 6 were on the southern route. Reported by World Ports Organization. [13]

Cyber & Doxxing Risk to Principals

• DHS personnel leak: SITE Intelligence Group found posts on Instagram, Threads and X calling for officers named in the leak of about 41,000 DHS workers to be killed and their families harmed. An account tied to an anarchist movement in Colorado posted details on five DHS employees in one city. Reported by The Washington Post. [24]

  • Action: If staff or contractors appear in any leaked dataset, check their home addresses and social accounts for exposure and tighten protection for their families.

• CISA: On Oct. 30 CISA added two actively exploited Ivanti Connect Secure flaws (CVE-2026-111357 and CVE-2026-118527) to its Known Exploited Vulnerabilities catalog. [25] Make sure IT has patched any Ivanti VPNs that executives use for remote access.

Severe Weather

• New York City: Sunny today, with a high near 60°F and a northwest wind of 6–12 mph. Tonight is partly cloudy with a low around 47°F, which is good weather for the Halloween Parade. [35]

• Northeast: A Frost Advisory covers parts of southern New Jersey and southeastern Pennsylvania until 16:00 ET. There are no other active alerts for New York, New Jersey or Connecticut. [33]

• U.S. West: Flood watches cover much of Arizona, southern Nevada, southern Utah, northwest New Mexico and southwest Colorado, with winter storm watches in Colorado’s San Juan Mountains and Nevada’s Ruby Mountains. [34]

• Florida: Coastal Flood Warnings cover the Upper and Middle Keys until 12:00 ET and eastern Putnam County until 16:00 ET, and a Flood Warning covers parts of Lake and Volusia counties. [34]

• Tropics: No tropical cyclones are expected in the Atlantic, Caribbean or Gulf in the next seven days. [36] In the Pacific, a low southeast of Hawaii has a 40% chance of forming over the next seven days. [37]

Tradecraft Tip (general guidance, not tailored advice)

Halloween crowds hide people. Plan for it. Costumes and masks make it hard to spot a known person of concern or tell a reveler from a threat, and tonight brings protests in Paris and parades in New York. For any principal out tonight:

1. Set a clear rule for faces. Anyone approaching the principal at close range should be visible and recognizable. Staff at private events should check guests at the door with masks off.

2. Watch hands, not costumes. Bulky costumes and props can conceal weapons. Focus on hands, bags and body language.

3. Pick the route away from the crowd. Know where parade routes, marches and closures are, and plan arrival and departure on the far side.

4. Hold a rally point. In dense crowds, phones may fail. Agree on a fixed meeting place and time before you go in.

5. Leave early. Trouble around big events tends to build after dark. Plan to be clear before the crowd disperses.

Coming Up

• Today, Oct. 31: Paris marches on the Bagnolet–Charenton route, with the Paris curfew from 23:00 local (18:00 ET). [1][4] London’s Palestine Action rally at 13:00 local (09:00 ET). [6][8] NYC’s Village Halloween Parade runs up Sixth Avenue from King Street to West 15th Street, 19:00–23:00. [38]

• Mon. Nov. 2: Detention hearing for Anthony Palazzolo in Michigan. [17][18]

• Tue. Nov. 3: The earliest date for Renfe’s alternative Madrid–Andalucía plan. [26]

Sources

1. franceinfo, “Mobilisation du 31 octobre : le Conseil d’État confirme l’interdiction du parcours Bastille-Nation à Paris,” Oct. 31 — https://www.franceinfo.fr/societe/manifestations/mobilisation-du-31-octobre-le-conseil-d-etat-confirme-l-interdiction-du-parcours-bastille-nation-a-paris_8261612.html

2. franceinfo (AFP), “Le Conseil d’Etat donne raison à Laurent Nuñez et valide le parcours entre les portes de Bagnolet et de Charenton,” Oct. 31 — https://www.franceinfo.fr/societe/manifestations/le-conseil-d-etat-donne-raison-a-laurent-nunez-et-valide-le-parcours-entre-porte-de-bagnolet-et-porte-de-charenton-pour-la-manifestation-du-31-octobre-a-paris_8261531.html

3. Le Figaro (AFP), “Manifestation du 31 octobre : le Conseil d’État annule la décision du tribunal administratif de Paris,” Oct. 31 — https://www.lefigaro.fr/actualite-france/manifestation-du-31-octobre-le-conseil-d-etat-annule-la-decision-du-tribunal-administratif-de-paris-le-parcours-bastille-nation-est-interdit-20261031

4. France 24 (AFP), “Acte III de la mobilisation sociale : la crainte d’un nouveau 17 octobre,” Oct. 31 — https://www.france24.com/fr/info-en-continu/20261031-acte-iii-de-la-mobilisation-sociale-la-crainte-d-un-nouveau-17-octobre-le-parcours-bastille-nation-interdit

5. U.S. Embassy London, “Demonstration Alert: Planned Demonstrations in London October 31, 2026,” Oct. 28 — https://uk.usembassy.gov/demonstration-alert-planned-demonstrations-in-london-october-31-2026/

6. Metropolitan Police, “Met issues update ahead of planned Defend Our Juries activity this weekend,” Oct. 30 — https://news.met.police.uk/news/met-issues-update-ahead-of-planned-defend-our-juries-activity-this-weekend-514526

7. The Independent, “Met Police prepared to arrest 400 Palestine Action supporters at US embassy protest,” Oct. 30 — https://www.independent.co.uk/news/uk/home-news/palestine-action-protest-us-embassy-met-police-london-b3076440.html

8. The Standard, “Met Police issue arrest warning for ‘mass’ pro-Palestine Action protest outside US Embassy in London,” Oct. 31 — https://www.standard.co.uk/news/london/palestine-action-protest-london-us-embassy-met-police-b1302955.html

9. Qatar News Agency, “Coalition Says It Intercepted Drone Targeting Riyadh,” Oct. 31 — https://qna.org.qa/en/news/news-details?date=31%2F10%2F2026&id=coalition-says-it-intercepted-drone-targeting-riyadh

10. CNBC TV18 (AFP), “Saudi says intercepted ‘hostile drone’ in Riyadh region,” Oct. 31 — https://www.cnbctv18.com/world/saudi-says-intercepted-hostile-drone-in-riyadh-region-20023980.htm

11. Business Recorder (Reuters), “Saudi-led coalition says it downs drone over oil-rich Eastern Region,” Oct. 31 — https://www.brecorder.com/news/40446795

12. DW, “India news: Tanker carrying 27 Indians attacked in Hormuz,” Oct. 31 — https://www.dw.com/en/india-news-oil-tanker-carrying-27-indians-attacked-with-limpet-mines-in-strait-of-hormuz/live-79814329

13. World Ports Organization, “Tanker Hit by Limpet Mines in Strait of Hormuz as New Threat to Shipping Emerges,” Oct. 31 — https://www.worldports.org/tanker-hit-by-limpet-mines-in-strait-of-hormuz-as-new-threat-to-shipping-emerges/

14. Gulf Today (AP), “Four tankers catch fire in Strait of Hormuz,” Oct. 31 — https://www.gulftoday.ae/news/2026/10/31/four-tankers-catch-fire-in-strait-of-hormuz

15. Mehr News Agency, “Fourth tanker explodes after hitting mine in Hormuz Strait,” Oct. 31 — https://en.mehrnews.com/news/249039/4th-violating-tanker-catches-fire-in-Hormuz-IRGC-Navy

16. Anadolu Agency, “Tanker struck by unidentified projectile in Strait of Hormuz: UK maritime agency,” Oct. 31 — https://www.aa.com.tr/en/middle-east/tanker-struck-by-unidentified-projectile-in-strait-of-hormuz-uk-maritime-agency/4107027

17. New Media Detroit, “Chesterfield Township Man Charged With Threatening To Kill FBI Director Kash Patel And Associate,” Oct. 30 — https://newmediadetroit.com/chesterfield-township-man-charged-with-threatening-to-kill-fbi-director-kash-patel-and-associate/

18. Deadline Detroit, “Macomb Man Charged With Threatening to Kill FBI Director Kash Patel,” Oct. 30 — https://www.deadlinedetroit.com/articles/35278/macomb_man_charged_with_threatening_to_kill_fbi_director_kash_patel

19. ClickOnDetroit (WDIV), “Macomb County man accused of threatening to kill FBI Director Kash Patel,” Oct. 31 — https://www.clickondetroit.com/news/local/2026/10/31/macomb-county-man-accused-of-threatening-to-kill-fbi-director-kash-patel/

20. WDAM, “Georgia man charged after authorities say he threatened Forrest County officials,” Oct. 30 — https://www.wdam.com/2026/10/31/georgia-man-charged-after-authorities-say-he-threatened-forrest-county-officials/

21. Australian Federal Police, “NSW man charged over alleged threats targeted at federal parliamentarian,” Oct. 30 — https://www.afp.gov.au/news-centre/media-release/nsw-man-charged-over-alleged-threats-targeted-federal-parliamentarian

22. U.S. Embassy Santo Domingo, “Security Alert: U.S. Embassy Santo Domingo, Dominican Republic (October 30, 2026),” Oct. 30 — https://do.usembassy.gov/security-alert-u-s-embassy-santo-domingo-dominican-republic-october-30-2026/

23. U.S. Mission Mexico, “Security Alert: Update - Law Enforcement Activity in the City of Matamoros,” Oct. 30 — https://mx.usembassy.gov/security-alert-update-law-enforcement-activity-in-the-city-of-matamoros/

24. The Washington Post, “Hack of Homeland Security workers’ data fuels violent rhetoric online,” Oct. 30 — https://www.washingtonpost.com/immigration/2026/10/30/hack-homeland-security-workers-data-fuels-violent-rhetoric-online/

25. CISA, “CISA Adds Two Known Exploited Vulnerabilities to Catalog,” Oct. 30 — https://www.cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog

26. Renfe, “El PAT previsto para mañana en la línea Madrid-Andalucía no se podrá realizar,” Oct. 29 — https://grupo.renfe.com/es/es/sala-de-prensa/noticias/2026/10/suspension-pat-madrid-andalucia

27. Telemadrid (Europa Press), “El servicio de alta velocidad entre Madrid y Sevilla está completamente suspendido por tiempo indefinido,” Oct. 31 — https://www.telemadrid.es/noticias/nacional/servicio-alta-velocidad-madrid-sevilla_1_2785314.html

28. La Vanguardia, “Sin opciones para ir y volver de Andalucía este puente,” Oct. 31 — https://www.lavanguardia.com/vida/20261031/11672481/opciones-volver-andalucia-puente.html

29. ENCLM, “Última hora del accidente de tren: se reanudan los trabajos en Urda, 34 hospitalizados y se mantienen 69 fallecidos,” Oct. 31 — https://www.encastillalamancha.es/castilla-la-mancha-cat/toledo/ultima-hora-del-accidente-de-tren-se-reanudan-los-trabajos-en-urda-34-hospitalizados-y-se-mantienen-69-fallecidos/

30. Canal Sur, “Finalizan las autopsias de los 69 fallecidos en Urda,” Oct. 31 — https://www.canalsur.es/noticias/espana/finalizan-autopsias-69-fallecidos-urda_1_1448611.html

31. The Spanish Eye, “When will the Madrid-Andalucia high-speed rail line reopen? Provisional date revealed,” Oct. 31 — https://www.thespanisheye.com/2026/10/31/when-will-the-madrid-andalucia-high-speed-rail-line-reopen-provisional-date-revealed/

32. FAA National Airspace System Status, Oct. 31, 06:05 ET — https://nasstatus.faa.gov/api/airport-status-information

33. National Weather Service, active alerts for NY, NJ and CT, Oct. 31 — https://api.weather.gov/alerts/active?area=NY,NJ,CT

34. National Weather Service, active severe alerts nationwide, Oct. 31 — https://api.weather.gov/alerts/active?severity=Severe

35. National Weather Service New York (OKX), NYC forecast, Oct. 31 — https://api.weather.gov/gridpoints/OKX/33,42/forecast

36. National Hurricane Center, Atlantic Tropical Weather Outlook, Oct. 31, 02:00 EDT — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

37. National Hurricane Center, Eastern North Pacific Tropical Weather Outlook, Oct. 30, 23:00 PDT — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

38. NYC Village Halloween Parade, “Watch,” Oct. 31 event page — https://halloween-nyc.com/watch/

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• France, Paris march route: The Paris administrative court on Friday evening suspended the police ban on the organizers’ Bastille–Nation route for Saturday’s main march. Interior Minister Laurent Nuñez says the state will appeal to the Conseil d’État, which could rule overnight. [1][2]

• France, Paris curfews: Police have ordered a 23:00–06:00 curfew around République and Châtelet-Les Halles on the nights of Oct. 31–Nov. 1 and Nov. 1–2. [3][4]

• Strait of Hormuz: Oman’s navy evacuated 25 crew from the Panama-flagged vessel RITI after it was targeted and caught fire off Musandam. [5][6][7]

• Saudi Arabia: The Saudi-led coalition says it intercepted a Houthi ballistic missile aimed at the south and a drone over the Riyadh region on Friday. [8][9]

• London, Saturday: The Met warns that anyone joining Saturday’s pro-Palestine Action protest outside the US Embassy faces arrest. [10][11][12]

Europe

• France, Paris (follow-up to this morning’s route dispute): The court ruled late Friday against the police ban, which had moved the march to a Porte de Bagnolet–Porte de Charenton route. BFMTV, citing AFP, reports that the court found the prefect gave “no figures” to justify the ban. [1][2] Nuñez said the appeal is needed because of the damage done on Oct. 17. RTL says the Conseil d’État normally has 48 hours but could meet overnight. [1] The student union Unef says the march starts at 14:00 Saturday. [1][2]

  • Action: Plan for either route until the Conseil d’État rules. Keep principals clear of Bastille, Nation and the boulevards between them from late morning Saturday, and check the ruling before moving.

• France, Paris curfews: The police order covers the République and Châtelet-Les Halles areas. Residents, workers who must cross the area and emergency staff are exempt. [3][4] A separate 21:00–06:00 curfew for minors runs in many Paris sectors from Friday night until Monday morning, Nov. 2. [4]

  • Action: Route evening movements around République and Les Halles all weekend, and have staff carry proof of address or work if they must cross.

• United Kingdom, London: Defend Our Juries plans to rally outside the US Embassy in Battersea on Saturday, Oct. 31, and says about 400 people have signed up. Its briefing says the protest starts at 13:00. [11][12] Commander Adam Slonecki says that not only sign holders but also organizers and anyone giving logistical support should expect arrest. [10]

  • Action: Avoid Nine Elms and the embassy area Saturday afternoon, and expect police cordons and delays.

Middle East

• Strait of Hormuz (new incident): Oman’s Maritime Security Centre says the Royal Oman Navy evacuated 25 crew from RITI, a Panama-flagged vessel that was targeted and caught fire off Musandam. The crew received medical care. [5][6] MarineTraffic lists it as a crude oil tanker, Al Jazeera reports. [7]

  • Where sources differ: Iran International puts the vessel 1.6 nautical miles off the coast, while Dawn quotes the statement as saying about 106 nautical miles. [5][6]

  • The IRGC says three oil tankers on “unauthorised routes” were halted after “incidents” or mines. It is unclear whether RITI was one of them. [7] Unconfirmed.

• Strait of Hormuz (follow-up to this morning): Reuters, citing three maritime security sources, now also names the tanker hit Thursday night as the Panama-flagged Louise 1 and says limpet mines were used, as reported by Iran International. With Seatrade’s report this morning, the ship’s name now has two sources. [5]

  • Action: Keep sea transfers in the Gulf to a minimum.

• Saudi Arabia (follow-up): Coalition spokesman Maj. Gen. Turki al-Maliki said air defenses destroyed a Houthi ballistic missile fired toward the southern region and a drone in the Riyadh region. [8][9] The coalition did not say where the drone came from, Anadolu reports. [9]

  • Action: In Riyadh and southern Saudi Arabia, keep principals indoors and away from windows when phone alerts sound.

Aviation

• FAA (checked 1808 ET): LaGuardia (LGA) has delays of 16–30 minutes because of staffing, and they are increasing. No Washington or LA-area delays were listed. Phoenix (PHX) has a ground delay for thunderstorms averaging 40 minutes, and Las Vegas (LAS) has storm delays of 31–45 minutes. [13]

Sources

1. RTL (French), updated Oct. 30, 19:20 — https://www.rtl.fr/actu/politique/manifestation-du-31-octobre-le-parcours-bastille-nation-finalement-autorise-a-paris-par-le-tribunal-administratif-7900690956

2. BFMTV (French, with AFP), Oct. 30, 18:52 — https://www.bfmtv.com/police-justice/manifestation-du-31-octobre-a-paris-la-justice-autorise-le-parcours-reliant-bastille-a-nation-propose-par-les-organisateurs-laurent-nunez-annonce-que-la-prefecture-va-faire-appel_AD-202610300800.html

3. BFMTV (French, with AFP), Oct. 30, 12:22 — https://www.bfmtv.com/paris/manifestations-a-paris-un-couvre-feu-instaure-ce-week-end-a-republique-et-a-chatelet_AD-202610300455.html

4. actu.fr (French), Oct. 30 — https://actu.fr/ile-de-france/paris_75056/le-couvre-feu-de-retour-dans-certains-quartiers-de-paris-pour-tout-le-week-end-de-la-toussaint_64994461.html

5. Iran International, updated Oct. 30, 15:27 GMT — https://www.iranintl.com/en/202610307239

6. Dawn, updated Oct. 30 — https://www.dawn.com/news/2040966/25-crew-members-rescued-from-tanker-attacked-off-the-coast-of-oman-maritime-security-centre

7. Al Jazeera, Oct. 30 — https://www.aljazeera.com/news/2026/10/30/oman-rescues-25-from-burning-oil-tanker-in-strait-of-hormuz

8. Middle East Eye, Oct. 30, 16:37 GMT — https://www.middleeasteye.net/live-blog/live-blog-update/saudi-led-coalition-says-it-intercepted-houthi-drone-near-riyadh

9. Middle East Monitor (Anadolu), Oct. 30 — https://www.middleeastmonitor.com/20261030-saudi-led-coalition-intercepts-houthi-ballistic-missile-drone-near-riyadh/

10. Metropolitan Police, Oct. 30 — https://news.met.police.uk/news/met-issues-update-ahead-of-planned-defend-our-juries-activity-this-weekend-514526

11. The Independent, Oct. 30 — https://www.independent.co.uk/news/uk/home-news/palestine-action-protest-us-embassy-met-police-london-b3076440.html

12. Evening Standard, Oct. 30 — https://www.standard.co.uk/news/london/palestine-action-protest-london-us-embassy-met-police-b1302955.html

13. FAA National Airspace System Status (checked 1808 ET Oct. 30) — https://nasstatus.faa.gov/api/airport-status-information

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Saudi Arabia, western region: The Saudi-led coalition says it intercepted and destroyed a Houthi cruise missile fired toward the western region early Friday. Saudi authorities also say a drone headed for the Mecca region was shot down Friday morning. [1][2][3] A Houthi spokesman denies targeting Mecca and says the group carried out no operation into Saudi territory today. [1][2] Thursday’s Riyadh intercepts left debris that lightly injured one citizen and damaged a house and a vehicle. [2][4]

• Strait of Hormuz: UKMTO says a small boat attached two explosive devices to a tanker’s hull on Thursday, about 25 nautical miles northeast of Khasab, Oman. The blasts started an engine-room fire. The fire is out, the crew is safe and the ship is continuing its voyage. It is unclear who carried out the attack. [7][8][9]

• France, Oct. 31: Interior Minister Laurent Nuñez is mobilizing about 70,000 police and gendarmes for about 180 protests Saturday and calls the risk of unrest “very high.” [21] In Paris, the unions and the police prefecture still disagree on the route, and the unions have gone to court. [21][22][23]

• Israel: Coalition talks have started with no bloc at 61 seats. The Central Elections Committee will certify the results and submit them to President Isaac Herzog next Wednesday, Nov. 4, and the new Knesset is due to be sworn in Nov. 10. [10][11][12]

• Spain rail: Renfe has dropped its alternative Madrid–Andalucía plan for today. The drivers’ union SEMAF insisted on the required 96 hours’ notice for changing crew schedules, so the plan cannot start before Tuesday, Nov. 3. The Urda toll stands at 69. [16][17]

For solo operators: Saudi Arabia now reports Houthi launches toward the west, including the Mecca region, so don’t treat Jeddah or Mecca as outside the threat area. Confirm shelter options at any western Saudi hotel, and don’t film intercepts: the U.S. Mission says Americans have been detained for doing so. [1][5] If you are in Paris on Saturday, stay clear of the Bastille–Concorde axis from 14:00 local (09:00 ET). [22][23] For corporate security teams: Briefing items for leadership:

1. The U.S. ordered departure from Saudi Arabia (effective Oct. 23) remains in place, and the Oct. 28 Mission alert is the latest one we found. USG staff need Chief of Mission authorization to use any Saudi airport. [5]

2. The Hormuz attack adds a new method: explosives attached to a ship’s hull from a small boat. Review any crew or cargo plans that route through the strait. [7][8][9]

3. Spain: there is still no high-speed rail between Madrid and Andalucía, and no alternative plan before Nov. 3. SEMAF has called more strikes for Nov. 10 and 12. Book air or road for Seville and Málaga trips. [16][17]

4. DHS is trying to get the leaked database of more than 40,000 personnel taken offline, but the data is back online at a new address. Assume any exposure is permanent. [26][27][28]

Threats to Executives & Public Figures

• France, Trappes attack: Kévin T., 39, was charged by anti-terror judges Thursday with murder and attempted murder linked to a terrorist enterprise, with a racist aggravating circumstance. He is now in pretrial detention. [13][14][15] RTL, citing the Nanterre prosecutor, reports that he had been arrested on Oct. 20 in Levallois-Perret, three days before the attack, over an assault on a driver at a gas station. [15] Reported by RTL (AFP).

  • Action: Expect heavy security at Trappes memorial events and at sites linked to the case. Keep principals’ visits to the area short and low-profile.

• Serbia, Belgrade embassy attack: The Organised Crime Prosecutor’s Office says the Oct. 28 attack outside the Israeli Embassy, at about 01:30 local, can be classed as a terrorist attack. It has ordered steps to identify the attacker, his motive and any links to terrorist groups. Serbia raised its terrorism threat level to the maximum and stepped up police at key sites. [18] Mondo and Informer report that the attacker’s mother and stepfather were detained after the attack. [19][20] Unconfirmed: officials have not announced any detentions.

  • Where sources disagree: The Belgrade prosecutor described the attacker as a minor, per Tanjug. [18] Our Oct. 29 brief, citing Novosti, gave his age as 18.

  • Action: Expect a strong police presence at Israeli, Jewish and diplomatic sites in Serbia. Have principals use the main entrances and follow guard instructions.

Travel Advisories & Hotspots

• Saudi Arabia: Al Jazeera, citing AFP and Reuters, reports Saudi authorities said a drone headed for the Mecca region was intercepted Friday morning. Coalition spokesman Turki al-Maliki said a cruise missile aimed at the western region was destroyed. [1][3] The Oct. 28 U.S. Mission alert says RUH is partly reopened for domestic and some international flights on national carriers, with some flights moved to Qassim (ELQ). JED and DMM are operating with delays and cancellations. All land borders, including the King Fahd Causeway to Bahrain, are open, and the airports in Bahrain, Jordan, Oman, Qatar and the UAE are operating. [5]

  • Where sources disagree: Saudi authorities say the drone was heading for the Mecca region. [1][2] Houthi spokesman Yahya Saree says the group carried out “no operation” into Saudi territory today, and that it targets oil facilities and military bases. [2]

  • Action: For Jeddah or Mecca-region trips, confirm each flight on the morning of travel and keep a road route or alternate airport ready. Turn on Civil Defense phone alerts.

• Strait of Hormuz and the Gulf: Seatrade Maritime reports that the attack happened at 22:12 UTC (18:12 ET) Thursday, above the waterline on the port side, and that maritime security firm Vanguard Tech identifies the ship as the Panama-flagged tanker Louise 1. Seatrade also reports a second UKMTO report: a ship on an outbound transit near Oman was hit by an unknown projectile at 16:00 UTC (12:00 ET) Thursday. [9] Reported by Seatrade Maritime; the ship’s name and the second incident are Unconfirmed by a second source. Iran’s claim that four tankers were hit, noted in our Oct. 29 evening update, remains Unconfirmed; we found no new reporting on it.

  • Action: Keep sea transfers in the Gulf to a minimum. If principals must travel by water, use vessels with a security watch and stay in contact with UKMTO reporting.

• Kuwait: The Kuwait Army says some units will hold live-fire exercises in the northwest of the country from Friday, Oct. 30, to Nov. 3. [6][24]

  • Action: During those dates, treat loud blasts in northwest Kuwait as possible drills, but check official channels before you dismiss them.

• Spain, Urda (Toledo) rail collision: The death toll is 69. Spain’s independent accident investigation authority (AITAT) had published a figure of 74, then corrected it to 69 on Thursday afternoon. Forty-eight autopsies are done and five identifications have been given to families. [16][25]

  • Where sources disagree: Diario Sabemos reports 42 people still hospitalized as of Thursday afternoon. [25] RTVE reports more than 50 still in hospital, 15 of them in very serious condition, and says the Guardia Civil has 67 missing-person reports. [29] Our Oct. 29 evening update, citing the regional president, said 50 remained in hospital.

  • Action: Avoid the Urda site and Toledo hospitals, which have heavy official and media traffic.

• Israel: CNBC reports that the results may still see “minor corrections” before certification. Parties can challenge them until Nov. 18, and Herzog will consult the parties next week. The leader he picks gets 28 days to form a coalition, which can be extended by 14 days. [10] The Jerusalem Post reports that Netanyahu met Ben-Gvir and Smotrich on Thursday. Eisenkot accuses Likud of trying to undermine the legitimacy of the results and says he will not allow any change to the timetable for the swearing-in. [12] The National says another election early next year is possible. [11]

  • Action: Expect protests and tense crowds around party headquarters, the President’s Residence and the Knesset as talks go on. Keep principals clear of those sites.

Civil Unrest in Business Hubs

• France, Oct. 31: Franceinfo reports that the RAID unit will protect exposed public buildings Saturday. [21] Seven unions filed an emergency court petition (référé) Thursday, asking the police prefecture to publish its partial ban on protests in central Paris by Friday 12:00 Paris time (07:00 ET), so they have time to challenge it. [23] The unions want a Bastille–Nation route from 14:00. The prefecture proposed Porte de Bagnolet–Porte de Charenton, on the edge of the city, and the unions reject it. [21][22][23] Paris Police Prefect Patrice Faure says the outer route keeps marches out of the city centre and helps prevent property damage. He says the usual République–Bastille–Nation route can’t be used “for a time” because of the attack risk and to let shops operate. [23] Reported by France 24 (AFP), citing Le Parisien. The Yellow Vests have filed a Bastille–Concorde route via République, Opéra and Madeleine from 14:00, ending opposite the Assemblée nationale, and student groups plan to join it. [22]

  • Action: Keep Saturday movements in central Paris to a minimum, especially Bastille, République, Opéra, Madeleine, Concorde and the Assemblée nationale. Check the final prefecture order Friday afternoon before locking routes.

• NYC, Village Halloween Parade (Sat. Oct. 31): The parade runs from 19:00 to about 23:00 along Sixth Avenue. Time Out, citing NYC DOT’s preliminary list, reports closures on Sixth Avenue from Spring Street to West 18th Street, staging on Sixth Avenue from Canal to Spring, and crowd dispersal on West 16th–18th Streets between Fifth and Seventh Avenues. Fifth and Seventh Avenues will be closed between 14th and 19th Streets. The heaviest crowds are expected between Bleecker and 14th Streets. [30] Reported by Time Out.

  • Action: Plan Saturday-evening routes in Lower Manhattan around Sixth Avenue. Use the subway or approach from the east or west, and set pickup points outside the closure zone.

Aviation & Transport

• U.S. airspace: As of 06:02 ET, the FAA listed no delays at major New York, Washington or Los Angeles airports. SNA (Orange County, CA) is closed nightly from 23:30 to 06:15 PDT through Oct. 31. Aspen (ASE) is closed except for life-flight and search-and-rescue helicopters until 09:00 ET. Non-scheduled transient general aviation needs prior permission (PPR) at LAX, SAN and LAS. [31]

  • Action: For charters into LAS, LAX or SAN, confirm the PPR slot before wheels-up.

• Spain rail: Renfe says the alternative Madrid–Andalucía plan announced for Friday will not run, because SEMAF demanded strict compliance with the 96-hour notice period for changing crew schedules. The plan cannot start before Tuesday, Nov. 3. [17] EFE reports that SEMAF has called further strikes for Nov. 10 and 12. [16] This corrects our Oct. 29 brief, which said the plan would start Friday.

  • Action: Move Madrid–Seville/Málaga trips to air or road through at least Nov. 3, and flag Nov. 10 and 12 for possible strike disruption.

Cyber & Doxxing Risk to Principals

• DHS “Icepick” leak: DHS, through its contractor ZeroFox, asked Icelandic host FlokiNET to take down the leaked data. DHS says “more than 40,000 identifiable individuals” are at risk of harassment, stalking and physical harm. FlokiNET’s CEO refused. [26] The domain registrar CentralNic put the icepick search site on “serverHold,” but the site came back under another domain. [26][27][28] TechCrunch reports that Bluesky is blocking links to the data. [28] NHK puts the exposure at more than 41,000 employees and contractors. [32]

  • Action: If your team includes former DHS, ICE or CBP staff, treat their exposure as permanent. Remove home addresses from data brokers, lock their phone numbers against port-out, and brief families on pretext calls.

• CISA KEV: On Oct. 29, CISA added CVE-2026-97229 (an integer overflow in GitLab Community and Enterprise Edition) and CVE-2026-76418 (a NULL pointer dereference in Cisco Secure Firewall ASA and FTD software) to its Known Exploited Vulnerabilities catalog. [33]

  • Action: Have IT confirm patch status on Cisco ASA/FTD firewalls and self-hosted GitLab. These sit at the edge of networks that protect principal and travel data.

Severe Weather

• NYC/NY/NJ/CT: NWS Upton warns of an elevated risk of fire spread across the Lower Hudson Valley (Orange, Putnam, Rockland and Westchester counties) and southern Connecticut from late morning through afternoon today. It cites dry fuels, northwest gusts of 20–30 mph and humidity near 40%. NWS Albany, Binghamton (Sullivan County) and Boston issued similar statements for the rest of the Hudson Valley, northwest Connecticut and southern New England. The statements run until about 18:00. There are no other NWS alerts for the three states. [34] NYC today: sunny, high near 69°F, falling to around 64°F in the afternoon, with west winds of 10–16 mph gusting to 26. Tonight: mostly clear, low around 49°F. Saturday: sunny, high near 61°F. Saturday night (Halloween parade): partly cloudy, low around 44°F. [36]

  • Action: Don’t allow outdoor burning or smoking at country residences or event sites today, and make sure vehicles don’t idle on dry grass.

• Southwest and Southern Plains: Moisture from the remnants of Vance is feeding Flood Watches for the Phoenix, Tucson and Flagstaff/Grand Canyon areas through 05:00 MST Nov. 2, and for northwest New Mexico and Colorado’s San Juan Mountains through 12:00 MDT Nov. 2. In Texas and New Mexico, Flood Watches cover the South Plains around Lubbock until 20:00 CDT, Eddy and Lea counties (NM) until 18:00 MDT, the Rio Grande counties from Val Verde to Maverick until 13:00 CDT and the San Angelo area until 16:00 CDT. Flash Flood Warnings cover Ector and Midland counties (TX) until 07:15 CDT and Jefferson County (KS) until 06:00 CDT. [35]

• Elsewhere in the U.S.: Coastal Flood Warnings for the Florida Keys until 23:00 today and for northeast Florida until 05:00 Saturday, plus Flood Warnings for Lake and Volusia counties (FL). Freeze Watches cover western Oregon valleys and southwest Washington lowlands until 09:00 PDT Saturday. In Alaska, there are high wind warnings (including Anchorage Hillside/Eagle River), marine storm warnings and a Winter Storm Warning for the northern Susitna Valley until 14:00 AKDT. [35]

• Tropics: NHC issued its final advisory on the remnants of Vance at 20:00 MST Thursday (23:00 ET). The remnants were about 190 miles south-southwest of Mazatlán with 30 mph winds. Rain of 1–2 inches, with isolated totals over 4 inches on the Sinaloa coast, was expected into early Friday. NHC says the moisture will raise the flash-flood threat in the U.S. Southwest and Southern Plains. [37] No Atlantic formation is expected over the next 7 days. In the Eastern Pacific, a low well southeast of Hawaii has a 30% chance of forming over 7 days. [38][39]

  • Action: For Phoenix, Tucson or West Texas moves this weekend, avoid low-water crossings and allow extra drive time.

Tradecraft Tip (general guidance, not tailored advice)

When the threat area expands, update the map before the trip, not during it. Friday’s Mecca-region drone shows how quickly a “safe” part of a country can become a target. Before any trip to a region under threat:

1. Re-draw the risk zones. Check the latest embassy alert and recent strike reports, and don’t rely on last week’s assumptions about which cities are safe.

2. Pre-plan shelter. For each hotel, office and venue, know where the nearest interior room or shelter is and how long it takes to reach it.

3. Set up alerts. Turn on local civil-defense phone alerts and confirm each team member gets them.

4. Keep the camera down. Photographing intercepts or debris can get people detained in some countries. Brief principals and staff before arrival.

5. Hold two exits. Know a second airport or land border, and the documents and drive time each one needs.

Coming Up

• Today, Oct. 30: The unions want the Paris prefecture’s protest order published by 12:00 Paris (07:00 ET). [23] Elevated fire-spread risk in the Lower Hudson Valley and southern Connecticut until about 18:00. [34] Kuwait’s live-fire drills begin. [6][24]

• Sat. Oct. 31: France’s national day of protest, with Paris marches from 14:00 local (09:00 ET). [21][22][23] NYC’s Village Halloween Parade runs 19:00–23:00. [30]

• Further out: Israel’s results go to President Herzog Nov. 4, and the Knesset is sworn in Nov. 10. [10] Renfe’s Andalucía plan cannot start before Nov. 3. [17]

Sources

1. Al Jazeera (AFP/Reuters), “Saudi Arabia reports interception of Houthi drone targeting Mecca,” Oct. 30 — https://www.aljazeera.com/news/2026/10/30/saudi-arabia-reports-interception-of-houthi-drone-targeting-mecca

2. Euronews Arabic, Saudi interception of a drone and cruise missile headed toward Mecca and Houthi denial, Oct. 30 — https://arabic.euronews.com/2026/10/30/saudi-arabia-announces-the-interception-of-a-drone-and-a-cruise-missile-headed-toward-mecc

3. Anadolu Agency, “Saudi-led coalition intercepts Houthi cruise missile targeting western Saudi Arabia,” Oct. 30 — https://www.aa.com.tr/en/middle-east/saudi-led-coalition-intercepts-houthi-cruise-missile-targeting-western-saudi-arabia/4105545

4. Anadolu Agency, “Saudi citizen injured in Riyadh by falling debris from intercepted Houthi ballistic missiles: Civil Defense,” Oct. 30 — https://www.aa.com.tr/en/middle-east/saudi-citizen-injured-in-riyadh-by-falling-debris-from-intercepted-houthi-ballistic-missiles-civil-defense/4105525

5. U.S. Mission to Saudi Arabia, Security Alert, Oct. 28 — https://sa.usembassy.gov/security-alert-u-s-mission-to-saudi-arabia-october-28-2026/

6. Kuwait Times (KUNA), “Kuwait Army units to hold live-fire drills in northwest Kuwait from Oct 30 to Nov 3,” Oct. 29 — https://kuwaittimes.com/article/52623/kuwait/army-units-to-hold-live-fire-drills-in-northwest-kuwait-from-oct-30-to-nov-3/

7. Baird Maritime (Reuters), “Boat with explosives rams tanker in Strait of Hormuz,” Oct. 30 — https://www.bairdmaritime.com/security/incidents/boat-with-explosives-rams-tanker-in-strait-of-hormuz

8. Arab News (Reuters), “Fire-hit tanker continues journey after being attacked in Strait of Hormuz, UKMTO says,” Oct. 30 — https://www.arabnews.com/middle-east/fire-hit-tanker-continues-journey-after-being-attacked-in-strait-of-hormuz-ukmto-says-3008930

9. Seatrade Maritime, “Tanker catches fire in Hormuz after explosives attached to hull,” Oct. 30 — https://www.seatrade-maritime.com/security/tanker-catches-fire-in-hormuz-after-explosives-attached-to-hull

10. CNBC, “Israel faces weeks of coalition haggling as Netanyahu’s party claims election ‘stolen’,” Oct. 29, 23:28 ET — https://www.cnbc.com/2026/10/30/israel-election-netanyahu-eisenkot-coalition-talks-.html

11. The National, “Israeli parties begin coalition talks with all votes counted,” Oct. 29 — https://www.thenationalnews.com/news/mena/2026/10/29/israeli-parties-begin-coalition-talks-with-all-votes-counted/

12. The Jerusalem Post, Eisenkot accuses Likud of undermining election legitimacy, Oct. 30 — https://www.jpost.com/israel-election-2026/article-913339

13. BFMTV, “Attentat raciste dans les Yvelines: le suspect Kévin Tessier mis en examen et placé en détention provisoire,” Oct. 29 — https://www.bfmtv.com/police-justice/attentat-raciste-dans-les-yvelines-le-suspect-kevin-t-mis-en-examen_AN-202610290622.html

14. Franceinfo, Trappes suspect placed in pretrial detention, Oct. 29, 22:03 Paris — https://www.franceinfo.fr/faits-divers/terrorisme/attentat-raciste-a-trappes/kevin-teissier-l-assaillant-de-l-attentat-raciste-dans-les-yvelines-est-place-en-detention-provisoire_8259476.html

15. RTL (AFP), “Attaque terroriste raciste de Trappes : le suspect … avait été interpellé trois jours avant les faits,” Oct. 29, 23:06 Paris — https://www.rtl.fr/actu/justice-faits-divers/attaque-terroriste-raciste-de-trappes-le-suspect-place-en-detention-provisoire-avait-ete-interpelle-trois-jours-avant-les-faits-7900688121

16. EFE, Renfe users and the Madrid–Andalucía high-speed line, Oct. 29 — https://efe.com/espana/2026-10-29/renfe-usuarios-ave-madrid-andalucia/

17. Renfe, press release on suspension of the Madrid–Andalucía alternative transport plan, Oct. 29 — https://grupo.renfe.com/es/es/sala-de-prensa/noticias/2026/10/suspension-pat-madrid-andalucia

18. Tanjug, “Prosecutor orders measures aimed at identifying attacker on Israeli embassy, probing terrorism ties,” Oct. 29 — https://www.tanjug.rs/english/politics/293642/prosecutor-orders-measures-aimed-at-identifying-attacker-on-israeli-embassy-probing-terrorism-ties/vest

19. Mondo (Serbian), reconstruction of the attacker’s movements, Oct. 29 — https://mondo.rs/Info/Crna-hronika/a2303427/rekonstrukcija-kretanja-teroriste-ko-je-pomogao-dariju-da-dodje-do-beograda.html

20. Informer (Serbian), Belgrade terrorist attack, Oct. 29 — https://informer.rs/hronika/vesti/1165107/beograd-teroristicki-napad-dario-nikolic

21. Franceinfo, live coverage of the Oct. 31 protests, Oct. 30, 07:47 Paris — https://www.franceinfo.fr/societe/manifestations/direct-manifestations-du-31-octobre-le-parcours-du-defile-parisien-objet-d-un-bras-de-fer-entre-les-syndicats-et-les-autorites_8259785.html

22. France 3 Paris Île-de-France, what we know about the Oct. 31 protest in Paris, Oct. 30, 06:15 Paris — https://france3-regions.franceinfo.fr/paris-ile-de-france/manifestation-du-31-octobre-a-paris-parcours-declares-interdictions-dispositif-de-securite-ce-que-l-on-sait-sur-la-mobilisation-contre-la-vie-chere-3441171.html

23. France 24 (AFP), “Mobilisation du 31 octobre : le parcours à Paris contesté devant la justice par les syndicats,” Oct. 30, 09:15 Paris — https://www.france24.com/fr/france/20261030-mobilisation-du-31-octobre-le-parcours-%C3%A0-paris-contest%C3%A9-devant-la-justice

24. Times Kuwait, “Kuwaiti Army to conduct live-fire exercises in northwest Kuwait from October 30,” Oct. 29 — https://timeskuwait.com/kuwaiti-army-to-conduct-live-fire-exercises-in-northwest-kuwait-from-october-30/

25. Diario Sabemos, progress identifying the Urda victims, Oct. 30 — https://diariosabemos.com/nacional/avanza-identificacion-victimas-mortales-accidente-urda_519634_102.html

26. The Guardian, DHS personnel data leak, Oct. 29 (updated Oct. 30) — https://www.theguardian.com/us-news/2026/oct/29/dhs-personnel-data-leak

27. CyberScoop, DHS employee breach and the icepick database takedown, Oct. 29 — https://cyberscoop.com/dhs-employee-breach-icepick-database-takedown/

28. TechCrunch, “Bluesky blocks links to leaked DHS employee data as government seeks takedowns,” Oct. 29 — https://techcrunch.com/2026/10/29/bluesky-blocks-links-to-leaked-dhs-employee-data-as-government-seeks-takedowns/

29. RTVE, first Urda victims identified, Oct. 29 — https://www.rtve.es/noticias/20261029/primeras-victimas-identificadas-accidente-tren-urda-toledo/17288245.shtml

30. Time Out New York, “These are all the NYC Village Halloween Parade street closures to know about this weekend,” Oct. 29 — https://www.timeout.com/newyork/news/these-are-all-the-nyc-village-halloween-parade-street-closures-to-know-about-this-weekend-102926

31. FAA National Airspace System Status, Oct. 30, 06:02 ET — https://nasstatus.faa.gov/api/airport-status-information

32. NHK World, DHS data leak, Oct. 30 — https://www3.nhk.or.jp/nhkworld/news/20261030de68261/

33. CISA, “CISA Adds Two Known Exploited Vulnerabilities to Catalog,” Oct. 29 — https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog

34. National Weather Service, active alerts for NY, NJ and CT, Oct. 30 — https://api.weather.gov/alerts/active?area=NY,NJ,CT

35. National Weather Service, active severe alerts nationwide, Oct. 30 — https://api.weather.gov/alerts/active?severity=Severe

36. National Weather Service New York (OKX), NYC forecast, Oct. 30 — https://api.weather.gov/gridpoints/OKX/33,42/forecast

37. National Hurricane Center, Remnants of Vance Advisory 35, Oct. 29, 20:00 MST — https://www.nhc.noaa.gov/text/MIATCPEP2.shtml

38. National Hurricane Center, Atlantic Tropical Weather Outlook, Oct. 30, 02:00 EDT — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

39. National Hurricane Center, Eastern Pacific Tropical Weather Outlook, Oct. 29, 23:00 PDT — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Saudi Arabia, Riyadh: The Saudi-led coalition says air defenses intercepted two Houthi ballistic missiles fired toward Riyadh on Thursday evening. Civil Defense says falling debris lightly injured one citizen and damaged a house and a vehicle. [1][2][3]

• Israel, final count: The Central Elections Committee has finished counting. Netanyahu’s bloc has 53 seats, Eisenkot’s bloc 48 and the Arab parties 19, so no bloc reaches the 61 needed for a majority. [4][5][6]

• France, Trappes attack: Suspect Kévin Tessier, 39, has been charged by anti-terror judges and placed in pretrial detention. Prosecutors say he admitted planning the attack and targeting people he took to be Muslim or African. [7][8]

• Spain, Urda rail crash: The official death toll is now 69. [9][10][11]

Middle East

• Saudi Arabia (follow-up to this morning’s Eastern Province intercept): Civil Defense issued warnings for Riyadh, Al-Kharj and Najran, then said the danger had passed about 20 minutes later. AFP correspondents reported hearing explosions in the capital. Civil Defense also reminded residents that filming or sharing interceptions or impact sites can bring legal liability. [1][2][3]

  • Claimed, not confirmed: Houthi spokesman Yahya Saree claimed six attacks, including missiles at the Ras Tanura and Rabigh refineries, an Aramco site in Abqaiq and King Khalid International Airport in Riyadh, plus a drone at Dammam’s King Fahd airport. Saudi Arabia has not confirmed these. [12] Unconfirmed.

  • Action: In Riyadh, keep principals indoors and away from windows when phone alerts sound, and don’t let staff photograph intercepts or debris.

• Strait of Hormuz (update to this morning’s brief): UKMTO now says the vessel reported burning north of Khasab, Oman, was a dhow. It caught fire in a maritime security incident, listed and sank, and its crew was evacuated. [13][14] Separately, Iran’s armed forces now say at least four tankers caught fire after hitting mines on an unauthorized route, up from the IRGC’s earlier count of three. [15][16] Unconfirmed: the tankers have not been identified, and only Iranian sources give these numbers.

  • Action: Keep sea transfers in the Gulf to a minimum.

• Israel: Likud is the largest party with 27 seats, ahead of Eisenkot’s Yashar! with 21. Haaretz puts the combined opposition, including the Arab parties, at 67 seats in the 120-member Knesset. [4][5][6]

  • Action: Coalition talks now start. Expect rallies near party headquarters and the Knesset, and keep principals clear of them.

Europe

• France, Trappes (follow-up): At Thursday’s press conference, anti-terror prosecutor Olivier Christen said Tessier admitted premeditation and said he chose Trappes because he called it “a haven for Islamists.” He denies any terrorist intent and said he had no regret. Three victims are still in hospital, one in life-threatening condition. [7][8] Charges include murder and attempted murder linked to a terrorist enterprise, with racist motivation, as well as terrorist conspiracy and possession of a Category A weapon, BFMTV reports. [8]

  • Action: Expect continued police visibility in Paris ahead of Saturday’s national protest day.

• Spain, Urda (follow-up): The investigation authority’s website briefly listed 74 dead before correcting it to 69. The Transport Ministry says the official figures are those of the Castilla-La Mancha government, which reports 69 dead. Regional president Emiliano García-Page says 60 of the 110 injured have gone home and 50 remain in hospital. [9][10] King Felipe VI visited the injured at a Toledo hospital, and Spain’s employment ministry confirmed that former minister Fátima Báñez was among the dead. [11]

  • Where sources differ: RTVE reports that more than 180 people were treated for injuries, compared with the regional count of 110 injured. [9][17]

Aviation

• FAA (checked 1810 ET): Washington Reagan National (DCA) departures are running 16–30 minutes late because of a VIP flyover of the P-56 restricted area. No NYC or LA delays were listed; San Diego (SAN) and Las Vegas (LAS) have departure delays of 16–30 minutes. [18]

Sources

1. Arab News, updated Oct. 30, 00:14 Riyadh — https://www.arabnews.com/saudi-arabia/saudi-air-defenses-shoot-down-houthi-missiles-targeting-riyadh-3008889

2. Anadolu Agency, Oct. 30 — https://www.aa.com.tr/en/middle-east/saudi-citizen-injured-in-riyadh-by-falling-debris-from-intercepted-houthi-ballistic-missiles-civil-defense/4105525

3. Gulf News live (AFP), updated Oct. 29 — https://gulfnews.com/world/mena/middle-east-war-saudi-intercepts-houthi-missile-as-iran-warns-israel-against-strikes-1.500727751

4. Ynetnews, Oct. 29 — https://www.ynetnews.com/article/lzkcj5xqa

5. i24NEWS (Hebrew), Oct. 29 — https://www.i24news.tv/he/news/israel-elections-2026/artc-81364d4f

6. Haaretz, Oct. 29 — https://www.haaretz.com/israel-news/elections/2026-10-29/ty-article/.premium/israel-election-count-completed-these-are-the-final-results/000001a1-88f2-def7-adad-8afabb6f0000

7. franceinfo (French), Oct. 29 — https://www.franceinfo.fr/faits-divers/terrorisme/attentat-raciste-a-trappes/mobile-raciste-autocollants-glorifiant-le-rn-premeditation-ce-qu-il-faut-retenir-de-la-conference-de-presse-du-procureur-antiterroriste-sur-kevin-t-suspect-de-l-attentat-dans-les-yvelines_8258618.html

8. BFMTV (French), Oct. 29 — https://www.bfmtv.com/police-justice/attentat-raciste-dans-les-yvelines-le-suspect-kevin-t-mis-en-examen_AN-202610290622.html

9. EFE (Spanish), Oct. 29 — https://efe.com/espana/2026-10-29/ciaf-cifra-fallecidos-accidente-urda/

10. Europa Press (Spanish), updated Oct. 29, 18:38 — https://www.europapress.es/economia/transportes-00343/noticia-autoridad-investigacion-accidentes-eleva-74-fallecidos-20261029174722.html

11. BBC News live, Oct. 29 — https://www.bbc.com/news/live/cv1j309d4g98t

12. Middle East Eye, Oct. 29, 21:25 GMT — https://www.middleeasteye.net/live-blog/live-blog-update/houthis-claim-six-attacks-saudi-arabia-airports-and-oil-facilities

13. Middle East Eye (UKMTO), Oct. 29, 17:43 GMT — https://www.middleeasteye.net/live-blog/live-blog-update/crew-vessel-sustained-fire-hormuz-evacuated

14. The Intelligent (UKMTO Warning 185-26), Oct. 29 — https://theintelligent.co.uk/international/2026/ukmto-issues-warning-after-dhow-sinks-strait-hormuz

15. Gulf News live, updated Oct. 29 — https://gulfnews.com/world/mena/middle-east-war-saudi-intercepts-houthi-missile-as-iran-warns-israel-against-strikes-1.500727751

16. Tasnim (IRGC statement), Oct. 29 — https://www.tasnimnews.ir/en/news/2026/10/29/3735339/three-oil-tankers-hit-mines-on-unauthorized-route-in-strait-of-hormuz-irgc

17. RTVE (Spanish), updated Oct. 29 — https://www.rtve.es/noticias/20261029/primeras-victimas-identificadas-accidente-tren-urda-toledo/17288245.shtml

18. FAA National Airspace System Status (checked 1810 ET Oct. 29) — https://nasstatus.faa.gov/api/airport-status-information

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Israel, still no majority: With nearly 90% counted, Netanyahu’s bloc has 53 seats, Eisenkot’s bloc 48 and the Arab parties a record 19. A Knesset majority is 61. More than 500,000 double-envelope ballots are being counted, and final results could come Thursday evening. [6][7] Likud claims, without evidence, that Arab parties “stole” the election. Israeli police dismissed the claim, the Guardian reports. [8]

• Saudi Arabia, Eastern Province: The Saudi-led coalition says it intercepted a Houthi ballistic missile fired toward the Eastern Province early Thursday. Civil Defense issued alerts for the Eastern Province and Najran, then lifted them minutes later. [2][3]

• Strait of Hormuz: UKMTO says a vessel is on fire about 9 nautical miles north of Khasab, Oman, and the crew’s status is unknown. Iran’s Revolutionary Guards say three tankers hit mines on an “unauthorized” route. [9][10] The IRGC’s three-tanker claim is Unconfirmed.

• DHS leak: Hackers published the names, titles, work emails, cell numbers and office locations of more than 40,000 DHS employees, including about 21,000 at CBP. DHS says it is “aware of a potential breach.” [28][29][30][31]

• Spain: The toll in Wednesday’s Urda (Toledo) high-speed train collision stands at 68, and Spain has begun three days of mourning. Train drivers are on a 24-hour nationwide strike at Renfe today. Madrid–Andalucía high-speed service stays suspended. [12][13][14][15][16]

For solo operators: Saudi alerts have now hit the east (Eastern Province) and the southwest (Najran) within 24 hours of the Taif launch. For any Saudi stop, know your hotel’s shelter and turn on Civil Defense phone alerts. [1][2][3] In Spain, don’t plan on rail today: rebook to road or air and allow extra time in Madrid. [14][15][16]

For corporate security teams: Briefing items for leadership:

1. The U.S. ordered departure from Saudi Arabia (effective Oct. 23) remains in place, and the Oct. 27 Mission alert is the latest one we found. USG staff need Chief of Mission authorization to use any Saudi airport. [1]

2. AP and Axios report that the U.S. has told allies to prepare for possible renewed strikes on Iran after the Nov. 3 midterms. Iran’s army says Hormuz stays closed until its conditions are met. Hold Gulf evacuation and hold-in-place plans ready. [9][11]

3. If you have DHS, CBP or ICE contacts or alumni on your team, assume their names and phones are public. Expect phishing and harassment that uses the leaked data. [28][29][30]

4. Spain rail: high-speed Madrid–Andalucía has no confirmed reopening date. Renfe has an alternative plan from Friday. [14]

Threats to Executives & Public Figures

• France, Trappes attack: Kévin T., 39, was taken to the Paris judicial court shortly after midnight when his custody ended, ahead of a possible indictment by an anti-terror judge. The case covers murder and attempted murder linked to a terrorist enterprise, with a racist aggravating circumstance. He admits the facts but denies a racist motive. Pengo Bossio Wangi, 26, was killed in the Oct. 23 attack in Trappes and La Verrière (Yvelines). Anti-terror prosecutor Olivier Christen is due to brief the press at 11:00 Paris time (06:00 ET) today, and the government has announced a national tribute. [19][20]

  • Action: Expect high police visibility around the Paris court and at memorial events. Plan routes around them.

• NYC, Diamond District syringe stabbings: Federal prosecutors in Manhattan have charged Anna Mochalova, 32, a Russian national, with two federal hate crimes. The complaint says she stabbed two Jewish men on Oct. 21 with a sharp object “consistent with being a needle,” on West 47th Street between Fifth and Sixth Avenues and at Sixth Avenue and West 45th Street. Each count carries up to 10 years. [25][26][27] The U.S. Attorney said the weapon’s “potential contents” remain unknown pending investigation. [26]

  • Action: Brief details that bumping or close contact in a crowd can be an attack, not just a jostle. If a principal is struck or pricked by a sharp object, get them medical care and keep the object.

• Serbia, Belgrade embassy attack: The Higher Public Prosecutor’s Office says the Gendarmerie officer was justified in using his weapon in self-defense in the attack outside the Israeli Embassy. [17] Novosti names the attacker as Dario N., 18, of Bela Reka near Šabac. It reports that security services had tracked him as an Islamic State supporter and that he had recently been expelled from Germany. [18] Reported by Novosti; officials have not released his full identity.

  • Action: Expect a heavier police presence at Israeli and Jewish sites across the Balkans. Have visiting principals use the main entrance and follow guard instructions.

Travel Advisories & Hotspots

• Saudi Arabia: The coalition spokesman announced the interception of the missile fired toward the Eastern Province on X and gave no casualty or damage details. This follows Wednesday’s launch toward Taif. [2][3] Gulf News reports that India’s foreign ministry has confirmed 22 Indian nationals killed in the conflict, including 14 seafarers. [11] The Oct. 27 U.S. Mission alert says JED and DMM are operating with some delays and cancellations, and RUH is partly reopened. [1]

  • Action: Confirm each flight the morning of travel, and keep a road or alternate-airport fallback.

• Strait of Hormuz and the Gulf: UKMTO reported the Khasab fire at 06:35 GMT (02:35 ET). [9] Reuters reports the IRGC statement that three tankers hit mines south of the strait within the past 24 hours and were abandoned. [10] Unconfirmed: only the IRGC has given the number of tankers. Iran’s army spokesman says Hormuz will stay closed until Iran’s conditions are met. [9] Kuwait’s army says it will hold live-fire drills in the northwest from Oct. 30 to Nov. 3. [9] Reported by Iran International.

  • Action: Keep sea transfers in the Gulf to a minimum, and treat loud explosions in northwest Kuwait during those dates as possible drills until official word says otherwise.

• Yemen, Aden: Transport Minister Mohsen Haidara al-Omari says Aden International Airport is back to normal operations after Wednesday evening’s Houthi shelling. Runway repairs were made, flights were rescheduled and airlines were notified. [4][5] This updates our Oct. 28 evening update, which reported air traffic halted.

  • Action: The Transport Ministry counts this as one of several attacks in days. Keep Aden stops short and have an alternate exit.

• Spain, Urda (Toledo) rail collision: Castilla-La Mancha keeps the toll at 68. Fifty-two bodies are at the Toledo forensic institute, identifications begin Thursday, and the Guardia Civil has 64 missing-person reports. The King and Queen are due at Toledo University Hospital around 15:00 local (10:00 ET). [13] The Guardian reports that the Civil Guard has set up clinics where relatives can give DNA samples, and that the search of the wreckage continues. [12]

  • Where sources disagree: The Guardian, citing officials Wednesday, says 107 people needed hospital treatment, 15 of them in serious condition. [12] El Español reports that 110 were taken to regional hospitals, with 53 still admitted and 56 discharged. [13] Our Oct. 28 evening update said “nearly 80” injured, and that figure is now out of date.

  • Action: Expect a heavy official and media presence at Toledo hospitals and the Urda site today, and avoid both.

• Israel: Far-right minister Itamar Ben-Gvir has called for the arrest of Arab party leaders. The Central Elections Committee asked the Shin Bet to look into alleged foreign interference, with findings due within a week, ahead of the Nov. 4 certification deadline (per AP). [8] Final results could come Thursday evening. [6][7]

  • Action: Expect rallies and tense crowds when final results come out. Keep principals away from party headquarters and Knesset-area protests.

Civil Unrest in Business Hubs

• France, Oct. 31: The Yellow Vests, unions and high school students are planning a new national day of protest on Saturday, including rallies outside the Assemblée nationale in Paris’s 7th arrondissement. Sortiraparis, citing BFMTV and RMC, reports that police are raising staff presence to 75%, the RAID unit will guard exposed public buildings, and drones will be used along the routes. Authorities see a high-risk day, with Halloween night and the post-Trappes terror threat adding to it. [21] The Paris police prefecture rejected the Île-de-France unions’ route and proposed one between Porte de Bagnolet and Porte de Charenton. The unions reject the change. [22]

  • Action: Keep Saturday movements in central Paris to a minimum, especially around the Assemblée nationale, Concorde and the Left Bank. Book hotels outside the 7th and 8th arrondissements.

• Albania, Tirana: Student protests reached their 16th straight day outside the Prime Minister’s office on Wednesday. Turnout fell sharply, and RTSH reports the rally passed without tension. [23][24] On Thursday, opposition MPs blocked the parliament podium, and the session was suspended. [24]

  • Action: Avoid Dëshmorët e Kombit Boulevard and the parliament area at rally times.

Aviation & Transport

• U.S. airspace: As of 06:01 ET, the FAA listed no delays at major New York, Washington or Los Angeles airports. SNA (Orange County, CA) is closed nightly from 23:30 to 06:15 PDT through Oct. 31. Aspen (ASE) is closed except for life-flight and search-and-rescue helicopters until 09:00 ET, and Santa Fe (SAF) is closed except for helicopters until 08:00 ET. Non-scheduled transient general aviation needs prior permission (PPR) at LAX, SAN and, from Oct. 28, LAS. [32]

  • Action: For charters into LAS, LAX or SAN, confirm the PPR slot before wheels-up.

• Spain rail: Madrid–Andalucía high-speed service is suspended Thursday, with knock-on effects on Barcelona/Valencia–Seville/Málaga trains. An alternative plan starts Friday, Oct. 30, and Adif has no confirmed reopening date for the damaged section near Urda. [14] SEMAF’s 24-hour drivers’ strike runs today. Minimum services are 73% for high-speed/long-distance, 65% for medium-distance and 75% at peak hours on commuter lines. [15] COPE reports the strike began without incidents, with minimum services met. [16] Metro de Madrid is running every available train at rush hour. [14]

  • Action: Move Madrid–Seville/Málaga trips to air or road, and confirm any Renfe ticket is on the minimum-services list.

Cyber & Doxxing Risk to Principals

• DHS “Icepick” leak: DDoSecrets published the archive Wednesday. A group calling itself the “Department of Peace” says it took the data from DHS’s Okta single sign-on. Okta told WIRED it has no evidence its systems were compromised. [28][29] TechCrunch says the data appears to have been taken around mid-August and verified part of it. [28] WIRED reports references to undercover and surveillance programs. [29]

  • Where sources disagree: TechCrunch counts about 10,000 ICE and HSI records. The BBC counts about 6,600 ICE. [28][30]

  • Action: Teams with former federal staff should check whether their people are in the leak. Then scrub their home addresses from data brokers, change phone-based MFA to app or hardware keys, and warn family members about targeted calls.

• CISA KEV: CISA added CVE-2026-41709 (Broadcom VMware ESX insufficient logging) and CVE-2026-46300 (a Linux kernel missing-initialization flaw) to its Known Exploited Vulnerabilities catalog on Oct. 28. [33]

  • Action: Have IT confirm patch status for virtualization hosts and Linux servers that support security operations.

• ConnectWise Cloud Backup (formerly SkyKick): As of Oct. 28, 16:00 UTC (12:00 ET), ConnectWise has begun a phased restoration, starting with Microsoft 365 backups through a new “ConnectWise Cloud Backup for M365” app. Partners must reset passwords, set up MFA and re-authorize each tenant, and must not re-enable apps that were disabled earlier. [34]

  • Action: If your MSP uses this product, ask for confirmation that it has completed each step before backups resume.

Severe Weather

• NYC/NY/NJ/CT: There are no active NWS alerts for New York, New Jersey or Connecticut. [35] NYC today: sunny, high near 68°F, west wind 3–10 mph. Tonight: partly cloudy, low around 58°F. Friday: sunny, high near 69°F, west wind 10–17 mph. [37]

• Florida coasts: Coastal Flood Warnings for the Keys until 13:45, northeast Florida (Duval, Flagler and St. Johns among them) until 14:00 and the east-central coast (Volusia to Martin) until 14:30 today. There are also Flood Warnings for Lake and Volusia counties. [36]

• Southwest and Plains: Flood Watches for the Phoenix area until 17:15 MST and for Yavapai and Gila counties until 12:15 MST. Further Flood Watches cover the Texas Panhandle/South Plains until 13:00 CDT and Lea County (NM) with Gaines and Dawson (TX) until 16:00 MDT. There are Flood Warnings for Socorro and Rio Arriba (NM). [36]

• Elsewhere in the U.S.: Coastal Flood Warning for the San Diego and Orange County coasts until 14:30 PDT. Freeze Warning for interior Mendocino and Lake counties (CA) until 09:00 PDT. Winter Storm Warnings for the western Brooks Range and northern Susitna Valley (AK). [36]

• Tropical Storm Vance (Eastern Pacific): As of 02:00 MST, Vance was about 300 miles west-northwest of Manzanillo with 40 mph winds, moving north-northeast at 7 mph. NHC expects it to weaken and become a post-tropical remnant low late today. No watches or warnings are in effect. Rain of 2–4 inches, with isolated totals up to 7 inches, is possible in central and southern Sinaloa through Thursday, with flooding and mudslides. Life-threatening surf is expected along west-central Mexico and southern Baja. [38]

• Tropics otherwise: NHC expects no Atlantic formation over the next 7 days. In the Eastern Pacific, a low well southeast of Hawaii has a 30% chance of forming over 7 days. [39][40]

  • Action: For Mazatlán or Culiacán today, plan around flooded roads, and keep principals off southern Baja beaches.

Tradecraft Tip (general guidance, not tailored advice)

When your team’s names leak, the threat moves to the home and the phone. The DHS leak is a reminder that a staff list can be enough to find people. If your team or principal shows up in a breach:

1. Confirm exposure. Find out exactly which fields leaked (name, phone, office, role) before you decide what to do.

2. Cut the links. Remove home addresses and family links from people-search sites, starting with the biggest brokers.

3. Harden the phone. Add a carrier PIN or port-out lock, and move logins off SMS codes.

4. Brief the household. Family members and assistants should verify any caller who claims to be from work, the bank or the police.

5. Watch for a pattern. Log unusual calls, deliveries and visitors for the next 30 days, and escalate a second incident.

Coming Up

• Today, Oct. 29: Anti-terror prosecutor’s press conference on Trappes at 11:00 Paris (06:00 ET). [19] Final Israeli results could come Thursday evening, Israel time (about midday ET). [6][7] SEMAF strike across Renfe all day. [15] NHC’s next Vance advisory is due at 08:00 MST (11:00 ET). [38]

• Fri. Oct. 30–Sat. Oct. 31: Renfe’s alternative Andalucía plan starts Friday. [14] Kuwait drills run Oct. 30–Nov. 3. [9] France’s national protest day is Saturday, Oct. 31. [21][22]

Sources

1. U.S. Mission to Saudi Arabia, Security Alert, Oct. 27 — https://sa.usembassy.gov/security-alert-u-s-mission-to-saudi-arabia-october-27-2026/

2. Anadolu Agency, Oct. 29 — https://www.aa.com.tr/en/middle-east/houthi-ballistic-missile-targeting-eastern-saudi-arabia-intercepted-coalition/4104441

3. The Jerusalem Post (Reuters), Oct. 29 — https://www.jpost.com/middle-east/article-913176

4. Yemen Monitor (Arabic), Oct. 29 — https://www.yemenmonitor.com/Details/ArtMID/908/ArticleID/186279

5. Aden Al-Ghad (Arabic), Oct. 29 — https://www.adngad.net/news/893633

6. Al Jazeera, Oct. 29 — https://www.aljazeera.com/news/2026/10/29/no-clear-winner-in-israeli-election-with-nearly-90-percent-of-votes-counted

7. Anadolu Agency, Oct. 29 — https://www.aa.com.tr/en/middle-east/israel-begins-counting-over-500-000-double-envelope-ballots/4104438

8. The Guardian live, updated Oct. 29, 05:32 ET — https://www.theguardian.com/world/live/2026/oct/29/israel-election-results-live-updates-poll-netanyahu-eisenkot-bloc-coalition-latest-news

9. Iran International live, Oct. 29 — https://www.iranintl.com/en/liveblog/202610244311

10. Devdiscourse (Reuters), Oct. 29, 14:21 IST (04:51 ET) — https://www.devdiscourse.com/article/international/3998779-irans-revolutionary-guards-say-three-oil-tankers-hit-mines-in-strait-of-hormuz

11. Gulf News live, updated Oct. 29 — https://gulfnews.com/world/mena/middle-east-war-saudi-intercepts-houthi-missile-as-iran-warns-israel-against-strikes-1.500727751

12. The Guardian, Oct. 29, 05:29 ET — https://www.theguardian.com/world/2026/oct/29/spain-mourning-period-deadly-train-crash

13. El Español (El Digital Castilla-La Mancha), Oct. 29 — https://www.elespanol.com/eldigitalcastillalamancha/region/20261029/ultima-hora-accidente-tren-urda-instituto-medicina-legal-toledo-recibido-cadaveres/1003744439061_10.html

14. Estrella Digital, Oct. 29 — https://www.estrelladigital.es/sociedad/renfe-suspende-ave-entre-madrid-andalucia-jueves-29-trenes-afectados-huelga-alternativas/20261029060000452633.html

15. Renfe, minimum services for the Oct. 29 SEMAF strike — https://grupo.renfe.com/es/es/sala-de-prensa/noticias/2026/10/establecidos-servicios-minimos-huelga-semaf-29-octubre

16. COPE, Oct. 29, 09:17 Madrid (04:17 ET) — https://www.cope.es/emisoras/catalunya/noticias/huelga-maquinistas-renfe-arranca-incidencias-cumplimiento-servicios-minimos-20261029_3464728.html

17. IZLAZ, Oct. 28 — https://izlaz.com/en/higher-public-prosecutors-office-regarding-the-attack-in-front-of-the-israeli-embassy-the-use-of-official-weapons-was-justified-in-self-defense/

18. Novosti (Serbian), Oct. 29, 07:00 Belgrade — https://www.novosti.rs/hronika/hapsenja-i-istraga/1665170/proteran-nemacke-ozenio-kao-maloletan-sve-dariu-18-bele-reke-napadacu-teroristi-ambasadu-izraela

19. franceinfo, Oct. 29 — https://www.franceinfo.fr/faits-divers/terrorisme/attentat-raciste-a-trappes/attentat-raciste-a-trappes-l-assaillant-transfere-au-tribunal-apres-la-levee-de-sa-garde-a-vue-pnat_8258405.html

20. Le Dauphiné libéré (AFP), Oct. 29 — https://www.ledauphine.com/faits-divers-justice/2026/10/29/attentat-de-trappes-kevin-t-a-ete-presente-a-la-justice-dans-la-nuit-pour-etre-mis-en-examen

21. Sortiraparis, updated Oct. 29, 09:34 Paris (04:34 ET) — https://www.sortiraparis.com/actualites/a-paris/articles/356395-manifestation-du-31-octobre-raid-drones-controles-le-dispositif-de-securite

22. BFMTV, Oct. 29 — https://www.bfmtv.com/societe/manifestations/video-mobilisation-du-31-octobre-la-prefecture-de-police-de-paris-refuse-le-parcours-de-l-intersyndicale-et-propose-un-itineraire-reliant-la-porte-de-bagnolet-a-la-porte-de-charenton_VN-202610290092.html

23. CNA.al, Oct. 28, 17:58 Tirana (12:58 ET) — https://www.cna.al/english/aktualitet/foto-protestuesit-para-kryeministrise-bie-ndjeshem-pjesemarrja-i478202

24. RTSH, Oct. 28–29 — https://rtsh.al/374520-2/

25. U.S. Attorney’s Office SDNY, complaint, U.S. v. Anna Mochalova — https://www.justice.gov/usao-sdny/media/1469106/dl

26. Gothamist, Oct. 28 — https://gothamist.com/news/woman-charged-with-federal-hate-crimes-after-allegedly-stabbing-two-jewish-men-in-nyc

27. NBC New York, Oct. 28 — https://www.nbcnewyork.com/news/local/suspect-in-midtown-syringe-stabbing-attacks-faces-federal-hate-crime-charges/6564519/

28. TechCrunch, Oct. 28 — https://techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents/

29. WIRED, Oct. 28 — https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/

30. BBC News, Oct. 28 — https://www.bbc.com/news/articles/cq8jzkpjr28vo

31. NPR, Oct. 28 — https://www.npr.org/2026/10/28/nx-s1-6021497/dhs-hack-ice

32. FAA National Airspace System Status (live, updated 06:01 ET Oct. 29) — https://nasstatus.faa.gov/api/airport-status-information

33. CISA, “CISA Adds Two Known Exploited Vulnerabilities to Catalog,” Oct. 28 — https://www.cisa.gov/news-events/alerts/2026/10/28/cisa-adds-two-known-exploited-vulnerabilities-catalog

34. ConnectWise Trust Center, updated Oct. 28, 16:00 UTC — https://www.connectwise.com/company/trust/advisories

35. NWS active alerts, NY/NJ/CT (live, Oct. 29) — https://api.weather.gov/alerts/active?area=NY,NJ,CT

36. NWS active alerts, nationwide severe (live, Oct. 29) — https://api.weather.gov/alerts/active?severity=Severe

37. NWS New York forecast, NYC (live, Oct. 29) — https://api.weather.gov/gridpoints/OKX/33,42/forecast

38. NHC, Tropical Storm Vance Advisory 32, Oct. 29, 02:00 MST — https://www.nhc.noaa.gov/text/MIATCPEP2.shtml

39. NHC, Atlantic Tropical Weather Outlook, Oct. 29, 02:00 EDT — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

40. NHC, Eastern Pacific Tropical Weather Outlook, Oct. 28, 23:00 PDT — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Spain: A Renfe high-speed train ran into the back of a stopped Iryo train near Urda, Toledo province, shortly before 0900 local time, killing at least 68 people and injuring nearly 80. High-speed service between Madrid and Andalucía is suspended and will stay suspended on Thursday. [1][2][3]

• Yemen: Two Houthi ballistic missiles struck inside the Aden airport perimeter around a Houthi evacuation warning. Air traffic was halted. Correction to this morning’s alert: the government now says civilians were injured. [4][5][6]

• Serbia: Following up on this morning’s alert, the attack outside the Israeli Embassy in Belgrade is being treated as terrorism, and the national threat level stays at red. [7][8]

• NYC: About 14 anti-ICE protesters were arrested after blocking the Brooklyn Bridge for about 30 minutes; all lanes reopened just before 1330. [9][10][11]

• NYC, UN: The US is expelling a Cuban UN diplomat after Tuesday’s clash in the General Assembly. [12][13]

Europe

• Spain, Urda rail crash: Both trains were heading south from Madrid to Seville. A computer communications failure had stopped traffic on the line, and Transport Minister Óscar Puente says the Renfe train, carrying 397 people, was then restarted in error and struck the Iryo train, which had 147 on board, between Mora and Orgaz. It is Spain’s deadliest rail crash since 2013 and the second high-speed collision on this line this year, after January’s Adamuz crash that killed 46. [1][2]

  • Travel: Adif expects the Madrid–Andalucía high-speed link to stay shut on Thursday, and Renfe has stopped selling tickets on the route until Dec. 13, though that is not a confirmed reopening date. Renfe says an alternative transport plan starts Friday, Oct. 30. Madrid–Toledo and Málaga–Seville high-speed services are running normally. [3][14]

  • Action: Move any Madrid–Seville, Córdoba or Málaga legs to air or road, and expect busy flights and coaches for the rest of the week.

• Serbia, Belgrade embassy attack (follow-up): Interior Minister Ivica Dačić says the attacker rushed a Gendarmerie officer guarding the Israeli Embassy with two knives at about 0015. The officer suffered a cut to the face and shot him dead. Dačić says security services had been monitoring the attacker as an Islamic State supporter. Israel’s foreign ministry says no embassy staff were hurt and the mission was closed at the time. [7][8]

  • Where accounts differ: Officials describe the attacker as an unidentified minor. The Serbian outlet Telegraf names him as an 18-year-old from the Šabac area. [7][15]

  • Action: Expect armed police and extra checks at embassies, transport hubs and crowded venues across Serbia. Allow extra time near the embassy district.

Middle East

• Yemen, Aden airport (follow-up to this morning’s alert): Government forces say two Houthi ballistic missiles hit the airport perimeter on Wednesday, calling it the sixth attack on the airport in days. The Houthis told people to leave, claiming a Saudi military cargo plane was delivering weapons, though an Aden police source told AFP one missile landed shortly before that warning. Transport ministry officials told Reuters that air traffic was halted. [4][5][6]

  • Where accounts differ: Government forces report civilian injuries and damage. A Reuters aid source said UN staff left the airport shortly before the attack and no one was hurt. Our earlier alert said no injuries had been reported. [4][5][6]

  • Action: Keep holding travel through Aden (ADE), and confirm any flight directly with the airline.

NYC Hub

• Brooklyn Bridge blockade: The NYPD says it responded at about 1234 to roughly 30 protesters blocking traffic on the bridge’s outbound side, and took 14 people into custody without incident. Charges were not immediately released. The group said it was protesting the ICE shooting in Marble Hill earlier this month. All lanes reopened just before 1330. [9][10][11]

  • Where accounts differ: The NYPD (via News 12) and the New York Post describe the blocked lanes as Brooklyn-bound, while ABC7 says the protest disrupted traffic entering Manhattan. [9][10][11]

  • Action: Pop-up roadway blockades can leave a principal’s vehicle stuck on a span with no exit. Keep alternate crossings and timing buffers ready for East River moves.

• Cuban diplomat expelled: US Ambassador Mike Waltz says Secretary of State Marco Rubio signed papers to expel Richard Tur de la Concepción, first secretary of Cuba’s UN mission. Waltz says Tur shoved and tried to assault US diplomat J.P. Freire during Tuesday’s General Assembly session, and video Waltz posted shows Tur trying to grab the phone Freire was filming with. The assault claim comes from the US side. Cuba’s foreign minister called US statements lies but did not address the expulsion. Waltz said Tur would be on a plane to Havana within 24 hours. [12][13] On Wednesday the General Assembly adopted the resolution against the US embargo, 130 votes to 17 with 25 abstentions. [16]

Aviation

• FAA (checked 1805 ET): Ground stops for staffing were in effect at Newark (EWR) and Teterboro (TEB), listed to end at 1830 EDT. No other NYC, DC or LA delays were listed. [17]

Sources

1. Reuters graphics, Oct. 28 — https://www.reuters.com/graphics/SPAIN-ACCIDENT/dwvkmmgbrvm/

2. BBC News, Oct. 28 — https://www.bbc.com/news/articles/cm9qzd47ng98o

3. Ideal (Spanish), updated Oct. 28, 22:57 — https://www.ideal.es/granada/adif-preve-ave-madridandalucia-continue-suspendido-jueves-20261028180041-nt.html

4. Al-Monitor (Reuters), Oct. 28 — https://www.al-monitor.com/originals/2026/10/houthis-strike-yemens-aden-airport-after-evacuation-warning

5. Arab News, updated Oct. 28, 22:22 — https://www.arabnews.com/middle-east/houthis-strike-aden-airport-with-two-ballistic-missiles-3008708

6. RTÉ (AFP), updated Oct. 28, 18:27 — https://www.rte.ie/news/middle-east/2026/1028/1597087-yemen-houthi-saudi/

7. Government of Serbia, Oct. 28 — https://www.srbija.gov.rs/vest/en/290679/terrorist-attack-outside-israeli-embassy-in-belgrade.php

8. BBC News, Oct. 28 — https://www.bbc.com/news/articles/ck5ynj4eeyj2o

9. News 12 (NYPD), Oct. 28 — https://longisland.news12.com/2026/10/28/anti-ice-protesters-block-brooklyn-bridge-traffic-multiple-taken-into-custody/6JK8ZLhiF6bIzjpdIOCvBI

10. New York Post (police sources), updated Oct. 28 — https://nypost.com/2026/10/28/us-news/anti-ice-protesters-in-nyc-arrested-after-blocking-brooklyn-bridge-traffic/

11. ABC7 New York, Oct. 28 — https://abc7ny.com/post/brooklyn-bridge-protesters-shut-down-traffic-marble-hill-ice-shooting/19990396/

12. AOL, Oct. 28 — https://www.aol.com/articles/rubio-expels-cuban-diplomat-allegedly-134500000.html

13. Diario de Cuba (Spanish), Oct. 28 — https://diariodecuba.com/cuba/1793170857_69580.html

14. 20minutos (Spanish), Oct. 28 — https://www.20minutos.es/nacional/adif-suspende-circulacion-corredor-sur-pide-los-viajeros-no-acudir-las-estaciones_7054422_0.html

15. Telegraf (Serbian), Oct. 28 — https://www.telegraf.rs/vesti/hronika/4422764-uhapseni-ocuh-i-majka-mladica-koji-je-likvidiran-ispred-ambasade-izraela-u-beogradu

16. UNifeed, Oct. 28 — https://media.un.org/unifeed/en/asset/d367/d3670721

17. FAA National Airspace System Status (checked 1805 ET Oct. 28) — https://nasstatus.faa.gov/api/airport-status-information

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.

• Israel, no clear winner: With about 70% of votes counted at 11:00 local (05:00 ET), Netanyahu’s bloc had 54 seats, Eisenkot’s bloc 47 and the Arab parties 19. A Knesset majority is 61. Weeks of coalition talks look likely, and a deadlock could keep Netanyahu in office as caretaker. [8][9][10]

• Saudi Arabia, new launch: The Saudi-led coalition says it intercepted and destroyed a Houthi ballistic missile fired toward Taif. Reuters reports Civil Defence early-warning alerts in Jeddah and Yanbu early Wednesday, lifted minutes later. [2][3] Houthi claims of “direct hits” on the Defence Ministry in Riyadh and “massive fires” at Ras Tanura remain unconfirmed by Saudi Arabia. [4]

• Jordan–Syria: The Nassib/Jaber crossing reopened Wednesday morning for passengers and trade. The two countries set up a joint committee to look into Jordan’s strikes, which Syria says killed seven people. [5][6][7]

• U.S.–Iran: The Wall Street Journal reports the U.S. told Gulf states to prepare for a possible short, intense campaign against Iran after the U.S. midterms. The White House did not confirm. [11][12]

• NYC, GWB shooting: A grand jury indicted retired NYPD detective Victor Romero on a second-degree murder charge in the Oct. 20 George Washington Bridge shooting. He remains free on $1 million bail. [15][16][17]

For solo operators: In Saudi Arabia, the alert zone now reaches the west coast: Jeddah and Yanbu got alerts overnight. Know the nearest shelter at your hotel and turn on cellular Civil Defence alerts. Never film intercepts or impact sites. [1][3] In Israel, expect rallies and tense crowds as the count ends. Keep principals away from party headquarters. For corporate security teams: Briefing items for leadership:

1. The U.S. ordered departure from Saudi Arabia (effective Oct. 23) remains in place. USG staff need Chief of Mission authorization to use any Saudi airport. [1]

2. The Houthi target set has widened from Riyadh and the Eastern Province to the Taif/Jeddah/Yanbu area. [2][3][4]

3. The WSJ report of possible post-midterm U.S. strikes on Iran points to a higher risk window in the Gulf next month. Review evacuation and hold-in-place plans for Gulf staff now. [11][12]

4. The Jordan–Syria land route is open again. [5][6][7]

Threats to Executives & Public Figures

• NYC, George Washington Bridge shooting: The Manhattan District Attorney’s Office says a grand jury indicted Victor Romero, 62, a retired NYPD detective, on Tuesday on a charge of second-degree murder. The charge was upgraded from first-degree manslaughter in the Oct. 20 shooting that killed Con Edison worker Koran Irvine, 46. Romero remains free on $1 million bail and is due to be arraigned on the indictment Nov. 23. [15][16][17] ABC News reports that Romero was working as a chauffeur, driving a company Range Rover, at the time. [15]

  • Action: Road disputes can turn deadly, and a driver can be armed. Brief drivers to de-escalate: stay in the vehicle, keep doors locked, don’t follow or block the other car, and call 911 rather than confront. Check that your car-service vendors vet and train their drivers on this.

• Illinois, hoax powder letters: The Guardian reports that Matthew Unglesbee of Quincy is in U.S. Marshals custody. The complaint says he admitted sending letters to four members of Congress and told agents the powder was salt because it “kind of looks like” anthrax. Staff did not open the envelopes, which carried his name and return address. Agents found another empty envelope addressed to a congressional office at his home. [18]

  • Where sources disagree: The Guardian gives his age as 36; the Herald-Whig, cited in our Oct. 27 brief, said 37.

  • Action: The offices warned each other to watch for his name, and that worked. Share sender details of suspicious mail with peer offices and your mailroom vendor.

• NYC, Central Park: NBC New York reports police released new surveillance images of the suspect in the knifepoint rape late Saturday near East 66th Street and Fifth Avenue. No arrest had been reported as of this writing. [19]

  • Action: Principals who run or walk in the park after dark should stay on lit main drives and go with a companion or detail.

Travel Advisories & Hotspots

• Saudi Arabia:

  • Taif launch: The Saudi Press Agency says coalition air defences intercepted and destroyed a ballistic missile launched by the Houthis toward Taif. [2] Reuters, via Devdiscourse, reports Civil Defence early-warning alerts in Jeddah and Yanbu early Wednesday, lifted minutes later. [3]

  • Riyadh and Eastern Province (follow-up): AFP reports two ballistic missiles aimed at Riyadh were shot down, with shrapnel hitting a building, a construction project and a car. Three missiles aimed at the Eastern Province were intercepted. [4] The Houthis claim a “direct hit” on the Defence Ministry and “massive fires” at Ras Tanura. Saudi Arabia did not comment on specific targets, and the scale of any damage at Ras Tanura is unclear. Unconfirmed. [4]

  • U.S. Embassy alert (Oct. 27, still the latest): U.S. government staff need Chief of Mission authorization to use any Saudi airport. Riyadh’s King Khalid International (RUH) is partly reopened, and some flights are using Qassim (ELQ). Jeddah (JED) is operating with some delays and cancellations. The embassy says U.S. citizens have been detained for photographing government buildings, airports and impact sites. [1]

  • Action: Treat Jeddah and Yanbu as inside the alert zone. Plan routes with shelter options, and avoid photographing sensitive sites.

• Israel, results:

  • The count: The Guardian’s live count at 70% (11:00 local): Netanyahu bloc 54 seats, Eisenkot’s Change bloc 47, Arab parties 19. Likud has 27 seats and Eisenkot’s Yashar 20. [8] Turnout was 77.7%, the highest since 1999. [9]

  • Where sources disagree: Ynet’s earlier count, at 51.8% counted, had the blocs at 55–49–16. Counts are moving as ballots come in. [8][10]

  • Tensions: Netanyahu suggested in public that the “left and Arabs” were trying to steal the election. The elections committee rejected the claim. In a 03:00 speech, he promised “a strong government of the right,” and Eisenkot said “the people decided in favour of change.” [9]

  • Action: Expect protests and rival rallies while coalition talks run. Keep principals away from campaign headquarters in Tel Aviv and Jerusalem and from gatherings outside the Knesset.

• Jordan–Syria:

  • Crossing reopens: Syria’s General Authority for Borders and Customs and customs official Mazen Alloush, speaking to SANA, said Nassib/Jaber reopened Wednesday morning for passengers and trade. [5][6][7] A joint security committee will look into Jordan’s strikes, which Syria’s civil defence says killed seven people in Deraa and Suwayda, including three children. Jordan’s Foreign Minister Ayman Safadi expressed “deep regret” over civilian deaths. [5][6]

  • Where sources disagree: Jordan says it coordinated the strikes with Syria. Damascus denied this. [6]

  • Action: The land route is usable again. Expect backlogs and tighter checks for the first few days.

• Iran and the Gulf:

  • WSJ report: The Wall Street Journal reports the U.S. warned Gulf states to prepare for a possible short, intense campaign against Iran after the midterms. It says a Patriot system is moving from Texas, troops have been moved from vulnerable bases, and an extra carrier group may arrive next month. Reported by The Wall Street Journal, via Iran International and The Indian Express. The White House declined to comment beyond saying all options remain on the table. [11][12]

  • Diplomacy: The Guardian reports that Gulf states are pushing a multipart deal under which Iran would reopen Hormuz within four days of sanctions being lifted and the Houthis would pull back. [14] Iran International reports Qatar’s foreign ministry said Iran must stop its threats and reopen Hormuz. [13]

  • Tanker claim: Iranian state media say a tanker caught fire after hitting mines east of Hormuz. Unconfirmed. [12]

  • Action: Make sure Gulf-based staff and visiting principals have current evacuation and shelter plans. Review those plans now rather than after the midterms.

Civil Unrest in Business Hubs

• Tirana, Albania: Protests reached their 15th day on Tuesday. Prime Minister Edi Rama again called for dialogue and ruled out resigning. [21] Rama proposed a tougher protest law, with higher fines and 72-hour limits on gatherings in risk areas. Balkanweb, citing police, reports 23 people arrested the day before, 13 under investigation and 30 wanted, and more than 300 injured since mid-October. Reported by Balkanweb. [22]

  • Action: Avoid the area around the Prime Minister’s office in the evenings, where clashes took place on Sunday. [22] Keep a second route to and from the airport.

• France, Trappes attack (follow-up): Custody of Kévin T., the suspect in last week’s attack in Trappes and La Verrière, resumed Monday after a psychiatric review. franceinfo says it may last until Thursday. No charging decision had been reported by press time. [20]

  • Action: A charging announcement may set off rallies. Watch for calls to gather in the Yvelines and Paris.

Aviation & Transport

• U.S. airports: As of 06:05 ET, the FAA showed no delays at NYC, Washington or Los Angeles airports. Listed restrictions: Santa Ana/John Wayne (SNA) is closed nightly 23:30–06:15 PDT through Oct. 31; Aspen (ASE) is closed except for life flights until 09:00 ET today; LAX and San Diego (SAN) need prior permission for some general aviation. [23]

• Saudi Arabia: Riyadh (RUH) remains partly open, with some flights using Qassim (ELQ). Jeddah (JED) has some delays and cancellations. [1] After the overnight Jeddah alerts, confirm flight status directly with the airline before leaving for the airport. [3]

• Jordan–Syria: The Nassib/Jaber land crossing is open again. [5][6][7]

  • Action: For Gulf travel, book flexible tickets and keep a land alternative (for example, the King Fahd Causeway to Bahrain) in the plan. [1]

Cyber & Doxxing Risk to Principals

• CISA KEV: CISA added two actively exploited flaws to its Known Exploited Vulnerabilities catalog on Oct. 27: CVE-2026-48356 in Adobe Commerce/Magento (unrestricted file upload) and CVE-2026-111497 in Google Brotli (unchecked return value). [24]

  • Action: Ask IT to patch any Magento-based storefronts or event-registration sites, and products that bundle Brotli, without waiting for the federal deadline.

• ConnectWise Cloud Backup (formerly SkyKick): As of the Oct. 27 14:30 UTC update, ConnectWise says it is ready to begin phased restoration but is waiting on a required third-party validation. The incident involved unauthorized access to application credentials. [25]

  • Action: If your Microsoft 365 backups depend on this service, keep backup gaps in mind and rotate credentials tied to it.

• Germany, AfD email host breach: The Register reports that Have I Been Pwned confirmed 345,000 accounts were exposed in a September attack on the AfD party’s email host. Leaked emails were posted on a searchable “activist website.” Reported by The Register. [26]

  • Action: Hack-and-leak attacks on political groups expose the people they correspond with. Principals who email political organizations should assume those messages could become public and use separate accounts for that contact.

Severe Weather

• NYC/NY/NJ: No active NWS alerts for New York or New Jersey. [27] NYC today: mostly sunny, high near 63°F, northeast wind 5–9 mph. Tonight: partly cloudy, low around 53°F. Thursday: sunny, high near 68°F. [29] In Connecticut, there is a Coastal Flood Statement for southern Fairfield County from 12:00 to 15:00 today, and a frost advisory for southern Middlesex and New London until 09:00. [33]

• Florida and Georgia coasts: Coastal Flood Warnings for Broward, Miami-Dade and Palm Beach until 20:00 today, for the Keys until 05:00 Thursday, and for northeast and east-central Florida and coastal Glynn and Camden counties in Georgia until 02:00 Friday. There are also Flood Warnings for Lake and Volusia counties. [28]

• Elsewhere in the U.S.: Coastal Flood Warning for the San Diego and Orange County coasts until 13:00 PDT Thursday. Flood Warnings for Bent County (CO) and Socorro and Rio Arriba (NM). Flood Watch for Kauai and Oahu until 05:00 HST Thursday. High Wind Warning for the Big Island summits. Winter Storm Warning for the western Brooks Range (AK). [28]

• Tropical Storm Vance (Eastern Pacific): As of 02:00 MST, Vance was about 280 miles west of Manzanillo with 40 mph winds, moving north at 12 mph. NHC expects a turn north-northeast later today, gradual weakening, and a post-tropical low approaching northwestern Mexico on Thursday. No watches or warnings are in effect. Rain of 2–4 inches, locally 7 inches, could fall in Sinaloa and nearby areas through Thursday, with flooding and mudslides possible. Life-threatening surf is expected along southwest Mexico and southern Baja. [30]

• Tropics otherwise quiet: NHC expects no new storms in the Atlantic or Eastern Pacific over the next 7 days. [31][32]

  • Action: For Mazatlán, Culiacán or Los Cabos trips through Thursday, plan around flooded roads and keep principals off beaches.

Tradecraft Tip (general guidance, not tailored advice)

When a conflict spreads, the map in your plan goes out of date. Overnight, early-warning alerts reached Jeddah and Yanbu, cities many travelers had treated as the “safe side” of Saudi Arabia. Update your plan when that happens:

1. Redraw the alert zone. Add every city that has had an alert in the past 72 hours, and treat it as you treat the others.

2. Re-check the fallback. If your backup airport or route now sits inside the zone, choose a new one.

3. Shelter at every stop. For each hotel, office and venue, know the nearest protected space and how long it takes to get there.

4. Set alerts on every phone. Make sure every traveler’s phone gets local emergency alerts and has local emergency numbers saved.

5. Write down the stop rule. Decide ahead of time what moves travel to “hold in place” (for example, a second alert within the same day), so no one has to decide under pressure.

Coming Up

• Today, Oct. 28: The Israeli count continues, and coalition talks start. [8][9] ConnectWise’s next Cloud Backup update is due by 10:00 ET. [25] NHC’s next Vance advisory is due at 08:00 MST (11:00 ET). [30]

• By Thursday, Oct. 29 (Paris time): Kévin T.’s custody must end, with charges or release. [20] Then, Oct. 30–31, the Yellow Vest calls in France (see our Oct. 26 brief).

Sources

1. U.S. Mission to Saudi Arabia, Security Alert, Oct. 27 — https://sa.usembassy.gov/security-alert-u-s-mission-to-saudi-arabia-october-27-2026/

2. Saudi Press Agency, “Coalition: Air Defenses Intercept, Destroy Ballistic Missile Launched by Terrorist Houthi Militia Toward Taif,” Oct. 28 — https://spa.gov.sa/en/N2712033

3. Devdiscourse (Reuters), Oct. 28, 04:57 IST (Oct. 27, 19:27 ET) — https://www.devdiscourse.com/article/international/3998361-saudi-led-coalition-says-it-intercepted-houthi-missile-fired-towards-taif

4. Dawn (AFP), Oct. 28 — https://www.dawn.com/news/2040379

5. Al Jazeera, Oct. 28 — https://www.aljazeera.com/news/2026/10/28/syria-jordan-border-reopens-amid-probe-into-deadly-airstrikes

6. CNA (Reuters/SANA), Oct. 28 — https://www.channelnewsasia.com/world/syria-reopens-jordan-border-crossing-after-mending-ties-6497911

7. Syrian Daily, Oct. 28, 05:07 Damascus — https://syriandaily.com/en/2026/10/28/nussib-border-crossing-reopens-travellers-trade-0002/

8. The Guardian live, updated Oct. 28, 05:54 ET — https://www.theguardian.com/world/live/2026/oct/28/israel-election-results-live-updates-exit-polls-netanyahu-likud-eisenkot-latest-news

9. The Guardian, Oct. 28, updated 04:15 ET — https://www.theguardian.com/world/2026/oct/28/israel-election-exit-polls-suggest-netanyahu-eisenkot-blocs-tied-ntwnfb

10. Ynetnews, Oct. 28 — https://www.ynetnews.com/article/lyqumci8y

11. Iran International (citing The Wall Street Journal), Oct. 28, 04:07 GMT (00:07 ET) — https://www.iranintl.com/en/202610282501

12. The Indian Express live, Oct. 28 — https://indianexpress.com/article/world/us-iran-war-live-updates-tehran-oil-tanker-fire-mines-hit-hormuz-shipping-trump-warn-israel-elections-saudi-attack-india-oil-prices-10939780/

13. Iran International live, Oct. 28 — https://www.iranintl.com/en/liveblog/202610244311

14. The Guardian, Oct. 28, 01:00 ET — https://www.theguardian.com/world/2026/oct/28/gulf-states-multipart-peace-deal-avert-renewal-us-iran-war

15. ABC News, Oct. 27 — https://abcnews.com/US/grand-jury-indicts-retired-nypd-detective-murder-charge/story?id=137612210

16. FOX 5 New York, Oct. 27 — https://www.fox5ny.com/news/victor-romero-court-gw-bridge-shooting-koran-irvine

17. CBS New York, Oct. 27 — https://www.cbsnews.com/newyork/news/george-washington-bridge-shooting-suspect-court-appearance/

18. The Guardian, Oct. 27, 09:55 ET — https://www.theguardian.com/us-news/2026/oct/27/man-sent-powder-congress-arrest

19. NBC New York, Oct. 27, 06:02 ET — https://www.nbcnewyork.com/manhattan/central-park-rape-suspect-identity/6563565/

20. franceinfo, Oct. 27, 12:20 Paris (07:20 ET) — https://www.franceinfo.fr/faits-divers/terrorisme/attentat-raciste-a-trappes/le-suspect-de-l-attentat-a-trappes-kevin-t-conteste-le-caractere-raciste-de-ses-crimes-affirme-le-procureur-antiterroriste_8255245.html

21. Euronews Albania, Oct. 27 — https://euronews.al/en/rama-continues-calls-for-dialogue-as-students-demand-his-resignation/

22. Balkanweb, Oct. 27, 20:25 Tirana (15:25 ET) — https://balkanweb.com/en/measures-proposed-by-Rama--foreign-media--return-to-communism--protests-continue--the-resignation-of-the-Prime-Minister-is-demanded/

23. FAA National Airspace System Status (live, checked 06:05 ET Oct. 28) — https://nasstatus.faa.gov/api/airport-status-information

24. CISA, “CISA Adds Two Known Exploited Vulnerabilities to Catalog,” Oct. 27 — https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog

25. ConnectWise Trust Center, updated Oct. 27, 14:30 UTC — https://www.connectwise.com/company/trust/advisories

26. The Register, Oct. 27, 11:49 UTC — https://www.theregister.com/cyber-crime/2026/10/27/attack-on-email-hosting-provider-for-german-far-right-party-afd-exposed-345k-accounts/5305660

27. NWS active alerts, NY/NJ (live, Oct. 28) — https://api.weather.gov/alerts/active?area=NY,NJ

28. NWS active alerts, nationwide severe (live, Oct. 28) — https://api.weather.gov/alerts/active?severity=Severe

29. NWS New York forecast, NYC (live, Oct. 28) — https://api.weather.gov/gridpoints/OKX/33,42/forecast

30. NHC, Tropical Storm Vance Advisory 28, Oct. 28, 02:00 MST — https://www.nhc.noaa.gov/text/MIATCPEP2.shtml

31. NHC, Atlantic Tropical Weather Outlook, Oct. 28, 02:00 EDT — https://www.nhc.noaa.gov/text/MIATWOAT.shtml

32. NHC, Eastern Pacific Tropical Weather Outlook, Oct. 27, 23:00 PDT — https://www.nhc.noaa.gov/text/MIATWOEP.shtml

33. NWS active alerts, Connecticut (live, Oct. 28) — https://api.weather.gov/alerts/active?area=CT

Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.

Need a custom security brief for an event or trip? Request one here.

Open-source reporting only; verify before acting.