EXECUTIVE PROTECTION DAILY
Wednesday, October 21, 2026 · Executive Protection Daily Team
Bottom Line Up Front
Correction to our GWB alert: the driver has died, and the wound location is now in question. Our Tuesday evening alert said the driver was shot in the head and in critical condition. He later died at Englewood. Police first said he was shot in the head, but the NYPD now describes a wound to the right shoulder. Investigators believe it may have been road rage. The shooter fled and no arrest has been made. The westbound upper level reopened shortly before 01:00. Reported by CBS New York and ABC7 New York. [1][2]
Haines case update: the MP has now lost both legs. The accused was remanded without bail. Brendan Nugent appeared in Wangaratta Magistrates’ Court and did not apply for bail. Cannabis charges were added, and the case returns to court Feb. 4, 2027. Police are “not ruling out further serious charges.” Hours later, a man was arrested after allegedly making threats while armed with nunchucks at a state MP’s office in Perth. Reported by ABC News (Australia). [3][4]
Powder-letter wave: Suspicious mail has now reached more than three dozen congressional and election offices in 32 states. Tests so far show nothing hazardous, and the FBI is still working to identify the sender. Reported by Cronkite News, citing Axios. [5]
Also today: France has added more curfews and plans a “massive” deployment, including troops, for Saturday’s protests. [10] Cathay Pacific (to Jan. 31, 2027) and Philippine Airlines (to Nov. 29) have pushed Riyadh suspensions further out. [8] Super Typhoon Rosal (Champi) has Batanes under Signal No. 2. [18]
For solo operators: If your principal crosses the GWB, expect the investigation to slow traffic and avoid any confrontation with other drivers. In the Haines case, the Perth incident and the U.S. letter wave, the threat arrived at an office. Check who can reach the front door, and have a lockdown drill ready. [1][4][5]
For corporate security teams: Briefing items for leadership: (1) Riyadh service will stay thin into November or later, so confirm every Riyadh booking directly with the carrier and build in alternates, [8] (2) if your company uses ConnectWise Cloud Backup, it is still suspended, so keep connections disabled and confirm you have a fallback backup, [12] (3) review Paris event plans for Saturday, Oct. 24, against the gathering bans. [10]
Threats to Executives & Public Figures
George Washington Bridge (follow-up and correction): Port Authority Police responded to a single-vehicle crash mid-span on the westbound upper level just after 19:00 Tuesday. The 46-year-old driver was taken to Englewood in critical condition and later died. Police first said he was shot in the head. The NYPD now says the wound was to the right shoulder. Reported by CBS New York. [1] Investigators believe the victim’s Volkswagen Golf nearly collided with another car on a ramp to the upper level. An occupant of that car allegedly fired as both headed toward New Jersey, then fled. The victim was a Rockland County man and an off-duty Con Edison worker. Police are reviewing surveillance video, and no arrest has been made. Reported by ABC7 New York. [2]
Analyst note: On a bridge span, a driver has nowhere to turn off. If another driver confronts your principal’s vehicle, don’t engage: keep distance, change lanes away from them, and report it.
Wangaratta, Australia (Haines case, follow-up): Brendan Nugent, 43, appeared Wednesday morning local time on three charges: dangerous driving causing serious injury, intentionally causing serious injury, and causing harm to a Commonwealth public official. Charge sheets add cultivating and possessing cannabis. No bail application was made. The magistrate ordered an immediate medical assessment, set a Dec. 24 deadline for the police brief of evidence, and listed a committal mention for Feb. 4. Police Chief Commissioner Mike Bush said police are “not ruling out further serious charges.” Reported by ABC News (Australia). [3] Her husband said surgeons removed her right leg after the left was amputated Monday. The Alfred Hospital says she remains in critical condition. AFP Commissioner Krissy Barrett said there was no specific prior intelligence. Reported by ABC News (Australia). [4]
Correction: Our Oct. 20 brief and evening update said she had lost one leg. She has now lost both. [4]
Perth, Australia: Police arrested a 56-year-old man after a disturbance at about 13:15 local time at state MP Hannah Beazley’s electorate office in Victoria Park. He reportedly made verbal threats while armed with nunchucks. No one was injured. Reported by ABC News (Australia). [4]
Suspicious mailings (U.S.), follow-up: More than three dozen congressional and election offices in 32 states have now received suspicious mail. In Arizona, the offices of Reps. Adelita Grijalva, Greg Stanton and Yassamin Ansari were targeted, and Grijalva’s letter tested negative for anything harmful. The FBI says it is working to identify whoever sent the letters. Reported by Cronkite News, citing Axios and Roll Call. [5]
Chicago Loop (follow-up): In the reporting we reviewed, there was no update on charges against the man arrested after the gunfire at about 04:30 CT Tuesday near the Kluczynski Federal Building, 230 S. Dearborn St. Police said charges were pending. No one was injured, and DHS reported minor damage to federal property. Reported by FOX 32 Chicago and the Chicago Sun-Times. [6][7]
Travel Advisories & Hotspots
Ethiopia (U.S. Embassy, Oct. 20): Fighting has decreased in the Tigray and Afar regions, but the embassy says the situation may change at any time. Flights at Axum and Shire remain suspended. U.S. citizens should not travel to Amhara (including Lalibela), Tigray or Afar for any reason, and should leave if it is safe to do so. [9]
Saudi Arabia: Riyadh’s King Khalid International Airport has formally reopened, but every arrival and departure still needs prior permission from the civil aviation authority. See Aviation for the airline changes. Reported by bne IntelliNews. [8]
Civil Unrest in Business Hubs
France: After a quieter night helped by the curfews, new orders ran in Paris around Place de la République from 23:00 Tuesday to 06:00 Wednesday. Gatherings were banned from 20:00 in Les Halles and near the Élysée, parliament, the Champs-Élysées, Place Vendôme and the train stations. Marseille imposed curfews for minors in its hardest-hit commercial areas. PM Sébastien Lecornu said the deployment for Saturday’s protests will be “massive,” and troops will reinforce police. Officials say the man arrested over the Limoges town hall fire was on a security watch list and belonged to an ultra-left group. Reported by ABC News (Australia), from Reuters and AP. [10]
Tirana, Albania: Police again used water cannon Tuesday as protesters threw petrol bombs outside the prime minister’s office. Local media, citing police, report about 300 arrests in the first seven days. The Supreme Court building was damaged, and the court has adjourned all but urgent hearings. Two journalists and several protesters reported being hit by rubber bullets, which the police director did not deny. Protesters smashed the “Dialogue” chairs that PM Edi Rama placed outside his office. Reported by Serbian Monitor, citing Al Jazeera Balkans. [11]
Aviation & Transport
Riyadh (RUH): Reported by bne IntelliNews. [8]
Moved into 2027: Delta’s Atlanta–Riyadh launch (March 2027) and Cathay Pacific’s Hong Kong–Riyadh service (Jan. 31, 2027).
Into November: Philippine Airlines (through Nov. 29), Lufthansa Group (through Nov. 18) and Air France-KLM (through Nov. 7).
Suspended through late October: Akasa Air (through Oct. 27), Air India and IndiGo (through Oct. 24), and Etihad (Abu Dhabi–Riyadh/Dammam through Oct. 24).
Qatar Airways has suspended Riyadh and Dammam with no restart date.
New York–New Jersey: The GWB westbound upper level reopened shortly before 01:00 after the overnight closure. Because commercial vehicles may only use the upper level, the closure backed traffic up across the Bronx to the Major Deegan. [1][2]
Outer Banks, N.C.: N.C. 12 remains closed between the Marc Basnight Bridge and Rodanthe, and the mandatory evacuation for Hatteras Island visitors remains in effect. Dare County expects more overwash at high tides through Thursday, Oct. 22. [17]
Cyber & Doxxing Risk to Principals
ConnectWise Cloud Backup (Microsoft 365), update: In its 00:30 UTC Oct. 21 update, ConnectWise said the account and credential reset is complete and it is preparing a phased restoration. Cloud Backup, SaaS Security and Cloud Management remain suspended. Partners should keep affected application connections disabled until ConnectWise issues formal re-enablement instructions. The next update is due by 13:00 UTC today. [12]
Germany (AfD email theft): Hackers stole more than 421,000 emails from accounts belonging to members of the AfD party, including messages sent by co-leader Alice Weidel. A website has published summaries that reportedly include photos of ID cards, bank statements and membership lists. The party says only a small number of mostly unused accounts at its email provider were copied. Reported by Euronews (AFP, citing Bild). [13]
Action: Old, dormant mailboxes still hold IDs and financial records. Close or purge legacy accounts that belong to principals and their staff.
Severe Weather
New York City and Northeast (NWS): Today will be mostly sunny with a high near 61. Northeast winds of 13–17 mph will gust to 29 mph. [20] Coastal Flood Advisories cover Southern Nassau from 15:00 to 19:00 and Southwest Suffolk from 17:00 to 21:00. A Coastal Flood Statement covers Staten Island and Hudson, eastern Essex and eastern Union counties in New Jersey through 18:00. [14] Another Coastal Flood Advisory covers Ocean, Atlantic, Cape May and southeastern Burlington counties in New Jersey until 22:00. [15]
North Carolina Outer Banks (NWS): Coastal Flood Warnings for Hatteras and Ocracoke islands run until 20:00 tonight. High Surf Advisories for Hatteras Island and the Northern Outer Banks run until 20:00 Thursday. [16] For road and evacuation status, see Aviation & Transport. [17]
Super Typhoon Rosal (Champi), W. Pacific (PAGASA, 17:00 PHT): The storm was 725 km east of Aparri, Cagayan, with 205 km/h winds and gusts to 250 km/h, moving west-northwest at 25 km/h. Signal No. 2 is up for Batanes. Signal No. 1 covers Cagayan including the Babuyan Islands, eastern Isabela, Ilocos Norte, Apayao and northeastern Catanduanes. PAGASA says the highest likely signal is No. 3, and forecasts the storm 370 km east of Basco by 14:00 Thursday before it turns north. [18]
Tradecraft Tip (general guidance, not tailored advice)
Road rage on a fixed route. The GWB shooting allegedly began with a near-collision on an on-ramp. On bridges, in tunnels and on elevated highways, a driver has no way to pull off. If another vehicle cuts your principal off, let it go. Don’t brake-check, gesture or try to pace it. Open the gap, change lanes away from it, and note the plate only if you can do so safely. If the other driver follows or comes up alongside, keep moving, call 911, and lead them toward a police presence, not to your destination. Before heavy-traffic routes, brief drivers that winning the lane is never the mission.
Coming Up
Tonight, Oct. 21: The President holds a rally at T. Ed Garrison Arena in Pendleton, S.C., at 19:00 ET. Thursday, Oct. 22: a rally at Sioux Gateway Airport in Sioux City, Iowa, at 19:00 ET (18:00 local). Check FAA TFRs if your principal flies near either one. Reported by Roll Call Factba.se. [19]
Thursday, Oct. 22: PAGASA forecasts Rosal at its closest to Batanes. Dare County expects more overwash on N.C. 12 through Thursday’s high tides. [17][18]
Sources
CBS New York, updated Oct. 21, 06:08 ET — https://www.cbsnews.com/newyork/news/george-washington-bridge-upper-level-closed/
ABC7 New York, Oct. 21 — https://abc7ny.com/post/rockland-man-killed-possible-road-rage-shooting-george-washington-bridge/19963674/
ABC News (Australia), Oct. 21 — https://www.abc.net.au/news/2026-10-21/brendan-nugent-faces-court-over-alleged-attack-on-helen-haines/107291248
ABC News (Australia), Helen Haines live updates, Oct. 21 — https://www.abc.net.au/news/2026-10-21/helen-haines-attack-live-updates-brendan-nugent-court-hearing/107290276
Cronkite News, Oct. 20 — https://cronkitenews.azpbs.org/2026/10/20/white-powder-mail-congress/
FOX 32 Chicago, Oct. 20 — https://www.fox32chicago.com/news/chicago-shooting-kluczynski-federal-building
Chicago Sun-Times, Oct. 20 — https://chicago.suntimes.com/crime/2026/10/20/police-presence-reported-near-loops-kluczynski-federal-building
bne IntelliNews, Oct. 21 — https://www.intellinews.com/airlines-push-saudi-arabia-flight-suspensions-into-2027-after-riyadh-attack-477699/
U.S. Embassy Ethiopia, Security Alert Oct. 20 — https://et.usembassy.gov/security-alert-u-s-embassy-addis-ababa-ethiopia-october-20-2026/
ABC News (Australia), Reuters/AP, Oct. 21 — https://www.abc.net.au/news/2026-10-21/troops-deployed-and-curfews-implemented-to-quell-france-riots/107290576
Serbian Monitor, Oct. 21 — https://www.serbianmonitor.com/en/anti-government-protests-in-albania-show-no-sign-of-abating/
ConnectWise Trust Center, Cloud Backup advisory (updated Oct. 21, 00:30 UTC) — https://www.connectwise.com/company/trust/advisories
Euronews, Oct. 20 — https://www.euronews.com/2026/10/20/hackers-steal-421000-emails-belonging-to-members-of-germanys-far-right-afd-party
NWS active alerts, New York — https://api.weather.gov/alerts/active?area=NY
NWS active alerts, New Jersey — https://api.weather.gov/alerts/active?area=NJ
NWS active alerts, North Carolina — https://api.weather.gov/alerts/active?area=NC
Dare County, Bulletin #5, Oct. 20 — https://content.govdelivery.com/accounts/NCDARECOUNTY/bulletins/42fcc0f
PAGASA, Tropical Cyclone Bulletin #6, Super Typhoon Rosal (17:00 PHT, Oct. 21) — https://pubfiles.pagasa.dost.gov.ph/tamss/weather/bulletin_rosal.pdf
Roll Call Factba.se, President’s public schedule — https://rollcall.com/factbase/trump/calendar/
NWS forecast, New York City — https://api.weather.gov/gridpoints/OKX/33,42/forecast
Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.
Open-source reporting only; verify before acting.