Bottom Line Up Front
Riyadh’s King Khalid International Airport (KKIA) reopens today under threat. Terminal 1 is handling domestic flights and Terminal 2 international flights by national carriers, effective Oct. 25. [1][2] Houthi military spokesman Yahya Saree says the airport remains a “military target” and warned airlines, staff and travelers not to use it. [2][3] Overnight, the Saudi-led coalition says it intercepted drones and missiles aimed at Riyadh and Khamis Mushait and 10 ballistic missiles fired toward the south. [2][4]
Iran: strike or deal. President Trump told reporters Saturday that a new strike on Iran could come “maybe tomorrow,” and that a deal was also possible. [7][8] Iran’s army says it shot down a U.S. LUCAS drone over Bandar Abbas. This is an Iranian claim only. [4] We found no new public details on the U.S. ordered departure from Saudi Arabia or the DNI memo on Iranian plotting. [5][9]
France: The Trappes suspect’s custody was suspended Saturday evening for psychiatric observation of up to 48 hours. [10][11][12] In Paris, 142 people were arrested at Saturday’s marches. Outlets differ on how many were placed in custody (120 or 126). [14][15][16] The Yellow Vests have called a pot-banging rally at the Assemblée nationale for Friday, Oct. 30, and sit-ins at 14:00 on Saturday, Oct. 31. [20]
Also today: A memorial march for the Trappes victim leaves Aubervilliers town hall at 14:00 Paris time (09:00 ET). [13] Sagawa Express says data on up to about 53 million shipments may have been exposed. [26] Champi is weakening near Kyushu. [33][34] Hurricane Vance is down to 85 mph. [30] Frost and freeze alerts around New York end at 09:00. [27]
For solo operators: If your principal is flying into or out of Riyadh, confirm the flight directly with the airline and expect alerts and short closures. [1][2] In Paris, avoid Aubervilliers town hall from 13:30 Paris time. Remember that France changed its clocks overnight: Paris is now 5 hours ahead of ET until the U.S. changes on Nov. 1.
For corporate security teams: Briefing items for leadership: (1) Treat travel through KKIA as high-risk. The Houthis name the airport as a target, and U.S. government staff still need special authorization to use any Saudi airport, [2][3][5] (2) Have a plan for staff in the Gulf in case of a U.S. strike on Iran in the coming days, [7][8] (3) Expect Yellow Vest actions in France on Oct. 30–31, [20] and (4) Warn Japan-based staff about phishing and pretexting that uses Sagawa Express shipping-label data. [26]
Threats to Executives & Public Figures
Iranian targeting of Americans (follow-up): We found no new public details on the DNI memo since Saturday’s brief. CBS’s live coverage only repeats it. CBS also cites U.S. Ambassador to the U.N. Mike Waltz telling the Financial Times that the war could last another year. [9] Iranian Parliament Speaker Mohammad Bagher Ghalibaf said Iran is “ready to respond beyond their imagination” to any violation of its territory. [4]
Action: Principals with a public profile on Iran or the Gulf should keep the raised posture from Saturday’s brief. That means varying routes and timings and limiting advance publicity of travel.
Suspicious letters and Rep. Moskowitz threat / GWB case (follow-up): We found no new public details since Saturday’s brief. The FBI/USPIS PSA guidance still applies. The GWB grand jury remains scheduled for Monday, Oct. 26, as previously reported.
Travel Advisories & Hotspots
Saudi Arabia:
KKIA reopening: Starting Oct. 25, Terminal 1 handles domestic flights and Terminal 2 handles international flights by national carriers. Passengers should confirm bookings and flight status with their airline. [1][2] KKIA halted operations Oct. 10 after a Houthi attack. [2]
Houthi threat: Saree says the airport remains a “military target” and that operations against it will continue. He warned all airlines, airport staff and travelers. [2][3] The Houthis also claim Saturday attacks on the airport and on oil facilities. Saudi Arabia has not commented. Houthi claim only. [2]
Overnight interceptions: The coalition says it intercepted two drones and a ballistic missile aimed at Riyadh, and a cruise missile aimed at Khamis Mushait. It later reported intercepting 10 ballistic missiles fired toward southern Saudi Arabia. Civil defense alerts in Riyadh, Abha and Khamis Mushait were lifted minutes later. [2][4] Al Jazeera reports a missile downed over Riyadh, and CBS reports explosions heard in the capital Sunday as the airport was due to reopen. [3][9]
Where sources disagree: Reuters gives the toll of the attack that closed KKIA as 13 killed and more than 300 wounded. [2] Our Oct. 23 brief, citing Arab News, reported 18 killed at KKIA between Oct. 7 and 11. These may count different attacks; we have not resolved the difference.
U.S. posture: A U.S. Embassy alert on Oct. 24 restates the Oct. 23 advisory. It remains Level 3, with an ordered departure of non-emergency U.S. government staff and families. U.S. government employees “require special authorization to use any airport in Saudi Arabia.” [5] The Oct. 23 updates cover 13 Middle East countries, including Saudi Arabia, the UAE, Qatar, Bahrain, Kuwait, Oman, Jordan and Israel. The National reports that the advisory warns that Houthi attacks on Saudi Arabia “have the potential to escalate rapidly beyond that immediate area.” [6]
Action: Do not route principals through Riyadh unless the trip is essential. If you must, keep time in the terminal short, know where the shelters are, and have a ground alternative ready.
Iran and the Gulf:
Strike timing: Trump said: “We’re thinking about doing it, and maybe tomorrow,” and “Do you really think I’m going to tell you if I’m going to do it?” [7] He also said “there’s a possibility we’ll have a nice, big, beautiful agreement.” [8] The Hill reports that the U.S. military has prepared strike options for after the Nov. 3 midterms. Reported by The Hill via Iran International. [4][8]
Iranian claims: Iran’s army says it shot down a U.S. LUCAS drone over Bandar Abbas at about 07:09 GMT (03:09 ET). Unconfirmed; Iranian claim only. [4] Iran sent conflicting signals on a possible deal to reopen the Strait of Hormuz. [4] Foreign Minister Abbas Araghchi said U.S. bases have become “the main source of insecurity” for the countries that host them. [4]
Action: For principals in the Gulf, review shelter-in-place and exit plans now. Iran has threatened a wider response to any new U.S. strike. [6]
Civil Unrest in Business Hubs
France, after Oct. 24:
Paris: The police prefecture says 142 people were arrested. [14][15] Sources disagree on how many were placed in custody: franceinfo says 120, while La Tribune Dimanche and Midi Libre say 126, citing prefecture spokesperson Hélène Denéchère. [14][15][16] In Paris, one shop was broken into and robbed and another was damaged. [14]
Nationwide: Turnout was 410,000 according to the Interior Ministry and 800,000 according to the CGT. [14] Serious injuries were reported in Toulouse and Clermont-Ferrand. [14][16] In Lyon, 22 people were injured, 18 of them police. A bank branch was set on fire in Tours. Reported by Midi Libre. [16] Seven shops were looted or damaged in Bouches-du-Rhône. [14]
Next actions: The Yellow Vest movement is calling for a pot-banging rally (”casserolade”) outside the Assemblée nationale on Friday, Oct. 30, from 18:00 to 21:00, with pot-banging nationwide at 19:00. On Saturday, Oct. 31, it is calling for sit-ins at 14:00 outside the Assemblée nationale and town halls across France. Organizer’s site. [20] franceinfo reports the call to mobilize on Oct. 31. [21]
Action: Plan to keep principals away from the area around the Assemblée nationale (7th arrondissement) on Friday evening and Saturday afternoon, and from town hall squares on Saturday.
Trappes and La Verrière (follow-up):
Custody suspended: The anti-terror prosecutor (PNAT) says suspect Kévin T.’s custody was suspended after a psychiatric exam Saturday evening. He was moved to the Paris police prefecture’s psychiatric infirmary for observation of up to 48 hours, to determine whether custody and questioning can continue. [10][11][12] Toxicology tests found cannabis and cocaine in his blood. [10][11] Custody of his family members and associates continues. [10]
Casualties: 1 dead and 5 wounded. [10] La Verrière’s mayor says the 12-year-old girl is doing better (”va mieux”). Single source (franceinfo). [10]
Memorial march today: It leaves Aubervilliers town hall at 14:00 Paris time (09:00 ET), organized by the victim’s MMA club. Organizers ask people to come “dans le calme, la dignité et le recueillement” (calmly, with dignity and in quiet reflection). [13]
Changed: Earlier briefs gave Tuesday, Oct. 27 as the custody limit. Reports do not say how the suspension affects that limit.
Milan, after Oct. 24: About 10,000 people marched. Police blocked access to the Duomo, and unlike the previous weekend, there was no looting. [17][18] There were 3 arrests and 41 people were referred for prosecution. 56 minors were checked at police headquarters. [17][19] There were brief clashes on corso Venezia. Il Messaggero reports that the presumed organizer of the “Movimento 17 ottobre” Instagram page was taken to police headquarters during the march. [18]
Aviation & Transport
Saudi Arabia: KKIA has partially resumed (see Travel). Flights at KKIA are limited to national carriers for international routes. Confirm every leg directly with the airline. [1][2]
Russia (drone restrictions): Overnight, Rosaviatsia imposed temporary restrictions on arrivals and departures at Kazan, Samara (Kurumoch), Ulyanovsk (Barataevka) and Cheboksary. [22][23]
Japan (Champi): Heavy rain and strong winds are forecast for northern Kyushu and Shikoku through Tuesday. Check regional flights and rail with carriers before travel. [33]
U.S.: As of 06:01 ET, the FAA showed no ground stops or ground delay programs at major airports. [24]
Cyber & Doxxing Risk to Principals
Sagawa Express (Japan): Up to about 53.23 million sets of personal information may have been compromised through the delivery-tracking service. The data includes the names, addresses and phone numbers of senders and recipients on shipping labels from June 21 to Sept. 30, plus corporate customers’ addresses and phone numbers. [26]
Action: Principals who shipped or received parcels in Japan should expect fake delivery texts and calls. Their home addresses may be exposed, so review residence security for high-profile principals.
Capcom: Capcom says attackers accessed its CAPCOM ID service and took 11,774,247 email addresses with account metadata, including the IP address of the last login. 196 accounts had their passwords changed by the attackers. [35]
Action: Family members who game are a common route for phishing. Warn them about fake Capcom emails.
ConnectWise Cloud Backup (formerly SkyKick), follow-up: As of the Oct. 24 14:00 UTC (10:00 ET) update, ConnectWise aims to begin phased partner onboarding Monday, Oct. 26, starting with access to restore backups, if its checks succeed. Keep affected app connections disabled until ConnectWise gives instructions. [25]
CISA KEV: CISA has listed no new additions since Oct. 23. [36]
Severe Weather
New York and New Jersey (NWS): NYC will be sunny today with a high near 65, clear tonight with a low around 51, and sunny Monday with a high near 68. [29] Freeze Warnings cover central and southern N.J., including Middlesex, Mercer, Ocean and Atlantic counties, until 09:00. Frost Advisories cover the rest of southern N.J., southern Connecticut and eastern Suffolk until 09:00. [27]
Elsewhere in the U.S. (NWS): Coastal Flood Warnings cover Florida’s Atlantic coast through early Oct. 28, coastal Glynn and Camden, Ga., until Oct. 27, the Upper Keys until 05:00 Oct. 26, Charleston and Colleton, S.C., until 11:00 today, and coastal San Diego and Orange counties, Calif., through Oct. 29. Gale Warnings are in effect off the Southeast coast. Flood Warnings and Watches cover parts of Colorado, New Mexico, Arizona and Utah. A Freeze Warning covers parts of Maryland and Virginia until 09:00. Winter Storm Warnings cover interior Alaska. [28]
Hurricane Vance, E. Pacific (NHC Advisory 16, 04:00 ET): Vance has 85 mph winds and a pressure of 980 mb. It is about 295 miles southwest of Acapulco, moving north-northwest at 5 mph, and gradual weakening is expected. No coastal watches or warnings are in effect. It could bring 2–4 inches of rain (isolated 7 inches) to Colima and western Michoacán and Jalisco through Thursday, with possible flooding and mudslides. Surf will be life-threatening. [30]
Atlantic (NHC): No tropical cyclones are expected in the next 7 days. [31] In the Central Pacific, a low near the Date Line has a 40% chance of forming in 48 hours and a 50% chance in 7 days. [32]
Champi, Japan: At 12:00 Japan time (23:00 ET Saturday), the Japan Meteorological Agency (JMA) placed Champi over the East China Sea with a pressure of 996 hPa and winds of 20 m/s (gusts to 30), moving northeast at 20 km/h. JMA expects it to become extratropical about 70 km west-northwest of Makurazaki by Monday noon. [34] NHK warns of up to 200 mm of rain in northern Kyushu and Shikoku in the 24 hours to Monday noon, and winds up to 72 km/h. 73 mm per hour was recorded in Aki, Kochi. [33]
Tradecraft Tip (general guidance, not tailored advice)
When an airport reopens after an attack, plan for the gap between “open” and “safe.” A reopening tells you the operator has restored services. It does not mean the threat is gone, especially when an attacker has said by name that it will keep targeting the site. Treat the first days as degraded operations: fewer airlines, fewer terminals and gates, sudden alerts and pauses. Keep principals landside for as little time as possible. Use the fastest check-in and security lanes available and do not wait in public areas. Know where the nearest hardened shelter is in each terminal. Have a fallback airport and a ground route ready. Decide in advance what will make you switch: an alert during your arrival window, a renewed claim of an attack, or the principal’s airline suspending service.
Coming Up
Sunday, Oct. 25: The Aubervilliers memorial march begins at 14:00 Paris time (09:00 ET). France is now on winter time, 5 hours ahead of ET until Nov. 1. [13]
Monday, Oct. 26: The GWB grand jury meets (previously reported). ConnectWise aims to begin restore access. Champi becomes extratropical near Kyushu. [25][34]
Monday–Tuesday, Oct. 26–27: The Trappes suspect’s psychiatric observation (up to 48 hours) ends. The Israel election is Tuesday, as previously reported. [10]
Sources
Argaam, Oct. 25 — https://www.argaam.com/en/article/articledetail/id/1946766?amp=
Reuters via Investing.com, Oct. 25 — https://www.investing.com/news/commodities-news/saudi-arabia-intercepts-drones-and-missiles-as-fighting-with-yemens-houthis-continues-4971080
Al Jazeera live, Oct. 25 — https://www.aljazeera.com/news/liveblog/2026/10/25/iran-war-live-trump-hints-at-possible-sunday-iran-attack-or-deal-reached
Iran International live, Oct. 25 — https://www.iranintl.com/en/liveblog/202610244311
U.S. Embassy Riyadh, Travel Advisory alert, Oct. 24 — https://sa.usembassy.gov/travel-advisory-saudi-arabia-october-2026/
The National, Oct. 24 — https://www.thenationalnews.com/news/mena/2026/10/24/us-issues-travel-advisories-for-13-middle-east-countries-after-houthi-attacks/
TRT World, Oct. 25 — https://www.trtworld.com/article/fc66624f64a8
Livemint, Oct. 25 — https://www.livemint.com/news/us-news/usiran-war-trump-warns-of-fresh-strikes-on-tehran-says-attack-could-come-tomorrow-11792898072352.html
CBS News live, updated Oct. 25 05:44 ET — https://www.cbsnews.com/live-updates/iran-war-trump-us-oil-gas-prices-strait-of-hormuz-midterms/
franceinfo, Oct. 25, 10:21 Paris — https://www.franceinfo.fr/faits-divers/terrorisme/attentat-raciste-a-trappes/la-garde-a-vue-du-suspect-de-l-attentat-raciste-a-trappes-suspendue-le-temps-d-une-periode-d-observation-psychiatrique-susceptible-de-durer-48-heures-annonce-le-parquet-antiterroriste_8252896.html
RTL, Oct. 25, 10:22 Paris — https://www.rtl.fr/actu/justice-faits-divers/attentat-a-trappes-la-garde-a-vue-du-suspect-suspendue-apres-un-examen-psychiatrique-7900689043
20 Minutes, Oct. 25, 10:34 Paris — https://www.20minutes.fr/societe/4257304-20261025-attaque-trappes-verriere-garde-vue-suspect-suspendue
BFMTV, Oct. 25, 08:38 Paris — https://www.bfmtv.com/police-justice/attentat-raciste-a-trappes-une-marche-blanche-organisee-ce-dimanche-en-hommage-a-pengo-bossio-wangi-tue-lors-de-l-attaque_AV-202610250089.html
franceinfo live, Oct. 25 — https://www.franceinfo.fr/societe/manifestations/direct-manifestations-du-24-octobre-142-personnes-ont-ete-interpellees-a-paris-dont-120-ont-ete-placees-en-garde-a-vue-selon-la-prefecture-de-police_8252812.html
La Tribune Dimanche, Oct. 25 — https://www.latribune.fr/article/la-tribune-dimanche/societe/39333203345164/manifestations-du-24-octobre-142-interpellations-dont-126-gardes-a-vue-a-paris
Midi Libre live, Oct. 25 — https://www.midilibre.fr/2026/10/25/en-direct-mobilisation-du-24-octobre-pres-de-1-000-interpellations-plusieurs-blesses-graves-les-dernieres-infos-au-lendemain-des-manifestations-13619511.php
Corriere della Sera (Milano) live, Oct. 24 — https://milano.corriere.it/cronaca/diretta-live/26_ottobre_24/milano-manifestazioni-scontri-oggi.shtml
Il Messaggero, Oct. 25 — https://www.ilmessaggero.it/italia/scontri_milano_corteo_deviato_duomo_para_folgore_cosa_e_successo-9846562.html
17 octobre gilet jaune (organizer site), checked Oct. 25 —
https://17octobregiletjaune.net/
franceinfo, Oct. 24, 13:42 Paris — https://www.franceinfo.fr/societe/manifestations/les-gilets-jaunes-appellent-a-une-nouvelle-mobilisation-le-31-octobre-et-denoncent-une-derive-autoritaire_8252203.html
NEWS.ru, Oct. 25 — https://news.ru/regions/rosaviaciya-ogranichila-rabotu-aeroportov-srazu-v-chetyreh-gorodah
URA.RU, Oct. 25 — https://ura.news/news/1053138762
FAA National Airspace System Status (live, checked 06:01 ET Oct. 25) — https://nasstatus.faa.gov/api/airport-status-information
ConnectWise Trust Center, updated Oct. 24, 14:00 UTC — https://www.connectwise.com/company/trust/advisories
The Japan Times (Jiji), Oct. 24 — https://www.japantimes.co.jp/business/2026/10/24/sagawa-express-unauthorized-access/
NWS active alerts, NY/NJ (live, Oct. 25) — https://api.weather.gov/alerts/active?area=NY,NJ
NWS active alerts, nationwide (live, Oct. 25) — https://api.weather.gov/alerts/active
NWS New York forecast, NYC (live, Oct. 25) — https://api.weather.gov/gridpoints/OKX/33,42/forecast
NHC, Hurricane Vance Advisory 16, Oct. 25 — https://www.nhc.noaa.gov/text/MIATCPEP2.shtml
NHC, Atlantic Tropical Weather Outlook, Oct. 25 — https://www.nhc.noaa.gov/text/MIATWOAT.shtml
NHC, Eastern Pacific Tropical Weather Outlook, Oct. 24 23:00 PDT — https://www.nhc.noaa.gov/text/MIATWOEP.shtml
NHK World, Oct. 25 — https://www3.nhk.or.jp/nhkworld/news/20261025de65153/
FNN (JMA data), Oct. 25 — https://www.fnn.jp/articles/-/1139452
Security Affairs, Oct. 24 — https://securityaffairs.com/201626/data-breach/capcom-data-breach-exposes-11-7-million-email-addresses.html
CISA Cybersecurity Alerts & Advisories (checked Oct. 25) — https://www.cisa.gov/news-events/cybersecurity-advisories
Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.
Need a custom security brief for an event or trip? Request one here.
Open-source reporting only; verify before acting.