Bottom Line Up Front
Iran: President Trump told Fox News that U.S. forces hit a newly built Iranian anti-aircraft site “last night,” calling it a “minor attack” that “wasn’t war.” U.S. media had reported strikes on Iran’s Qeshm Island. Iran’s chief negotiator, Mohammad Bagher Ghalibaf, says Iran is “ready for battle with its finger on the trigger,” while Qatar says talks continue. [1][2]
Strait of Hormuz (Unconfirmed): The IRGC claims four “violating” oil tankers hit naval mines south of the Strait on Wednesday and are still burning, two other vessels were stopped, and a 56th U.S. MQ-9 was shot down at 0430 Tehran time (0100 GMT). The vessels are not named, and we found no independent confirmation. Separately, UKMTO says a tanker was hit by two projectiles off Lima, Oman, on Tuesday evening. [3][4][5][6][7]
Tehran today: Nationwide rallies mark the anniversary of the 1979 U.S. Embassy seizure. Reported by Iran International: a rally poster reads “We will kill Trump” and advertises a 2000 gathering in Enghelab Square (1130 ET) to burn images of U.S. officials. [8][9][10]
U.S. election: Democrats won both chambers of Congress. Ballotpedia counts at least a 231-141 House majority and 54-44 in the Senate, with seven Senate seats flipped. In Washington state, a SWAT team arrested a man accused of emailing a judicial candidate threats of a “public execution.” [11][12][13][14]
Europe: Officials say at least seven flights and an Israel-bound cruise ship received bomb threats on Tuesday. All searches found no explosives, and the European Commission says it is too early to say whether the incidents are linked. [16][17]
For solo operators: Expect political rhetoric to stay hot after the election. Treat threats made to candidates and officials as real until police say otherwise, and keep an eye on post-election gatherings near a principal’s office or home. [11][13] If a principal is in Paris on Thursday, plan around the national strike. The march route is still not approved and a court hearing is set for 1300 local today. [20]
For corporate security teams: Briefing items for leadership:
Gulf: A U.S. strike, IRGC claims of mined tankers and another projectile hit off Oman all point to rising risk for shipping and for staff in the Gulf. Al Jazeera reports that Iranian officials have suggested European countries and undersea cables in the Gulf could be targets. [1][3][6]
Travel data: About 46,000 Singapore Airlines booking records were accessed through a breach at software provider Amadeus. For about 620 records, emails, phone numbers and travel document details may also be exposed. [25]
Europe infrastructure: Suspected cyberattacks on supermarket refrigeration controls have now been reported in at least 10 countries, and the EU warns of more disruption. [26][27][28]
Supply chain: Garment wage protests around Dhaka continued Tuesday, with clashes in Mirpur, Ashulia and Gazipur and at least 70 factories shut in Ashulia. [21][22][23]
Threats to Executives & Public Figures
U.S., Washington state: Kelso Police say a Cowlitz County judicial candidate received an email threatening “a public execution if they did not concede the election immediately.” Police linked it to Edward M. Williams, 37, also known as Darryl E. McWilliams, who they say had recently threatened to shoot officers who came to his home. A SWAT team arrested him at his Castle Rock home at about 0600 local on Election Day. Officers seized several firearms, and he was booked on a felony cyber harassment charge. [13][14]
EP note: A threat paired with known access to firearms and threats against police is the pattern that should move a case from “monitor” to “act.” Share it with local police early.
Iran, threat to U.S. officials: Reported by Iran International: a poster for today’s government-sponsored rally shows President Trump, Prime Minister Netanyahu, Vice President Vance and envoy Steve Witkoff in burning suits under the words “We will kill Trump,” in Persian and English. [10]
Canada, Toronto (follow-up): At a briefing on Oct. 31, Toronto Police Inspector Kristy Smith said investigators believe the suspects may have targeted the Morton family’s Bridle Path home because of the neighborhood’s wealth, where they expected to find valuables. Police are still searching for three suspects, including Daijohn Richards. [15]
Travel Advisories & Hotspots
Iran, Strait of Hormuz: Trump said on “Fox & Friends” that Iran “built an anti-aircraft facility... As soon as it was completed, we hit it last night.” An Israeli military spokesperson said Israel was not involved. [1][2] Mohsen Rezaei, secretary of Iran’s Supreme National Security Council, called the U.S. reply to Iran’s seven conditions for reopening the Strait “not convincing.” [1]
Escalation risk: Trump told the Financial Times, “We’re locked and loaded if we need to go, but there may be no reason for it.” [2] U.S. media, citing U.S. officials, have reported plans for strikes that could begin as early as Wednesday. This remains Unconfirmed by any official statement. [1]
IRGC claim (Unconfirmed): Reported by Anadolu, Mehr and Middle East Eye, all citing the same IRGC statement: four tankers struck mines on a “prohibited” route south of the Strait and remain ablaze, and two other vessels were detained. No ship names, flags or casualties have been given. [3][4][5]
Oman, Gulf of Oman: UKMTO says a tanker’s company security officer reported two unidentified projectiles hit the engine room at 1900 GMT Tuesday (1400 ET), about 14 NM northeast of Lima. No casualties or environmental impact were reported. This is the second hit in that area since Sunday. [6][7]
Iran, Tehran: State media say rallies are being held at more than 900 locations. In Tehran, the main march was to run from Palestine Square along Taleghani Street to the former U.S. Embassy. Where sources differ: Tasnim says the Tehran march began at 0900 local, while WANA had given 1030 in Tuesday’s brief. [8][9]
Ukraine: Ukraine’s Air Force says Russia launched 310 drones overnight and 272 were shot down or neutralized by 0800. Drones hit 19 locations. Energy sites were hit in Zhytomyr and Kovel, a shopping center was damaged in Odesa, and two people were hurt in Dnipro. [18][19]
Civil Unrest in Business Hubs
France, Paris (Thursday): Unions want to march to Place de la Concorde, but the police prefecture had not approved the route as of Wednesday morning. The Île-de-France unions asked the Paris administrative court to force a decision, and the hearing set for 0930 was moved to 1300 local (0700 ET). The start is given as 1300 (Unsa) or 1400 (CGT). [20]
France, Lyon (Thursday): A prefectural order bans marches across much of central Lyon from 0900 to 2000, including the Guillotière bridge and the Presqu’île. The prefecture cites the violence on Oct. 17. [20]
Bangladesh, Dhaka: On Tuesday, the fourth day of wage protests, garment workers clashed with police around Dhaka, including Ashulia, Gazipur and the capital’s Mirpur area. Police used tear gas and sound grenades, and dozens of people, including police officers, were hurt. Ashulia police said at least 70 factories had closed for the day by 1120 local. [21][22][23]
Aviation & Transport
FAA (checked 0558 ET): Departure delays of 46 minutes to an hour at Fort Lauderdale (FLL) and 31 to 45 minutes at Miami (MIA), both for weather. No delays are listed for the New York, Washington or Los Angeles airports. Santa Ana (SNA) remains closed overnight through Nov. 8, and LAX, SAN and LAS remain closed to unscheduled transient general aviation without prior permission. [24]
Europe, bomb threats (follow-up): Al Jazeera says Ryanair, Wizz Air, SAS and LOT flights were targeted, with four Ryanair flights hit. London’s Metropolitan Police checked threats to aircraft at Heathrow and one at Manchester and found “no security issues.” The Greek Coast Guard evacuated the Haifa-bound cruise ship Crown Iris off Syros, with about 1,500 people aboard, and no device was found. [16] CGTN says threats hit flights to Warsaw, Sofia, Rome and Murcia, and the Commission says it is too early to link them. [17]
EP note: Expect added screening and short-notice diversions on intra-European flights. Build slack into connections this week.
Cyber & Doxxing Risk to Principals
Singapore Airlines / Amadeus: Reported by CNA: SIA says about 46,000 booking records were accessed through unauthorized access to Amadeus’ platform. The data includes names, booking references, itineraries and booking classes. For about 620 records, emails, phone numbers, travel document details and KrisFlyer numbers may also have been exposed. SIA says its own systems were not breached. [25]
What to do: An itinerary leak tells an adversary where a principal will be. If a principal booked SIA recently, consider changing booking references and watch for phishing that cites real trip details.
Europe, refrigeration attacks (follow-up): Attackers changed settings on store refrigeration controls overnight into Monday, and Germany, Greece and Italy reported incidents on Tuesday. The BBC lists at least 10 affected countries. Danfoss says its products were involved. The EU’s food commissioner warned of further disruption. [26][27][28]
CISA: CISA added one Known Exploited Vulnerability on Nov. 3, a WordPress Core race-condition flaw. Teams running WordPress sites for principals or family offices should patch now. [29]
Severe Weather
New York City: No active alerts for New York, New Jersey or Connecticut. Wednesday is sunny with a high near 72°F and a south wind of 5–12 mph. Thursday brings a 30% chance of showers after 0700. [30][32]
U.S. flooding: The NWS has 39 flood warnings in effect, mostly in Arizona (Maricopa County), Florida (Volusia, Lake and Seminole counties), Missouri, Kansas, Iowa and Nebraska. [31]
Tropics: The NHC says a low may form south of Bermuda in the next day or so and could gain subtropical traits late this week, with a 20% chance in 48 hours and 40% in seven days. In the eastern Pacific, a tropical depression is likely to form southeast of Hawaii (50% in 48 hours, 70% in seven days), and a system off Central America could bring heavy rain there later this week. [33][34]
Tradecraft Tip
General guidance, not tailored advice.
Protect the itinerary like you protect the principal. The Amadeus breach is a reminder that travel plans leak through third parties you never deal with directly. Simple steps help:
Book under an assistant’s or company travel account where possible, and keep the principal’s personal email and phone off reservations.
Share full itineraries only with people who need them, and send updates through one secure channel.
Change routine details, such as hotels or flight times, when a booking system reports a breach.
Treat any call or email that cites real trip details as suspicious until you have verified the sender.
Coming Up
Wed, Nov. 4: Paris court hearing on Thursday’s march route at 1300 local (0700 ET). Tehran’s Enghelab Square gathering at 2000 local (1130 ET). The UK Supreme Court continues the Palestine Action ban appeal. SNCF’s Thursday train list is expected this evening. [10][20][35]
Thu, Nov. 5: National strike and marches across France, with route limits in Lyon and a Paris route still pending. [20]
Sources
Al Jazeera, “Iran says US reply to Hormuz plan ‘unconvincing’; Trump confirms strikes,” Nov. 4, 2026 — https://www.aljazeera.com/news/2026/11/4/iran-says-us-reply-to-hormuz-plan-unconvincing-trump-confirms-strikes
RTÉ News, “Iran warns against return to conflict after US strikes,” updated Nov. 4, 2026 — https://www.rte.ie/news/world/2026/1104/1597895-iran-us/
Anadolu Agency, “Iran claims 4 oil tankers destroyed by naval mines near Strait of Hormuz,” Nov. 4, 2026 — https://www.aa.com.tr/en/middle-east/iran-claims-4-oil-tankers-destroyed-by-naval-mines-near-strait-of-hormuz/4110958
Mehr News Agency, “IRGC says 4 oil tankers destroyed, 56th US drone downed,” Nov. 4, 2026 — https://en.mehrnews.com/news/249151/IRGC-says-4-oil-tankers-destroyed-56th-US-drone-downed
Middle East Eye, “Iran’s IRGC says four tankers ablaze after hitting mines in Hormuz Strait,” Nov. 4, 2026 — https://www.middleeasteye.net/live-blog/live-blog-update/irans-irgc-says-four-tankers-ablaze-after-hitting-mines-hormuz-strait
Anadolu Agency, “Tanker hit by 2 projectiles off Oman: UK maritime agency,” Nov. 4, 2026 — https://m.aa.com.tr/en/middle-east/tanker-hit-by-2-projectiles-off-oman-uk-maritime-agency/4110596
Xinhua, “Tanker hit by two projectiles off Oman: UKMTO,” Nov. 4, 2026 — https://english.news.cn/20261104/71ec72b5c63541be89d607df7f2e85d4/c.html
Tasnim News Agency, “Iranians hold rallies to mark National Day of Fighting against Global Arrogance,” Nov. 4, 2026 — https://www.tasnimnews.ir/en/news/2026/11/04/3740043/iranians-hold-rallies-to-mark-national-day-of-fighting-against-global-arrogance
Mehr News Agency, “Iran marks Natl. Day of Fighting Global Arrogance amid threat,” Nov. 4, 2026 — https://en.mehrnews.com/news/249154/Iran-marks-Natl-Day-of-Fighting-Global-Arrogance-amid-threat
Iran International, “Tehran rally poster declares ‘We will kill Trump’ ahead of US embassy anniversary,” Nov. 3, 2026 — https://www.iranintl.com/en/202611031751
Ballotpedia News, “Democrats win U.S. House and Senate majorities,” Nov. 4, 2026 — https://news.ballotpedia.org/2026/11/04/democrats-win-u-s-house-and-senate-majorities/
NBC News, “Election results live updates,” Nov. 4, 2026 — https://www.nbcnews.com/politics/2026-election/live-blog/election-results-house-senate-trump-live-updates-rcna607376
KATU, “Man accused of threatening to kill Cowlitz County judicial candidate arrested by SWAT,” Nov. 3, 2026 — https://katu.com/news/local/man-accused-of-threatening-to-kill-cowlitz-county-judicial-candidate-arrested-by-swat-castle-rock-washington-arrest-cyber-harassment-kelso-police-election-day-political-violence-threat
KPTV, “Man arrested, accused of threatening to execute Cowlitz County judicial candidate,” Nov. 3, 2026 — https://www.kptv.com/2026/11/03/man-arrested-accused-threatening-execute-cowlitz-county-judicial-candidate/
People, “Toronto Police Discuss Possible Motive Behind ‘Brutal’ Home Invasion and Hammer Attack on CEO Family,” Nov. 3, 2026 — https://people.com/toronto-police-discuss-possible-motive-behind-brutal-home-invasion-and-hammer-attack-on-ceo-family-12216043
Al Jazeera, “Bomb threats disrupt flights across Europe, no explosive devices found,” Nov. 4, 2026 — https://www.aljazeera.com/news/2026/11/4/bomb-threats-disrupt-flights-across-europe-no-explosive-devices-found
CGTN, “EU monitoring aviation bomb threats, says too early to establish links,” Nov. 4, 2026 — https://news.cgtn.com/news/2026-11-04/EU-monitoring-aviation-bomb-threats-says-too-early-to-establish-links-1RMVkmcRLzO/p.html
Kyiv Post, “Russia Attacks Ukraine With 310 Drones, Energy and Infrastructure Damaged,” Nov. 4, 2026 — https://www.kyivpost.com/post/89068
RBC-Ukraine, “Massive Russian drone attack: Ukraine’s air defenses intercept 272 targets overnight,” Nov. 4, 2026 — https://newsukraine.rbc.ua/news/massive-russian-drone-attack-ukraine-s-air-1793774191.html
L’Internaute, “Manifestations du 5 novembre : à Paris et en régions des parcours contestés,” Nov. 4, 2026 — https://www.linternaute.com/actualite/societe/11312687-manifestations-du-5-novembre-a-paris-et-en-regions-des-parcours-contestes-ou-defiler-ce-jeudi/
The Daily Star, “Ashulia tense as garment workers continue wage protests; 70 factories shut,” Nov. 3, 2026 — https://www.thedailystar.net/news/news/ashulia-tense-garment-workers-continue-wage-protests-70-factories-shut-4314291
CNA, “Bangladesh garment workers stage fourth day of wage protests,” Nov. 3, 2026 — https://www.channelnewsasia.com/asia/bangladesh-garment-workers-protest-wages-6516186
Prothom Alo, “Garment workers clash with police in Mirpur,” Nov. 3, 2026 — https://en.prothomalo.com/bangladesh/enrrb5j68c
FAA National Airspace System Status, checked Nov. 4, 0558 ET — https://nasstatus.faa.gov/api/airport-status-information
CNA, “About 46,000 SIA booking records accessed in data breach involving travel tech company Amadeus,” Nov. 3, 2026 — https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151
BBC News, “Europe on alert after supermarket freezers hit by cyber-attacks in 10 countries,” Nov. 3, 2026 — https://www.bbc.com/news/articles/cwy8lm1m59mvo
The Hacker News, “New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food,” Nov. 3, 2026 — https://thehackernews.com/2026/11/second-wave-of-cyberattacks-hits.html
Anadolu Agency, “Suspected cyberattacks on refrigeration systems spread across Europe,” Nov. 3, 2026 — https://www.aa.com.tr/en/europe/suspected-cyberattacks-on-refrigeration-systems-spread-across-europe/4110333
CISA, Known Exploited Vulnerabilities catalog (version 2026.11.03), checked Nov. 4 — https://www.cisa.gov/known-exploited-vulnerabilities-catalog
National Weather Service, active alerts for NY, NJ and CT, Nov. 4 — https://api.weather.gov/alerts/active?area=NY,NJ,CT
National Weather Service, active severe alerts nationwide, Nov. 4 — https://api.weather.gov/alerts/active?severity=Severe
National Weather Service New York (OKX), NYC forecast, Nov. 4 — https://api.weather.gov/gridpoints/OKX/33,42/forecast
National Hurricane Center, Atlantic Tropical Weather Outlook, Nov. 4, 0100 EST — https://www.nhc.noaa.gov/text/MIATWOAT.shtml
National Hurricane Center, Eastern North Pacific Tropical Weather Outlook, Nov. 3, 2200 PST — https://www.nhc.noaa.gov/text/MIATWOEP.shtml
UK Supreme Court, “R (on the application of Ammori) v Secretary of State for the Home Department,” checked Nov. 4 — https://www.supremecourt.uk/cases/uksc-2026-0099
Breaking alerts post first on X @EPDailyBrief, with more on Instagram and Threads @executiveprotectiondaily.
Need a custom security brief for an event or trip? Request one here.
Open-source reporting only; verify before acting.
