The headline today is convergence. The 2026 World Cup, now under way across 16 host cities, has become the largest concentrated soft-target operation the security world has run in years: 400-plus agencies, DHS counter-drone kit at venues, biometric entry at stadiums, and a fused public-private command model that analysts expect to outlast the tournament. If you move principals through host cities this summer, treat airspace restrictions, dense surveillance and biometric checkpoints as the baseline.
On the threat board, two African capitals stand out. JNIM's fuel blockade has held on Bamako since September 2025, with 300-plus tankers burned and the US and UK long since telling nationals to leave — Mali now reads as siege conditions, not a guarded hub. In Haiti, the UN-backed gang-suppression force has begun arriving, but Port-au-Prince remains gang ground and well short of the mandate's full strength. Closer to the corporate world, crypto 'wrench attacks' — violent in-person coercion for private keys — are now a residential protection problem, up sharply and centred on Europe, with France worst hit. And the disclosure trail confirms corporate boards are buying executive protection at record levels.
On regulation, the SIA's Martyn's Law section 12 guidance consultation has closed, sketching how enforcement and tier thresholds will work ahead of the duty's 2027 commencement; a recent SIA prosecution is a reminder that deploying unlicensed operatives puts the conviction on the director too. In tradecraft, the 2026 TCCC update tightens the tourniquet rule — reassess within two hours, and do not convert past it without a medic — and on counter-drone, the kit is getting easier to buy while the law on who may use it remains the real constraint: build the detection picture, route mitigation through the agencies that hold the authority.
Full reporting on each below.
