DC school-zone protests, exploited Palo Alto flaw, Kenya Ebola
Overall posture: Elevated5-minute read
The most useful thing to check this morning is whether your family office or company IT runs Palo Alto Networks PAN-OS, because CISA now lists a code injection flaw in it as actively exploited. In the DC area, families and community groups are protesting National Guard presence near schools, which can affect drop-off and pickup routines. Abroad, Kenya has a second Ebola case, a Singapore-flagged ship sank in the Strait of Hormuz, and strikes and unrest are complicating travel in parts of Europe and Africa.
United States
Activism & ProtestWashington, DCLow
Protests near DC schools can slow drop-off and pickup for families this week
Parents, students and community groups protested on Wednesday against National Guard members stationed near schools in Washington, DC. WTOP reports the demonstrations took place near school sites. No violence is reported in the item.
Why it matters. Children in DC schools, the drivers and household staff who handle pickup, and parents attending school events may meet crowds or road changes near campuses. The exposure is mainly to routine timing and predictable routes.
What to do
Ask your children's school about pickup arrangements and any expected demonstrations.
Have drivers and staff vary timing and keep an alternate route ready.
A Palo Alto PAN-OS flaw now confirmed as exploited belongs on your IT checklist
CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. One is a code injection flaw in Palo Alto Networks PAN-OS (CVE-2026-0322).
Why it matters. The family office, the corporate IT team and any managed service provider that supports the principal's offices and residences could be exposed if they run PAN-OS equipment. Compromised network gear can open the way to family financial files and wire instructions.
What to do
Ask your IT provider in writing whether PAN-OS is in use and whether the CISA-listed fix has been applied.
Review the other three catalog additions against your software inventory.
A celebrity's online complaint led to threats against shop staff, a pattern for visible names
A Brooklyn novelty shop, Art of Play, says its staff have been threatened after singer Kelly Clarkson complained online about how she was treated there. The BBC reports the shop describes the row as surreal.
Why it matters. A principal with a visible name, and the household staff, assistants and business employees around them, can be targeted by online anger after a single public comment or dispute. Staff carry the risk when they are identifiable.
What to do
Tell staff how to report threats or unusual contact, and who to call first.
Check what public information identifies your employees, and avoid naming staff in public posts.
Travelers to Kenya face a second Ebola case and a mandatory health insurance rule
Kenya confirmed a second Ebola case, a relative of the first victim, who died last week after arriving from DR Congo. Separately, the UK Foreign Office updated its guidance on travel health insurance, which is required for entry into Kenya.
Why it matters. Executives and families with Kenya trips planned, and the staff or aviation teams arranging them, need current health and entry documentation. Medical evacuation cover and contingency plans matter more while a case cluster is developing.
What to do
Confirm the insurance entry requirement and check that coverage includes medical evacuation.
Review the itinerary with your travel provider against the latest health guidance.
A container ship sank in the Strait of Hormuz after a projectile strike
Singapore's maritime authorities say the Singapore-flagged GFS Pride sank after being hit by a projectile on Tuesday. All 21 sailors were evacuated safely.
Why it matters. Family offices with shipping, cargo or vessel interests, and owners or charterers planning yacht movements in the Gulf region, face real risk to crews and cargo. Insurers and charter managers may revisit routing here.
What to do
Ask your marine manager or insurer how Gulf routes and crew safety are being reassessed.
Postpone non-essential yacht or cargo movements through the strait until you have that guidance.
Strikes and unrest in Belgium, Ireland, Albania and Mauritius can disrupt itineraries
The UK Foreign Office updated its guidance on national strike action in Belgium and on demonstrations and community unrest in Mauritius. Hundreds of thousands of public sector workers are on strike across the Republic of Ireland. In Albania, student protesters set government buildings alight on the second day of demonstrations.
Why it matters. Traveling executives and families moving through Brussels, Ireland, Albania or Mauritius may see transport delays and blocked roads. Staff who plan their ground transport and meetings need to know before departure.
What to do
Have your travel team check ground transport and meeting times for affected cities.
Keep routes away from demonstrations and government buildings.
The FBI's Internet Crime Complaint Center reports North Korean IT workers are using more facilitators and broadening recruitment, which matters for any family office hiring remote technical contractors. (FBI Internet Crime Complaint Center)
Montgomery County officials welcomed a directive from Gov. Wes Moore on teen auto theft interventions after deadly crashes involving stolen vehicles. (WTOP News)
The UK Foreign Office now advises against all travel to Venezuela's Amazonas state and to within 40km of the Colombian border. (UK Foreign Office)
Federal prosecutors have charged a fired OpenAI engineer with planting a bug, and the case is a reminder to review who has access to your meeting rooms. (The New York Times · BBC News)
One thing to do today
Check IT exposure and school-day routines
Ask your IT provider this week to confirm in writing whether PAN-OS is in use and patched. Confirm school pickup routes and timing with your drivers and staff, and give them a clear person to call if a route is blocked.
