The item to act on first is a critical flaw in BeyondTrust Remote Support, a tool many IT providers use to reach client systems, which CISA says attackers are exploiting now. A school shooting in Bend, Oregon, that killed three children and a teacher has families and school administrators reviewing campus safety. Fast-moving California wildfires, a hurricane on Mexico's Pacific coast and violent protests in Tirana affect second homes and travel plans.
United States
Cyber & FraudUnited StatesHigh
A remote-support tool your IT provider may use is being exploited to bypass logins
CISA says a critical authentication bypass, CVE-2026-102764, affects BeyondTrust Remote Support (formerly Bomgar) in versions up to 26.2.3. Attackers are actively exploiting it. Patches exist for supported versions, and older installations must be upgraded before they can be patched.
Why it matters. The family office, the household's IT contractor and any executive whose company uses remote-support software are exposed, because the tool gives outsiders direct access to devices holding accounts, wire approvals and family records. Ask each provider now whether they run it and which version.
What to do
- Ask every IT vendor in writing whether BeyondTrust Remote Support is in use and that it is patched.
- Review recent remote-access sessions on family office and home systems for any you do not recognize.
Sources: CISA | Take the 10-question Self-Check →
Targeted ViolenceBend, OregonHigh
A school shooting that killed three children shows why campus plans need testing
Police say a 16-year-old who once attended Silver Rail Elementary School attacked the school and targeted a special educational needs classroom. Three children, aged 5, 8 and 11, and a teacher were killed before a bystander shot the suspect. Authorities are still working to establish a motive.
Why it matters. Parents, the family's children and the nannies or drivers who handle drop-off and pick-up are most directly affected, because the attacker was a former student who knew the building. Principals and advisors should ask private schools what access control and lockdown drills exist, and how the school reaches parents during an incident.
What to do
- Ask your children's schools how they handle visitor access, lockdowns and parent notification.
- Make sure drivers and staff who do pick-up know the school's emergency reunification process.
Sources: BBC News · BBC News · The New York Times | Take the 10-question Self-Check →
Travel & RegionCaliforniaModerate
Santa Ana winds are driving a wildfire that has burned homes, with 13 fires active
Evacuation orders are in place for the Norte Fire in California, which is moving fast and has burned homes. Strong Santa Ana winds are feeding it, and it is one of 13 fires burning across the state.
Why it matters. Principals with second homes in California, property managers and caretaking staff there may have little time to leave if orders extend. Confirm who is on site, how they would evacuate, and where key documents, art and records are kept.
What to do
- Call your California property manager to confirm evacuation routes, contact numbers and who is on site.
- Check that insurance and inventory records are stored off site.
Sources: BBC News
DronesU.S.-Mexico borderLow
New border drone ban covers one nautical mile and up to 400 feet
The administration has banned unauthorized drone flights within one nautical mile of the southern border, up to 400 feet in the air. The restrictions are newly announced.
Why it matters. Owners of ranches or estates in border states, and the pilots and contractors who fly drones for survey, photography or security there, could face enforcement if they fly without authorization. Family offices should ask their operators to confirm authorization before the next flight.
What to do
- Tell any drone operator or aerial contractor in border states to confirm authorization before flying.
Sources: The New York Times
Global
Kidnap & ExtortionHamburg, GermanyModerate
A custody abduction trial of a wealthy heiress has become a spy scandal in Germany
A Hamburg court has spent 15 months hearing the case of Christina Block, accused of ordering the abduction of her children. The proceedings are held in a high-security courtroom, and the case has set off a major spy scandal.
Why it matters. Wealthy parents in a custody dispute, their counsel and the family office are the people who should read this, since a child-related conflict can bring criminal exposure and surveillance questions for everyone around it. Anyone in a cross-border custody matter should keep all arrangements with lawyers and use only lawful channels.
What to do
- Have family counsel review any cross-border custody arrangements, and route all contact through lawyers.
Sources: BBC News
Activism & ProtestTirana, AlbaniaModerate
Violent protests in Tirana raise the cost of an unplanned business trip
Albania's capital has seen months of anti-government protests from the Flamingo movement. Protests that began on Tuesday were on a different scale, and the BBC reports they turned violent. The UK Foreign Office has published new information about the demonstrations.
Why it matters. Executives and family members traveling to Tirana, and the staff or advance teams who book their hotels and routes, may find movements restricted around protest sites. Check hotel location and routes against current demonstration areas before departure.
What to do
- Review the UK Foreign Office advice for Albania and plan routes and hotels away from demonstration areas.
Sources: BBC News · UK Foreign Office
Travel & RegionMexico, Pacific coastModerate
Hurricane Trudy has the UK Foreign Office updating its Mexico Pacific coast advice
The UK Foreign Office has published new information about Hurricane Trudy, which is affecting Mexico's Pacific coast. The update appears on its warnings and insurance page for Mexico.
Why it matters. Traveling principals, families booked at Pacific coast resorts, and crews planning yacht or private aircraft movements there should check current conditions before they go. Assistants who manage itineraries should confirm cancellation and insurance terms now.
What to do
- Check the latest storm updates before any Pacific coast Mexico trip, and confirm cancellation and insurance terms.
Sources: UK Foreign Office
One thing to do todayConfirm vendor remote access and school plans
This week, ask your IT providers whether they use BeyondTrust Remote Support and have patched it, and review recent remote sessions. Ask your children's schools for their visitor access and lockdown procedures, and make sure drivers and staff know the reunification plan.
Train for it: Defensive Communications, digital defense for phones, accounts and messaging.
Take the 10-question Self-Check
