Suspicious mail, unpatched websites and Ebola travel rules
Overall posture: Elevated5-minute read
The most important point this morning is that the FBI has flagged suspicious letters containing white powder sent to election officials, media organizations and polling companies, so anyone who handles incoming mail for a home or office should review their routine. The PHP vulnerability response is still running and needs confirmation from whoever hosts your family or company websites. Abroad, Ebola entry measures, French demonstration restrictions and a U.S. staff drawdown in the Gulf all affect trip planning this month.
United States
Targeted ViolenceUnited StatesModerate
Suspicious white-powder letters are reaching media and polling firms, so mail routines matter
The FBI Internet Crime Complaint Center has published a notice on suspicious letters containing white powder. The letters were mailed to state and local election officials, media organizations, and public and private polling companies. The notice as provided does not give further detail.
Why it matters. Executives and owners of media, polling or political-adjacent firms, and the household staff and office mailroom staff who open their post, are the people exposed. The risk reaches them through ordinary incoming mail at the home or the company address.
What to do
Brief household and office staff on what to do with an unexpected or unusual letter before anyone opens it.
Name one person who decides how suspicious mail is handled and who is called.
Family and company websites on PHP still need confirmation that the critical patch is applied
The FBI has issued a critical vulnerability alert for PHP core. BBC reporting says AI tools uncovered long-hidden flaws, which set off a rare global security response. IT teams describe spending the past 48 hours updating systems.
Why it matters. The family office, the principal's company and any advisor who runs a client portal or personal site on PHP are exposed through those web systems and the data behind them. Delay in patching leaves accounts and client records open to attack.
What to do
Ask your IT provider or web host in writing whether every PHP system is patched, and by whom.
Ask for a list of sites and portals that hold client or family data.
A California vote on taxing billionaires puts wealth and residency planning on the table
BBC reports that California voters are about to decide whether to impose what it calls the first tax on billionaires. The proceeds would go toward healthcare improvements. The report frames the sums as billions of dollars.
Why it matters. Principals with California ties, and the attorneys and wealth advisors who serve them, face a possible new legal obligation tied to their net worth. Public attention to the measure also keeps wealthy residents more visible.
What to do
Ask your attorney or advisor how the measure would apply to your holdings and residency.
Review what personal and financial details of yours are publicly easy to find.
Ebola deaths in Kenya and new Seychelles entry checks complicate East Africa trips
A 65-year-old woman has become the second person to die of Ebola in Kenya. She was a close relative of the first victim, a man who had traveled from the Democratic Republic of Congo. The UK Foreign Office has also posted new Ebola-related health measures for entry into Seychelles.
Why it matters. The traveling executive, spouse and children on safari, island or business trips through East Africa may face entry screening or schedule changes. Staff who arrange private travel need current requirements before bookings are confirmed.
What to do
Check entry requirements for every stop on East Africa itineraries before booking or departing.
Confirm medical evacuation coverage and contacts for the whole travel party.
French demonstration bans and a 70,000-officer deployment still shape any Paris or Marseille trip
France has deployed up to 70,000 officers after last weekend's riots, and some cities have banned demonstrations. The UK Foreign Office has updated its demonstration guidance for France, Guadeloupe, Martinique and Réunion. Marseille merchants are worried that unrest could return after the looting.
Why it matters. Executives and families traveling or with children studying in France should expect route closures and crowds in city centers. Drivers and hotel staff need to be told the day's plan.
What to do
Check local guidance each morning and avoid planned demonstration areas.
Agree a fallback route and meeting point with drivers and the travel party.
U.S. staff are leaving Saudi Arabia as officials cite Iranian plans against Americans
The New York Times reports that officials say Iran is in advanced stages of planning attacks against Americans. The U.S. government has ordered diplomats and other federal employees to leave Saudi Arabia and is reducing staff at other missions in the region. The State Department separately lists the UAE, Qatar and Bahrain at Level 3, Reconsider Travel.
Why it matters. Principals and executives who travel to or connect through the Gulf for business or private aviation could have less embassy support if something goes wrong. Families should look at whether the trip is necessary before leaving.
What to do
Review any planned Gulf travel with your security advisor and consider postponing it.
Enroll travelers in the State Department traveler program and confirm evacuation arrangements.
The SEC has published its Fiscal Year 2027 examination priorities, which family offices and advisors should read for compliance and fraud-prevention focus. (SEC)
Seven people were shot dead at a church funeral in Karak, Jordan, and a manhunt is under way; the UK Foreign Office has updated its Jordan guidance. (BBC News · UK Foreign Office)
The UK Foreign Office has updated Niger guidance after attacks near the Presidential Palace and Niamey's airport. (UK Foreign Office)
A woman who heckled President Trump at a midterm rally was punched and no one has been charged, a reminder of how crowds at political events can turn. (The New York Times)
One thing to do today
Put a mail-threat routine in place for home and office
The Protective Intelligence Cell tracks notices like the FBI's white-powder letter alert and turns them into clear steps for your household staff, mailroom and office. SAG can put this in place for you, including who handles suspicious mail and who is called. Start with a short private call.
