Elderly residents zip-tied at home; fake recruiters in $6.3bn hack
Overall posture: Elevated5-minute read
The most important item this morning is a home invasion in Bedford Park, New York, where elderly residents were zip-tied and robbed, a reminder to check who can reach your older relatives and household staff. On the digital side, CISA reports active exploitation of a WordPress core flaw, and Binance says fake job interviews were used in a $6.3bn crypto hack. With Democrats taking Congress, corporate counsel are preparing for investigations, and seven flights across Europe were hit by bomb threats.
United States
Targeted ViolenceBedford Park, New YorkHigh
Elderly residents were zip-tied and robbed inside their own home in Bedford Park
News12 reports a home invasion in Bedford Park in which elderly residents were bound with zip ties and robbed. The report lists the crime as a robbery inside the residence. No further detail was available in the source.
Why it matters. Elderly parents, grandparents and live-in or visiting household staff are the people most likely to be alone at a family home and least able to resist. Check how your older relatives and staff handle doors, delivery visitors and alarm codes.
What to do
Review door, gate and alarm-code access for every residence, including who holds codes.
Brief older relatives and staff on never opening the door to unscheduled visitors.
Confirm that panic buttons or a direct line to a responder work at each home.
Attackers are exploiting a WordPress core flaw, putting family and company websites at risk
CISA added a WordPress core race-condition vulnerability, CVE-2026-119977, to its Known Exploited Vulnerabilities Catalog. The listing is based on evidence of active exploitation.
Why it matters. The family office, a foundation, a family business or a principal's personal site that runs WordPress is exposed, along with the staff and contact lists behind it. Ask your IT provider whether each site is patched.
What to do
Ask your IT provider to confirm every WordPress site is updated to the fixed version.
Inventory old or forgotten sites tied to the family, the office or a charity.
Democratic control of Congress puts executives' communications with officials in play
The Financial Times reports that corporate America is bracing for investigations by Democrats, who have won control of Congress. It says the probes could expose communications between officials and executives, after alleged corruption became a campaign theme.
Why it matters. Corporate executives, board members and the attorneys and family offices that advise them may see past emails, texts and meetings with officials come under scrutiny. Records and messaging habits matter before any request arrives.
What to do
Ask counsel to confirm document-retention and legal-hold procedures.
Review which messaging apps executives use for sensitive discussions with officials.
Fake job interviews on a real job platform opened the door to a $6.3bn crypto hack
Binance says an engineer was approached through a legitimate job-hunting platform and invited to bogus interviews with fake company representatives. The company says this was part of a $6.3bn crypto hack.
Why it matters. Senior executives, technology and finance staff at the family office, and anyone who controls keys or wire approvals can be reached by a recruiter message that looks genuine. Treat unsolicited job approaches as a way into the family's money.
What to do
Tell finance and technology staff to verify any recruiter by an independent channel before engaging.
Never run software or files supplied during a job interview on a work device.
Maritime & AviationPoland, Spain, Bulgaria and ItalyModerate
Bomb threats hit seven flights across Europe, disrupting travelers' connections
Officials are investigating suspected bomb threats against at least seven planes in Poland, Spain, Bulgaria and Italy. The aircraft landed safely and no explosives were found.
Why it matters. Principals, children and staff flying through European airports may face diversions, holds and missed connections. Build slack into schedules and make sure your travel team can re-route quickly.
What to do
Give travelers a 24-hour contact who can rebook and arrange ground transport.
Avoid tight connections through the affected countries this week.
Gulf states are racing to head off a renewed U.S.-Iran war that many fear will be worse
The New York Times reports Gulf Arab countries are mediating to prevent renewed fighting between the U.S. and Iran, with many fearing it would be worse than before. It ties the concern to a deadline set by President Trump around the midterms.
Why it matters. Executives and families with Gulf travel, residences or business interests should have contingency plans for routes and departure if the situation worsens. Keep this to planning for now.
What to do
Confirm alternate departure routes and a trigger for postponing Gulf trips.
The UK Supreme Court is hearing a challenge to the government's ban on Palestine Action, which could shape protest policing in London. (The New York Times)
The UK Foreign Office has posted an update on possible demonstrations and protests in Paraguay for travelers. (UK Foreign Office)
Poland has tightened security at its border with Russia after its prime minister cited disturbing movement in Kaliningrad. (The New York Times)
The cyber-attack that raised supermarket freezer temperatures in several European countries has been linked to the UK meat industry. (BBC News)
One thing to do today
Close the gaps around your homes and staff
The lead item is a home invasion that targeted elderly residents, and the same weak points exist at most family residences: shared codes, unscreened visitors and unmonitored staff access. SAG's Exposure Assessment maps how your homes, family and staff can be located and targeted, and SAG can put it in place for you this week.
Train for it: Countersight, recognizing when you are being watched.
