Memo says spy asset got close to a CEO; VPN flaw is exploited
Overall posture: Elevated5-minute read
The most important item this morning is a U.S. policy memo reported by The New York Times, which says a woman who built a relationship with Nvidia's chief was an asset of China's top spy agency. CISA also confirmed active exploitation of a SonicWall VPN weakness that relies on a single login factor. In Washington, an armed man was arrested near the White House for threats and a man was fatally stabbed inside a DC library, while travel advisories changed for Peru and Belize and French protests continue.
United States
Privacy & ExposureUnited StatesModerate
A memo says Beijing's spy agency used a personal relationship to reach Nvidia's chief
The New York Times reports on a memo that circulated among U.S. policymakers. It cites intelligence that Alice Huang, a Chinese executive who developed a relationship with Nvidia chief Jensen Huang, worked as an asset of China's Ministry of State Security. The report describes her as having targeted him.
Why it matters. The principal, senior executives and the family office are exposed wherever a new close contact gains access to schedules, family details or introductions. A warm personal relationship can serve as the entry point for someone who is gathering information on you.
What to do
Vet any new close contact who asks about your family, travel or business dealings.
Record who introduced each new contact and what they have asked to learn.
Brief assistants and staff to route unusual requests for access to you or your family to one person.
CISA confirms attackers are exploiting a SonicWall VPN login weakness now
CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog on evidence of active exploitation. The flaw affects SonicWall SonicOS SSLVPN and involves the use of single-factor authentication.
Why it matters. The family office, your company's IT team and any home or estate office that connects remotely through a SonicWall device are exposed. Account access through a VPN can lead straight to financial records, wire instructions and household data.
What to do
Ask your IT provider this week whether any SonicWall SonicOS SSLVPN device is in use at your offices or homes.
Have them check CVE-2026-19868 against CISA's catalog and follow the vendor's guidance.
Require a second login factor on every remote-access account.
Armed man arrested near the White House for threats, with multiple weapons
The Washington Post reports that a man was arrested near the White House for making threats while carrying multiple weapons. The Department of Homeland Security identified him and described his immigration history. The summary does not say whom the threats were aimed at.
Why it matters. Principals, executives and advisors who visit Washington, along with their drivers and protective staff, are exposed on meetings and routes in the central district. An armed, threatening person near a high-profile site can disrupt movements and put bystanders at risk.
What to do
Ask your drivers and advance staff to review Washington routes and holding points before any trip.
Agree a simple plan for reaching a safe location if a threat emerges near a meeting site.
A fatal stabbing inside a DC public library leaves no suspect named
The Washington Post reports a man was fatally stabbed inside the West End Library in D.C. The library stays closed through Sunday. Police have not identified the victim or a suspect.
Why it matters. DC families whose children, nannies or other household staff use public spaces in the West End are exposed while no suspect has been identified. Everyday routines in public buildings are where staff and children are least protected.
What to do
Ask staff and caregivers to avoid the West End Library area until police name a suspect.
Review which public places your children and staff use on a regular schedule.
Pope Leo's Peru visit from 11 to 16 November brings tighter security and disruption
The UK Foreign Office has updated its Peru advice with information on Pope Leo XIV's visit from 11 to 16 November, including increased security measures and travel disruption. The New York Times reports the pope's trip covers Uruguay, Argentina and Peru and is his first major tour since lung surgery.
Why it matters. Executives, families and charter or jet travelers planning Peru stays that week face delays and changed access at the places they intend to visit. Staff arranging cars and hotels need the new restrictions before arrival.
What to do
Have your travel team recheck Peru itineraries, car moves and hotel plans for 11 to 16 November.
Build in extra time on every ground movement during the visit.
Belize's 30-day state of emergency changes the advice for travelers and yacht guests
The UK Foreign Office updated its Belize travel advice after the Belize government announced a 30-day State of Emergency. The change appears on the 'Warnings and insurance' page. The summary gives no further detail on the measures.
Why it matters. Families and executives with Belize stays, charters or property plans in the next month are exposed to rules and restrictions they may not know. Their travel team should confirm what applies before anyone departs.
What to do
Read the updated Foreign Office page before any Belize travel is confirmed.
Ask your travel manager to check insurance terms against the warning.
French protests enter a fourth Saturday with a large security presence
The New York Times reports tens of thousands of people are expected to demonstrate in France for a fourth straight Saturday. Authorities hope a large security presence will deter riots. Another day of protests by students and workers follows a general strike and huge demonstrations earlier in the week.
Why it matters. Executives, families and staff in France are exposed to blocked routes and crowd disruption, and to misjudged movements near protest areas. Cars, school runs and airport transfers are where delays and confrontations are most likely.
What to do
Plan routes and transfers in France around protest areas today.
Tell drivers and staff to leave any gathering that grows tense.
Ireland calls the European bomb threats against flights and newsrooms a probable coordinated campaign, European agencies are probing a possible Russian origin, and a Russian extremist group denies involvement. (The New York Times · Financial Times · BBC News)
Paraguay's president was impeached and placed under house arrest after a bank collapse left millions of people unable to access their money. (BBC News · The New York Times)
Botswana travel advice was updated on the documents required when travelling with children, which matters for family trips and nanny travel. (UK Foreign Office)
The UK Foreign Office updated South Africa advice on fraud and scams and on taxis and ride-hailing apps. (UK Foreign Office)
One thing to do today
Find out who can reach you before someone else does
A reported spy-agency relationship with a CEO shows how access starts with people, not technology. SAG's Exposure Assessment maps how others can reach your family, your schedule and your network, including new close contacts and remote-access gaps. SAG can put it in place for you.
Train for it: Countersight, recognizing when you are being watched.
