Week 27: 29 June – 05 July

Global Intelligence Summary

blue abstract background
  • Ongoing gang attacks on Haitian institutions are almost certainly aimed at complicating the situation of the UN-led mission, whose first contingent of Kenyan police was recently deployed.
  • Hurricane Beryl, which caused widespread destruction in the Caribbean, is the 2024 Atlantic hurricane season’s first hurricane, a season which is highly likely to be particularly severe.
  • If confirmed, reports of the new Islamic State Caliph being the leader of its Somali branch almost certainly prove the increasingly central role played by Africa in IS governance and operations.
  • The announced disbandment of Jemaah Islamiyah in Indonesia will highly likely lead to the emergence of splinter cells and the formation of new regional alliances.

AMER

Haiti: Gangs accelerate anti-police attacks after UN mission arrival

Caribbean Region: Hurricane Beryl causes widespread destruction

Red Sea and Gulf of Aden: Putin considers arming the Houthis

Somalia: ISSP leader revealed as possible IS Caliph

Nigeria: Four coordinated suicide bombings in Boko Haram heartland

India: Stampede at “godman” event kills more than 120

Indonesia: Disbandment of major Islamist group announced


  • Al-Hijra, the Islamic New Year, will take place on 7 July. The holiday is officially recognised in different Muslim-majority nations and is informally celebrated in several other states. There is a possibility of limited traffic and business disruptions and closures on the day.
  • On 9 July, adherents of the Baháʼí Faith commemorate the martyrdom of the Báb. The date is considered to be a holy day in the Baháʼí calendar, and will likely coincide with public commemorations in states that have a large Baháʼí minority, including Iran, India, the US, Canada, the UK, Brazil and Kenya.
  • On 9-11 July the NATO Alliance will celebrate its 75th anniversary summit in Washington DC. The summit will likely address wide-ranging issues and have global implications as the US shifts its strategy more towards the Indo-Pacific and European powers are forced to bear more responsibility for their own continent.

Haiti: As Kenyan police begin operations, gangs intensify attacks on Haitian institutions.

So far, approximately 200 of the 1,000 police officers promised by Kenya to restore order in Haiti have arrived in the country. The force is part of a 2,500-strong UN-backed intervention mission, which is expected to be deployed in the coming months.

Gangs, which currently control much of Haiti and approximately 80 per cent of the capital Port-au-Prince, are assessed as numbering about 12,000 members in total. Following the deployment of the first Kenyan police, gangs reportedly intensified attacks on local police and government institutions. On 2 July, gang members reportedly attacked a police station in Port-au-Prince, killing more than 20 police officers.

Solace Global Assessment: 

The gangs, who recently released statements calling Haitians to oppose the “imperialistic” UN intervention, almost certainly do not have any plan to transition the country out of its ongoing state of chaos. Rather, gangs almost certainly highly benefit from the breakdown of government, as it allows them to more freely operate within the country, and to benefit from international smuggling routes, including the influx of illegal firearms from the southeastern US.

Reports indicate that the “Viv Ansamn” coalition of gangs is currently the most influential in Haiti’s capital. However, there is a high likelihood that the network of gangs and criminal groups in Haiti remains highly disorganised and prone to infighting. Gangs are also highly armed due to the high presence of smuggled arms, and currently likely outgun the depleted Haitian police. Gangs will likely seek to undermine Kenyan efforts to secure control of residential areas by attacking the local population. While there is a realistic possibility of gangs opting for occasional “frontal attacks” against the UN-backed forces, the path of low-intensity operations to discourage civil society from collaborating with the police mission is more likely.


The Caribbean Region: Hurricane Beryl carves a path of destruction through the Caribbean.

The 2024 Atlantic hurricane season’s first hurricane entered the Caribbean Sea on 30 June, peaking at category five with maximum windspeeds of 269 kilometres per hour and causing at least ten deaths. Multiple countries were impacted, including Barbados, Grenada, St. Vincent and the Grenadines (SVG), Trinidad and Tobago, Haiti, Jamaica, the Cayman Islands and Venezuela. Hurricane Beryl has now weakened to category two and is currently making landfall in Mexico on the Yucatan Peninsula, prompting multiple alerts for tourist hotspots including Cancún and Tulum.

Solace Global Assessment: 

Many Caribbean island nations are particularly vulnerable to hurricanes due to fragile architecture, poor infrastructure and limited state capacity, and approximately 2.8 million people were in the impact zone.

Beryl has already caused widespread property damage and flooding. SVG was especially affected, with widespread destruction reported on the southern Union Island and Canouan. Grenada also suffered a notably significant impact, and in Jamaica, roofs were ripped off and the airports were closed. While at least ten deaths have so far been reported, it is almost certain the death toll will increase as emergency responders access the affected areas. While Beryl has weakened to category two, the hurricane’s imminent landfall in Mexico through the Yucatan Peninsula still poses a high risk, prompting tourists to rush to Cancún International Airport despite mass flight cancellations. Beryl is the earliest category five hurricane of an Atlantic hurricane season on record, and the National Oceanic and Atmospheric Administration (NOAA) has previously predicted that the 2024 season is highly likely to be particularly severe, due to extremely high sea temperatures, La Niña conditions in the Pacific, reduced wind shear and low Atlantic trade winds.

There is widespread consensus amongst climatologists that climate change is a major contributing factor to increasingly intense hurricane seasons, due to higher sea temperatures conditioning stronger hurricanes. The prime minister of SVG condemned Western Europe and the US for failing to tackle climate change and raised concerns about accessing aid. The 2024 hurricane season is highly likely to pose continued major challenges in Caribbean nations, exacerbated by their increased vulnerability.

Due to disruptions to law enforcement, the impact of property destruction and pre-existing problems with poverty, hurricanes can significantly increase crime rates in their immediate aftermath – it is likely, therefore, that the threat posed by crime will increase as a result of the hurricane in the impacted countries.


Politics, Economics and Civil Unrest

On 1 July, the Cuban government announced new drastic economic measures to combat the country’s high fiscal deficit and inflation. Previous attempts by Havana to pass services, welfare and subsidy cuts, especially targeting fuel, resulted in unusually vocal protests. Likely for this reason, the new measures instead focus on fighting tax evasion, reforming state-run businesses, and favouring foreign exchange. Still, the prospect of renewed civil unrest following further government measures remains a realistic possibility.


Panama’s new President Jose Raul Mulino was sworn in on 1 July. Mulino ran on an anti-immigration platform, primarily directed at addressing the increasing migrant flows through the dangerous Darien Gap, where gangs and human traffickers operate. The president’s oath was followed almost immediately by the signature of a memorandum of understanding with Washington, focused on the Darien Gap issue. As part of the memorandum, the US will foot the bill for the repatriation of migrants from Panama to southern countries. There is a possibility that the prospect of economic returns will increasingly drive the securitisation of the border area, which may negatively affect not only the migrants themselves but also humanitarian organisations active in southern Panama.


The Venezuelan presidential campaign began on 4 July, with President Maduro aiming to retain power despite low approval ratings. Nationwide protests and highly charged political rallies are highly likely until the campaign period concludes on 25 July, with significant gatherings in Caracas and other major cities.


On 5 July, former Brazilian President Jair Bolsonaro was formally accused of embezzlement for allegedly misappropriating luxury gifts that he received from Saudi Arabian officials while he was head of state. This represents the second time Bolsonaro has been formally accused of a crime, the first dating back to March 2024 and being related to allegations of faked Covid records. There is a high likelihood that, if the accusation progresses and reaches the courts, it will drive civil unrest, with a realistic possibility of violence.


Security, Armed Conflict and Terror

On 1 July, a man opened fire and wounded seven of his neighbours in Crete, Nebraska. The man, who killed himself following the shooting, allegedly was a “recluse” and may have carried out the attack because of extremist ideology, as the seven victims are all Guatemalan migrants. If so, the attack represents a case of lone-actor terrorism and may have been motivated by recent media discourses on migration into the US, a topic that is particularly central to the presidential election season which may inspire similar attacks.


Colombia’s national government and the Second Marquetalia (FARC-SM), a faction of dissidents within the Revolutionary Armed Forces of Colombia (FARC), announced a unilateral ceasefire agreement on 29 June. In 2016, a peace deal was signed between FARC and Bogota,  which although largely successful, led to the creation of several splinter groups such as FARC-SM who continued engaging in armed insurgency. FARC-SM reportedly has approximately 1000 members, and their commitments to release captives and de-escalate conflict will like reduce the threat of armed conflict. However, the Colombian government has yet to formally agree to a cessation of hostilities, with a meeting promised no later than July 20 to present a formal agreement that will then need to be implemented by Presidential Decree. Additionally, it is likely that small numbers of FARC-SM fighters will form splinter groups or join other dissident groups to continue fighting.


On 4 July, Ecuador’s police freed more than 40 hostages being held by the Los Lobos gang, active in the southern Azuay province. Gangs in Ecuador are highly armed and can often match the firepower of security forces. The recent operation likely testifies to the high level of internal organisation of the gangs, allowing them to simultaneously hold dozens of hostages, a prospect that will challenge President Noboa’s attempts to pursue the same path as President Bukele in El Salvador.


Environment, Health and Miscellaneous.

A rapidly growing wildfire in north California has prompted the evacuation of at least 25,000 people in the vicinity of Sacramento. The region is particularly at risk from severe wildfires and, in July, the threat is exacerbated by hot and dry temperatures. Most wildfires are started by humans, and there is a high likelihood that the 4 July weekend will drive an increase in fires across the US, also due to the widespread use of fireworks in celebrations.


On 3 July in Colorado, a fourth case of bird flu resulting from the current outbreak amongst dairy cows was announced. The other cases were previously reported in Michigan and Texas. All the cases have involved dairy farm workers, who are susceptible due to their consistent close contact with infected cows. The Centers for Disease Control and Prevention (CDC) has stated that there is currently only a low risk to the general public.


Authorities in Boyacá, Colombia have declared a state-wide health emergency over a dengue outbreak with over 1,000 cases recorded since the start of the year. Whilst dengue fever is a year-round nationwide threat in Colombia, projections for 2024 suggest that transmission rates have increased despite the release of genetically modified mosquitoes to curb the prevalence of the disease.


Israel, Palestine & Lebanon: Ceasefire deal progress, Khan Yunis operations, new West Bank settlements, and Hezbollah strikes.

During the last reporting period, Israeli and Hamas officials made progress regarding a long-discussed ceasefire plan for Gaza. On 4 July, Tel Aviv announced that it would send a delegation to Doha to negotiate with the Hamas leadership in Qatar. Despite moves towards a ceasefire, the Israel Defence Forces (IDF) have ordered a further series of evacuation zones in Khan Yunis, north of Rafah, in preparation for new ground operations. In the West Bank, the Israeli government approved three settlements, Givat Hanan, Machane Gadi, and Kedem Arava, and the construction of new homes, which a local NGO assessed as the largest land annexation of the kind “in 30 years”.

The announcement came amidst further reported attacks on West Bank Palestinians by Israeli settlers. On 3 July, the IDF carried out a successful decapitation strike that killed Muhammad Nimah Nasser, a senior official of the Iranian proxy group. In response, Hezbollah fired up to 200 rockets and 20 drones into northern Israel in one of its largest relatiations to date which caused minor damage and wildfires near the border.

Solace Global Assessment: 

The progress recorded by Israeli authorities likely reflects a greater willingness on behalf of Hamas to negotiate the terms of the disengagement of IDF troops from areas of Gaza during the early stages of the hostage exchange process. Hamas and Israeli disagreements are likely focused on the question of the Philadelphi Corridor, the border between Gaza and Egypt from which Hamas has access to a vital supply of material and weapons.

There is a realistic possibility that Tel Aviv will agree to some limited withdrawal from the border while retaining the ability to monitor border crossings. IDF forces have likely made significant progress in dismantling the network of tunnels used by Hamas operatives under the Philadelphi Corridor, and Israeli officials may assess that Hamas will remain incapable of building or repairing its underground infrastructure, thus being forced to rely on weaponry smuggled through the crossings themselves.

The evacuation orders for Khan Yunis almost certainly continue to highlight Hamas’s capacity to reinfiltrate areas previously cleared by the IDF. There is also a realistic possibility that much of the Hamas leadership left in Gaza will be in Khan Yunis or its proximity, having moved to the area during the IDF’s Rafah offensive. Finally, it is important to note in the context of negotiations that there may be a difference of opinions between the Hamas leadership in Qatar and that in Gaza. Moreover, the low profile that the Gaza leadership necessarily needs to take due to ongoing IDF operations will highly likely have isolated some Hamas units (or what is left of them) from the central command, possibly driving them to operate independently. Consequently, even if a ceasefire agreement is achieved, independent Hamas fighters or other Palestinian militias may continue to attack IDF forces, possibly hindering the hostage exchanges.

The developments in the West Bank also may reverberate in Gaza. Recent reports of settler violence being enabled or tacitly supported by IDF troops in the area may further spur Palestinian dissatisfaction with the Palestinian Authority (PA). The PA continues to verge on collapse due to long-standing economic issues and a lack of perceived legitimacy. The acceleration of the settlement-building process may further embolden anti-PA factions, especially ones affiliated with Hamas.

The Hamas Doha leadership likely sees an increase in power in the West Bank as a desirable strategic development and may seek – possibly through covert Iranian support – to accelerate instability there. At the Israel-Lebanon border, the wave of Hezbollah strikes almost certainly reflects the group’s desire not to lose face following a further successful Israeli decapitation strike but is still likely under the threshold of provoking all-out war. Israel’s ability to effectively detect and eliminate senior Hezbollah leaders is expected to severely impair the group’s operational capabilities and may ultimately provoke war. This development is likely a major concern for Tehran, as it seeks to avoid full-scale conflict with Israel to safeguard Hezbollah’s substantial rocket and drone arsenal, which serves as a crucial regional deterrent and tool for power projection for Iran.


Red Sea and the Gulf of Aden: Putin considers arming Houthis with maritime capabilities.

Uncorroborated reports citing an unnamed US intelligence official indicate that Russian President Vladimir Putin has asked Saudi Arabia’s permission to arm Yemen’s Houthi Movement with anti-ship cruise missiles (ASCMs). The discussions reportedly took place after Putin’s December visit to Saudi Arabia and the UAE.

Solace Global Assessment: 

Russia maintains an open dialogue with the Houthi Movement and has strong relations with its primary backer, Iran. Moscow has also previously struck a deal with the Houthis to guarantee that Russian ships can safely transit the Red Sea and Gulf of Aden without being targeted by the group and abstained from voting in a UN Security Council resolution which condemned the militant group’s attacks on merchant shipping.

Furthermore, the Kremlin has set a precedent of arming anti-Western groups, with two major examples being the arming of Libyan rebels with advanced weaponry via the Wagner Group and accusations of arming the Taliban to fight coalition forces. Whilst Russia is in critical need of various types of weaponry for its war in Ukraine, it could easily divest itself of much of its ASCM capabilities as the Ukrainian Navy has no ships and is almost solely reliant on asymmetric capabilities such as uncrewed surface vessels (USVs).

Russia is also becoming heavily dependent on Iranian military aid and Tehran may leverage this to convince Moscow to help supply its Axis of Resistance against Israel- especially if a new front is opened against Hezbollah. Such a conflict may also bring Russia more into the fold if Washington directly supports Israel.

However, Russia is also courting rich Arab states like Saudi Arabia and the UAE in its attempts to challenge US influence in the Middle East. Several Arab nations have previously been at war with the Shia Houthi Movement. They will likely protest this development, with unverified reports suggesting Saudi Arabian Crown Prince Mohammed bin Salman has already intervened. Should Russia pursue this course of action, it will likely involve the transfer of legacy weaponry such as the P-800 ONIKS (NATO: SS-N-26) or ASCM. However, these systems are still supersonic (Mach 2.5), have a range of 300km and have relatively advanced features such as electronic countermeasures and active radar homing. The cruise missile’s low trajectory makes them hard to detect and would provide air defence less time to react, increasing the threat to international shipping, especially at a time when the Houthis are also improving their USV capabilities.

For the Kremlin, the Houthis’ use of these systems could overstretch and potentially undermine coalition navies, divert resources from Ukraine and serve as payback to the West for supplying Kyiv. It would also impose a higher financial burden on the West, as Russian systems are invariably cheaper than the advanced air defences used by the West to intercept them.


Somalia: Islamic State Somalia Province leader possibly identified as Caliph.

Reports released during the reporting period indicate that the leader of the Islamic State’s Somalia Province (ISSP), known primarily as Abu Hafs al-Hashimi al-Qurashi or Abdulqadir Mumin has been identified as the overall leader or Caliph of the Islamic State (IS). Mumin is a Somali-born British citizen, who escaped to Somalia and declared allegiance to then-Caliph al-Baghdadi in 2015. The information, which is as of yet unconfirmed, was released on a channel of IS defectors. The ruling fifth Caliph of IS was reported by Turkish forces to have been killed in Syria in 2023, while US forces targeted Mumin in May 2024. However, this new information states that al-Qurashi is still alive and operating out of the Somalian breakaway region of Puntland.

Solace Global Assessment: 

While the Somalia Province is much smaller compared to many of IS’ other provinces like Islamic State West Africa Province (ISWAP) or Islamic State Khorasan Province (ISKP), it has played a major role in the financial facilitation of IS operations. The al-Karrar office, in Puntland, which is almost certainly run by Mumin himself, was reportedly able to channel donations from South Africa and other Subsaharan states towards the provinces in the broader Middle East as early as 2020.

With decapitation strikes and territorial losses decreasing IS’ operational capabilities in the Levant in the late 2010s and early 2020s, funds from Subsaharan Africa likely played an important part in boosting ISSP’s importance within the broader IS network. The al-Karrar office has played a major role in the transfer of funds from Yemen to Afghanistan, enabling the most active branch, ISKP. ISSP has also likely been able to grow in significance with regional counterterrorism operations concentrating on its local rival, the al-Qaeda-aligned al-Shabaab.

There is also a growing concern that a stronger ISSP is forcing al-Shabaab to develop ties with the Houthis, with recent intelligence indicating the transfer of arms from Yemen to Somalia. While little information on Mumin exists, he is known as having played a fundamental role in radicalisation networks and networks seeking to entice foreigners, especially Britons, to travel to IS units in the Middle East. Given his European connections, Mumin’s appointment may also inspire IS to recalibrate its operations more towards European targets.

Russia is likely to be nominated as a prime target as its Africa Corps expands its counterterrorism operations in Africa, especially if Mumin holds considerable influence over ISKP which recently took credit for a major terror attack in Moscow. However, the credibility of Mumin’s appointment has yet to be assessed and this could be disinformation designed to deflect from the true Caliph, given the success rates against former IS leaders. All of IS’ former leaders have been Arab as well as the majority of its Delegated Committee. Many members will likely protest Mumin’s leadership which would represent a major political change, which may also account for Mumin’s nom de guerre, which includes the patronyms al-Hashimi al-Qurashi, claiming direct links to the Prophet Muhammed.


Nigeria: Coordinated suicide bombings kill dozens in Boko Haram heartland.

Four almost simultaneous suicide bombings were conducted in the Nigerian town of Borno state on 29 June. Government officials on 2 July released a statement indicating that the death toll had reached 32, with dozens more requiring hospitalisation. A wedding and a funeral were two of the locations targeted by the suicide bombers. All of the attacks included female suicide bombers, and the attack that targeted the wedding venue purportedly involved a suicide bomber carrying a baby on her back.

Solace Global Assessment: 

No group has claimed responsibility for the attack but the jihadist group Boko Haram is known to operate in the area around Gwoza, a town they once declared the heart of their self-proclaimed caliphate. Furthermore, the use of female suicide bombers to attack mass gatherings is an established tactic of Boko Haram and one championed by their former leader Abubakar Shekau.

This tactic has been a source of friction between Boko Haram and its regional counterpart, the Islamic State West African Province (ISWAP) which has denounced this methodology. In addition, research conducted by the Combating Terrorism Center at West Point indicated that Boko Haram has used females in at least 244 of its 434 suicide bombings between 2014-17. Boko Haram have likely employed this tactic to arouse less suspicion, avoid security searches, encourage more thorough searching of females (which in turn generates outrage), and because of the psychological impact it produces, especially when the bombers are accompanied by children. Furthermore, the group has been involved in multiple mass kidnappings of young females whom they have likely been able to indoctrinate in captivity to conduct suicide attacks.

Boko Haram was ousted from Gwoza in 2015 by a joint Nigerian and Chadian military offensive and has since been largely confined to attacks in rural areas. The organised and coordinated nature of the attacks may indicate a resurgence in the group’s capabilities. Junta governments have expelled Western military forces from countries where Boko Haram has historically operated, such as Niger and Mali and Nigeria’s domestic security is likely being overstretched by a host of issues ranging from kidnap gangs in the northwest to a revival of the Biafra movement in the southeast. These trends are potentially shaping the conditions which a resurgent Boko Haram could exploit to increase the frequency and scale of their attacks.


Politics, Economics and Civil Unrest

The UK parliamentary elections were convincingly won by the centre-left Labour Party, led by Keir Starmer. The election results are unlikely to drive large-scale civil unrest in the United Kingdom, although there is a realistic possibility that left-wing minority groups, including environmentalist and pro-Palestine activists, will take advantage of the transition of power to stage symbolic demonstrations, possibly leading to minor and localised disruptions.


The first round of the French National Assembly elections was won by Marine Le Pen’s National Rally (RN), which finished ahead of a populist left-wing coalition and President Emmanuel Macron’s Ensemble Party (EN). The results’ announcement drove almost immediate mass protests across France’s main urban centres, with reported cases of clashes between protesters and police. The centre and left candidates have agreed on an ad hoc cordon sanitaire strategy, meant to prevent RN candidates from being elected at the second round runoff vote.

So far, more than 200 third-place candidates from Ensemble and the left-wing coalition have withdrawn their candidacies to try centralising the anti-RN vote. The strategy has been effective before, most importantly twice barring Le Pen from winning the presidency, and there is a high likelihood that it will result in the RN not reaching its stated goal of an absolute parliamentary majority. Still, the positive results of the right are highly likely to continue driving civil unrest and possible political violence, likely posing a security threat during the Olympic Games, now only weeks away.


In the Netherlands, a new right-wing coalition government was installed after months of negotiations that followed the November 2023 general election. The government includes the far-right populist Party for Freedom (PVV), led by Geert Wilders, the conservative People’s Party for Freedom and Democracy (VVD), the Christian-democratic New Social Contract (NSC), and the Farmer-Citizen Movement (BBB), a populist, big tent group representing farmers’ interests. The government, which has a populist right-wing orientation, is led by independent bureaucrat Dick Schoof.

The ministry split, with BBB obtaining the agriculture and housing ministries, and the PVV securing control over immigration, foreign aid, security and justice. This almost certainly demonstrates that while unlikely to pass any major economic reform (the VVD remains solidly at the helm of economic and fiscal institutions), the new government will seek to pass wide-ranging social and travel reforms, which will likely have an important impact on Brussels. In reaction, protests took place at Huis ten Bosch Palace, The Hague on July 2, though these had low attendance, with further unrest likely in the coming weeks.


Turkish authorities have arrested almost 500 people in connection to anti-Syrian riots that resulted in multiple violent confrontations with the security services. The riots were ignited in response to accusations that a Syrian refugee had assaulted a Turkish child in the city of Kayseri in Central Anatolia. Riots and protests have spread to multiple Turkish cities including Ankara, Konya and Istanbul. The riots have instigated issues outside of Turkey’s border, with reports of deadly clashes between Turkish forces and protestors in northwest Syria and Syrian refugees were reportedly attacked by ethnic Turks on the streets of Berlin.


At least three people were killed in election protests after President Ghazouani was re-elected in Mauritania. The authorities used heavy-handed tactics, internet suspensions and mass detentions to suppress dissent in the town of Kaédi, an opposition stronghold near the Senegal border. The protests were motivated by accusations of electoral fraud, a factor that will likely concern the African Union with President Ghazouani currently holding the chairmanship of the regional bloc.


Turkey has initiated mediation talks between Somalia and Ethiopia regarding a port deal Ethiopia signed with the breakaway region of Somaliland earlier this year. The negotiations aim to repair diplomatic ties strained when Ethiopia agreed to lease 20 km of coastline from Somaliland in exchange for recognition of its independence, with Ankara likely attempting to increase its influence in Somalia where it has built schools, hospitals and other infrastructure and established a military base. The Horn of Africa has become increasingly important for Turkey because of its geographical position, maritime access, mineral wealth and potential for development. Because of this, Ankara has likely calculated that a war between Somalia and Ethiopia would be hugely deleterious to its objectives.


Thousands of Kenyans have continued to protest against the Ruto administration despite the overhauling of the controversial tax bill. Looting and violent clashes between protestors and the authorities have occurred in Nairobi, Mombassa and several smaller towns and cities across the country, leading to over 40 deaths and hundreds of arrests. Protestors are demanding the resignation of President Ruto and will likely sustain unrest until he either steps down or makes major concessions.


On 1 July, South Africa announced its new cabinet government, led by a coalition of parties involving the African National Congress (ANC) and Democratic Alliance (DA). The coalition government is unprecedented and follows ANC’s failure to win a majority of seats at the latest parliamentary election. The new right-liberal government is likely to reassure foreign investors in South Africa. However, the inclusion of DA, perceived by many as a quintessentially “white” party, will likely result in cases of civil unrest and possible inter-ethnic strife in the coming months. A significant driver of unrest is the government’s probable rejection of calls for sweeping land reform and expropriation, which are strongly favoured by the political left, including the Economic Freedom Fighters (EEF) which has historically been accused of inciting violence against white farmers.


Security, Armed Conflict and Terror

Several US bases throughout Europe have been placed on high alert, or Force Protection Condition “Charlie”, in response to undisclosed intelligence relating to a planned terrorist attack, according to officials from the US European Command (EUCOM). The security shift likely indicates EUCOM has received information of an active and credible threat as it has not raised its alert level to Charlie for over a decade. The change coincides with high-profile events and dates such as the Euros in Germany, the Paris Olympics and the 4 July celebrations which will be celebrated by  US service personnel throughout the continent. Terrorist actors may exploit these events and dates for publicity and may take advantage of a current overstretching of domestic security services.


On 1 July, the Financial Times released an interview with a senior UK Ministry of Defence official, Rob Johnson. Johnson assessed that the UK’s armed forces are currently unprepared for a “conflict of any scale”, citing large issues with weapons and ammunition procurement, as well as recruitment. The article, which was almost certainly aimed at reintroducing the issue of the armed forces in the political debate days before the elections, follows months of warnings about the state of the British military.


On 29 June, a security guard outside the Israeli embassy in Belgrade, Serbia, was shot with a crossbow. The guard, who survived, managed to kill the attacker, who early investigations allege was a radicalised Islamist extremist who had pledged allegiance to Islamic State. The attack is almost certainly a case of lone-actor terrorism linked with the ongoing Israel-Hamas war. While most lone-actor attacks do not follow specific events, this case may have been partly influenced by the Israeli ambassador’s statement, in April 2024, that Tel Aviv would not categorise the 1995 Srebrenica massacre as a genocide.


On 2 July, Kazakh government critic Aidos Sadykov died in Ukraine, only days after being shot by unidentified gunmen. There is a high likelihood that Sadykov’s killing was orchestrated by Kazakh intelligence, highlighting how the ongoing war in Ukraine may have created a more permissive environment with reduced security for third-party operations in the region.


On 5 July, the Turkish Interior Minister announced the detention of 45 suspects across 16 provinces linked to the Islamic State during BOZDOĞAN-48 counterterrorism operations. The operations also led to the seizure of large amounts of foreign currency, Turkish Lira and digital material. Turkish counterterrorism operations against the Islamic State frequently trigger reprisal attacks, with the group primarily targeting the security forces, places of worship and symbols of Western decadence.


Turkish President Recep Tayyip Erdogan has indicated that Syrian President Bashar al-Assad may be invited for an official visit, when speaking to journalists at the Shanghai Cooperation Organisation (SCO) summit in Kazakhstan on 5 July. While Ankara historically supported some rebel groups fighting against Assad in the Syrian Civil War,  tensions between Turkey and Syria have eased in recent years. Erdogan likely is seeking to promote better relations with Assad to assist their current primary strategic objective in Syria, which is defeating the Kurdish separatist groups that have a foothold in northern Syria as well as neighbouring Iraq.


A jihadist attack on 3 July in central Mali near the town of Bandiagara killed over 20 civilians, likely suggesting that extremist groups are continuing to exploit a weak government and the retrograde of Western forces from the region. In addition, around 60 bodies have been discovered near Abeibara, in the Kidal region of northeast Mali close to the Algerian border. The victims, many of whom were found in mass graves, were largely civilians and are thought to have been killed in late June. It is suspected that the killings were conducted by Malian troops in cohort with the Russian “Africa Corps”, its rebranded Wagner Group. The incident may point to an increased trend of brutal tactics used to counter extremist groups, with the intimidation of civilians suspected of harbouring or assisting extremist groups being used to reduce militant groups’ freedom of movement and to disrupt their support networks.


The Tutsi-led and reportedly Rwanda-backed M23 rebel group has captured two more strategic towns in the Democratic Republic of the Congo’s North Kivu province, causing mass displacement and placing further pressure on the humanitarian situation. In addition, two employees of the UK-based NGO Tearfund were killed on 1 July after their convoy was attacked by gunmen likely belonging to the M23 group whilst operating in the North Kivu province. M23 has conducted mass executions and human rights abuses in the past and by targeting international aid workers the group may be attempting to decrease foreign access and oversight of their operations.


In a separate incident in the DRC, six Chinese nationals and at least two Congolese soldiers were killed on 4 July by suspected militants from the Development of the Congo (CODECO) militia group. The attack occurred at a mining site near Abombi, Djugu Territory, Ituri Province in the northeast of the country.


The largely ethnic Lendu CODECO group is notorious for its brutal tactics and has its roots in disputes over land and resources. The group has likely targeted Chinese nationals as it perceives China and the DRC government are exploiting resources that belong to the Lendu people, with its long-term strategy aimed at deterring international investment.


The Iranian presidential election runoff takes place on 5 July. The two remaining candidates to succeed President Raisi, who died in a helicopter crash in mid-May, are Saeed Jalili and Massoud Pezeshkian. Pezeshkian, who represents the reformist front, obtained the most overall votes during the first round of the elections. However, Jalili is likely to win, as he was implicitly endorsed by Supreme Leader Ayatollah Ali Khamenei, and as the reformist candidate is likely to be particularly damaged by the low voter turnout. The first round of the elections only had a 40 per cent turnout, the lowest in Iran’s post-1979 history and likely a demonstration of widespread dissatisfaction with the oppressive Shia regime.


Environment, Health and Miscellaneous

Almost unprecedented temperatures of above 35 degrees Celsius were recorded in Moscow during the reporting period, caused by a severe heatwave that is affecting much of European Russia. There is a realistic possibility that the high temperatures will result in the outbreak of further wildfires. Due to Russia’s extensive forest cover and particularly carbon-rich soils, wildfires risk having an especially negative impact far beyond Russia’s borders, possibly accelerating the release of large volumes of CO2 into the atmosphere.

At least seven people have been killed and several remain missing after severe flooding caused by torrential rain that began on 30 June hit parts of southern Switzerland, southern France, and northern Italy. Further rain is forecasted in much of the region, increasing the risk of landslides, flash floods and falling trees which have already caused widespread transport disruption.

On 5 July, the Etna and Stromboli volcanoes, in Sicily, erupted, releasing large quantities of ash and leading to temporary closures of the airport in Catania. Italy has a large number of active volcanoes and eruptions are common, however, they do not always result in transport disruptions. The recent eruptions are unlikely to directly threaten the inhabited areas of Sicily, although there is a realistic possibility of further volcanic activity.

At least 1,000 acres of forest have been burned by ongoing wildfires on the Greek island of Zante. The fires are especially focused on the island’s mountainous areas and have not threatened residential areas as of the time of writing. Fires and extreme heat have been reported in other parts of the country, with hotels being evacuated in Kos and Chios, as well as fires developing on the outskirts of Athens. July is the hottest month of the year in Greece, and the summer of 2023 had extremely severe wildfires that were exacerbated by especially high temperatures. The current weather forecasts make a repeat of last year’s crisis a realistic possibility, with temperatures commonly exceeding 35 degrees Celsius.


India: Deadly stampede causes more than a hundred deaths at religious event.

In Hathras, Uttar Pradesh state, at least 120 people died following a crowd crush that took place at a religious event hosted by a “godman”, known as Bhole Baba. According to early reports, about 250,000 people gathered at an event hosted at a venue that could accommodate less than 80,000. The stampede reportedly was caused by the attendees’ attempts at collecting soil on which the godman and his entourage had treaded upon exiting the venue. Notably, at least 110 of the casualties were women

Solace Global Assessment: 

Godmen and other gurus are not a new phenomenon in India or the broader Indian subcontinent. Popular gurus play an important role in local and national politics. Candidates from religiously-affiliated parties, such as the ruling Bharatiya Janata Party (BJP) have formally or informally endorsed local preachers, likely in efforts to bolster appeal with local communities.

Observers have remarked that the popularity of religious personalities likely has economic, class- and caste-based implications, with many faithful often coming from disadvantaged groups. In many cases, the attendees at these events hope to gain material riches from touching or interacting with the godmen. However, this creates risks to attendees. Improvised, ad hoc religious events are often held in areas and venues with insufficient capacity or few safety features and are likely to attract more attendees through social media. Stampedes are common as the attendees try to approach the godmen, with little regard for others in the crowd.

Travellers who are not familiar with these events may be tempted to approach large impromptu gatherings. However, the risk of becoming involved in a stampede is high. Albeit much less impactful and influential, it is important to note that charismatic preachers are not solely popular in Hindu contexts. Pakistani Muslim communities also have a history of preachers drawing a considerable number of followers by espousing various religious messages. A contemporary example is a preacher and blogger known as “Muhammad Qasim” who, in addition to sharing visions of God and Prophet Mohammed, blends apocalyptic and millenarist messaging with endorsements of former Prime Minister Imran Khan which has enabled him to draw large crowds.


Indonesia: Senior leaders of Jemaah Islamiyah announce disbandment of the Southeast Asian jihadist group.

On 30 June, 16 senior leaders of Jemaah Islamiyah (JI) released a video statement from Bogor, Indonesia, announcing that the transnational jihadist militant network based in Southeast Asia would be dissolved. The statement also declared commitment to the Republic of Indonesia and the changing of teachings in JI-run schools to orthodox Islam.

Solace Global Assessment: 

JI is a major terrorist group in Southeast Asia with established links to al-Qaeda, that is known to operate in Indonesia, Malaysia, southern Philippines, Singapore, Brunei and southern Thailand. In 2021, Indonesian security forces estimated that JI had approximately 6000 active members in Indonesia alone.

The group are most infamous for having conducted the 2002 Bali bombings, which killed over 200 people, mostly foreign tourists. However, this attack was reportedly carried out without the support of JI’s leadership. The group are also suspected to have conducted several other notable attacks targeting foreign nationals between 2002-2005. While historically significant and still a prominent force, the group has had a gradually declining influence in Southeast Asia.

The announcement is likely driven by a combination of factors. Firstly, JI runs many religious schools, a key asset, and aims to shield them from government suppression. Secondly, JI’s leadership may be seeking political legitimacy by aligning with the Indonesian Republic, akin to the Muslim Brotherhood’s strategy in the Middle East and North Africa. Thirdly, Indonesian counterterrorism efforts, led by Detachment 88, have successfully foiled plots, arrested senior members, implemented deradicalisation programs, and engaged with JI-aligned intellectuals, putting significant pressure on JI’s leadership.

The decision is highly likely to have implications in both Indonesia and wider Southeast Asia, where the group has also historically operated. In the short term, the announcement will likely enable greater success for JI-affiliated schools and it is a realistic possibility that the leaders will, to varying degrees, enter public life. While the leaders who made the statement are assessed to have considerable credibility within the organisation, active splinter groups are highly likely to emerge.

These splinter groups may seek to publicly assert themselves and gain legitimacy amongst jihadists by conducting terrorist attacks. They may have a much greater disposition towards terrorism, supported by the 2002 Bali bombings being conducted by more extreme JI members without the approval of senior leadership. Dissidents may also seek closer relations and affiliation with more extreme jihadist groups, namely the Islamic State (IS) who already have an established presence in Indonesia through affiliate groups such as Jamaah Ansharut Daulah (JAD). Considering the historical modus operandi of JI terror attacks, as well as the prevalence of Westerners in heavily touristed areas of Indonesia, high-value targets for terror attacks will likely include major tourist resorts, premium hotels and buildings associated with Western governments such as embassies and consulates.


Politics, Economics and Civil Unrest

Residents of Karachi staged protests on 1 July over prolonged load-shedding-driven losses of power in the city’s old town. Pakistan suffers from obsolescent and poorly maintained infrastructure, and the high temperatures currently being recorded in the country have exacerbated difficulties in delivering consistent power to densely populated communities. More than 1,000 deaths were reported in Karachi over the past week due to heatstroke, and recent reports signal that most took place in areas where load-shedding was underway, possibly due to the disruption to domestic and public air conditioning, and delays in the reporting and managing of health emergencies.


In Astana, Kazakhstan on 04 July, during the final day of the Shanghai Cooperation Organisation (SCO) summit, Russian and Chinese presidents, Vladamir Putin and Xi Jinping called for the establishment of a new Eurasian security club. This reflects the increasingly close ties and strategic visions of Moscow and Beijing, who both desire a multipolar world order to counter perceived US and NATO hegemony. The proposal remains in its early stages, and although it is unlikely to be implemented imminently, the deal could result in substantial shifts in the geopolitical landscape. Moscow and Beijing are also likely seeking to expand their power in their respective Eurasian spheres of influence; the newly proposed security pact could be a vehicle to enable these goals. However, given Russia’s and China’s historic rivalries and areas of future competition, an alliance that emulates the same levels of inter-operability as NATO is highly unlikely.


Ten Cambodian environmentalist activists were jailed for “plotting” against the government and for “insulting the king”, and sentenced to up to eight years in prison. The activists had previously reported on the mismanagement of the country’s natural resources by leaders, including the monarchy. The case is highly likely similar to others that occurred in Thailand, where lese majeste laws are often used as a pretext to silence opposition voices from outside of the political establishment.


Over 800,000 people have signed an online petition calling for the impeachment of South Korean President Yoon Suk Yeol. The number of people attempting to sign the petition was so great that significant issues with accessing the National Assembly’s website arose. The president is deeply unpopular, and the petition’s extensive engagement is reflective of this widespread dissatisfaction. While civil unrest in South Korea is generally peaceful, it is highly likely that protests against the president will continue, in tandem with the ongoing doctors’ strike which has caused disruptions to medical treatment since February 2024.


Security, Armed Conflict and Terror

Despite often tense relations, the Pakistani and US infantry have begun a two-week joint anti-terror exercise at the National Counter-Terrorism Centre in Pabbi, Khyber Pakhtunkhwa province. The exercise aims to share counter-terrorism experiences, refine drill procedures, and enhance marksmanship skills during urban warfare and is likely being conducted to help Pakistan counter the rise of ISKP in western Pakistan.


Also in Pakistan, Baluch leaders associated with the Balochistan Liberation Army (BLA) have accused China of being politically responsible for the ongoing Azm-e-Istehkam counterterrorism operations, targeting BLA and Pakistani Taliban (TTP) militants. The BLA has sought to target Chinese interests, nationals, and physical assets in Pakistan, likely with the strategic aim of undermining Islamabad and discouraging foreign investment. Perceptions of growing Chinese influence on Pakistani authorities’ security policy may become a driver of further attacks, and will likely result in China becoming a more frequent target for extremist propaganda in the region.


A senior Australian diplomat has indicated that adding partners to the AUKUS defence pact would be “complicated”, a development that will almost certainly be welcomed by China. The 2021 agreement was established to counterbalance China’s power and maritime capability. The collective security arrangement involves Australia’s acquisition of sensitive nuclear-submarine technology and it is unlikely that Washington will sanction the further circulation of these capabilities.


On 2 July, police in Sydney Australia arrested a 14-year-old boy after a stabbing at the University of Sydney, which resulted in a lockdown of the university’s buildings. To boy’s ideology or motivation has yet to be determined, however, New South Wales police have expressed concerns over increased rates of young people being radicalised online. The incident also follows the recent stabbing of a bishop in Sydney by a teenage assailant and a mass stabbing attack at a Bondi area shopping mall.


Environment, Health and Miscellaneous

On 1 July, Indian authorities announced that the New Delhi domestic flights airport terminal is scheduled to remain closed for a “few weeks”, after a portion of the terminal roof collapsed on 29 June, killing one and destroying numerous vehicles. The collapse followed heavy rains and resulted in limited closures of the Indira Gandhi International Airport. The accident is likely to result in localised travel disruptions and may have a limited adverse political impact on the ruling Modi government.


Thousands of people have been trapped in their homes in Kachin and Sagaing provinces in northern Myanmar after major flooding caused by several rivers overflowing, with further rain forecasted. Rescue and humanitarian efforts will almost certainly be stretched by the ongoing civil war, with the central government highly unlikely to provide any support in rebel-held areas.


The Japan Meteorological Agency has issued an alert for heat-related illnesses as a heatwave is set to affect much of eastern and western Japan, with dozens of people already hospitalised. The agency has warned that temperatures may hit a record 39.3 degrees Celcius in Shizuoka City, with temperatures in Tokyo already exceeding 35 degrees Celcius. The extreme heat is forecasted to last until mid-July.


On 5 July, a tornado in Dongming County, Shandong Province in northeast China has resulted in at least one death, dozens of injuries and extensive property damage. Tornadoes are rare in this area but may become more frequent due to the altering of atmospheric conditions caused by climate change. Moreover, buildings are likely to be unprepared for tornadoes and there is a lack of shelters, factors that will increase pressure on the authorities.


Possible Unrest in Catalonia Amidst Amnesty Controversy

Political Tensions in Catalonia: Amnesty Decisions Spark Criticism

Intelligence cut off: 13:00 GMT 2nd of July 2024

On July 2nd, the Barcelona Provincial Court granted amnesty to 46 national police officers who faced charges stemming from their role in quelling protests during the October 1st, 2017 Catalonian independence referendum. This decision contrasts sharply with the Supreme Court’s ruling the day before, July 1st, which denied amnesty to former Catalan President Carles Puigdemont and several other independence leaders. The Supreme Court justified its decision by arguing that the crimes these leaders are accused of, primarily embezzlement of public and European funds to support the independence movement, are not covered under the amnesty law.

Both cases fall under the recently approved and controversial amnesty law, passed by the Spanish Congress in late May and sponsored by Socialist Party leader and Prime Minister Pedro Sanchez. This law potentially grants amnesty to around 500 individuals involved in the 2017 protests, with exceptions for extreme cases. However, the Barcelona court’s decision to grant amnesty to police officers accused of severe actions like torture or inhuman treatment is seen as lenient and has sparked criticism.

The disparities between amnesty granted to police officers and denied to Catalan leaders are likely to provoke public unrest in Catalonia. The Supreme Court’s decision is viewed by many as politically motivated, especially given past protests following the sentencing of nine independence leaders in 2019, which resulted in widespread disruptions and clashes in major Catalan cities.

Following these developments, there are concerns about renewed civil unrest in Catalonia. Travellers should stay updated with local media for any announcements of protests or demonstrations in the region and exercise caution accordingly.


SUBSCRIBE NOW

Join Our Global Intelligence Summary Mailing List

Don’t get caught off guard by civil unrest. Sign up to receive our weekly Global Intelligence Summary and quarterly Election Guide, highlighting key geopolitical events and upcoming elections that could spark unrest.


Speak to our team about your journey management needs

    Week 26: 21 June – 28 June

    Global Intelligence Summary

    blue abstract background
    • The final approval of Argentine President Milei’s “bases bill” is likely the first major victory for the libertarian president, and will highly likely lead to further sweeping economic reforms.
    • The recent ISCP attack in Russia’s Dagestan region likely shows severe vulnerabilities of Russian intelligence, and almost certainly demonstrates growing Islamist efforts to destabilise the region.
    • The Houthis’ claimed acquisition of hypersonic anti-ship ballistic missile capabilities will almost certainly improve the militant group’s targeting success in the Red Sea and Gulf of Aden.
    • In Kenya, widespread and violent civil unrest provoked by a controversial finance bill will likely continue despite the bill’s revocation with protestors demanding the president’s resignation.  

    AMER

    US: Homeland Security report 400 illegal migrants are linked to IS

    Bolivia: Failed coup attempt in La Paz

    Argentina: Milei bill passed in parliament as recession begins

    Russia: Islamic State targets Dagestan

    Israel, Palestine and Lebanon: Tensions at north border grow

    Red Sea and Gulf of Aden: Houthi claim hypersonic capabilities

    Kenya: Protesters set fire to parliament in response to fiscal bill

    Pakistan: Hundreds of people dead due to severe heatwave

    India: Inter-religious tensions continue with Mosque demolitions


    Several elections are scheduled to take place over the coming week (28 June – 5 July):

    • Iran (Presidential) – 28 June
    • Mongolia (Parliament) – 28 June
    • Mauritania (Presidential) – 29 June
    • France (National Assembly, 1st round)- 30 June
    • United Kingdom (Parliament) – 4 July

    An investigation conducted by the United States Department of Homeland Security (DHS) indicates that as many as 400 migrants who illegally entered the country in the last four years were enabled by a human smuggling network reportedly connected to the Islamic State (IS). The investigation has prompted an additional review of the identified individuals.

    The report suggests that the primary objective of the network was to smuggle in people, and not to facilitate the entry of terrorists into the US. However, the smuggling network is assessed to have direct links to another network with established ties to the trans-regional violent extremist (VEO) group that expedited the entry of a group of Uzbek nationals.

    The 400 migrants that will require further investigation are mostly from Central Asian nations, and the report has been released after an operation in early June by the US Immigration and Customs Enforcement (ICE) which arrested eight Tajik nationals with alleged ties to IS.

    Solace Global Assessment: 

    Reports of IS-linked groups smuggling migrants into the US will likely be used during the current presidential campaign to undermine President Biden’s record on border security and immigration. On 26 June, House Committee on Homeland Security Chairman Mark E. Green released a statement suggesting that there is no one the Biden administration won’t allow into the country. The Republicans will likely exploit the timing of this report for political gain, with polls indicating most Americans trust Trump over Biden regarding border security and immigration.

    The investigation has already resulted in the apprehension of over 150 migrants, but the whereabouts of at least 50 remain unknown, a development likely to evoke fear in the US. Currently, there is no evidence to suggest that the Central Asian migrants are planning on conducting attacks within the US, and the vast majority are likely economic migrants with no real connections to terrorism. The most likely threat posed by the operation is that it is being used by members of the Islamic State’s Khorasan Province (ISKP) to generate money, which is then used to fund ISKP activity.

    The ISKP is primarily based in Afghanistan, but its senior leadership is predominantly Tajik and is successfully recruiting Central Asians. Likely, elements of ISKP within Central Asia will also target the families of the smuggled individuals to extort a portion of their remittance payments. There is also a realistic possibility that some of the 400 are vulnerable to radicalisation after entry to the US and potentially susceptible to IS propaganda if struggling with isolation or economic hardship. However, the lack of current evidence regarding planned attacks is unlikely to blunt concerns in the US.

    The report was released shortly after a resurgence in ISKP activity, characterised by an increase in external attacks in places like Russia, Iran, and Pakistan. Long-term, ISKP is likely to exploit funds through smuggling to consolidate its power within Afghanistan and increasingly so in neighboring countries like Pakistan, Tajikistan, and other Central Asian countries. This is likely to put it in a stronger position to conduct future external operations, which will likely include coveted Western targets and interests, with the group using the remote, mountainous, and destabilised parts of Afghanistan and Central Asia in a similar manner to how the Taliban did prior to 9/11.

    Whilst this revenue stream will only play a minor part in ISKP’s financial operations, the fact that the US’ weak southern border is being exploited to fund its enemies’ activities is likely to be highly contentious and exacerbate political tensions during an already heightened time in the US.


    Bolivia: Short-lived attempted coup neutralised after troops try to storm presidential palace

    On the afternoon of 26 June, the commander of the Bolivian Army, General Juan José Zúñiga, led an attempted coup d’état against leftist President Luis Arce. Hundreds of soldiers, equipped with armored vehicles, moved into Plaza Murillo in central La Paz, Bolivia’s capital. They then attempted to storm Casa Grande del Pueblo, the presidential palace, with an armored vehicle, reportedly slamming into the palace doors. Zúñiga publicly called for a restructuring of democracy and a change of government.

    In the days prior, Arce had relieved Zúñiga of his post following threats allegedly made by Zúñiga to arrest former President Evo Morales should Morales run for president again in 2025. Arce personally confronted Zúñiga at the presidential palace, and Zúñiga was arrested shortly afterward. Along with Zúñiga, Vice-Admiral Juan Arnez Salvador, head of the navy, has also been arrested.

    The attempted coup only lasted a few hours and was condemned by regional leaders in Brazil, Mexico, Colombia, Honduras, Chile, Venezuela, and the Organization of American States (OAS). The US, UK, and the European Union’s foreign policy chief also condemned the attempted coup. Zúñiga reportedly urged his troops to withdraw after it became clear the coup had failed, and newly appointed Army commander, José Wilson Sánchez, ordered soldiers to return to their barracks.

    Solace Global Assessment:

    Zúñiga cited dismay with Bolivia’s endemic issues as his motivation for the coup. However, it is likely that personal motivations served as the primary catalyst for the coup due to his recent dismissal by Arce. Alternatively, another key trigger may have been large-scale protests that have recently gripped La Paz due to growing economic insecurity.

    Arce is presiding over a challenging period for Bolivia, with a financial crisis crippling currency reserves amid low gas exports and nationwide fuel shortages. In March, approval ratings for Arce were reported to be as low as 38 percent. There has been discontent from across the political spectrum. From the right-wing, there has been longstanding severe dissatisfaction with the far-left Movement for Socialism’s (MAS) return to power under Arce in 2020, after former president Morales’ removal from power in 2019. The right-wing former interim President Jeanine Anez, however, condemned the coup. A major contributing factor to the military coup’s failure was highly likely to be a lack of support from the political right.

    From the left wing, there has also been considerable discontent and divisions arising within MAS. Morales has stated his intent to stand in Bolivia’s 2025 election, ousting Arce. It was Zúñiga’s threats against Morales in anticipation of this that reportedly sparked the general’s initial dismissal.

    While very short-lived, the failed coup reveals the continued threat posed by the military and exposes fundamental weaknesses in Bolivia’s democratic system. Arce is likely to receive a boost in his ratings amid almost universal international condemnation of the coup. However, there has been speculation that the coup was actually organised by the government themselves to galvanise such support in the face of a political crisis. While the veracity of such claims is unclear, these claims are likely to be believed by a significant proportion of Bolivia’s anti-Arce groups.

    The threat posed by civil unrest in Bolivia is likely to increase in the short-to-medium term, with disgruntled right-wing groups lamenting the coup’s failure and leftists being called to march in solidarity with the government. However, the coup’s critical failure is likely to bolster the government’s grip on power, although this is unlikely to persist in the medium to long term as Bolivia’s economic poor performance is almost certain to continue.


    Argentina: President Milei’s austerity measures approved by parliament.

    Argentina’s parliament, the National Congress of Argentina, has approved President Milei’s economic reform package after months of debate and revisions to the bill within the country’s upper and lower houses. Milei described his first real major legislative victory as the “greatest fiscal adjustment” in Argentine history and has castigated the opposition for delaying the bill.

    Solace Global Assessment: 

    This legislative victory essentially provides President Milei with the tools he has demanded for months to reform the Argentine economy. The legislation will enable him to introduce a raft of controversial right-wing policies aimed at incentivising investment, privatising state-owned entities, restructuring taxes, and cutting away at Argentina’s large public sector. Milei’s policies to date have helped reduce Argentina’s inflation and have brought about the country’s first fiscal surplus in years. However, they also have incited widespread civil unrest and resulted in many job losses.

    Recent reporting indicates that Argentina has officially entered a technical recession in the first quarter of 2024, with GDP shrinking 2.6 percent from the previous quarter, marking the second consecutive contraction. Under Milei, the jobless rate has risen to 7.7 percent, resulting in 300,000 more unemployed people, and many services and goods have spiked in price. Spending cuts have halted infrastructure projects, causing significant job losses in construction, while triple-digit inflation and the recession have severely impacted consumers. Despite achieving a fiscal surplus that boosted markets, poverty and homelessness have increased, though Milei insists these measures are necessary as part of his long-term recovery plan.

    However, the announcement of a technical recession will likely be interpreted as a failure of Milei’s austerity measures, and his impending implementation of further measures following his victory in parliament will almost certainly be a catalyst for further civil unrest.


    Politics, Economics and Civil Unrest

    The first US presidential debate was held on 27 June in Georgia, a key battleground state for the 2024 election. Observers have stated that, although Republican candidate and former President Donald Trump’s performance was marked by numerous false statements, incumbent President Biden almost certainly “lost”. In particular, Biden repeatedly seemed to lose his train of thought and gave somewhat incoherent responses to otherwise straightforward questions.

    Some Democrat Party politicians informally raised the possibility of asking Biden to step down in favor of an alternative candidate before the party’s national convention. This remains a remote possibility, as replacing Biden would be incredibly challenging due to party rules and would likely result in a Trump victory. Still, it is highly likely that the debate largely improved the controversial former president’s chances.


    The Honduran ex-President Juan Orlando Hernández was sentenced to 45 years in prison on 26 June. He was found guilty of accepting millions of dollars in bribes to protect US-bound cocaine shipments belonging to traffickers. The case likely illustrates the extent of corruption present in Honduras as individuals in government use their position of power for personal gain, neglecting the interest of citizens.

    Security, Armed Conflict and Terror

    On 25 June, the first contingent of Kenyan police, numbering 400, arrived in Haiti following repeated delays. Much of the country is still under gang control, with rival groups increasingly targeting institutions likely in the hope of reducing officials’ ability to restore order to the country. The Kenyan mission, whose stability is already likely compromised by the severe protests currently taking place in Nairobi, will almost certainly face extreme logistical difficulties in its attempts to re-establish order in Port-au-Prince and the rest of Haiti.

    There is a high likelihood that the UN-backed force’s first task will be securing key locations in the capital, allowing for a safer environment for the carrying out of humanitarian and governance operations. However, there is a high likelihood of retaliation from the well-armed gangs, many of which have decried foreign intervention as a fundamental threat to their interests.


    Authorities in Colombia have started talks with a third guerrilla group that broke away from a 2016 ceasefire deal with the Revolutionary Armed Forces of Colombia—People’s Army (FARC). The Segunda Marquetalia faction, which reportedly has around 1,600 members, launched a new rebellion in 2019 and has yet to subscribe to President Petro’s “total peace” plan.

    Successfully signing a peace deal would help stabilise the country, reduce violence, and improve national security. However, Petro has had mixed success with other groups like the National Liberation Army (ELN), and there are fears that rebel groups are using ceasefires to expand their influence, appropriate more territory, and recruit more members.

    Environment, Health and Miscellaneous

    Research studying the 2023 wildfires that affected much of Canada revealed that the fires resulted in the release of 3 billion tonnes of carbon dioxide (CO2), equivalent to the total emissions of the global airline industry for 2022. The 2023 fires were among the most severe ever recorded, with Canada alone accounting for more than a quarter of global tree cover loss over the year.

    As the warmest months of the year begin, the Environment and Climate Change Canada (ECCC) office warned of a “high probability” of above-average temperatures in July and August. Warm and dry conditions are especially conducive to exacerbating the severity of wildfires, highlighting ongoing concerns about climate impacts and the potential for further environmental and atmospheric consequences.


    In Mexico City, thousands of citizens have been forced to evacuate their homes as storms and heavy rainfall continue. As of 21 June, the death toll had reached 30, including six children. Warnings have been issued for wind speeds up to 70 kilometers per hour and waves up to 3 meters around the Gulf and Caribbean coasts.

    These extreme weather patterns are attributed to Storm Alberto, which has caused significant economic losses for Mexico due to widespread damage to infrastructure and the displacement of thousands of citizens.


    28 June an earthquake of magnitude of 7.0 struck near the coast in southern Peru’s Arequipa region. No deaths have been reported, but eight people have been injured. Arequipa has been hit with four aftershocks of 4 to 4.6 magnitude, creating landslides on local roads. There’s the potential for further damage which will add additional pressure on the region’s infrastructure and the need for emergency response efforts.


    On 23 June, six gunmen from the Islamic State Caucasus Province (ISCP) carried out a series of attacks in the cities of Derbent and Makhachkala in Dagestan. The attacks resulted in the deaths of at least 22 people, with more than 40 wounded, and significant damage to two synagogues and two churches. These incidents follow a rise in Islamist terror activities in the region and across Russia.

    In late October, anti-Semitic riots occurred in Dagestan, including in the same cities targeted by ISCP. In March, the IS’ Khorasan branch (ISKP) carried out a deadly attack at the Crocus City Hall in Moscow, killing 145 people. More recently, supporters of the Islamic State staged a prison uprising in Rostov. Additionally, reports indicate that cooperation between Russia and Turkey led to the dismantling of an IS cell that was planning further attacks in Moscow.

    These events underscore ongoing security challenges posed by Islamist extremist groups in Russia and the broader Caucasus region, prompting heightened vigilance and counterterrorism efforts by authorities.

    Solace Global Assessment: 

    The various branches of the Islamic State (IS) have likely identified the ongoing war in Ukraine as an opportunity to destabilise the Russian state. Russia’s internal security is primarily managed by the Russian National Guard, but many of its forces have been redeployed to occupied parts of Ukraine, border security, and protecting the Kremlin post-Wagner rebellion, leaving other areas of Russia less secure.

    Russia’s extensive counterterrorism efforts in Syria, the broader Middle East, and through its Africa Corps in the Sahel have likely strained its security and intelligence capabilities, making Moscow a desirable target for Islamist violent extremist organisations (VEOs). Recent improvements in Russia’s relations with the Afghan Taliban regime, potentially nearing full diplomatic recognition, may further embolden groups like the IS Khorasan Province (ISKP) and IS Caucasus Province (ISCP) to target Russian civilians and assets.

    The Caucasus region, with its history of Russian domination and conflicts such as the Chechen wars, coupled with economic stagnation and lack of socioeconomic progress, provides fertile ground for Islamist sentiments. The resurgent IS has found receptive audiences for recruitment in former Soviet republics, particularly Tajikistan, where local governments are viewed as oppressive toward Islam, echoing similar grievances in Chechnya and Dagestan.

    The involvement of family members of a local government official in the attacks underscores the penetration of extremist ideologies among educated youth, possibly indicating growing social acceptance of violent forms of Salafi Islam among elites. The Russian government’s relatively muted response following the attacks, compared to previous incidents like the Crocus City Hall attack, reflects Moscow’s concern over public perception of its ability to prevent Islamist violence. The implication of a local government official in the attack adds to Kremlin embarrassment.

    While some officials have attempted to shift blame for the attacks onto Ukraine or the West, claiming stable interfaith relations within Russia, tensions likely persist. Anti-Islamic sentiment in European Russia contrasts with growing sympathy for Islamist causes in the Caucasus, potentially fueling further disorder.

    The aftermath of these attacks may embolden Christian Orthodox nationalists to perpetrate mob violence against Muslim communities in Russia and increase the likelihood of further lone-wolf attacks by radicalised individuals, particularly in major cities like Moscow and St. Petersburg.


    Israel, Palestine and Lebanon: Fears of escalation continue, as Tel Aviv masses troops on northern borders.

    Israeli Prime Minister Benjamin Netanyahu and his administration have remarked that the phase of most intense fighting in the ongoing war in Gaza is approaching its end, and have increasingly shifted attention to the Israeli northern border, where Israel Defence Forces (IDF) and Hezbollah continue to trade a growing volume of tit-for-tat airstrikes. Most notably, on 21 June IDF airstrikes targeted a compound belonging to the Islamic Revolutionary Guard Corps (IRGC) of Iran located in al-Bukamal, Syria. Defence Minister Yoav Gallant recently threatened to send Lebanon “back to the stone age”. The approval of a controversial draft bill, which allows for the state to force Orthodox Haredi Jews into partaking in a period of mandatory military service, has simultaneously resulted in demonstrations and growing discontent with the Netanyahu government.

    Solace Global Assessment:

    An Israeli offensive into Lebanon would most likely be extremely costly for Tel Aviv. Hezbollah is comparatively much better equipped than Hamas and has access to more solid positions, as well as clear support and logistics lifelines via its “Axis of Resistance” allies through Iraq and Syria. Despite this, the plan is viewed favourably by the more hawkish figures in the Netanyahu administration, which likely consider the continuation of a Hezbollah conventional threat at the border as an unacceptable long-term security vulnerability.

    On the Axis of Resistance side, there likely is not a clear consensus on the possibility and desirability of a conflict with Israel. An outbreak of open conflict between the IDF and Hezbollah will likely be used by other Iranian proxies, such as the various Iraqi militias, to widen the conflict and target US assets in neighbouring countries, such as Jordan, with a broader aim of destabilising the region.

    However, Tehran likely perceives this as risky, both due to the risk of the rise of Sunni insurgent groups, and due to that of rapidly worsening already tense relations with regional powers. Tel Aviv’s statement that the IDF has defeated the remaining Rafah battalion, and will therefore move to a stage of occasional raids and “management” of Hamas is highly likely premature. The Palestinian militant group likely still retains an ability to recruit new fighters, and manufacture or acquire weapons to replenish its arsenals, and will almost certainly continue carrying out re-infiltration operations in areas cleared by the IDF.

    While it is unlikely that these actions will result in anything more than a manageable level of attrition for the IDF, the continuation of IDF deployments in Gaza is likely to become increasingly costly for Tel Aviv. Moreover, the Hamas leadership in Gaza continues to evade Israeli intelligence, and its survival is almost certainly politically unacceptable for Netanyahu, who has indicated the destruction of Hamas as his key objective of the war.

    In the West Bank, Axis of Resistance groups are highly likely continuing their attempts to smuggle weapons to Hamas fighters and other Palestinian groups in the area with the intention of opening an additional front – a development that will become increasingly important if a confrontation in the north breaks out.


    Red Sea and the Gulf of Aden: Houthi Movement claims to have developed hypersonic ballistic missiles.

    On 24 June, the Houthi Movement claimed to have used a “new” ballistic missile to carry out a direct hit on the Liberian-flagged vessel MSC SARAH V in the Arabian Sea, which it claims is linked to Israel. The vessel was targeted whilst heading to port at Abu Dhabi at approximately 04.45 hours UTC about 450 kilometres (246 nautical miles) southeast of Nishum, a Yemeni town near the Oman border.

    The vessel’s operators claim that it was not hit by the missile but landed just 50m off the starboard side of the ship. The Houthis have stated that the missile used was the Hatem/Hadim-2, a domestically produced hypersonic missile which the militant group claims can reach speeds of up to Mach 8 (eight times the speed of sound).

    Solace Global Assessment: 

    The attack on the MSC SARAH V marks one of the longest-range Houthi attacks on merchant shipping and was likely launched to coincide with the withdrawal of the USS Dwight Eisenhower-led carrier group that spearheaded allied efforts to combat the Yemeni group.

    Whilst the Houthis claim that the missile was domestically produced, the Hatem-2 anti-ship ballistic missile (ASBM) bears a strong resemblance to the Iranian “Kheybar Shekan” ASBM. Iran has a track record of providing its proxy groups with capable weapon systems so that Tehran can indirectly attack or influence its enemies with a high degree of plausible deniability.

    Moreover, it is highly unlikely that the Houthi Movement have direct access to the technology or the domestic capability to produce an ASBM similar in nature to one of Iran’s most capable anti-ship systems. The Kheybar Shekan ASBM is purported to have a range of 1,450 kilometres (782 nautical miles); can reach altitudes of 135 kilometres; has a circular error probable (CEP) of under 20m; and according to some sources can reach speeds of up to Mach 8.

    In addition, the missile uses a solid-propellant so doesn’t require fuelling before launch which would reduce the Houthis’ targeting cycle. Whilst it is unlikely that the Houthi variant is as technologically advanced as the Iranian model, if the Houthis have acquired some of this technology and are capable of proliferation, it will increase their ability to target international shipping.

    The Houthis’ capability will be further augmented if their intelligence, surveillance and reconnaissance (ISR) are provided by Iran, allowing the proxy group to detect and track ASBM targets outside the ranges of their organic targeting assets.

    The missile’s potential speed, ability to manoeuvre at speed if equipped with advanced control systems, and its parabolic trajectory may enable it to bypass coalition air defence and radars by reducing response times, creating unpredictable flight paths, and exploiting gaps in radar coverage.

    This development could help to overstretch coalition naval assets currently providing air defence in the Red Sea and Gulf of Aden and the weapon system will almost certainly be nominated as a high-value target for US and UK strikes.


    Kenya: Protesters set parliament on fire as civil unrest escalates.

    On 25 June, the Parliament of Kenya was set on fire after being stormed by crowds of protesters, gathering in opposition to a finance bill proposed by the government, which would have increased taxes on a wide range of goods. Despite a heavy-handed and violent police response, civil unrest has continued, with crowds calling for the resignation of President William Ruto, despite the withdrawal of the bill.

    More than 20 deaths and hundreds of arrests and injuries have resulted from the protests as of the time of writing. On 28 June, the Kenyan High Court barred the police from using violent crowd dispersal methods, including water cannons, tear gas, rubber bullets, and live ammunition, following widespread cases of police brutality.

    Solace Global Assessment:

    The bill was proposed by the government of President William Ruto, who is trying to portray Kenya as a modern and stable African country and sees the reduction of the country’s USD 80 billion debt as vital to this end. Related to this is Ruto’s support for a UN-sponsored policing mission to Haiti to combat the recent wave of severe gang-led violence, as part of which 400 Kenyan police officers were deployed to the country last week.

    The Ruto administration’s decision to increase taxes on a multitude of common goods such as bread, milk and sanitary towels, while pursuing the costly Haitian expedition, has almost certainly been the main trigger for civil unrest in a country where millions live below the international poverty line and are struggling to pay for basic commodities. The demonstrations are likely to continue and expand to other cities in Kenya’s south, beyond the epicentre of Nairobi.

    Reports of cases of looting of assets owned by pro-government politicians in Nairobi and other cities highly likely indicate the important class dimension of the protests, and how the civil unrest is also linked to a broader dissatisfaction with the Kenyan political elite. The protests are likely to cause significant damage to infrastructure and result in a decrease in the government’s administrative capacity in the short term. This may create opportunities for further unrest and violence in the short-to-medium term, especially in the south.

    There is a high likelihood of the protests impacting Kenya’s economy directly and indirectly, affecting business and travel within the country. The willingness of the government to employ violent crowd dispersal methods, and repeated failures of police forces to protect government assets, make it likely that the Ruto administration will have to deploy the military to curb the unrest. Such a scenario would likely further increase the risks faced by foreign humanitarian organisations operating in Kenya.

    The suspension of internet services and damage to infrastructure will likely further complicate the provision of healthcare and limit opportunities to evacuate the country. Finally, the widespread reports of police brutality are likely to create important worries regarding the potential damages that the Kenyan police deployment may cause in Haiti, where conditions are even more chaotic than in their home country.

    The repeated instances of police officers using extreme levels of brutality to target protesters likely demonstrate a significant and structural lack of oversight, which, if transferred to Haiti, could undermine the legitimacy of the UN-backed mission and bolster the gangs’ position and authority in the country.


    Politics, Economics and Civil Unrest

    Ursula von der Leyen was re-elected as President of the European Commission, and Estonia’s Prime Minister Kaja Kallas was elected as the EU’s next foreign policy chief on 28 June. Portuguese former Prime Minister Antonio Costa was nominated as President of the European Council. These nominations were expected and received support from a cohesive coalition of the European People’s Party (EPP), the Socialists & Democrats (S&D), and the liberal Renew Europe group.

    Von der Leyen will now proceed to the European Parliament to seek reconfirmation for her second term. The significant aspect of the vote was the abstention of Italian Prime Minister Giorgia Meloni, leader of the European Conservatives and Reformists (ECR) group, which von der Leyen had actively courted in recent months. The parliamentary vote is expected to compel the EPP-led bloc to either maintain its alliance with the S&D or risk losing support from the left in favor of Meloni’s ECR and other smaller right-wing groups.


    The UK general election is scheduled to take place on 4 July. The Labour Party led by Keir Starmer is highly likely to win in a landslide. However, there is a realistic possibility of some minor demonstrations following the vote, especially from left-wing groups who feel disappointed by Starmer’s moderate policies and positions on the ongoing conflict in Gaza.


    The first turn of the French National Assembly snap election will take place on 30 June. The right-wing National Rally (RN) is likely to win the most votes in the first round, with a broad left-wing coalition led by the France Unbowed party (LFI) likely securing the second spot. Both are considered radical and outside of the “traditional” French centre-right and centre-left spheres. Consequently, it is almost certain that civil unrest will continue, and likely intensify after the first round and into the Paris Olympics.


    Dutch Prime Minister Mark Rutte was selected as NATO’s next secretary-general, scheduled to take over the post from Stoltenberg on 1 October. Rutte’s appointment, which was guaranteed after the Romanian candidate, President Klaus Iohannis, withdrew his candidacy, ensures a continuation of Stoltenberg’s status quo.


    On 22 June, an estimated 30,000 Hungarians held a Pride rally in Budapest in defiance of the country’s anti-LGBTQ laws. The rally follows a joint statement by 44 embassies in the Hungarian capital protesting the Orban government’s restrictions on LGBTQ rights.


    Moldova, Ukraine and the EU began membership talks on 25 June. The timing of the talks was likely arranged to predate the beginning of Hungary’s EU presidency on 1 July. The two countries’ candidacies for EU membership are almost two decades old, and, despite this step, there is a high likelihood that the timeline of their membership bids will continue to extend relatively far into the future. The announcement of talks is therefore likely a symbolic move, meant to respond to both Russophiles within the union, and to Russia itself, following Putin’s proposal of a “peace plan” which would have included major territorial concessions as well as Ukraine’s pledge to remain essentially isolated from the West. In Moldova, there is a high likelihood that pro-Russian separatist groups will intensify civil unrest and possible violence against institutions.


    The parliament of Georgia passed the first reading of a new anti-LGBTQ law that emulates similar procedures passed in Russia. The ruling Georgian Dream coalition, which has faced massive protests due to its controversial “foreign agents bill”, is highly likely using “traditionalist” and anti-LGBTQ talking points to try to recuperate some support and embolden its conservative base. The law’s approval is likely going to further stoke anti-government sentiment and may open further space for violent police crackdowns on dissent.


    Presidential elections will be held in Mauritania on 29 June. Incumbent President Mohamed Ould Cheikh Ghazouani is almost certain to win. Despite gradually moving in the direction of greater political pluralism, Mauritania remains unstable and there is a high likelihood that the vote will coincide with greater civil unrest and possible violence.


    The Iranian elections’ first round is taking place on 28 June. Two hardline candidates dropped out on the eve of the vote, likely to bolster the victory chances of the two remaining conservatives aligned with Ayatollah Khamenei’s views. The one moderate that was allowed to run, Massoud Pezeshkian, remains unlikely to win. His candidacy was likely allowed to progress to bolster low voter turnout figures, which the Ayatollah sees as proof of the regime’s low popularity following years of protests.

    Security, Armed Conflict and Terror

    The French Interior Ministry ordered the dissolution of multiple extremist groups, either associated with identitarian or Islamist movements, in the days before the election. These include the identitarian Groupe Union Défense (GUD), one of the major neofascist organisations in Paris. There is an increased likelihood that supporters of the groups will carry out actions to stoke violence during the elections.


    An attack by an unspecified terrorist group in Tassia, Niger, resulted in the deaths of 20 Defence and Security Forces (FDS) troops and one civilian. The village, located in the Tillaberi region close to Mali and Burkina Faso, was targeted in a sophisticated attack, involving armed gunmen and suicide bombers. It is highly likely that the attack was perpetrated by the Islamic State West Africa Province (ISWAP), whose fighters conducted another attack in Tillaberi in March. The EU will also end its military mission to Niger on 30 June, citing the country’s “grave political situation”, a move that will likely encourage further attacks and influence Niger to increasingly court Russian assistance.


    On 21 June, Cooperative for the Development of Congo (CODECO) militants reportedly attacked a village in the province of Ituri, northeastern Democratic Republic of the Congo (DRC). CODECO is an armed militia with an ethnoreligious character and is linked with the Lendu tribe. It carries out frequent attacks especially targeting the Hema tribe. The Ituri province is rich in gold, and competition over mineral resources continues to be a fundamental driver of inter-ethnic conflict. The attack, which resulted in the deaths of more than 20 civilians, highly likely demonstrates the DRC government’s waning control over its eastern provinces. Rwanda and other international powers continue to more or less directly back armed groups operating in the DRC’s eastern border regions, with the aim of informally securing control over the area’s mineral deposits and controlling the smuggling of minerals out of the country.


    On 24 June, Somalia’s ambassador to the UN accused Ethiopia of carrying out an “incursion” into the country’s territory. Ethiopia currently deploys 3,000 troops as part of the peacekeeping African Union Transition Mission in Somalia (ATMIS), aimed at containing al-Shabaab’s growing influence in the Horn of Africa. ATMIS is committed to withdrawing by the end of 2024, and the Somali government has announced that it expects to be able to contrast the Islamist group. However, with al-Shabaab having recently made significant territorial conquests, these statements are likely far too optimistic. Mogadishu is likely experiencing far too excessive domestic pressures to mount a significant challenge to al-Shabaab. These include tensions with the breakaway regions of Puntland and Somaliland, as well as a host of other security and economic issues.


    Bandits have conducted a series of attacks in Nigeria’s Katsina State. Multiple attacks have now occurred throughout June, forcing farmers to abandon their land which has resulted in higher food prices. The trend of attacks in Nigeria’s rural communities has been partially responsible for the country’s high inflation. Multiple commodities such as beans, beef, bread, rice and a host of vegetables have more than doubled in price during the last year, high food prices often sustaining periods of civil unrest throughout the country.


    Senior leadership from the United State’s Africa Command (AFRICOM)  and NATO met with multiple African defence chiefs in Botswana from 24 to 26 June. The conference addressed multiple security issues confronting Africa and is being used to bolster defence relationships in a continent where the West continues to cede ground to Russia and China. Containing the spread of jihadist groups was almost certainly on the agenda and the US attendees were reportedly seeking new bases in West Africa after their prompt withdrawal from Niger.  

    Environment, Health and Miscellaneous

    The UN has warned that Nitazenes, a group of synthetic opioids stronger than fentanyl, are spreading across Europe after previously circulating in the US. The UN’s Office on Drugs and Crime (UNODC) stated in its most recent World Drug Report that synthetic opioids have now been detected in the UK, US, Slovenia, Estonia, Latvia, Belgium and Canada, stoking fears over a new drug epidemic, strains on public health services and spikes in associated crime.


    Wildfires in the Russian Arctic territories have caused the third-highest levels of emissions for this period of the year over the last two decades. Wildfires in carbon-rich soils such as the Russian tundra and boreal forest tend to be particularly damaging in terms of CO2 emissions. This year, the increase in severity in regional wildfires has been recorded weeks earlier than the usual peak of July and August, making it likelier that the warmest part of the summer will record even more severe statistics.


    An outbreak of toxic strands of E. Coli bacteria, reportedly originating from grocery store products, has affected more than 200 people across the United Kingdom and killed at least one person. Symptoms of the infection include gastrointestinal issues and flu-like effects such as a temperature and headaches. Infection can be especially dangerous for individuals with pre-existing conditions.


    At least one person was killed and hundreds were displaced after heavy rains caused flash floods in the southeastern Misox valley of the Swiss canton of Grisons. Weather conditions in Switzerland are variable, and forecasts indicate that the country may face a heatwave in the immediate aftermath of the floods.


    On 23 June, crewmembers of a yacht in Greece were arrested after allegedly starting a fire by firing fireworks towards the island of Hydra, resulting in the destruction of 300,000 square metres (30 hectares) of pine forest. Greece faces a high threat from wildfires, most of which are started by humans, and exacerbated by the country’s summer dry and hot conditions. The incident is highly likely to cause increased scrutiny of over-tourism and luxury tourism in Southern Europe and may inspire acts of vandalism by environmental activists. For more information on the threat of “Ecotage” – or vandalism carried out by environmentalists – further information can be found here.


    Also in Greece, the number of tourists reported as having died due to the ongoing heatwave affecting the country has risen to six. It is notable that June is not the hottest month in Greece, and that temperatures are likely to marginally increase in July. The climate change-related extreme heat affecting southern Europe, and Greece in particular, in recent years has exacerbated the severity of the risks faced by travellers to the country. There is a high likelihood that the threat from high temperatures will have impacts on Greece’s economy, especially damaging the tourism sector.


    More than 400 people were reported to have died in Karachi between 22 and 25 June alone due to the extreme heatwave currently affecting the country. The Sindh province, where Karachi is located, had multiple consecutive days of above-40 degrees Celsius temperatures. In May, it, alongside regions of India, recorded a temperature of more than 52 degrees Celsius. Conditions in Karachi are worsened by the high levels of humidity.

    Solace Global Assessment: 

    The casualty numbers are likely understated, as they only account for identified bodies with clear causes of death assessed. Many of those who perished were homeless, complicating accurate reporting. The prolonged heatwave in Pakistan is expected to exacerbate health conditions, particularly impacting the poorer segments of the population disproportionately.

    Additionally, the high temperatures have sparked fires and led to electrical failures, causing numerous power outages worsened by Pakistan’s inadequate energy infrastructure. This situation is likely to increase the use of diesel generators, contributing to additional pollution. Both India and Pakistan have experienced extreme heat over the past year, the hottest on record globally.

    Factors such as poor sanitation, high humidity, overcrowded urban areas lacking green spaces, which help mitigate heat and lower nighttime temperatures, put the Indian subcontinent at heightened risk from extreme weather events. Apart from causing significant human suffering, heatwaves are also expected to adversely affect the economy by disrupting business activities and travel throughout the day.

    With climate projections indicating a trend towards more frequent and severe heatwaves, countries like Pakistan face an escalating climate-related threat that demands urgent adaptation and mitigation measures.


    India: Inter-religious tensions continue.

    In the first month of its third consecutive term, the Bharatiya Janata Party (BJP) led by Indian Prime Minister Narendra Modi continued implementing policies aimed at targeting the country’s Muslim minority. In June alone, several Mosques were demolished, often on pretence of alleged encroachment, in Delhi alone. On 27 June, a severed cow’s head was found near a Hindu temple in Delhi, and a BJP local politician responded to the incident by threatening to “slaughter” 200,000 of the city’s Muslims.

    Solace Global Assessment:

    Inter-religious tensions have been a central element of the BJP’s electoral strategy, with elected officials frequently endorsing conspiracy theories portraying Muslims as foreign agents aiming to destabilise the Indian state. Some BJP leaders advocate for transforming India into “Bharat,” a Hindu nationalist non-secular state. However, the BJP’s underperformance in the 2024 parliamentary elections, where it failed to secure a simple majority and was unexpectedly forced into a coalition, suggests that this identitarian domestic focus may not be as popular as previously thought.

    Despite this setback on the national stage, BJP politicians at the local level are persisting in efforts to curb Muslim influence and presence in society. There is a significant likelihood that the continuation, and even escalation in some instances, of anti-Muslim policies in places like Delhi reflects efforts by local BJP officials to regain public support following the party’s electoral setbacks.

    This approach carries the risk of provoking inter-communal tensions and potentially sparking violence, particularly in major urban centers where communal fault lines are more pronounced. The prospect of such tensions erupting into severe clashes remains a realistic concern, especially amidst a backdrop of heightened political polarisation and societal divisions.


    Politics, Economics and Civil Unrest

    Mongolians will vote in parliamentary elections on 28 June, with the ruling party expected to retain its majority despite concerns over corruption, inflation, and the state of the economy. The Mongolian People’s Party, led by Prime Minister Luvsannamsrain Oyun-Erdene, is likely to benefit from a booming coal sector, but major frustrations remain over economic inequality and corruption which were some of the main drivers of the 2022 protests.  


    Vietnam has announced that is ready to hold talks with the Philippines over its overlapping claims in the South China Sea, in a diplomatic approach that contrasts with China’s assertive approach and use of grey zone tactics. Hanoi is responding to Manila’s submission to the UN’s Commission on the Limits of the Continental Shelf to extend its exclusive economic zone to 350 nautical miles, which has created rival claims in the Spratly Islands. If both nations settle the dispute diplomatically and in line with the rules established by the United Nations Convention on the Law of the Sea, it could help to undermine China’s claims and activities in the South China Sea, leading to international pressure for Beijing to follow suit.


    Julian Assange, the founder of WikiLeaks, returned to Australia after more than a decade-long battle against extradition to the US, where he faced potential life imprisonment for publishing classified documents demonstrating that US troops committed crimes in Iraq and Afghanistan, as well as thousands of sensitive information and diplomatic cables. It is unlikely that the development will result in civil unrest.


    Civil unrest has erupted again on the French territory of New Caledonia after seven pro-independence activists were arrested and flown to mainland France for detention, including the leader Christian Tein. The Indigenous Kanak people will likely interpret the moving of their leaders to France as “colonial tactics” and as a further challenge to their sovereignty, and may sustain unrest until those arrested are returned to New Caledonia.

    Security, Armed Conflict and Terror

    On 29 June, Hindu pilgrims will head to Pahalgam in the Indian state of Jammu and Kashmir for the start of the annual Amarnath Yatra. The region has seen a spate of attacks against Hindu pilgrims in recent months and the pilgrimage has been targeted by Islamist extremists in the past, such as during the 2017 Amarnath Yatra massacre. It is almost certain that the pilgrimage remains a high-profile target for VEOs in the area and the Indian authorities will be forced to increase security during the event.


    On 22 June, India and Bangladesh strengthened their defence relationship by signing agreements to enhance cooperation in maritime security, the ocean economy, space, and telecommunications during Prime Minister Sheikh Hasina’s visit to New Delhi. India’s Prime Minister Modi celebrated Bangladesh’s decision to join the Indo-Pacific Oceans Initiative- a regional initiative aimed at enhancing regional maritime security, sustainable use of marine resources, and fostering cooperation among countries in the Indo-Pacific region, likely viewing this as a strategic move to draw Bangladesh away from China.

    Environment, Health and Miscellaneous

    In Hwaseong, South Korea, a battery factory fire killed 23 workers. Surveillance video footage reveals that the fire followed the sudden explosion of multiple lithium batteries, which started a chain reaction that led to the destruction of much of the building. As of the time of writing, it is unclear what caused the batteries’ explosion, which resulted in a particularly destructive chain reaction. The incident is likely to spark significant security concerns, and possibly have important impacts on battery manufacturing in South Korea.


    Alert Plus: Violence Erupts in Nairobi, Kenya

    Violence Erupts in Nairobi. Parliament and Government Buildings Targeted

    Intelligence cut off: 16:00 GMT 25th of June 2024

    On June 25th, Nairobi was engulfed in violence as protesters stormed the Parliament of Kenya, setting the building ablaze. The city, along with urban centres like Mombasa, Nyeri, and Eldoret, became scenes of serious clashes between demonstrators and security forces. Central transportation in Nairobi was brought to a standstill by makeshift barricades and burning tires, exacerbating the tense atmosphere.

    As of 16:15 GMT, official reports confirm at least five fatalities, with 13 serious injuries and 11 minor injuries recorded. However, these figures are believed to understate the true extent of casualties, with unverified accounts suggesting a rapid rise in injuries and fatalities amidst the ongoing unrest.

    The protests have primarily targeted government and police facilities. In addition to the Parliament building, protesters set ablaze the Office of the Governor in Nairobi and stormed several police stations. Similar incidents occurred in Eldoret, where the county court faced destruction. There’s also been looting reported at MPs’ clubs and supermarkets in Nairobi and Nyeri, indicative of broader public discontent.

    The protests were triggered by a controversial tax bill championed by President William Ruto’s government. This legislation increases taxes on essential items such as bread and motor vehicles, part of broader fiscal measures aimed at addressing Kenya’s substantial $80 billion debt and promoting the country as a stable, modern African nation. However, the tax hikes have exacerbated economic hardship for many in a nation where millions live below the international poverty line, igniting widespread anger and unrest.

    Kenya’s Government’s Response to the Protests?

    What began as peaceful demonstrations on June 18th quickly escalated following heavy-handed police tactics, including the early use of tear gas and mass detentions. By early afternoon, over 200 protesters had been apprehended, marking a critical turning point as crowds gathered outside Nairobi’s central police station demanding the release of detainees.

    The government’s response has included shutting down local internet services and using live ammunition against protesters, indicating a hardened stance that could prolong the unrest. The resulting casualties are expected to strain Kenya’s already stretched healthcare infrastructure, potentially necessitating increased support from international NGOs and humanitarian organisations.

    How might the unrest impact Kenya’s economy and security?

    Beyond immediate humanitarian concerns, the unrest poses significant implications for Kenya’s economy and security. The disruption of infrastructure and government functions in Nairobi and other affected areas could have direct economic repercussions, affecting businesses and travel across the country. Moreover, the government’s aggressive crowd control tactics and apparent failures to safeguard public assets raise concerns about further escalation and the potential need for military intervention, which could complicate the operating environment for foreign humanitarian organisations.

    As the situation unfolds, the damage to infrastructure and ongoing disruptions to daily life underscore the precariousness of Kenya’s current state, with implications that extend far beyond its borders.

    Travel Risk Advice: Kenya

    • Avoid all non-essential travel to Kenya, particularly Nairobi and Mombasa. 
    • Avoid the central business district in Nairobi, particularly Kenyatta Avenue, Haile Selassie Avenue, City Hall Way and any other wide roads conducive to the staging of protests, as well as all major government buildings such as the Kenyan Parliament or the Governor’s Office. 
    • Closely monitor announcements from local authorities and media sources for any developments that may severely impact the local security environment.
    • Avoid all areas of unrest due to incidental risks to bystanders. If caught in the unrest, travellers should move with the crowd until they find the nearest opportunity to escape. If in a vehicle, look to turn down the nearest road. If driving away is not an option, lock the vehicle and escape on foot. 
    • Always follow all instructions and orders from security forces. Where possible, avoid areas of active unrest and remain in a secure accommodation. 
    • Prolonged civil unrest can disrupt travel, especially if protesters begin targeting airports. Travellers should have contingency measures in place, including evacuation plans and reliable access to food, water and medication. 
    • Have emergency contact numbers saved on your phone. These should include the local authorities, medical facilities and any consular support. Ensure that mobile phones are charged in case of any losses in electricity. 
    • If caught in the vicinity of a security incident, seek shelter immediately and leave the area if safe to do so. Continue to adhere to all instructions issued by authorities and obey any security cordons in place. 
    • The overall security situation in Kenya, including Nairobi, is likely to remain severe in the coming days. 
    • Monitor the Solace Secure platform and trusted local media for relevant updates.

    SUBSCRIBE NOW

    Join Our Intelligence Briefing Mailing List

    Don’t get caught off guard by civil unrest. Sign up to receive our weekly Global Intelligence Summary and quarterly Election Guide, highlighting key geopolitical events and upcoming elections that could spark unrest.


    Solace Global Risk is a leading provider of comprehensive risk management solutions, serving clients globally with a commitment to excellence. Our team of seasoned experts, empowers organisations to navigate complex risk landscapes with confidence and resilience.

    Journey Risk Management

    Your duty of care doesn’t end the moment your people set foot in their destination – and neither does ours.

    From transfers to ongoing security and emergency evacuations, our travel risk services always have you covered. 

    Arm yourself with the knowledge to avoid a potential threat from turning into a crisis. Intelligence advisories give you tailored reports to anticipate possible disruptions, mitigate risk and help you make well-informed decisions, faster.

    Give your people peace of mind when they travel for work, so they remain focused on the job at hand. We mitigate risks, manage incidents if they occur, and support your people with security advice or help in a crisis. 

    Speak to our team about your journey management needs

      LGBTQ+ Travel Risks 2024

      While many Western countries embrace LGBTQ+ inclusivity, several destinations still uphold conservative or heteronormative values, posing increased risks for LGBTQ+ travelers.

      Our report sheds light on these challenges, advocating for comprehensive corporate travel policies that prioritise safety regardless of destination culture. It’s designed to assist LGBTQ+ individuals and corporate risk managers in understanding and mitigating these risks effectively.

      Explore our comprehensive guide to navigating LGBTQ+ travel challenges and discover essential strategies for ensuring safe and inclusive business trips. For a deeper dive into this topic, additional resources are provided at the end of the report.


      READ MORE

      In 2024, LGBTQ+ rights face a dynamic landscape shaped by shifting politics, religious perspectives, and socio-cultural norms. Navigating this environment demands a nuanced approach to advocacy and policy-making that embraces complexity and diversity.


      Download Full Guide

        A Comprehensive Analysis of a Formidable Ransomware Threat

        Unmasking “Ransom House”

        Man Holding Padlock

        Overview

        A detailed investigation conducted by Solace Cyber into the tactics, techniques, and procedures used by the “Ransom House” ransomware group reveal a sophisticated approach to cyber attacks, including initial network access through compromised credentials, extensive use of tools like PowerShell and Mimikatz, and strategic persistence mechanisms. 

        As well as insights into the group’s tactics and operations, this report offers preventative recommendations that can help you better understand and manage your organisation’s risk profile.

        Report Findings

        Extensive experience in the investigation of attacks by the “Ransom House” ransomware group has provided a comprehensive understanding of the tactics, techniques, and procedures, adopted by this threat actor during their attacks.

        In terms of initial (network) access, the threat actor is known to make use of compromised credentials to access the network through RDS gateways, with cyber threat intelligence linking the IP addresses used by the threat actor to that used by numerous, other ransomware/malware-related affiliates, such as “Medusa” and “Meduza Stealer”. In terms of compromised account usage, “Ransom House” will leverage any available credentials to pursue initial access, irrespective of whether these are local, or administrative-level, accounts, particularly where weak ingress points, such as an RDS gateway, are concerned. Although the threat actor routinely installs other RMM tools to maintain network access, in the absence of the initial attack vector being identified, it has been seen that the threat actor will continue to use the original method of access.

        In terms of command and control and the ability to maintain a route into the network, “Ransom House” are known to implement multiple methods – as a means of redundancy – to maximise their chances of maintaining access. Analysis of numerous breaches has identified a number of tools used as persistence mechanisms, including “resocks” and “TeamViewer”, with the threat actor installing these across different servers within the compromised network. Regarding the introduction of such tools into the compromised network, it has been determined from forensic analysis that the threat actor will utilise PowerShell to download tools from file sharing sites, including “hxxp://bashupload.com”, where the required files are uploaded, and a specific link generated to facilitate downloading as and when required.

        To support efforts around credential access, the threat actor is known to make extensive use of  the credential dumping utility “Mimikatz”. Forensic investigation and timeline analysis has established that prior to undertaking this attack phase, the threat actor will deploy defence evasion techniques, including disabling Defender “Real Time Protection”, to ensure the deployment of credential access tooling is not detected and blocked by antivirus software. Additional identified credential access techniques include the execution of bespoke PowerShell scripts to target specific systems, including Veeam backup servers, which have been reverse engineered and shown to retrieve and decrypt passwords from targeted servers. Once this objective has been achieved, it has been identified that the threat actor will utilise the credentials to use accounts with elevated permissions, such as administrator accounts, to advance lateral movement through the target environment. Following on from this, use of network discovery tools is commonplace, with “Advanced IP Scanner” routinely identified across an infected environment. The threat actor has also been observed to interrogate browsers to obtain IP addresses for ESXi hosts and vSphere datastores to advance their understanding of the victim network and identify the location of key servers for ransomware deployment.

        Regarding data collection, extensive analysis of “Ransom House” ransomware attacks has identified the use of “7-zip” as a key tool to support data exfiltration. The threat actor will install this into non-standard directory locations, such as “Pictures” and “Documents”, in an attempt to obfuscate this activity and prevent detection. Allied to the use of “7-zip” is the use of PowerShell to execute commands, such as the aforementioned downloading of files, the installation of modules, change of passwords, as well as ransomware execution. By way of example, the following commands have been identified across several attacks across virtualised environments:

        It has been seen that the threat actor will stage on the domain controller to deploy encryption across VMware datastores. In terms of encryptors, recent “Ransom House” attacks have seen the detonation of the “emario” encryptor against virtual disks (files renamed with “.emario” extension), with a ransom note entitled “How To Restore Your Files.txt”. Additional deployment of the “White Rabbit” encryptor has also been identified executed against domain controllers.  File extensions are modified with underscores, i.e.,  a “.docx” file would become “.doc_”,  with ransom notes named “!!READ_ME!!” being placed across the file system.

        Unified Kill Chain Overview

        Using the Unified Kill Chain model, the attack can be split into three distinct phases:

        1. In: The method(s) used by the attackers to gain access to the network.
        2. Through: The method(s) used by the attackers to navigate through the network.
        3. Out: The method(s) used by the threat actor to use network access to monetise the attack

        Timeline

        Indicators of Compromise

        The following table contains a combined view of relevant indicators of compromise (IOCs) found during the forensic analysis undertaken by Solace Global Cyber.

        Preventative Recommendations

        Solace Global Cyber has created a complimentary risk assessment that enables any UK organisation to understand its risk profile against ransomware.

        Solace Global – Cyber Risk Assessment

        General Guidance:

        • Endpoint Detection & Response (EDR) technologies, correctly setup in anti-evasion mode and with anti-evasion techniques. This needs to be monitored 24/7 by specialists that can react to situations in quick SLA times.
        • Anti-Virus and EDR will be evaded by these groups if not setup correctly, ensure you ask your provider how your existing solution will prevent ransomware groups evading or turning of these technologies. Monitor the positions of you AV or EDR this is an early detector of ransomware when devices are turned off or not reporting in.
        • Monitor your AV alarms, when Solace runs forensics there is so many IOC detected even if the AV is inhibited. Don’t trust your MSP and suppliers, always challenge them that you are truly being protected.
        • BackUp – Ensure your backups are air gapped and immutable. Ensure that you test your backups are happening at the correct frequency.
        • Multi-Factor Authentication (MFA) email and all remote access points.
        • Network monitoring either via SIEM or a suitable technology for your specific firewall.
        • Use a single remote access tool so that any new ones are easier to detect.
        • Solace also recommends signing into the NSCS Early Warning System which is free to compliment your security posture.
        • Be ready for the worst case and have a business incident response plan so that the organisation as a whole is prepared for such an attack.
        • Segment your network to limit and control risks.
        • Ensure strong passwords in use.
        • Ensure your estate is patched and End of Life systems are not in play.
        • Phishing training on a regular basis of staff. Help staff become the strongest line of defence by building the right cyber culture.

        If you are experiencing a cyber attack from this group please contact Solace Global Cyber and we will provide you with complimentary guidance and technologies to assist you.  

        Experiencing a Cyber Attack?

        Solace Cyber can provide complimentary guidance and technologies to assist you.

          Slovak Leader Fico Survives Assassination Attempt

          Slovak Prime Minister Robert Fico is in a serious but stable condition following a suspected assassination attempt. The attack occurred on May 15 in the small town of Handlova, where Fico was meeting supporters outside a cultural centre. He was shot multiple times and immediately rushed to F. D. Roosevelt University Hospital in Banska Bystrica. After undergoing a five-hour surgery, he is currently in intensive care.

          The alleged suspect, a 71-year-old writer and political activist, was detained at the scene. Authorities are investigating the motive behind the attack, which is widely believed to be politically motivated.

          Fico, who secured office in October 2023 after a divisive campaign, has been a polarising figure. He is one of the few European leaders advocating for closer ties with Russia and has called for an end to the EU’s military support for Ukraine. Under his leadership, Slovakia has halted all arms deliveries to Kyiv.

          Fico’s government has made controversial moves, including a proposal to abolish the country’s public broadcaster and weaken anti-corruption laws. These actions have sparked fears about media independence and democracy in Slovakia, leading to widespread protests. Some believe these tensions contributed to the assassination attempt, with Fico’s ruling SMER party blaming false narratives from the opposition.

          The attack on Prime Minister Fico is expected to lead to heightened security measures across Slovakia. In the long term, this incident might be used to justify suppressing dissent and pushing through more contentious government proposals. Additionally, Russian-affiliated social media accounts have been spreading information suggesting Ukrainian or NATO involvement, with some posts inciting violence against European officials.

          Former Russian President Dmitry Medvedev has hinted that the attack could be linked to Fico’s stance on Russia. While the risk of terrorism in Slovakia remains low, there is a realistic possibility of targeted violence and harassment against pro-EU Slovakian officials in the coming weeks.


          READ MORE

          2024 Intelligence Forecast: The Populist Wave and Polarisation in Europe in 2024

          The rise of both far-right and far-left political parties in Europe in recent years has significantly complicated and energised the political landscape in the continent. This trend is expected to persist into 2024.


          Nakba Day 2024

          Anticipated Disruption Across North Africa, Europe and North America

          Intelligence cut off time 10:00 GMT 14th of May 2024

          This Wednesday, May 15, commemorates the 76th anniversary of the Nakba, an Arabic term meaning “catastrophe.” It signifies the expulsion and forced displacement of around 750,000 Palestinian Arabs during the 1947-1949 Palestine War, following the adoption of the UN’s Partition Plan for Palestine, which ended British mandate rule over the territory. This event is profoundly significant historically, marking the onset of the Palestinian diaspora and a pivotal moment in the formation of Palestinian national identity, which persists nearly a century later.

          This year, the significance of the commemoration will be amplified due to the ongoing war in the Gaza Strip. The conflict has reached a critical juncture, especially with the recent deployment of Israeli troops into Rafah on May 6th. The conflict, which followed a surprise attack launched by the Gaza Strip-based Hamas terror group on 7 October, and resulted in the killing of approximately 1,200 Israelis, mostly civilians, has entered its seventh month. During this time, over 35,000 Palestinians, mostly civilians, have lost their lives, and nearly two million have been displaced internally. Gaza is grappling with severe famine, a near-total collapse of infrastructure, and extensive destruction of local housing.

          This year’s Nakba Day is expected to spark extensive protests and disruptions, especially in North Africa, Europe, and North America. While some events may be sanctioned by authorities or even state-sponsored, there’s a significant risk of clashes with security forces. In regions with substantial pro-Israel support, tensions may escalate between pro-Palestine demonstrators and counter-protesters, potentially leading to property damage targeting individuals associated with either side.

          Universities are expected to be significant focal points for civil unrest. Across the globe, student occupations and protests authority have occurred in various academic institutions, notably in France, the United States, and the Netherlands. In Tel Aviv, authorities recently prohibited a planned Nakba commemoration event, potentially triggering anti-government demonstrations and clashes in the city. Student movements, while typically localised, can disrupt city centres in major urban areas.

          The risk of terrorism, particularly from self-radicalised individuals or “lone wolves,” presents a significant threat, especially in densely populated urban areas. These lone actors may target large gatherings or individuals and locations with simple weapons like knives or occasionally light firearms. Vehicle attacks are also a possibility, although their effectiveness varies due to anti-vehicle barriers in many city centres.

          While organised terror group attacks are less common, they are not impossible. For instance, in Alexandria, Egypt, on May 7th, a Jewish businessman was killed by a group named ‘Vanguards of the Liberation – the Martyrs of Mohamed Salah’, linked to an incident involving an Egyptian police officer killing three Israel Defense Forces (IDF) soldiers in 2023. Attacks by groups are often more sophisticated and may involve improvised explosive devices (IEDs), but they also have a higher chance of being thwarted by authorities compared to lone wolf attacks.

          Nakba Day-related disruptions are expected to primarily impact large urban centres in countries that have seen significant pro-Palestine protests. These disruptions are likely to concentrate around government or academic institutions, limiting their scope. Avoiding these areas unless necessary should mitigate physical risks.

          However, traffic disruptions, potentially affecting various modes of transportation, are less predictable and could have more widespread effects. While disruptions to airports and seaports are unlikely, protesters may attempt to block roads, particularly around targeted buildings and main traffic arteries leading into urban centres. Even brief disruptions could have lasting effects throughout the day.

          To minimise such risks, it’s recommended to schedule travel outside of rush hour and to plan entry into large cities prone to protests for early morning hours. If traveling through city centres is unavoidable, consider alternative routes away from likely protest areas and avoid public transportation.

          It’s crucial to stay informed through official channels regarding potential protests, disruptions, and violence. Familiarise yourself with local emergency contacts, including nearby police stations and emergency rooms. When planning business operations, establish clear communication procedures such as two-way messaging networks and GPS tracking to reduce risks to people and assets.

          Additionally, having failover systems and strategic redundancies in place can mitigate the impact of severe localised disruptions on primary business operations, although such scenarios are unlikely.


          Solace Global Risk is a leading provider of comprehensive risk management solutions, serving clients globally with a commitment to excellence. Our team of seasoned experts, empowers organisations to navigate complex risk landscapes with confidence and resilience.

          Journey Risk Management

          Your duty of care doesn’t end the moment your people set foot in their destination – and neither does ours.

          From transfers to ongoing security and emergency evacuations, our travel risk services always have you covered. 

          Arm yourself with the knowledge to avoid a potential threat from turning into a crisis. Intelligence advisories give you tailored reports to anticipate possible disruptions, mitigate risk and help you make well-informed decisions, faster.

          Give your people peace of mind when they travel for work, so they remain focused on the job at hand. We mitigate risks, manage incidents if they occur, and support your people with security advice or help in a crisis. 


          Speak to a risk management specialist

            Week 19: 10 May – 17 May

            Global Intelligence Summary

            blue abstract background
            • There is a realistic possibility of an overall increase in Argentina’s risk levels following worrying developments regarding infrastructure, economics, and social issues.
            • An assault on a prison van in France highly likely signals the offensive capabilities of crime syndicates in the country, and likely increases the risks of violence during the Olympic Games.
            • The dismantling of an Iranian army-smuggling operation by Jordan almost certainly demonstrates the Kingdom’s worries about growing anti-government sentiment at home.
            • There is a realistic possibility that the ChineseRussian talks will deepen military cooperation between the two countries, as Beijing likely supports a continuation of the Russia-Ukraine war.

            AMER

            Canada: Evacuations as wildfire season begins

            Argentina: Signals of possible increase in country risk levels

            Panama and Colombia: Children crossing Darien Gap increase 40%

            France: Van ambush is latest security nightmare for Paris

            Slovakia: Assassination attempt on Prime Minister Fico

            Israel and Palestine: IDF operations in Jabalia and Rafah

            Jordan: Kingdom dismantles Iranian gun-smuggling operation

            British Antarctica: Massive oil discovery worries Whitehall

            China: Xi and Putin hold bilateral talks

            New Caledonia: Proposed reform causes widespread clashes


            The most powerful solar storm to hit the Earth in the last 20 years took place during this reporting period. Despite some worries about possible disruptions to power grids and satellite communications, the event did not have any major adverse effects on the general population but caused some degradation in the accuracy of some satellite-based services.

            Nakba Day, the commemoration of the expulsion of 750,000 Arab Palestinians from the Palestinian territories during the 1947-1949 Arab-Israeli War, occurred on 15 May. Protests were recorded across Europe, North America, and the Middle East, which focused on opposing current Israeli operations in Gaza.

            On 21 May, Ireland, Spain and several other EU members will jointly recognise Palestine as a sovereign state. The move, is likely to result in civil unrest, and may prompt an immediate degradation in relations with Tel Aviv, also affecting Brussels. It was most likely prompted by domestic pressures.


            Canada: Wildfire season begins

            Firefighters in western Canada are fighting the first major wildfires of the 2024 wildfire season. Thousands of residents have been ordered to evacuate the areas around the town of Fort Nelson, British Columbia, as an out-of-control wildfire approaches the area which has already burnt an estimated 20,000 acres. Reporting from the Canadian Interagency Forest Fire Centre indicates that Canada is currently struggling to contain nearly 120 major wildfires, with most located in the provinces of British Columbia and Alberta.

            Solace Global Assessment:  Canada’s wildfire season typically runs from April to September or October when temperatures decrease, and precipitation increases. However, the extent of the current wildfires, in terms of both size and intensity, has prompted concerns that this year’s wildfire season will be worse than average. Unseasonably warm temperatures and drought have almost certainly shaped conditions favourable to the spread of wildfires. The current drought monitor map released by the Government of Canada highlights severe, extreme, or exceptional drought conditions across significant portions of British Columbia, Alberta, the Northwest Territories, and Saskatchewan provinces. Additionally, nearly half of the country is experiencing moderate drought, indicating a heightened risk of wildfires spreading rapidly across various regions of Canada. In 2023, nearly three-quarters of the Northwest Territories were forced to flee their homes, an area traditionally immune to wildfires. The fires have also highlighted the fragility of rural communities that often rely on limited infrastructure. Communities not directly affected by the wildfires have suffered from internet and phone blackouts with residents unable to contact emergency services, failed electronic payments, ATM failures and transport disruption, with some communities reliant on only one supply route. The scale of the wildfires has been attributed to climate change with experts warning that it will result in areas historically spared by wildfires being affected. There have already been calls for Canada to tighten its emission caps on the oil and gas sector – a contentious issue in a country where these industries contribute approximately 5-7 per cent of its GDP. As the wildfires continue to spread, there is a high probability that climate-motivated protests will increase across Canada.


            Panama and Colombia: Child migration in Darien Gap up 40% in 2024

            A UNICEF report estimates that, so far in 2024, more than 30,000 children have traversed the dangerous routes that cross the jungle between Colombia and Panama, out of a total of 140,000 people. UNICEF predictions project that up to 800,000 migrants, 160,000 children, will travel through the area this year. The Darien Gap is one of the last completely undeveloped regions on earth, and traversing the thick jungle poses massive health risks, with chances of rescue almost non-existent. Panama’s President-elect José Raúl Mulino has vowed to shut down migration routes through the country.

            Solace Global Assessment: So far, Panama has been a necessary stop for migrants seeking to reach the US from South America. The country’s governments have aided migration, providing busses to transport migrants from the edge of the Darien Gap to the country’s northern borders. Still, the Gap continues to represent a particularly perilous journey, but it is likely preferred by migrants who do not have the means to tackle maritime routes. Moreover, organised crime in Colombia has increasingly profited from helping migrants reach and cross the approximately 100 kilometres of jungle. Still, migrants paying smugglers face increased risks, including sexual assault, theft, and murder. Additionally, the increase in migrant inflows has likely favoured the development of local bandit networks, which carry out violent attacks and kidnappings on the transiting migrants. President Mulino, who will take office on 1 July, is likely responding to increasing pressure from the US government, which is increasingly trying to stifle migration at its southern border. With little border infrastructure currently in place, it is almost certain that efforts in this direction will be conducted through a massive deployment of security forces in and around the Gap, seeking to intercept migrants before they reach the inhabited parts of the country. However, such a measure would likely exacerbate humanitarian issues in the Darien Gap, possibly increasing transit times and therefore worsening health risks. Moreover, if it achieves its deterrent purpose, it will almost certainly result in an increased number of migrants undertaking the more perilous maritime routes, possibly creating broader regional consequences, as well as impacting maritime transport and activity in the Gulf of Panama. 


            Argentina: Budget records further surpluses, but other developments signal increasing risk levels.

            The Argentine government announced its fourth consecutive month of budget surpluses, the first in two decades. However, this reporting period has seen a series of incidents that may hint at a general increase in the overall risk levels for Argentina. This piece tries to present a few snapshots, highlighting economic, social, and infrastructural issues.

            Solace Global Assessment:  The budget surplus is likely to further boost Milei’s claims that his unorthodox economic policies are working to change course on decades of economic stagnation. Coming from a period of severe protests, it may improve the president’s approval ratings, currently hovering at around 50 per cent. While praised by the International Monetary Fund (IMF) for his reforms, Milei is still seeking to unlock further IMF funds, in addition to the USD 800 million that are part of the loan programme’s current schedule, and which are needed to repay interest on Buenos Aires past borrowing. After taking office, Milei simply warned that “there is no money”, and the statement, months into the administration, has taken a tangible form. On 10 May, a major train collision in the Palermo neighbourhood of Buenos Aires resulted in at least 90 injuries and has promoted a judicial enquiry. Early indications suggest that the copper cable used to carry power along the tracks had been stolen leading to a signal failure. Union leaders had been demanding that the stolen cables be repaired for ten days before the incident to which the government allegedly replied that there were no funds for spare parts. The incident will almost certainly be linked to President Milei’s economic austerity measures and refusal to invest in public infrastructure, and it may hint at a growing risk regarding public and private transport within Argentina. Declining infrastructural standards may have unpredictable adverse effects on business in the country, leading to disruptions and delays, as well as physical damages to individuals and assets. Further warning signals have also been recorded at the social level. Over the course of last week, three women died days after having been deliberately burned in a homophobic attack. On 6 May, a man reportedly threw a Molotov cocktail inside a boarding house room where two lesbian couples were staying. The only surviving victim remains at the hospital but is expected to survive as of the time of writing. Over the last few years, Argentina has become considered one of the most socially progressive South American countries. In 2010, Buenos Aires legalised same-sex marriage, and the country has introduced stricter legislation against identity-based discrimination. While Milei describes himself as an “anarchist” socially, civil society actors have raised alarms concerning the rise of hate crimes and discrimination in the country, seemingly encouraged by the president’s “anti-woke” rhetoric and actions. Activists have decried the abolition of state institutions providing resources for victims, and others monitoring incidents of violence and harassment. While these gestures could be construed as “cost-cutting” measures, Milei has also more directly engaged in anti-progressive discourse, for instance symbolically renaming, on International Women’s Day, the presidential palace’s “Hall of Women” into the “Hall of Heroes”. Furthermore, Milei’s increasingly violent repression of anti-government demonstrations has likely emboldened far-right voices within the country, possibly leading to an increase in the risk of civic violence and unrest.


            Politics, Economics and Civil Unrest

            The two candidates for the 2024 US Presidential elections have agreed on holding two presidential debates before the vote in November. Former President Donald Trump and incumbent President Joe Biden will meet to debate their platforms in Georgia, on 27 June, and in an unspecified location on 10 September. The Georgia debate, which will take place in an important swing state, will not be attended by a live audience, as the organisers likely worry about the extremely charged nature of this electoral season. The debates are almost certainly going to result in localised travel disruptions and may entail an increased risk of domestic, “lone-wolf”, terrorism.

            On 15 May, Washington removed Cuba from its list of countries “not cooperating fully” against terrorism. The move is likely meant to signal the US’ openness to further improve diplomatic relations with the island state. In recent years, Cuba has improved security and intelligence ties with Moscow, and there is a high likelihood that Russian intelligence assets operate on the island from the Lourdes SIGINT station, which had already been used by their Soviet predecessors. While unlikely to result in any short-term changes, the announcement will likely be received warmly in Havana.

            On 19 May, voters in the Dominican Republic will decide the country’s next president and members of Congress. All three of the leading candidates have promised to tackle illegal immigration from neighbouring Haiti which continues to be afflicted with gang warfare and a total lack of security. Incumbent President Luis Abinader has promised to finish constructing a border wall, a move that has been condemned by human rights groups due to the extent of violence in Haiti.

            Security, Armed Conflict and Terror

            Observers in the United States have recorded an increase in the number of threats targeting New York Justice Juan Merchan and other individuals involved in the hush money trial of former President Donald Trump, following the latter’s online posts. Having been banned from X.com (formerly Twitter), Facebook, and other “mainstream” social media channels, Trump has increasingly been communicating with supporters through “Truth Social”, a Twitter-like site which has attracted almost exclusively pro-Trump users. The trial proceedings have increased the threat of lone-actor terrorist action in New York, and a verdict adverse to Trump’s camp may lead to a growing likelihood of ideologically motivated violent action.

            In Canada, a fourth man was charged with killing Sikh leader Hardeep Singh Nijjar. Canadian officials are currently investigating possible connections between the alleged killers and the Indian government, claiming that Delhi organised the assassination of the leader to stifle the reach of the Khalistan independentist movement. The case will likely continue to affect tensions in Canada, and, in particular, regarding the country’s current immigration system.

            Environment, Health and Miscellaneous

            Thousands of people in Canada’s British Columbia province have been evacuated due to the growth of a large wildfire in the province’s northeast. British Columbia is one of Canada’s main centres for the extraction of natural gas, and a hub for Canadian commerce towards Asia. Disruptions caused by the fire could negatively affect the local economy, and create shipping delays to and from Canada, were the phenomena to worsen. In 2023, Canada saw its worst wildfire season on record, as fires have become more severe due to drier and hotter weather conditions. This case is highly likely not to remain isolated, as the risk of wildfires will grow significantly in the coming months across Canada and much of North America.

            Two people have died in Louisiana, and hundreds have been displaced due to tornadoes sweeping through the southern US. Power cuts and traffic disruptions have also been recorded, with the area of Baton Rouge particularly affected. Tornado season in the US takes place between March and June, and this spring has seen a high frequency of extreme weather events. In Texas, recent flooding has been compounded by severe hailstorms, which have damaged infrastructure, and particularly affected agricultural businesses in the area.

            Authorities in the southernmost Brazilian state of Rio Grande do Sul have warned that flooding that has affected much of the state, including the metropolitan area of Porto Alegre, will take weeks to subside. Parts of the state have seen more than 630mm (25 inches) of rain already this month. Flooding has resulted in widespread supply chain disruption, killed almost 150 people and displaced over half a million, with further rain forecasted in the coming days.  


            France: Gunmen kill three guards, free inmate from prison van in latest security nightmare for Paris

            In the morning of 14 May, a prison van carrying a high-ranking drug cartel member from Marseille was ambushed at a highway toll booth in the Eure department, in the country’s north. Videos released online show at least three assailants, armed with submachineguns, open fire on the prison van and its police escort, after crashing an SUV into the lead vehicle to immobilise it. At the time of the attack, the van was transporting Mohamed Amra, reportedly a leader of a drug-trafficking syndicate based in Marseille who had been a suspect in various cases of homicide, armed theft, and attempted homicide. French authorities have launched a massive search to find the fugitive and the perpetrators of the attack.

            Solace Global Assessment:  The ambush took place in the Eure district, which borders the region of Paris. In recent years, the city of Marseille has become a hotspot for drug trafficking in France and Europe, especially due to the arrival of large shipments of South American cocaine which have increasingly carved a larger portion of the European drug market. Gangs in Marseille have increasingly engaged in clashes for control within the city and in its outskirts, which have resulted in dozens of deaths. French authorities recorded 2023 as the deadliest year for drug wars in the city, with a reported 47 deaths and 118 injuries. The Macron administration has been haemorrhaging votes to its right-wing opposition and has increasingly sought to take a “tough on crime” stance to recover some lost support. This imperative has become even more important with the approaching Olympic Games, set to begin in July. In March 2024, the administration launched a major crackdown operation in Marseille, which led to almost 200 arrests. Still, it is unlikely that past operations have dented the pervasiveness of gang presence in the city, which is fuelled by socioeconomic inequalities and important levels of deprivation, as well as the existence of quasi-segregated peripheral quarters, where the French police exercise very little control. Importantly, these same parts of the city often see a strong Islamist presence, including by groups associated with Middle East-based Sunni radical organisations. In 2018, a radical Salafi preacher was expelled from France to Algeria after being reported for preaching sermons targeting Jews, women and Shiites in one of Marseille’s main mosques, and, in more recent years, local imams have launched appeals to Paris warning against the local penetration of Salafi extremist thought in the more deprived parts of the city. The high sophistication of the attack on the prison van is likely indicative of France’s drug gangs’ growing offensive capabilities and there is a realistic possibility that Islamist groups have access to much of the same assets due to their overlap with gang networks and the communities where they operate. With the Paris Olympics on the horizon, the ambush highlights the severe security risks that the Games will face.


            Slovakia: Populist Prime Minister in hospital after suspected assassination attempt.

            Slovak Prime Minister Robert Fico is in a serious but stable condition after being shot multiple times on 15 May. The attack occurred in the small town of Handlova while Fico was meeting with supporters outside a cultural centre. He was rushed to F. D. Roosevelt University Hospital in Banska Bystrica, where he underwent a five-hour surgery and is in intensive care at the time of writing. The alleged suspect, reportedly a 71-year-old writer and political activist, was detained at the scene.

            Solace Global Assessment: The shooting of Prime Minister Fico was almost certainly politically motivated and is widely being reported as an assassination attempt. At the time of writing, however, no group has claimed responsibility for it, and it appears almost certain that the perpetrator acted alone. Fico secured office in October 2023 after running a divisive campaign marked by a populist agenda. He has been one of the few outspoken European leaders championing rapprochement with Russia and Slavonic solidarity, often calling for an end to the EU’s military support for Ukraine, with Slovakia halting all arms deliveries to Kyiv. Fico’s populist government has recently approved a proposal to abolish the country’s public broadcaster and replace it with a new body as well as weakening anti-corruption laws. These developments have generated fears regarding the independence of the media and the state of democracy in Slovakia, leading to widespread protests. Anecdotal reporting indicates that this may have been the motivation for the assassination, with Fico’s ruling SMER party also suggesting that false narratives propagated by the opposition have contributed to the shooting. The incident will almost certainly lead to heightened security measures in the country and, in the long term, it could be exploited to suppress dissent and push through some of SMER’s more contentious proposals. Finally, there have been reports of Russian-affiliated accounts on social media channels carrying out information operations alleging Ukrainian or NATO responsibility for the attempted assassination, with some posts calling for violence against European officials. Former Russian President Dmitry Medvedev has contributed to this discourse, hinting at the theory that the attack was linked to Fico’s “reasonable” stance on Russia. While the risk of terrorism remains low, there is a realistic possibility of cases of targeted violence and harassment against Slovakian pro-EU officials and political figures in the coming weeks.


            Israel and Palestine: IDF operations in Jabalia and Rafah

            After launching the first phase of their offensive into the southern Gazan city of Rafah, Israel Defence Forces (IDF) have re-entered the Jabalia, in the north, where they were met with heavy resistance from Hamas elements. With the invasion of Gaza so far having failed in its objectives to destroy Hamas and rescue the approximately 100 Israeli hostages still in Palestinian captivity, a rift opened, or came to the fore, in the Netanyahu administration as Defence Minister Yoav Gallant raised a public objection to the proposal of setting up an Israeli military government in Gaza after the end of hostilities.

            Solace Global Assessment:  The IDF identified Jabalia as a stronghold of Hamas resistance in Gaza and conducted operations to neutralise it shortly after entering the Gaza Strip in October 2023. By late December 2023, IDF forces reported having destroyed three Hamas battalions following heavy combat in the Jabalia refugee camp. The recent restart of fighting there, the most severe increase in the north of the Gaza Strip since the Al-Shifa hospital raid, encapsulates the failures of the IDF to prevent the re-infiltration of Hamas elements in previously cleared areas. It is likely that Tel Aviv recognises that these difficulties are endemic. Despite significant casualties, Hamas and other Palestinian militant groups continue to retain enough assets to challenge IDF units in the Gaza Strip’s dense urban landscape. They are also still able to recruit from the hundreds of thousands of displaced Palestinians. Moreover, the Netanyahu administration likely realises the important political dimension of the conflict for its “survival” at home. Seven months into the conflict, having expended significant political capital at home and abroad, the Likud-led government finds itself in a political dilemma. On one side, its electoral base continues to support the war effort in a rather hawkish manner and is impatient due to the ongoing failures to achieve the war’s stated strategic goals. On the other, the remark by Gallant seems to indicate a growing realisation, or admission, that Gaza is essentially “unwinnable”: even if Sinwar and the other Hamas leaders in the Gaza Strip are captured or killed, and the remaining Hamas elements neutralised, large numbers of IDF troops would necessarily need to remain stationed in the area to prevent the creation of new Hamas units or successor groups. Essentially, this would rewind the Israeli position on Gaza by two decades, likely, however, reigniting the same political pressures for the recognition of a Palestinian state that had expedited the decision for the 2005 troop withdrawal from the Strip (albeit without the added issue of the dismantling of settlements). The prospect of a protracted military occupation, which a reported leaked confidential paper puts at a cost of USD 5.4 annually, would also bring back memories from southern Lebanon, whose occupation after the 1982-1985 war proved economically and strategically unfeasible. However, it is unclear what other exit scenarios exist, even if Israeli goals are achieved. Among the plans being discussed in Tel Aviv, an appealing one likely sees local clan leaders and civilian parties create a joint government to manage the Gaza Strip, with limited but constant cooperation with Israeli forces, and possibly with the oversight of an Arab state. However, it is unlikely that Cairo, or any of the Gulf States, will seek to engage in a policy of management that would prove extremely unpopular at home – and would possibly expose it to diplomatic embarrassment were a successor of Hamas to gain traction in Gaza. Moreover, it is not clear if any such internal parties exist. Hamas’ killing of a Doghmush clan leader in March highlights the group’s keen awareness of its necessity to root out potential challengers, and it is likely that significant progress has been made in this direction. No matter how unlikely to succeed this scenario, and other ones, are, however, it is almost certain that the Netanyahu administration will try to avoid mentioning a clear alternative: the complete withdrawal of Israeli forces following the end of hostilities, and the return to a policy of isolating Gaza while carrying out occasional incursions to reduce the strength of a resurgent Hamas. This would amount to a political failure – and a self-inflicted one, due to Netanyahu’s continuous pledge to destroy Hamas – and will almost certainly represent the end of the current Likud administration.


            Jordan: Iranian weapons smuggling operation discovered by Jordanian authorities.

            On 15 May, Jordanian sources reported that the Kingdom of Jordan had foiled a plot by Iran to smuggle weapons into the country to arm anti-monarchy activists and members of the banned Muslim Brotherhood organisation. The plot’s dismantling reportedly dated back to March. The routes allegedly ran through Syria and were coordinated through connections between Muslim Brotherhood and Hamas elements. Iran has already been reported as running weapons smuggling operations into the West Bank, in an effort to arm Palestinian militants. Jordan is considered to be one of the most stable countries in the region, and the Kingdom contributed to the interceptions of Iranian drones and missiles during Tehran’s massive strike against Israel in April.

            Solace Global Assessment:  Jordanian intelligence and security forces have likely been aware of Iranian arms smuggling efforts aimed at arming the Palestinians, and the timing of the crackdown suggests a likely growing worry in the Kingdom’s ruling circles. Jordan’s population is largely of Palestinian heritage, and almost wholly supportive of the Palestinian cause. The monarchy’s pro-Western stance is largely tolerated, but the ongoing Israeli offensive in Gaza has contributed to making anti-government dissent more vocal and bolder. The Hashemite family has responded to this situation by boosting its criticism of Israel, including by withdrawing their ambassador from Tel Aviv, in an effort to align itself more with popular feelings. However, the exacerbation of the Israeli offensive in the Gaza Strip has resulted in a growing number of particularly aggressive demonstrations, with protesters notably attempting to storm the Israeli embassy in Amman in late March. Iran, which has placed itself successfully at the head of the global pro-Palestine movement, likely sees the destabilisation of Jordan as particularly desirable to both reinforce its influence in the West Bank through a loosening of the frontier between the two territories and to reduce the American footprint in the region. By arming Muslim Brotherhood elements, Tehran possibly seeks to favour acts of terrorism targeting local authorities and security forces, or alternatively spark further protests more directly aimed at the government. A worsening of the political situation in Jordan would negatively affect the numerous NGOs and humanitarian organisations that operate in the country. In a worst-case scenario, it may result in a reduction of Western counterterrorism operations in neighbouring Syria and Iraq, creating a medium-term opening for a growing influence of Islamist groups.


            British Antarctica: Whitehall discusses Russian Antarctic oil and gas discoveries.

            The results of a series of studies carried out by the Russian ship Alexander Karpinsky in 2020 have revealed the presence of massive oil and gas deposits in the Antarctic territory claimed by Britain. Last week, the findings have sparked debate in the UK Parliament. Both Russia and the UK are signatories to the 1959 Antarctic Treaty and the 1991 Environmental Protocol to the Antarctic Treaty, which bans the exploitation of mineral resources in the continent.

            Solace Global Assessment: The Alexander Karpinsky, which was formally in the region to conduct scientific research, was much more likely involved in Russian prospecting operations. The find, which dates back four years, is strategically extremely important. According to current estimates, the deposits, located under the Weddell Sea, would amount to around 511 billion barrels worth of oil, or ten times the output of the North Sea deposits over the last 50 years. The deposits fall not only under the UK’s claim but also under claims by Chile and Argentina, which partially overlap with the British one. The question of Antarctic sovereignty continues to be a grey area, as the 1959 Treaty clearly states its non-impact over signatories’ sovereignty claims, which remain pending. Moreover, while the treaty covers Antarctic land and ice shelves, it does not extend to the seas surrounding it, meaning that possible claims of exclusive interest would fall under customary and treaty law. While the treaties’ texts seemingly state that Arctic claims do not generate Exclusive Economic Zones (EEZs), claimant states have de facto repeatedly asserted their ownership of Antarctic maritime zones. The result of this situation is a status quo where the legitimacy of a specific state’s claims would necessarily rest only upon the acquiescence of other treaty signatories, a condition that is unlikely to materialise due to the, so far, perceived lack of meaningful incentives. The lack of clarity and coverage in the Antarctic treaties has already led to increased competition, especially with regard to the marine resources present in the area. Russia and China, in particular, continue to hinder efforts to extend protections to wildlife in the areas and conduct intensive fishing operations that are likely contributing to threatening the volume of krill and fish in Antarctic waters. In strategic terms, Britain’s Antarctic claim is bolstered by the UK’s overseas Exclusive Economic Zones (EEZs) of the Falkland Islands and the South Georgian and the South Sandwich Islands, all of which are disputed by Argentina, that claims the islands as part of its own sovereign territory. It is almost certain that the increase in Russia’s exploration and prospecting operations in the Antarctic follows from broader strategic imperatives. Even before the invasion of Ukraine, the Putin regime, whose attempts to effectively diversify Russia’s economy have failed, increasingly sought to maintain capital inflows and domestic government spending levels through the provision of cheap fossil fuels to China and other international partners. With the isolation that followed the invasion of Ukraine, Russia’s interest in further oil and gas deposits has likely increased. In recent years, almost certainly due to the opportunities posed by the exploitation of fishing grounds, China has also seen its interest in the Antarctic increase. In February 2024, Beijing inaugurated its fifth research station on the continent, raising concerns about a possible increase in Chinese security and intelligence activities. The Russian discovery, as well as possible future ones, may reduce the stability of the precarious status quo that has so far “frozen” the various states’ claims, and lead to a much more unclear regional environment.


            Politics, Economics and Civil Unrest

            In Sweden, the nation’s largest labour union, Unionen, stated, on 14 May, its support for the Tesla workers currently engaged in a six-month-long strike. The strike concerns workers’ demands for collective bargaining. The announcement may result in an increase in the cases of sabotage of Tesla cars and assets by leftist and ecological activists.

            The Catalan Socialist Party (PSC) has secured the most seats in the Catalan regional elections after independence parties lost support. Nationalist parties no longer control Catalonia’s regional parliament, a development that will almost certainly be deemed a major blow for the independence movement. The results will likely be sold as a vindication for Spanish Prime Minister Pedro Sánchez’s coalition tactics and controversial amnesty bill that has garnered opposition from the right and triggered unrest within Spain.

            On 12 May, voters in Lithuania voted in the nation’s presidential elections. Incumbent Gitanas Nauseda won the first round in voting, winning 44 per cent of votes, just coming short of the 50 per cent required to automatically secure a victory. Nauseda will now go up against Prime Minister Ingrdia Šimonytė during a run-off election on 26 May. This repeats the 2019 elections where a run-off between these two were held. Early indications are that Nauseda will secure a re-election; however, the election highlighted growing anti-establishment sentiment, potentially signalling a move in favour of pro-Russian parties in the country’s upcoming parliamentary elections.

            Unionised public sector workers belonging to the Greek Civil Servants’ Confederation (ADEDY) are set to conduct a nationwide 24-hour strike on 21 May over issues of pay and workers’ rights, with protestors set to convene outside the Ministry of Finance in Athens. The organisers of the strike have yet to announce which areas will be affected but there is a realistic possibility that the strikes will impact the transport and health sectors, leading to localised disruptions.

            Renewed protests have taken place in the Armenian capital of Yerevan. Demonstrators have called on the government to reverse its decision to concede land to neighbouring Azerbaijan and the opposition is seeking ways to impeach the current Prime Minister Nikol Pashinyan. Protests have blocked major roads in and out of the capital and the security services have arrested hundreds of demonstrators. The demonstrations are unlikely to end soon with thousands calling for the resignation of Pashinyan and elements of the Armenia Apostolic Church endorsing the protests.

            On 12 May, Tunisian protesters took to the streets in Tripoli to demand the release of imprisoned journalists and activists and a date for new elections. While his five-year term is set to expire in 2024, Tunisian President Kais Saied is yet to announce a date for the vote. At the same time, the country, at one point considered the only “success story” of the Arab Spring, has continued to experience significant authoritarian backsliding, with Saied concentrating significant powers under the presidency. The protests, which continue at the time of writing and are yet to reach severe proportions, may cause significant disruption, or violence, depending on the authorities’ response.

            Security, Armed Conflict and Terror

            Three men in the UK have been charged with offences under the National Security Act, including assisting Hong Kong’s intelligence service and foreign interference. The men are accused of undertaking information gathering, surveillance, and acts of deception likely to aid a foreign intelligence service. The arrests were part of the Metropolitan Police’s counterterrorism investigations and follow a suspected Chinese hack of the UK Ministry of Defence’s payroll system, likely indicating the level of espionage China conducts within or against the UK. The Chinese embassy in London condemned the UK’s accusations, stating Hong Kong’s affairs are China’s concern.

            In Rouen, France, a suspected terrorist was shot and killed by police forces after setting fire to the city’s Synagogue. The attack was likely linked to anti-Israeli sentiment. France is the Western European state with the largest Jewish population and has seen a massive increase in antisemitic attacks following 7 October.

            Turkey has expanded its military operations against Kurdish militants in Syria with reports suggesting that Turkish forces, alongside the allied Syrian National Army (SNA), have been shelling villages and burning farmlands in the Manbij province, provoking concerns over food security in the area. Turkish forces have also prosecuted Kurdistan Workers’ Party (PKK) targets in Iraqi Kurdistan. Ankara is likely exploiting the withdrawal of Western forces from the region, the world’s preoccupation with Gaza and Iraq’s shifting stance towards the Kurds. After high-level talks between Iraqi and Turkish officials, Iraq announced the designation of the PKK as a banned organisation, a move that will likely invite more Turkish influence to the region. The Kurdish National Congress (KNK) has stated that President Erdogan is seeking to gain strategic and economically important territory after electoral setbacks, warning that such a policy could provoke a regional conflict.

            European Union member states have agreed to end their military training mission to Mali after the mandate expires on 18 May. The EU cited the “evolving political and security situation”. The European bloc is likely unwilling to support a junta government that has stifled democracy and pivoted towards Russia. Jihadist groups may seek to exploit a lesser-trained military, but it is likely that the provision of military training will be undertaken by the Kremlin’s Africa Corps.

            Overnight on 10 May, more than 100 people were kidnapped by gunmen during night raids in three villages, Gora, Madomawa, and Jambuzu, in Nigeria’s northwest Zamfara state. Kidnappings are a growing issue in Zamfara state with criminals almost certainly conducting them for ransom payments and those responsible have already demanded negotiations. Kidnappers are likely targeting remote villages and exploiting an overstretched security service in northern Nigeria that is having to contend with a host of Islamist groups. Security forces’ efforts to rescue the abducted may result in road closures and potentially armed clashes in the region.

            On 10 May, an Italian vessel operating as part of the EU’s anti-piracy mission ATALANTA detained six Somalis suspected of having attempted to hijack an oil tanker in the Gulf of Aden. The case likely illustrates the growing threat posed by Somali piracy, which has increased due to the Houthi’s campaign of Red Sea strikes. The ability of Somali pirates to target vessels at increasingly large distances from their coasts is particularly worrying and may further influence the shipping sector in the region.

            Environment, Health and Miscellaneous

            As the South African electoral campaign nears its end, President Cyril Ramaphosa signed a bill into law that overhauls the country’s healthcare system. Currently, 84 per cent of South Africans access state-provided healthcare facilities, while the remaining 16 per cent can afford private care. The two-tier system contributes to fueling the country’s severe socioeconomic inequalities, which are some of the sharpest in the continent. The reform introduced the National Health Insurance (NHI), a system that provides funds for poorer South Africans to access private care. The opposition has warned that the policy will result in higher taxation and called it a ploy to bolster the ruling party’s chances in an election that is projected to be strongly contested.


            China: Xi hosts Putin in Beijing for bilateral summit.

            On 16 May, China’s President Xi hosted Russian President Putin and a delegation of key officials and CEOs in Beijing, marking Putin’s second visit to China in the last year and his first state visit since being inaugurated for his fifth term. The two leaders praised their strategic relationship and suggested that it was not “opportunistic”. President Xi called for an urgent resolution to the war in Gaza and was praised by Putin for China’s efforts in attempting to resolve the Ukraine crisis with both leaders suggesting that there needs to be a political resolution to the conflict. The talks also covered Sino-Russian trade, energy and a shared view concerning the decline of the West.

            Solace Global Assessment:  For Putin, Xi’s China has been a major economic lifeline since the imposition of hundreds of sanctions from the US and its Western allies and one of the closed-doors meeting talking points was likely how to effectively circumvent these sanctions. Putin’s visit comes as Russia has opened up a new front in Ukraine and is attempting to seize as much territory before the arrival of Washington’s latest USD 61 billion military aid package. Whilst China has not provided conventional arms to Russia, it has supplied a range of “dual-purpose” equipment and crude components. These have included semiconductor chips for precision-guided munitions, jet parts, ball bearings, motorbikes and all-terrain vehicles. These are considered “dual-purpose” as despite their obvious military applications, these systems and components can in theory be used for civilian purposes. Russia would invariably want to go one step further and secure finished military hardware from China to alleviate pressures on its military-industrial base and to get weapons onto the battlefield with reduced timelines. However, it is unlikely that Xi would authorise this as he attempts to balance opportunities with Russia against relations with the West. For China, the war in Ukraine has afforded it improved access to cheaper Russian oil and gas. In 2023, Russia was China’s largest supplier of oil, clearly showing that China knows it has the freedom to ignore US sanctions without facing any major reprisals. Russia has also become a major destination for Chinese imports after the West’s refusal to export to Russia, and Russian debt to China has increased significantly. Furthermore, public opinion in China is largely supportive of Russia or indifferent, with it being widely believed that Russia had to invade Ukraine to counter the expansion of NATO. With Western efforts doing little to deter China, economic opportunities abounding and domestic public sentiment not challenging China’s stance, there is little reason for Beijing to truly work towards ending the conflict. The continuation of the war in Ukraine is likely in Beijing’s interests given the economic opportunities it has exploited and the fact that Western support in Ukraine has put it in a weaker position to support Taiwan.


            New Caledonia (France): Violent riots challenge the authority of Paris in Asia-Pacific territory.

            Authorities in the French territory of New Caledonia implemented a curfew on 14 May and prohibited public gatherings in the capital Nouméa following violent protests against proposed constitutional changes. During the clashes, businesses, including car dealerships and shops, were damaged. Flights were also cancelled, schools closed, and impositions placed on the sale of alcohol. These measures failed to curb the civil unrest and, on 15 May, French President Macron declared a state of emergency in New Caledonia. Ongoing violent protests have resulted in at least four deaths including that of a gendarme, over 300 injured, hundreds of arrests and damage estimated at several hundred million Euros. Macron also promised to meet the violence with an “unyielding response” with reports indicating that the French military would be deployed to the territory alongside four gendarmerie squadrons.

            Solace Global Assessment:  New Caledonia has been deeply divided by proposals to increase the territory’s autonomy from Paris, with many calling for outright independence. However, recent referendums have rejected independence. In the 2018 and 2020 referendums, 56 per cent and 53 per cent of voters decided to remain part of France. During the 2021 referendum, 96 per cent decided to remain with France but only after a boycott by pro-independence groups. These developments have likely galvanised the indigenous Kanak people who broadly support independence and comprise an estimated 40 per cent of the territory’s 300,000 people, as well as some smaller ethnic groups. The current violence has almost certainly been triggered by lawmakers in Paris who recently made changes to voting rolls that indigenous people have claimed will dilute their political influence. Moreover, as the protests have been triggered by decisions made by France’s central government, they may result in a “domino effect” causing protests to spark in France’s other overseas territories. France’s measures to curtail the protests, such as the imposition of a curfew, banning of social media apps and the deployment of military and police units from the mainland, will likely be interpreted as a colonial power exercising its illegitimate authority over an indigenous people and are likely to antagonise the rioters and ultimately strengthen the independence movement. Local populations have also likely been provoked by the 1998 Nouméa Accord which promised to grant the territory more independence but also confirmed its existence as part of France, leading to 40,000 French people moving to the relatively small territory and further diluting indigenous influence. For Paris, New Caledonia holds strategic importance, and its loss would decrease French military and political influence in the Asia Pacific at a time when France is attempting to increase it. The island territory lies between Australia and Fiji, is host to a French air and naval base and has a large Exclusive Economic Zone (EEZ), contributing to France’s global power projection capabilities. France has maintained this network more successfully than other colonial powers by recognising them as part of France. However, the possible loss of New Caledonia could trigger a chain reaction of independence movements that would significantly decrease France’s international standing, suggesting that France will likely allocate substantial resources to quell the New Caledonian protests which may lead to more energised riots and deaths in the short term.


            Politics, Economics and Civil Unrest

            In Thailand, a 28-year-old monarchy reform activist charged with insulting the monarchy died on 14 May of cardiac arrest following a hunger strike. The activist had demanded a reform of Thailand’s lese majeste law which can lead to sentences of up to 15 years for insulting the monarchy. Her death may lead to student-led democracy protests like the ones which erupted in 2020. Thailand’s recent shock decision to re-criminalise cannabis just two years after it was legalised is also likely to lead to street protests, with some minor street protests being staged on 16 May.

            Security, Armed Conflict and Terror

            Officials in Pakistan have stated their intent to speed up the China-Pakistan Economic Corridor (CPEC), the most high-profile symbol of cooperation between the two countries. The call for urgency has been driven by a surge in attacks on Chinese nationals in the country, largely attributed to the Balochistan Liberation Army (BLA) and other ethnic Baloch and Sindhi insurgent groups that strongly oppose the China-Pakistan Economic Corridor (CPEC). These groups argue that the CPEC disproportionately benefits other areas of Pakistan and will likely aim to intensify their attacks if the CPEC is accelerated.

            China and Cambodia started their annual military exercise “Golden Dragon 2024” on 16 May. The 15-day exercise will include over 1300 personnel and 11 Cambodian vessels combined with almost 800 Chinese troops and three warships from the People’s Liberation Army Navy (PLAN). The exercise is almost certainly symbolic of developing military cooperation between the two countries and will further provoke fears over the establishment of a PLAN base on the Cambodian coast that will enable it to sustain more operations in the disputed South China Sea and further afield.

            Environment, Health and Miscellaneous

            At least 300 people have been killed after flash flooding hit the north of Afghanistan. The floods also caused widespread economic disruptions, bringing to a halt the agriculture-based economy of the Baghlan, Takhar, and Badakhshan provinces. The Taliban government has increasingly had difficulties responding to the extreme weather events affecting the country, which are exacerbated by the combination of Afghanistan’s rough and mountainous terrain and its extremely poor infrastructure. Terrorist groups operating in Afghanistan, firstly the Islamic State Khorasan Province (ISKP), may seek to intensify attacks on authorities in an effort to enhance the disruptions currently faced by Kabul to undermine the Taliban’s rule.

            Pakistan’s National Disaster Management Authority (NDMA) has warned that three heatwaves are set to hit several of the country’s major cities during late May and early June. The first heatwave is expected in cities including Umarkot, Tharparkar, and Bahawalpur, with temperatures reaching up to 40°C. A second heatwave, lasting four to five days, may occur later in May or early June, with temperatures rising to 45°C. The third heatwave is predicted for the first 10 days of June, affecting several cities in Sindh and Punjab. Additionally, the Punjab Provincial Disaster Management Authority (PDMA) cautions of increased temperatures and heavy rains in South Punjab from May 10 to 11, posing threats to crops.

            In Mumbai, India, 14 people were killed and dozens more injured after a large billboard collapsed on a local gas station during a particularly intense storm on 13 May. At least 15 planes were diverted from the area due to the phenomenon’s severity. More extreme weather events remain a realistic possibility, as the North Indian Ocean cyclone season, which affects weather in much of the Indian subcontinent, enters its peak between May and November.

            On 11 May monsoon rains and a major mudslide from a cold lava flow or lahar on Mount Marapi caused a river to breach its banks and tear through mountainside villages in four districts in Indonesia’s West Sumatra province. The floods have killed at least 40 people and damaged hundreds of homes, with relief efforts disrupted by damaged or blocked roads. With Mount Marapi being active since January, it is likely that further eruptions and heavy rain will lead to more landslides in the area.


            US Expansion for Solace Global Risk

            Solace Global Risk announces further expansion into the United States market and proudly appoints Brent Borawski as Vice President of Sales and Business Strategy.

            Brent Borawski - Solace Global Headshot

            Brent Borawski brings 25 years of invaluable experience in the Insurance and Risk Management sector and has already seen a surge in requests from US organizations that require a more tailored approach to risk management.

            Brent comments that “Many organizations are rightfully asking ‘what happens if we are impacted, and are we truly ready to react in a crisis?’

            He goes on to say “The sentiment amongst leaders in security is shifting…

            …Resources and budgets are tightening, all while requirements increase due to higher levels of global instability. Now many are assessing whether their current suppliers are providing the best value and innovative technology that truly align with their processes.

            Gone are the days when integrating a platform is simply a box-ticking exercise for duty of care obligations. Clients expect a better level of service and have the assurance providers can go the extra mile in a crisis.”

            This strategic move marks a significant milestone for Solace Global Risk and underscores its unwavering commitment to delivering exceptional customer service that surpasses expectations.


            Emily Roberts Managing Director Solace Global Risk

            Emily Roberts

            Managing Director, Solace Global Risk

            “We are thrilled to bring Solace’s unique vision and solutions to the US market.

            With 14 years of experience serving clients across various industries, we have witnessed firsthand the increasing demand for tailored solutions to mitigate risks and ensure business continuity. Our entry into the US market underscores our commitment to meeting the unique needs of American businesses by providing innovative, client-focused risk management services. 

            Whether you are navigating geopolitical uncertainties, ensuring the safety of your personnel during travel, or safeguarding your assets against emerging threats, Solace Global is here to support you every step of the way. 

            We are poised to collaborate and provide expertise to US-based organizations seeking advanced risk management solutions and unparalleled support.”


            Solace Global Risk is a leading provider of comprehensive risk management solutions, serving clients globally with a commitment to excellence. With a dedicated US presence and a team of seasoned experts, Solace Global Risk empowers organisations to navigate complex risk landscapes with confidence and resilience.

            Journey Risk Management

            Diligent in-country travel security

            Be one step ahead to prevent a crisis

            Travel with confidence

            Your duty of care doesn’t end the moment your people set foot in their destination – and neither does ours.

            From transfers to ongoing security and emergency evacuations, our travel risk services always have you covered. 

            Arm yourself with the knowledge to avoid a potential threat from turning into a crisis. Intelligence advisories give you tailored reports to anticipate possible disruptions, mitigate risk and help you make well-informed decisions, faster.

            Give your people peace of mind when they travel for work, so they remain focused on the job at hand. We mitigate risks, manage incidents if they occur, and support your people with security advice or help in a crisis. 


            Solace Global
            418 Broadway
            #5011 Albany
            NY 12207


            Connect with Solace Global Inc.

              CVE-2024-3400

              Cyber Security Alert: GlobalProtect Gateway Zero-Day Vulnerability

              Security Vulnerability

              Overview: Palo Alto has announced a critical zero-day vulnerability that is actively being used in the wild.

              Threat Name: CVE-2024-3400

              Risk Factor: Critical

              Date: April 2024

              Get Help Now

              Solace Cyber security specialists can assist with updating your firewall to the latest version.

              What We Know

              CVE-2024-3400 represents a critical command injection vulnerability impacting the GlobalProtect Gateway functionality within PAN-OS. This flaw could be exploited by a remote, unauthenticated attacker to execute arbitrary code on a targeted firewall, granting them root privileges. The vulnerability has been categorised as critical as it poses a significant risk.

              What Has Palo Alto Said?

              Palo Alto Networks has acknowledged the issue and is working on a patch for CVE-2024-3400. Fixes are starting to become available. Not all versions of PAN-OS have a patch yet, so the advisory is to keep an eye on the Palo Alto Network official site. 

              Palo Alto Networks has also acknowledged that it’s “aware of a limited number of attacks that leverage the exploitation of this vulnerability.”

              According to Palo Alto, the issue applies only to firewalls that have the configurations for both GlobalProtect gateway (Network > GlobalProtect > Gateways) and device telemetry (Device > Setup > Telemetry) enabled.

              Recommendations For Navigating The Vulnerability.

              When a vulnerability is identified, it’s crucial to take swift action to mitigate any potential risks. Specifically, for PAN-OS versions prior to:

              • PAN-OS less than 11.1.2-h3
              • PAN-OS less than 11.0.4-h1
              • PAN-OS less than 10.2.9-h1

              It’s highly recommended to prioritise patching as soon as the updates are released. These patches are vital for bolstering the security of your systems and safeguarding against potential exploitation.

              As an interim measure, disabling device telemetry can serve as a temporary workaround until an official patch is made available. This step can help minimise exposure to vulnerabilities while awaiting the official fix.

              Remaining vigilant is key. Continuously monitor official communications from Palo Alto Networks for any updates regarding the vulnerability and subsequent patches or mitigations. As soon as updates are released, promptly apply them to your systems to ensure optimal security posture.

              It’s imperative to update your firewall to the latest version at the earliest opportunity. Solace Cyber stands ready to assist with this process, ensuring your firewall is promptly updated to the most recent version, thereby fortifying your defenses against potential threats.

              Need support?

              Solace Cyber security specialists can assist with updating your firewall to the latest version

                Announcement from Solace Global

                It is with great sadness that we confirm that seven humanitarian aid workers, including three security personnel from Solace Global, were tragically killed on Monday evening following a strike on World Central Kitchen’s humanitarian mission, delivering food aid to those in need in Gaza. 

                Words cannot express the depth of sympathy that we feel for the families, friends, colleagues and loved ones of those who died. We are working closely to support them at this difficult time. 

                We are humbled by the bravery of the men and women working in such complex environments to deliver vital aid, and pay tribute to those that lost their lives on Monday. Those who knew John, James and James have expressed pride for them enabling humanitarian efforts. 

                We are committed to supporting the families and loved ones of those who died, and remain dedicated to the continuation of services for all of our clients.

                Solace Global at ASIS Europe 2024

                We are excited to announce that we will be exhibiting at ASIS Europe 2024 in Vienna, where we will be showcasing our risk management solutions aimed at navigating the complexities of today’s global security landscape and building business resilience.

                We are excited to exhibit alongside top security firms and engage with esteemed professionals and emerging leaders in the industry.

                Visit our stand B8 to connect with our experts, learn more about our industry leading risk management platform, Solace Secure, and find out how Solace Global can help you strengthen your business resilience.


                Event details

                When

                March 21-22, 2024

                Where

                Vienna, Austria


                Emily Roberts Managing Director Solace Global Risk

                Emily Roberts

                Managing Director, Solace Global Risk

                “In a world marked by geopolitical uncertainties and evolving threats, it’s imperative for businesses to prioritise resilience. This means not only having robust security measures in place but also the agility to adapt and respond swiftly to emerging challenges. At Solace Global, we recognise the growing demand from European organisations for comprehensive security solutions tailored to their specific needs.”


                Connect with us at ASIS Europe 2024

                Share your details below and we’ll get in touch to book a timeslot during the event.

                  CVE-2024-21762

                  Cyber Security Alert: Fortinet Warns of Critical FortiOS SSL VPN Flaw

                  fortinet logo

                  Overview: Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation. Immediate action required.

                  Threat Name: CVE-2023-20198

                  Risk Factor: Critical

                  Date: 9th Feb 2024

                  Get Help Now

                  Solace Cyber security specialists can assist with updating your firewall to the latest version.

                  What We Know

                  On February 8, 2023, Fortinet issued a notice addressing a potentially exploited vulnerability in the wild. This vulnerability, found in the SSL VPN component, is classified as a pre-authentication vulnerability, with a critical severity rating of 9.6 CVSSv3. The identified flaw could enable a remote attacker to authenticate remotely by employing carefully crafted HTTP requests. Subsequently, the attacker may execute arbitrary code or commands, as reported by Fortinet.

                  What Has Fortinet Said About The Vulnerability?

                  Fortinet has emphasised that the only viable solution is to disable the SSL VPN entirely; opting to deactivate webmode is not considered a valid workaround. Urgent action is advised to promptly patch this vulnerability.

                  The affected versions and recommended solutions for FortiOS are as follows:

                  • FortiOS 7.6 is not affected, and no action is required (Not Applicable).
                  • FortiOS 7.4 versions ranging from 7.4.0 through 7.4.2, users are advised to upgrade to version 7.4.3 or above.
                  • FortiOS 7.2 with versions between 7.2.0 and 7.2.6, it is recommended to upgrade to 7.2.7 or above.
                  • FortiOS 7.0 users with versions from 7.0.0 through 7.0.13 should upgrade to 7.0.14 or above.
                  • FortiOS 6.4, versions 6.4.0 through 6.4.14, an upgrade to version 6.4.15 or above is recommended.
                  • FortiOS 6.2 users with versions ranging from 6.2.0 through 6.2.15 are advised to upgrade to 6.2.16 or above.
                  • FortiOS 6.0 in all versions, it is recommended to migrate to a fixed release.

                  What’s The Impact and Implementation Plan?

                  The flaw allows an attacker to remotely authenticate using crafted HTTPS requests. According to vuldb.com, technical details are unknown, but an exploit is available.

                  Swiftly upgrade your firewall to the most recent update. Solace Cyber is available to help you with the process of updating your firewall to the latest version.

                  Need support?

                  Solace Cyber security specialists can assist with updating your firewall to the latest version

                    Alert Plus: US and UK launch air strikes on Houthi targets in Yemen

                    Current Situation of US and UK air strikes in Yemen

                    Intelligence cut off time 15:00 GMT 12th of January 2024

                    On the 11-12 January, US and UK aircraft and warships conducted at least 70 strikes on multiple military targets in Houthi-controlled Yemen. Reports indicate that over 100 precision guided munitions were fired on at least 16 Houthi locations. This includes a military base adjacent to Sanaa airport, a military site near Taiz airport, a Houthi naval base in Hodeidah and military sites in Hajjah governorate. Houthi’s stated that five of the group’s fighters were killed in the strikes with six others wounded.

                    The US Secretary of Defense, Lloyd J. Austin III, released a statement indicating that targeted strikes were conducted on sites associated with unmanned aerial vehicle’s (UAV), ballistic and cruise missiles, and coastal radar and air surveillance capabilities.

                    Majority of the firepower came from US jets, with the US having the aircraft carrier USS Dwight D Eisenhower already in the Red Sea, as well as air bases in the region. US Navy warships also fired Tomahawk land attack cruise missiles (LACMs), which are GPS-guided and can be programmed to fly evasively. The UK contributed by sending four RAF Typhoons from Akrotiri, Cyprus, carrying Paveway IV guided bombs.

                    Map of US and UK Air Strikes against Houthi's in Yemen January 2024
                    Map of US and UK Air Strikes against Houthi’s in Yemen

                    In response, the Houthis have stated that they are not deterred by the attacks. The group’s leader, Mohammed al-Bukhaiti, stated that the US and UK would “soon realise” the action was “the greatest folly in their history”. Hezbollah, Hamas, and the Palestinian Islamic Jihad responded by saying that the strikes show Washington and London’s support for Tel Aviv and that the West are now responsible for the subsequent impact on the region’s security. Iran also responded forcefully, expressing that the strikes were a breach of international laws. Saudi Arabia and Jordan did not condemn the attacks but did call for restraint. Several Western nations supported the operation as an attempt to restore the free flow of trade and deter further Houthi attacks.

                    Who is Behind The Houthi Movement?

                    The Houthi Movement is an Iranian aligned group that controls much of Yemen after nearly a decade of civil war against a Western-backed and Saudi-led coalition. The two sides are currently observing a tentative ceasefire that officially ended in late 2022 but has remained in place to the current day.

                    Following the outbreak of the Hamas-Israel conflict, the Houthi’s emerged as a strong supporter of the Palestinian Islamist group. The Houthis began attacks on shipping between the Gulf of Aden and the Red Sea in December 2023, claiming to target vessels linked to Israeli persons, businesses, and interests.

                    However, this route, which links Europe and Asia and Africa via the Suez Canal, accounts for roughly 15 percent of the world’s shipping traffic. The attacks have forced some shipping companies to limit transits through the waterway, or even cease operations altogether, instead taking the longer route around southern Africa. This has significantly disrupted international commerce, increasing delivery costs and time, stoking fears about a global inflation.

                    In response to the Houthi attacks, the US launched Operation Prosperity Guardian alongside several allies, which aimed to end the blockade and counter all threats by Houthi forces against international maritime trade. The operation was defensive in nature, destroying only missiles launched at vessels with no pro-active strikes conducted. The Houthis continued to fire at merchant vessels, as well as allied naval vessels, dismissing warnings from Washington and London. Then on 9 January, US and British warships shot down 21 drones and missiles, repelling the largest Houthi attack so far.

                    How will UK and US airstrikes in Yemen affect global stability?

                    It is highly likely that the Houthi’s largest attack to date on 9 January was the trigger that surpassed the US-UK threshold. While international prices have yet to see a significant impact, Operation Prosperity Guardian was not working as a deterrent. It is highly likely that more extensive, continued Houthi action would force more merchant vessels away from the Red Sea, almost certainly disrupting maritime trade, therefore increasing consumer prices and shortages.

                    In the immediate aftermath, the Houthi’s are highly likely to increase their attacks on commercial and military vessels in the region in retaliation. However, it is likely that their ability to launch missiles and drones has been degraded. Should the Houthis sustain their attacks, it is almost certain that the US and UK will continue their strikes on targets within Yemen. It is also highly likely that the group will be re-designated as a terrorist organisation if they continue. This would have a significant impact on the peace process to end the Yemeni Civil War between the Houthi’s and the Saudi-led coalition, which has continued to progress despite regional tensions.

                    A breakdown of the process would almost certainly see a resumption of hostilities between the two sides, with locations within Saudi Arabia and the United Arab Emirates likely becoming viable targets for the Houthi’s as evidenced by their previous attacks.

                    Across the Middle East, it is highly likely that Houthi’s allies and other Iranian proxies start to act in solidarity with the group. These groups will almost certainly view the attacks as Western support for Israel.

                    It is almost certain that Popular Mobilisation Forces (PMF) in Iraq and Syria will continue to target US military bases across the region. It is also likely that the frequency and scale of these attacks will increase considerably. There is a realistic possibility that US military locations that have not been targeted yet in Kuwait, Saudi Arabia, and the UAE, are targeted.

                    Hezbollah will likely continue to focus its attacks on Israel, however an attack on the US cannot be ruled out. While still unlikely, the US and UK strikes on Yemen have increased the likelihood of a wider conflict developing in the Middle East, as well as the West entering a proxy war with Iran. This eventuality would highly likely take focus away from the conflict in Gaza, almost certainly intensifying the humanitarian situation.

                    Travel Risk Advice

                    • Avoid all non-essential travel to Yemen.
                    • Anyone operating in the region should monitor events from a reliable source in case of a major escalation.
                    • Key military and political infrastructure inside Sana’a are very likely to remain focal points for violence and demonstrations. You should be particularly vigilant in these areas and follow any specific advice from the local security authorities.
                    • Avoid US and UK embassies or consulates across the region as these will likely be the epicentres for demonstrations.
                    • If air-raid or rocket warning sirens are sounded, seek secure shelter immediately, ideally in a purpose-built shelter. If in a building when sirens are sounded, head to a secure room, stairwell or inner room. Close all windows and doors, stay in shelter for ten minutes after the siren ends.
                    • If hostilities resume between the Houthis and the Saudi-led coalition, key civilian and military installations in Saudi Arabia and the UAE will likely become targets. Avoid these locations if not essential.
                    • Previous Houthi attacks have targeted major airports. Ensure alternative travel plans have been prepared for, as well as all individuals having comprehensive travel insurance.
                    • Mariners in the region should proceed with extreme caution, maintaining contact with port and shipping authorities at all times.
                    • Always follow all instructions and orders from security forces. ​Where possible, avoid areas of active conflict and remain inside a secure location away from windows.
                    • Ensure that you always carry personal identification documents. Consider making photocopies of important documents in case of confiscation, theft or loss.Keep these documents separated from the originals.​​
                    • Have emergency contact numbers saved on your phone. These should include the local authorities, medical facilities and any consular support. Ensure that mobile phones are charged in case of any losses in electricity.
                    • If caught in the vicinity of a security incident, seek shelter immediately and leave the area if safe to do so. Continue to adhere to all instructions issued by authorities and obey any security cordons in place. 
                    • Monitor the Solace Secure platform and trusted local media for relevant updates.


                    More on the recent activity in the region

                    Houthi Attacks in the Red Sea

                    Since the start of the Israel-Hamas war, the Houthi Movement has supported the Palestinian cause by targeting southern Israel directly and Israeli-linked vessels on shipping routes in the Gulf of Aden, Red Sea, and the Bab-al-Mandeb.

                    Houthi Seizure of Merchant Vessel Galaxy Leader

                    In a brazen incident on 19 November, the Galaxy Leader, a Bahamian-flagged and Japanese-operated merchant vessel (IMO: 9237307), fell victim to suspected Houthi Movement militants in the Southern Red Sea.

                    Israel-Hamas War 2023

                    With the incursion into southern Israel by the Gaza-based militant group Hamas over the weekend of 7 and 8 October, this eventuality became a reality, and the region is now on the precipice of a protracted and deadly conflict.


                    Speak to our team about your journey management needs

                      Solace Cyber Recognised as Assured Service Provider by National Cyber Security Centre.

                      Solace Cyber, a leading Cyber Security organisation with headquarters in Dorset, has achieved recognition as an Assured Service Provider under the prestigious Cyber Incident Response (Level 2) scheme by the National Cyber Security Centre (NCSC). This accolade positions Solace Cyber among the first in the UK to attain Incident Response accreditation through the scheme, highlighting their commitment to providing high-quality incident response services.

                      The NCSC’s Cyber Incident Response project aims to offer support to UK organisations that have fallen victim to cyber-attacks, by raising awareness of high-quality incident response providers who can offer external support and advice on how to manage and recover from cyber incidents.

                      The initiative builds on the Level 1 scheme, which was developed to assure companies that have the capability to provide incident response services to nationally significant organisations such as regulated industries, central government, and critical national infrastructure.

                      With an impressive track record, Solace Cyber has been instrumental in helping companies across the UK recover from ransomware attacks and data breaches. Serving as representatives for International Loss Adjusters and Cyber Insurance companies, Solace covers more than 30,000 commercial businesses nationwide, through our channels, providing hundreds of successful response recoveries.

                      Rowland Johnson, President of CREST said, “Congratulations to Solace for gaining NCSC Cyber Incident Response (Level 2) scheme Assured Service Provider status for its incident response services. This means Solace has been assessed as capable of supporting most organisations with common cyberattacks, such as ransomware. It provides valuable assurance to buyers of the high quality of Solace’s incident response services.”

                      This prestigious accreditation reaffirms Solace Cyber’s dedication to meeting the NCSC’s stringent standards for both technical and organisational capability. By achieving the Cyber Incident Response (Level 2) status, Solace Cyber continues to demonstrate its unwavering commitment to enhancing the cybersecurity landscape and providing unparalleled support to organisations facing the challenges of cyber threats.

                      For media inquiries, please contact: rbessant@solaceglobal.com

                      Incident Response Services