The Iranian Revolutionary Guard Renews Threat to Target U.S. Sites in the Middle East:
Iran’s navy on May 9, warned any attack on Iranian oil tankers or commercial vessels would be met with a “heavy assault” on one of the U.S. bases in the region and enemy ships, even as a tenuous ceasefire appeared to be holding. The threat came a day after U.S. military forces fired on two Iran-flagged oil tankers to stop them from docking at an Iranian port in violation of the U.S. blockade, casting doubt on the month-old ceasefire that the U.S. has insisted is still in effect. U.S. Central Command (CENTCOM), which oversees Middle East military operations, released a video reportedly showing the tankers, the Sea Star III and the Sevda, being hit by a US Navy F/A-18. CENTCOM officials said the vessels were violating the U.S. blockage of Iranian ports. The incident underscores an increasingly kinetic posture around maritime sanctions and highlights the narrowing space between economic pressure and direct military engagement. Concurrently, political rhetoric from Washington has intensified, with President Trump branding Iran’s terms for ending the Middle East war “totally unacceptable“ raising the possibility of fresh conflict and sending oil prices sharply higher in early Asia trade on May 11.
We advise businesses to prepare for immediate resumption of volatility in the region, including the possibility of resumed strikes and drone activity across the Gulf region. Organizations with regional exposure should review contingency plans, diversify supply routes where possible, and monitor developments closely.
Hantavirus Outbreak on Cruise Vessel Triggers Multinational Medical Response:
At least 17 U.S. citizens are among the passengers evacuated from the MV Hondius following a confirmed hantavirus outbreak onboard the cruise vessel, which has prompted a coordinated international medical response involving quarantine, repatriation, and controlled clinical isolation. One U.S. national has tested positive for the Andes strain of hantavirus, while additional exposed passengers are being monitored for early-stage symptoms following transfers to specialist medical facilities. Although the World Health Organization regards hantavirus as low-risk to the general public, the outbreak has required rapid deployment of biocontainment medical evacuation procedures, with affected U.S. citizens transported under controlled conditions to specialist isolation units for ongoing observation and testing. The incident highlights the broader risk posed by closed travel systems such as cruise vessels and long-haul travel, where high-density accommodation and delayed symptom onset can result in rapid escalation from isolated cases to multinational public health interventions. It also underscores the potential for sudden disruption to travel continuity, particularly for corporate personnel operating in international contexts.
We advise organizations to prepare for potential disruption from infectious disease exposure events, including rapid evacuation requirements, quarantine measures, and evolving travel restrictions.
Canvas Data Breach Disrupts U.S. Schools and Exposes Millions of User Records, Highlighting Third-Party Platform Risk:
A major cyberattack targeting the widely used education platform Canvas, operated by Instructure, has resulted in one of the largest data exposure incidents of 2026 to date, impacting nearly 9,000 schools and upward of 275 million people, including students, teachers, and administrative staff. The attack, attributed to the ransomware group ShinyHunters, involved unauthorized access to user records and system data, followed by extortion demands and intermittent platform disruption during academic periods. While passwords and financial data were not confirmed as compromised, the scale of exposed personally identifiable information has prompted widespread concern among education providers and regulatory scrutiny. The involvement of a widely adopted SaaS platform underscores the systemic risk posed by centralized cloud-based service providers, where a single compromise can cascade across thousands of downstream institutions. For organizations, this incident reinforces the growing threat that third-party and SaaS ecosystems represent a primary attack surface rather than a peripheral one.
We advise organizations to reassess third-party risk exposure across all SaaS and education or collaboration platforms.
