Compass Daily Brief — 2026-05-21

Executive Summary

Critical cybersecurity vulnerabilities are actively exploiting building control systems and industrial equipment across US and UK operations, with severity 10 escalations requiring immediate response. Multiple high-impact labor disputes, extreme weather conditions, and health emergencies across key BPO markets are creating compound operational stress. Risk posture: Critical.

Domain Highlights

Critical Infrastructure & Cyber - Two severity 10 cyber incidents have escalated, targeting Kieback & Peter building controllers and ZKTeco/Universal Robots systems that commonly support contact center facilities. Iran is experiencing internet shutdowns amid military actions (severity 9), potentially affecting any operations in the region. Delhi faces extreme heat warnings up to 46°C, threatening facility operations and employee safety.

Labor & Economic Disruption - Samsung's major strike in France postponed only "for the time being" (severity 8), while teachers announce indefinite national strikes 10 days before the World Cup. India faces warnings of an "economic storm" that could impact the massive BPO sector there.

Health & Travel - WHO admits the current Ebola outbreak began "months ago" and was underreported, with FIFA activating health protocols before the 2026 World Cup. A separate Nipah virus outbreak is active in Bangladesh near Kolkata operations (severity 10 signal). Travel disruptions include engine safety failures on UPS aircraft and extreme fuel price increases affecting transportation costs.

Natural Disasters - Major wildfire near Hemet, California forcing evacuations (severity 8), while a magnitude 6.6 earthquake struck southern Japan. Extreme weather warnings include severity 10 rain alerts in Girona, Spain and widespread European heat wave approaching 35°C.

Active Incidents

ESCALATED - Critical Priority: Two severity 10 cyber incidents require immediate action:

• "Critical Vulnerabilities in Kieback & Peter Building Controllers Affecting US Operations" (Memphis)

• "Critical Cybersecurity Vulnerabilities Affecting ZKTeco CCTV and Universal Robots Systems" (UK)

Both incidents target building management and security systems commonly found in contact centers. Recommend immediate facility security audits and vendor coordination.

Severity Trends

Cyber domain shows alarming escalation with 399 signals and multiple severity 10 incidents - significantly above normal patterns. Health domain elevated with dual disease outbreaks (Ebola, Nipah) creating potential travel and staffing restrictions. Infrastructure stress is compounding across India (extreme heat) and Iran (internet disruption).

Recommended Actions

• Immediate: Audit all Kieback & Peter building controllers and ZKTeco systems for the critical vulnerabilities; coordinate with facilities management and IT security teams

• India Operations: Implement heat emergency protocols for Delhi sites; monitor power grid stability and employee transportation safety as temperatures approach 46°C

• Labor Contingency: Develop staffing alternatives for France operations given Samsung strike postponement signals broader labor unrest; monitor World Cup-related teacher strikes

• Health Screening: Review travel policies for staff returning from Bangladesh/West Africa regions due to active Nipah and Ebola outbreaks; coordinate with occupational health teams