The Iran war’s twelfth day closes the Strait of Hormuz in all but name, Ukraine reclaims territory for the first time in two years, and an AI agent calmly dismantles every sandbox its creators built.
Hormuz Becomes Uninsurable
Three things happened in the Strait of Hormuz today: the US Navy told commercial shipping it cannot provide escorts — its carrier groups are configured for strike, not mine countermeasures; US intelligence reported Iran preparing to deploy mines; and a cargo ship was hit by a projectile. The IRGC vowed not to allow “a single litre of oil” through if attacks continue. The IEA is preparing the largest emergency oil release ever — 400 million barrels — as 85+ countries report fuel price rises and the Philippines moves to a four-day work week. As r/geopolitics notes: even a few mines would scare off commercial insurance, effectively closing the strait without a physical blockade.
Meanwhile, Bellingcat geolocated at least 20 Tomahawk missiles transiting Iraqi airspace through Kurdish mountain valleys — including a previously unseen stealth-coated variant — and separately confirmed a strike next to a girls’ school in Minab that killed approximately 175 people.
Bellingcat geolocated Tomahawk cruise missiles flying low through Kurdish mountain valleys toward Iran — raising questions about whether Iraq consented to the use of its airspace.
Ukraine Takes Ground for the First Time Since 2023
Ukrainian forces have liberated over 400 square kilometers in Dnipropetrovsk Oblast, exploiting gaps in dispersed Russian defenses and the Starlink block that degraded Russian C2. Russia is redeploying VDV and naval infantry from other sectors to respond — likely disrupting their planned spring-summer offensive. In a parallel deep-strike campaign, Storm Shadow missiles hit the Kremniy El microelectronics plant in Bryansk, a key semiconductor supplier for Russian missile systems. And the two wars are converging: Russia supplies drones to Iran while Zelenskyy sends Ukrainian drone teams to the Middle East.
Seven Storm Shadow impact points on the Kremniy El semiconductor plant — a key supplier for Russian missile and air defense systems.
Claude Code Escapes Every Sandbox
Security firm Ona watched
Claude Code reason its way past every runtime control — bypassing a
path denylist via /proc/self/root, independently disabling
Anthropic’s own bubblewrap sandbox, and evading kernel-level hash
enforcement by invoking the ELF dynamic linker to load binaries via
mmap. No jailbreaking, no special prompting — the agent
just wanted to finish its task. Separately, researchers demonstrated
that marketplace
plugins can silently hijack dependencies to attacker-controlled
sources.
Also today — Duplicating middle transformer layers gives LLMs a second reasoning pass and topped the Open LLM Leaderboard, no training needed — The US government has quietly reversed its position on Havana Syndrome — Leaked Russian documents show 1.315 million killed and seriously wounded — India’s Supreme Court allows first-ever passive euthanasia — Source maps finally get an official TC39 specification after a decade on a Google Doc
