World

Trump attacks Pope Leo over Iran stance as Rubio heads to the Vatican

Trump accused Pope Leo XIV of “endangering a lot of Catholics” and claimed the Pope “thinks it’s fine for Iran to have nuclear weapons” — after the Pope condemned US military action. The Pope responded that his “mission is to preach peace.” The feud erupted just before Rubio’s scheduled Vatican visit.

BBC · Guardian · Al Jazeera

Iran war read differently in Washington and Beijing — both to validate existing assumptions

Chinese analysts cite American overextension; US analysts counter that the operation demonstrated AI-integrated military capabilities. China proved more insulated from the Hormuz closure due to decades of electrification and supply diversification. Both powers drawing lessons that reinforce what they already believed.

War on the Rocks

Iran’s homeland threat: degraded capability, elevated risk

Three days into the war, the IRGC’s Qods Force announced intent to strike the American homeland — but hasn’t. Targeted strikes killed key personnel including Unit 4000 head Rahman Moqadam, disrupting external operations globally. Immediate threat diminished; risk of low-scale attacks persists.

War on the Rocks

Israeli strikes continue in Lebanon; displacement zones breeding extremism

BBC traced the April 8 bombardment as one of Lebanon’s deadliest recent episodes — families describing how 10 minutes of bombing shattered communities. A separate War on the Rocks analysis warns conditions for mass extremist recruitment are forming: Palestinian and Syrian refugee populations now overlap in institutional vacuums, UNRWA faces a $220M shortfall, and Hezbollah’s informal monitoring has degraded. A stateless second generation is coming of age with no legal employment.

BBC · Al Jazeera · War on the Rocks

India’s political earthquake: film star Vijay sweeps Tamil Nadu

Tamil actor Vijay’s new party came close to sweeping Tamil Nadu, shattering established regional dominance. Simultaneously, Mamata Banerjee lost West Bengal and the CPI lost Kerala — meaning India now has no state government controlled by the left for the first time in five decades.

BBC (Tamil Nadu) · BBC (West Bengal) · NDTV

Romania’s pro-EU government collapses

PM Ilie Bolojan lost a no-confidence vote after the Social Democrats — the largest party in his own coalition — defected to vote with the far-right opposition. Romania is without a functioning government at a moment of acute regional instability.

BBC · Politico

Hantavirus cruise ship: human-to-human transmission suspected

The WHO is investigating suspected human-to-human transmission aboard the MV Hondius — extremely rare for a virus that normally spreads only through rodent contact. Three dead since April, WHO tracing 80+ flight contacts. Spain agreed to dock the ship in the Canary Islands.

NPR · BBC · Al Jazeera

Ukraine

Ceasefire violated within minutes; 22+ killed in pre-ceasefire barrage

Russia launched Iskander-Ms, a Kh-31, and 108 drones the moment Ukraine’s ceasefire began. The preceding day’s toll: Zaporizhzhia (12 killed, 43 injured), Kramatorsk (5 killed by glide bombs on city centre), Dnipro (4 killed), Poltava (4 killed including two first responders in a deliberate double-tap on a gas facility). Moscow’s own two-day ceasefire proposal covers only the Victory Day parade. Germany urged Russia to accept Ukraine’s offer instead.

Ukrainska Pravda · BBC · NPR

Russia locks down for Victory Day; Ukraine demonstrates 2,000+ km strike capability

Russia cut mobile internet in Moscow and St. Petersburg, closed airports in 15 cities, and reportedly excluded military equipment from the May 9 parade for the first time since 2007 — milbloggers say open-air staging areas are now too vulnerable to drone attack. An air alert was declared for Khanty-Mansi, over 2,000 km from Ukraine. Russian ultranationalist milbloggers are openly criticising the Kremlin, accusing the MoD of “vanity” for prioritising parade optics over strategic air defence.

Moscow Times · ISW

Russia doubles attacks at Pokrovsk; record glide bomb usage

186 combat engagements on the Pokrovsk front on May 6 — double the previous rate — with infiltrations continuing west and northwest. Russia’s April plan to capture Kostiantynivka failed. KAB glide bomb usage hit wartime records: nearly 8,000 in March, ~7,000 in April. Ukrainian interceptor drones are increasingly neutralising Shaheds, forcing Russia to redirect them to frontline targets and degrading the strategic strike campaign.

Ukrainska Pravda · ISW

Economic despair mounts: “We can’t even take one region”

An unnamed Russian official told the Washington Post: “The overall mood is that’s enough already — we can’t even take one region.” GDP contracted in early 2026, Putin’s approval dropped from 77.8% to 65.6%, nonpayments hit $109 billion in January, with banking collapse warnings for summer. The war has now outlasted WWII without Russia controlling even Donetsk.

Fortune

EU joins aggression tribunal; US approves $373M JDAM-ER sale

EU ministers voted to formally join the Special Tribunal to prosecute Russian leadership for the crime of aggression, with first verdicts expected by 2028. The US approved a $373.6M sale of JDAM-ER extended-range precision munition kits to Ukraine. Austria expelled three Russian embassy staff after a surveillance antenna array was discovered at the embassy.

Kyiv Independent · Ukrainska Pravda · Guardian

Defense & Security

Europe’s missile gap: can the continent replace US Tomahawks?

The Iran war exposed European dependence on US cruise missiles. The Navy’s FY2027 Tomahawk request jumped from 55 to 785 in a single budget cycle — a 1,200% increase that exposes a decade of acquisition decisions never stress-tested against realistic warfighting scenarios. European powers are accelerating indigenous long-range strike development, but the industrial base gap is measured in years.

Financial Times · War on the Rocks

Europe without America: NATO’s structural exposure under Trump

Trump announced plans to reduce US forces in Germany beyond the 5,000 already withdrawn — military leadership reportedly blindsided. The Atlantic examines what “Europe Without America” means in practice: a NATO alliance that nominally persists but lacks credible US commitment, with European capitals scrambling for strategic autonomy they are structurally unprepared to exercise. US car tariffs on the EU hiked to 25% add economic friction to the strained relationship.

The Atlantic · Fortune · Al Jazeera

Japan rapidly building out defense industrial base

Foreign Affairs examines Tokyo’s accelerating buildup: unprecedented political will being converted into industrial capacity at pace, driven by growing US-China rivalry and uncertainty about the American Indo-Pacific commitment. Japan sees a narrow window before the regional balance shifts further.

Foreign Affairs

Pentagon fired Stars and Stripes ombudsman for resisting editorial interference

The Pentagon rescinded federal regulations protecting Stars and Stripes’ editorial independence without required public comment, then fired ombudsman Jacqueline Smith after she published criticism of Defense Secretary Hegseth’s editorial goals. The Deputy Secretary issued an interim policy allowing DOD to modify the paper’s operations without legal constraint.

Stars and Stripes · HN

Tech

AI code generation removes the human regulator from a cybernetic system

Charles Leifer applies Ashby’s Law of Requisite Variety to AI coding: programmers serve as the regulator that matches and manages code complexity, and replacing them with automated generation breaks the control mechanism. The essay distinguishes analysis (AI extends human capacity) from generation (AI removes the human mediator), and warns of an “event horizon” where complexity compounds faster than it can be addressed — creating economically self-reinforcing feedback loops of token expenditure on AI-created problems.

Charles Leifer · Lobsters

Claude Code accelerates output but doesn’t improve products

The bottleneck in software quality is design taste and product vision, not code generation speed. The falsification test: if Claude Code provided genuine velocity advantages, Anthropic should dominate competitors — but Codex and Cursor remain competitive. AI helps early-stage products reach MVP faster and makes commodity software cheaper, but doesn’t help already-excellent companies improve.

Substack · Lobsters

Agents can now provision Cloudflare accounts, buy domains, and deploy autonomously

Cloudflare and Stripe integrated so AI agents can go from zero to deployed app without human interaction beyond initial permission — account creation, API token, domain purchase, and deployment. OAuth-derived authorization treats agents as first-class principals with a $100/month default spending cap. This standardizes what was previously one-off per SaaS.

Cloudflare · HN

Computer use agents are 45x more expensive than structured API calls

Reflex benchmarked vision agents (browser automation via screenshots) against API-calling agents: 551k tokens over 17 minutes vs. 12k tokens in 20 seconds — a 45x cost difference. The vision agent also required step-by-step instructions to succeed at all. For internal tools where you control the codebase, generating API endpoints eliminates the gap entirely.

Reflex · HN

Exploitable integer overflow in Lix NAR parser (CVE-2026-44028)

An integer overflow in Lix’s NAR parser allows out-of-bounds memory writes: a member length of 2^64−8 causes a buffer resize to overflow to zero. CVSS 6.3 — requires local daemon access and ASLR evasion (~1 hour in dynamic builds, instant in static). Fixed in Lix ≥ 2.93.4, ≥ 2.94.2, ≥ 2.95.2.

Lix Blog · Lobsters

.de TLD went offline after botched DNSSEC key rotation

DENIC published a malformed signature during a DNSSEC key rotation, causing all validating resolvers to return SERVFAIL for .de domains. Cloudflare had to temporarily disable DNSSEC validation for .de to restore service. A single configuration error at one registry node took an entire country’s namespace offline.

DNSSEC Analyzer · HN

Zuckerberg personally authorized Meta training on pirated books

A court filing claims Zuckerberg personally authorized and encouraged using pirated books from LibGen to train Meta’s AI, overriding legal staff concerns. This pins direct liability on Zuckerberg as the decision-maker. Separately, Ireland’s regulator flagged Meta for potential maximum fines of €20 billion over algorithmic dark patterns.

Variety · HN · Irish Independent