Kyiv endures its heaviest bombardment in weeks even as Doha
reports progress on Iran; Aker lands Norway’s largest-ever software
deal; and a whole country holds its breath before Brazil.
Russia
launches heaviest Kyiv attack in weeks — at least 13 dead
Russia fired roughly 570 drones and missiles at Ukraine overnight
July 1–2 — 74 missiles and 496 drones by Kyiv’s count, the largest salvo
in weeks, with the capital as the primary target. Air defenses
intercepted the bulk of them, but 25 ballistic missiles and 12 drones
got through: at least 13 people were killed and 86 injured, a
residential block lost six floors to a direct hit, and 30+ sites were
damaged including a medical facility. Residents sheltered in metro
stations through the night. Zelenskyy had cut short a visit to Ireland
hours earlier, warning of “very troubling” intelligence about an
imminent mass strike — but the scale still overwhelmed available
defenses. Ukraine answered by striking a Russian oil refinery.
(Deep-strike campaign and the air-defense gap in Ukraine)
US–Iran
talks in Doha report ‘positive progress’; oil down 38% from war
peak
Indirect US–Iran negotiations in Qatar wrapped up with Qatar
reporting “positive progress” on implementing the June 17 memorandum of
understanding, and Tehran announced a formal channel will be set up with
Washington to flag breaches. Trump said “denuclearization of Iran is
moving along well.” The war — which began February 27 — sent Brent crude
to a peak of $126/barrel; it has now fallen below $71 as markets price
in a ceasefire.
(Strategic aftermath — China’s gains, Saudi strains, Taiwan’s
drone lesson — in World News)
Cognite
solgt for 31 milliarder – Norges største programvare- og KI-deal
noensinne
Aker har solgt det industrielle programvareselskapet Cognite til
franske Schneider Electric for rundt 3,1 milliarder dollar (ca. 31
milliarder kroner) — omtalt som den største norske transaksjonen innen
programvare og KI noensinne. Aker tjener ca. 14,7 milliarder kroner i
kontanter, rundt 20 ganger sin opprinnelige investering. Gründere og
ansatte deler 7,5 milliarder, og daglig leder John Markus Lervik casher
personlig inn nærmere 2 milliarder. Aker-aksjen steg markant. «Tirsdag
var en bra dag for Norge,» oppsummerte Eriksen.
VM-feber:
Norge slo Elfenbenskysten – nå venter Brasil
Norge vant sin aller første kamp i et VM-sluttspill, 2–1 over
Elfenbenskysten, og møter Brasil i åttedelsfinalen i New Jersey søndag
5. juli. Patrick Berg utmerket seg som banens beste, Ødegaard ledet
laget med brennende engasjement, og keeper Nyland avverget katastrofen
med en fantastisk redning i det 96. minutt. Haaland scoret, men røpte at
han var på felgen: «Jeg var dødstrett, og tenkte at jeg ikke klarer
ekstraomganger, så vi MÅ score.» Landet er i ekstase — Ullevål (36 000
plasser) er utsolgt, Kristiansand åpner 10 000 nye plasser, og
NRK-ekspert Løkberg vil ha nasjonal fridag dagen etter Brasil-kampen.
Haaland er selv edruelig: «Sjansen vår er veldig liten.» På r/norway og
r/norge dominerer VM alt: Patrick Berg (som lastet opp en sjarmerende
fiskevideo i 2018) hylles som nasjonalhelt, og England-abonnenter ber
pent om å få møte Norge nest.
| Indicator |
Value |
Change |
| S&P 500 (f) |
7,534.75 |
-0.12% |
| Dow 30 (f) |
52,638 |
-0.06% |
| Nasdaq (f) |
29,929.75 |
-0.55% |
| Russell 2000 (f) |
3,031.3 |
-0.13% |
| VIX |
16.94 |
+2.11% |
| Gold |
4,087.60 |
+0.13% |
| BTC |
$60,073 |
+2.36% |
| EUR/USD |
1.1408 |
+0.27% |
| USD/NOK |
9.8861 |
-0.28% |
- VIX +2.11% — mild anxiety tick as Russia launches its heaviest
Kyiv bombardment in weeks (74 missiles, 496 drones)
- BTC +2.36% — outperforming flat equity futures; no single
driver, but risk appetite holding in crypto despite the geopolitical
noise
World News
China
emerges as the strategic winner from the Iran war
As the guns fall quiet, the accounting begins — and the analysis
points to Beijing. A new assessment concludes China is the primary
strategic beneficiary of the US–Israel war on Iran: reduced American
credibility in the Gulf, a weakened US–Saudi alignment, and China
positioned as neutral mediator, with Washington distracted from
Asia-Pacific and estranged from European partners. The strains are
concrete: the US is now reportedly weighing a troop drawdown in Saudi
Arabia after the kingdom declined to align fully with the war effort.
And Netanyahu, projecting post-war self-sufficiency, declared Israel “no
longer needs” American military assistance.
US
diplomat: Taiwan must become a ‘hornet’s nest’ of drones to deter
China
De facto US Ambassador to Taiwan Raymond Greene called drones a
“game-changing opportunity” and urged the island to build layered drone
networks that make any Chinese military operation prohibitively costly.
The framing draws directly on lessons from the Iran war, which
reinforced the centrality of drone warfare in modern conflict.
Leaked
documents: China secretly trained Russian forces in chemical and
radiation warfare
Classified Russian documents obtained by Reuters reveal that roughly
200 Russian military personnel attended a three-week program in Beijing
in November 2025 covering chemical reconnaissance, radiation
reconnaissance, and contamination defense of ventilation systems. The
program was authorized by Defense Minister Andrei Belousov after a July
2025 agreement, and involved PLA Major General Li Jinsun; multiple
trainees were subsequently deployed to Ukraine. EU foreign policy chief
Kaja Kallas confirmed the intelligence through independent channels.
Beijing called the allegations “entirely unfounded.”
China’s
ethnic unity law activates global legal reach over diaspora
dissidents
China’s “Law on the Promotion of Ethnic Unity and Progress” took
effect July 2. Its most alarming provision — Article 63 — enables
Beijing to pursue legal action against overseas individuals and
organizations deemed to “undermine ethnic unity,” effectively codifying
transnational repression of Uyghur, Tibetan, and other diaspora
communities. The UN, Taiwan, Amnesty International, and multiple rights
groups condemned it, warning that peaceful advocacy for minority rights
anywhere in the world could now be characterized as a crime under
Chinese law.
Over
900 arrested as South Africa’s anti-migrant protests turn violent
South African police arrested more than 900 people during coordinated
nationwide anti-immigrant demonstrations organized by over 20 civil
society groups. Of 120 marches, 12 required police intervention; one
person was shot dead during looting in Johannesburg’s Alexandra
township. Organizers announced weekly marches until the government
strengthens border controls. President Ramaphosa acknowledged concerns
about illegal immigration as “real” but condemned vigilantism. Nigeria
said it will seek compensation for property abandoned by returning
citizens.
Amnesty:
Sudan’s RSF carried out ethnic cleansing in El Fasher
Amnesty International accused Sudan’s Rapid Support Forces of a
systematic ethnic-cleansing campaign in El Fasher — Darfur’s last major
city not under RSF control. The report documents targeted killings,
sexual violence, and forced displacement of non-Arab civilians in a
deliberate effort to capture and depopulate the city, characterized by
Amnesty as crimes against humanity.
Maltese
tycoon Yorgen Fenech goes on trial for ordering Daphne Caruana Galizia’s
murder
Yorgen Fenech, heir to one of Malta’s largest property empires, has
gone on trial accused of orchestrating the 2017 car-bomb assassination
of investigative journalist Daphne Caruana Galizia. Prosecutors told the
jury Fenech paid €150,000 to three hitmen. He denies all involvement.
Caruana Galizia had been investigating alleged corruption links between
Fenech, his Electrogas energy company, and senior Maltese government
officials.
German prosecutors charged Serhii K., a 50-year-old Ukrainian
extradited from Italy in November 2025, with coordinating the 2022 Nord
Stream sabotage. He is alleged to have led the team that used the
sailing yacht Andromeda to place explosives near Denmark’s
Bornholm Island. He denies involvement and claims functional immunity as
a member of Ukraine’s armed forces; Kyiv denies any state role. The case
carries serious implications for Kyiv–Berlin relations.
Venezuela
earthquake: over 2,200 dead, disease fears mount
A week after twin earthquakes struck Venezuela on June 24, at least
2,295 people are confirmed dead and over 11,000 injured, with the UN
estimating damage above $6.7 billion. Aid workers warn of imminent
disease outbreaks — diarrhea is already spreading in overcrowded
shelters lacking clean water. Four police officers were arrested for
looting cash from collapsed buildings. The US has deployed 900 personnel
and $300 million in aid; 50 international rescue teams are on the
ground. A 2-year-old boy was pulled alive from rubble six days after the
quake.
Trump
made $2.2 billion in 2025 — historians call it unprecedented
Trump’s official financial disclosures reveal income of over $2.2
billion in 2025, his first year back in office, including more than $1
billion from cryptocurrency ventures. Additional income came from a
Home Alone licensing deal, Bibles, perfume, watches, and real
estate. Historians and ethics experts say the scale and nature of the
earnings — largely from ventures seeking favorable federal treatment —
represent an unprecedented blurring of the line between the presidency
and personal benefit.
Trump
refuses to renew USMCA, his own signature trade deal
The Trump administration declined to trigger the USMCA’s 16-year
renewal clause, keeping the North American trade pact alive on a
year-to-year basis instead. The deal — which Trump championed in his
first term as a replacement for NAFTA — will continue but under
perpetual renegotiation pressure, leaving Canada and Mexico with annual
uncertainty over their most critical trading relationship.
Ocean
surface temperatures break records in June — ‘uncharted territory’
Global average ocean surface temperatures hit 21°C in June 2026, a
new record as El Niño conditions loom. Scientists described the readings
as “uncharted territory,” with sustained marine heat stress now a new
baseline rather than an anomaly — with knock-on effects for weather
patterns, fisheries, and coral ecosystems worldwide.
Also today
- Africa
-
Niger’s military junta conducts a “witch-hunt” against LGBTQ+ people,
with mass arrests and forced disappearances — Guardian
-
Afghan migrants say Turkish police stripped, bound, and beat them in
freezing conditions along the eastern border — some lost limbs to
frostbite — BBC
- Europe
-
Albania warned its EU accession is at risk if it proceeds with a Jared
Kushner-backed luxury resort on protected shorelines — Guardian
- Asia
-
14 children killed in the collapse of a tutoring center in Lahore,
Pakistan; police investigate negligence during ongoing construction — NPR
Ukraine
Ukraine
strikes GRU satellite hub, Kstovo refinery, and targets near Omsk
Ukraine’s overnight deep-strike campaign hit the GRU General Staff’s
“Rubin” satellite communications hub near Moscow, the Lukoil refinery in
Kstovo (Russia’s fourth-largest), a Penza institute that builds missile
sensors, and railway bridges in occupied territory. Drones were also
reported over Omsk — site of Russia’s largest oil refinery, 2,500 km
from the border — signaling continued range expansion. Bloomberg
confirmed nearly half of Russian regions are now within reach of
Ukrainian Flamingo missiles. Russia separately signaled Ukraine may have
deployed its first-ever ballistic missile, a notable capability
escalation.
Russia’s
fuel crisis deepens — 28-hour queues, Kazakhstan stepping in
Video from Zabaykalsky Krai shows a driver waiting 28 hours at a gas
station, passing a 4.3 km queue of vehicles. Kazakhstan announced it
will provide Russia 50,000 metric tons of gasoline as “humanitarian aid”
— a telling sign of how badly Ukraine’s sustained strike campaign
against Russian oil infrastructure is biting. Crimea’s fuel shortage,
compounded by continued strikes on the peninsula’s power grid, is now
generating rare public criticism of the Kremlin among residents.
Air-defense
gap exposed; Ukraine pursues PAC-3 and laser systems
The Kyiv “night of horror” has sharpened Ukraine’s air-defense
crisis. Foreign Minister Sybiha publicly urged partners to speed
deliveries, while Defense Minister Fedorov said Ukraine is close to
signing a direct contract for PAC-3 anti-ballistic missiles. Ukraine
also disclosed that its domestically developed laser air-defense system
has shown first positive results in testing — a longer-term bet on
cost-effective intercepts.
Russia
closes Finnish border; Putin expands his security detail to 800
Russia temporarily ordered the closure of checkpoints on its Finnish
border, prompting speculation about upcoming mobilization or an effort
to prevent draft-age men from leaving. Separately, Putin has reportedly
expanded his personal security detail to 800 officers — a striking
increase the Telegraph reads as a sign of acute personal paranoia as the
war grinds on.
Also today
- Former top general Zaluzhnyi reportedly told Zelenskyy directly he
would run for president if Ukraine holds elections this fall — NV
Ukraine
- A drone strike on Moscow triggered a measurable surge in anti-war
sentiment among Russian citizens, per new polling — Kyiv Post
- Ukrainian forensics teams repeatedly find explosives — including
grenades — surgically placed inside the bodies of war dead returned by
Russia — TVP
World
Norway
Microsoft kjøper
datasentertomt i Sandnes
Microsoft har betalt 153,6 millioner kroner for en tomt i Sandnes der
de planlegger å bygge et datasenter med 25 MW kapasitet — et supplement
til selskapets skyregion på Østlandet. Separat henter det norske
datasenterselskapet Fossefall 500 millioner kroner i ny kapital og
verdsettes til 2,5 milliarder.
Angripere
krever løsepenger etter datainnbrudd i Lørenskog
En gruppe hackere som i mai fikk tilgang til en filserver i Lørenskog
kommune krever nå betaling for data de hevder å ha eksfiltrert. Fra 1.
juli gjelder dessuten nye regler som pålegger datasenteroperatører i
Norge å kunne utlevere kundeinformasjon til myndigheter ved behov.
Kongsberg
Gruppen selger luftvern til Kuwait for nær 4 milliarder
Kongsberg Gruppen har inngått en kontrakt om salg av luftvernsystemer
til Kuwait med en verdi på nær fire milliarder kroner.
Nytt fra 1.
juli: turistskatt og et knippe nye lover
Norges nye lov om turistskatt trådte i kraft onsdag — feiret med
korps og kake i Lofoten — og gir kommuner mulighet til å kreve avgift
(opptil 3 % av overnattingskostnaden) fra turister, men en stor gruppe,
særlig dagsturister, er unntatt. Blant de øvrige endringene:
solcelleinstallasjoner krever ikke lenger kommunal tillatelse, salg av
lystgass til mindreårige forbys (17 g dagsgrense), og en ny romlov
erstatter lovgivning fra 1969. Fra 1. august slipper 16–17-åringer
egenandel hos fastlegen.
OpenAI
skal ha tilbudt Trump-administrasjonen 5 prosent eierandel
Ifølge Financial Times har OpenAI-sjef Sam Altman diskutert å gi den
amerikanske staten en eierandel på 5 prosent i selskapet — verdsatt til
852 milliarder dollar — som ledd i et forslag om et statseid
teknologifond inspirert av Alaskas oljefond. Altman skal ha hatt
samtaler med Trump, handelsminister Lutnick og finansminister Bessent.
Tilsvarende ordninger er tenkt for andre store amerikanske KI-selskaper,
og gjennomføring kan kreve kongresslovgivning.
USA
fjerner eksportrestriksjoner på Anthropic – Europa vil lokke selskapet
hjem
USA har opphevet eksportrestriksjonene Trump-administrasjonen
innførte i juni mot Anthropics KI-modeller, begrunnet i bekymringer for
misbruk til cyberangrep. Handelsminister Lutnick godkjente opphevingen
etter at Anthropic gjennomførte en risikovurdering med amerikanske
myndigheter. Parallelt har europeiske politikere sendt brev til EU med
oppfordring om å tilby Anthropic et «nytt hjem» i Europa.
Five
Eyes advarer: KI-cybertrusselen er måneder unna, ikke år
Femøyesamarbeidet (USA, Storbritannia, Canada, Australia og New
Zealand) advarer skarpt om at kunstig intelligens er i ferd med å bli en
alvorlig cybertrussel på et langt kortere tidsperspektiv enn tidligere
antatt — måneder, ikke år, før trusselen materialiserer seg i stor
skala.
42
druknet så langt i 2026 — trafikkulykker tredoblet i Akershus
42 personer har druknet i Norge hittil i år, bare sju unna det
samlede tallet for hele 2025; 15 av dødsfallene skjedde i juni alene.
Parallelt har antallet dødelige trafikkulykker i Akershus tredoblet seg
sammenlignet med i fjor. Politiet peker på høy sommerfart som en sentral
faktor.
Villaks
i dobbel krise — regjeringen starter stortingsmelding
Norsk villaks presses fra flere kanter samtidig: klimaendringer,
kraftutbygging og oppdrettsnæringens lakselus. Laksefisket i 2026 er
allerede dårligere enn fjorårets historisk svake sesong. Klima- og
miljøminister Andreas Bjelland Eriksen erkjenner at «summen av
påvirkning er større enn villaksen tåler» og starter nå arbeidet med en
stortingsmelding. DNT stenger i tillegg to hytter på Hardangervidda
(Lågaros og Hadlaskard) for å skjerme villreinstammen.
Fastleger i
opprør mot nye sykmeldingstakster
Regjeringen bruker høyere honorarer som gulrot for å få fastleger til
å redusere Norges verdenstopp-rangering i sykefravær. Fastlegene
protesterer mot de nye takstene og mener systemet er konstruert
feil.
KI-verktøy
på legekontoret: Helsedirektoratet finner store avvik hver gang
Helsedirektoratet er bekymret for at KI-verktøy brukt av fastleger
inneholder feil som kan gi pasienter gal behandling. Direktoratet oppgir
at de «finner store avvik hver gang» de sjekker slike systemer — og
saken setter søkelys på mangelfull regulering av medisinsk KI i
primærhelsetjenesten.
Obos-prisene faller
for andre måned på rad
Priser på brukte Obos-boliger falt 0,7 prosent på landsbasis og 2,4
prosent i Oslo i juni — andre måned på rad med nedgang, og større enn
forventet for sesongen, ifølge sjeføkonom Sissel Monsvold i Obos.
Hydro
gjenåpner aluminiumsproduksjon med milliardinvestering
Hydro varsler en milliardinvestering for å gjenåpne et
aluminiumsanlegg som ble stengt under Europas energikrise — et tegn på
at energiprisene har roet seg nok til at produksjonen igjen er
lønnsom.
Også i dag
- Sverige kutter drivstoffavgiftene med tre kroner per liter fra 1.
juli — nest billigst i Europa, og grensehandelen venter storinnrykk av
nordmenn — NRK
· E24
- EU innfører toll på småpakker under 150 euro (mot Temu og Shein);
Norge står utenfor tollunionen og er unntatt — kan gi hardere
konkurranse for norske butikker — DN
- Alle norsktilknyttede skip som ønsket det er nå ute av
Hormuzstredet, bekrefter Rederiforbundet — NRK
· TU.no
- Magnus Carlsen markerer 15 sammenhengende år som verdens beste
sjakkspiller på FIDEs rangering — bare Kasparov har flere måneder totalt
på toppen — Dagsavisen
- Canada blir første land utenfor Europa og Australia til å delta i
Eurovision, fra 2027 — NRK
- Victor Willis, «Y.M.C.A.»-stemmen og frontfigur i Village People, er
død, 74 år gammel — NRK
Norway — Street Level
Nordmenn
rasende på KI-kundeservicebotter — og bot-trafikken passerer
mennesket
Flere høyt engasjerte innlegg på r/norge slakter KI-chatbotene til
SAS og IKEA: SAS-boten gikk i loop, nektet å innse at brukeren var
innlogget, utga seg kort for å være et menneske, sendte lenker som
allerede var prøvd, og byttet til dansk før den endelig koblet til kø.
«Kan vi bare slutte?» oppsummerer stemningen. Det skjer samtidig som
maskin- og bot-trafikk i juni 2026 for første gang utgjorde over
halvparten (57,5 %) av all HTTP-trafikk på internett. KI dominerer også
ellers: 44 % av nye sanger på Deezer er KI-genererte, 57 % av nye
arXiv-preprints inneholder KI-språk, og Amazons e-bokmarked slipper nå
300 000 titler i måneden.
Politiet
fant narkolanger knyttet til 207 Oslo-ungdommer via Vipps
Oslopolitiet avdekket Vipps-overføringer som knytter en enkelt
narkolanger til 207 mindreårige. Markedet har profesjonalisert seg
kraftig — langere bruker Signal, Telegram, Snapchat og Zangi — og
ruskonsulentene peker på at sosiale medier har gjort rusmidler langt mer
tilgjengelig for under-18. Stortingsdiskusjonene om hvordan man svarer
på digitalt drevne ungdomsmarkeder pågår.
SALT stengt
etter alvorlige brannsikkerhetsavvik
Oslos populære kulturarena SALT på havnepromenaden er stengt etter at
brannmyndighetene og Plan- og bygningsetaten fant grove avvik:
trekonstruksjon med skumisolasjon gjennomgående, ikke-fungerende
rømningsveier og mangelfull nødskilting. Det detaljerte tilsynsbrevet er
publisert og beskrives som «en oppskrift på katastrofe» — en alvorlig
nestenulykke ved et sted med svært høy besøksmengde.
Oslos
leiemarked i krise — studenter sender 100 søknader, får tre svar
Flere tråder tegner et dystert bilde: en tilflyttende student
forteller om 50–100 detaljerte søknader og rundt tre svar, alle
negative. En indisk fagperson som flytter for jobb spør hva man
realistisk kan vente. Konsensus: ekstrem konkurranse, utleiere som
ghoster søkere, og husleier godt over SSB-tallene. Krisen er særlig
akutt for innflytting i august mot studieåret.
Kronikk:
arkeolog tar vikingidentiteten tilbake fra nynazistene
Kristin Armstrong-Oma, direktør ved Arkeologisk museum ved UiS,
skriver i Aftenposten at nynazister grunnleggende misforstår
vikingtidens samfunn. Kjernen: «Viking var ikke en etnisk identitet, men
noe man gjorde» — et verb om dem som dro på ekspedisjoner, åpent for
folk av ulik bakgrunn. Anledningen er landslagets viking-branding under
VM, og hun argumenterer for at bildebruken bør gjenerobres fra
ekstremistisk misbruk, ikke oppgis.
Grassroots
- Sony slutter å lansere nye PlayStation-spill på fysisk plate fra
januar 2028 — kun digitalt via PlayStation Store. NRK-saken utløste bred
debatt om spillbevaring og eierskap — NRK
· r/norge
- Fengselsansatte med dokumentert PTSD etter vold og trusler på jobb
får rutinemessig ikke yrkesskadeerstatning; 9 % oppfyller
PTSD-kriterier, viser Rambøll-rapport. Stortinget foreslår største
yrkessykdomsreform på 30 år — Frifagbevegelse
· r/norge
- En schizofren kvinne angrep faren med øks og kniv under paranoid
psykose, men Ullevål nektet å ta henne imot — belyser alvorlig
kapasitetsmangel i akuttpsykiatrien — NRK
Tech
METR
study: experienced devs feel 20% faster with AI, clock 19% slower
A METR randomized controlled trial across 16 experienced open-source
developers and 246 tasks found a near-40-point gap between perceived and
actual productivity: developers felt ~20% faster after using AI tools
but completed tasks ~19% slower. The finding is structural — AI speeds
up typing, never the bottleneck for experienced engineers, while adding
overhead at the review stage, where their time is already most
expensive. GitClear’s 200M code changes, Faros AI’s 10k+ developer
analysis, and DORA metrics all corroborate: more code generated, no
increase in delivery value, more churn downstream. The effect reverses
for junior developers and greenfield projects.
An
honest AI-coding field report: code review beats generation
Jamie Brandon (scattered-thoughts) documents experiments across
Claude, GPT, DeepSeek, and Cerebras. Best uses: code review (caught bugs
including double-frees), mechanical refactoring, one-off scripts.
Problematic: complex code, architectural decisions, creative naming
(consistently banal). Frontier models only — cheaper alternatives “bluff
hard.” A recurring issue is models making unrequested changes despite
explicit instructions. The core bottleneck: verification cost scales
with project complexity, making AI output hard to trust for anything
non-trivial.
The VS Code Copilot team details two compounding techniques: extended
24h prompt caching with strategic breakpoints (system-prompt end,
tool-definitions end, recent-messages boundary) achieves ~94% cache-hit
rates for agentic workloads; client-side tool search using vector
embeddings loads tool definitions on demand rather than all at once,
cutting per-session token usage 9–18% and reducing error rates ~4%.
WebSockets cut time-to-first-token by 13–19%. A useful reference for
anyone building on the Anthropic or OpenAI APIs.
The
orchestration lesson: autofz’s control-plane insight extends to LLM
agent pipelines
A retrospective on autofz — a 2023 meta-fuzzer that dynamically
allocates compute across multiple fuzzers rather than perfecting any
single one — argues its core insight generalizes to any system with
heterogeneous imperfect workers: how should a system spend a fixed
budget among them? The author maps this onto modern security pipelines
combining fuzzers, static analyzers, code agents, and patch generators
competing for token budgets. The principles: normalize feedback signals,
compare progress fairly, share evidence across workers, abandon
unproductive directions early — a useful frame for multi-agent
orchestration design.
F-Droid:
Google’s Android Developer Verification is root-privileged malware
F-Droid published a pointed critique of Google’s Android Developer
Verification (ADV) system, arguing it runs silently as a system service
with full root privileges — a trojan horse dressed as a security
measure. The core danger is definitional: Google’s developer terms
define “malware” as whatever Google decides it means, giving them
unilateral power to globally block software they dislike, including
ad-blockers or F-Droid itself. The program activates September 30 in
initial regions; the EFF, FSF, and dozens of organizations have signed
opposition.
CVE-2026-31694:
FUSE out-of-bounds write gives unprivileged root on most Linux
distros
A missing bounds check in fs/fuse/readdir.c lets an
attacker with a user-mountable FUSE filesystem write 24 controlled bytes
past a kernel page boundary, corrupting the /etc/passwd
page-cache copy to add a passwordless root entry. Highly accessible via
two paths: systems with fusermount3 (Ubuntu, Fedora, Mint,
GNOME desktops) or systems allowing unprivileged user namespaces (Debian
11+, Arch, RHEL 9, Fedora). Affects Linux 6.16 through the April 2026
fix. Patch if you haven’t already.
SCOTUS
strips FTC independence — and the EU–US data transfer framework
collapses
The Supreme Court’s Trump v. Slaughter ruling, applying the
unitary-executive theory to strip the FTC of independent status, has
knocked out the legal foundation of the EU–US Data Privacy Framework. EU
regulators cited FTC independence 259 times in the current agreement;
without it, the justification evaporates. Standard Contractual Clauses
and Binding Corporate Rules are also at risk, since both depend on
impact assessments that assumed independent US oversight. noyb has asked
the European Commission to repeal the framework and plans to file for
annulment at the CJEU — a 2–3 year process. Practically every major US
tech service with EU users is exposed.
Zig
splits package management out of the compiler entirely
As of June 30, all package management in Zig has moved from the
compiler to the build system’s maker process. Fetched
packages now live in a local zig-pkg/ directory next to
build.zig (enabling offline, self-contained tarballs), a
new --fork=[path] flag lets you substitute any dependency
across the tree for testing without touching lock files, and PM bugs can
be patched without rebuilding the compiler. A clean architectural
separation that makes the dependency workflow significantly more
ergonomic.
Box3D:
Erin Catto open-sources a 3D physics engine built on Box2D’s
foundations
The creator of Box2D has released Box3D, a 3D physics engine written
in C17 with the same C-API philosophy as its 2D predecessor. New
capabilities: triangle-mesh and heightfield collision, multi-threading,
double-precision positioning for large worlds, and improved continuous
collision detection. Currently alpha, but already used in The Legend
of California and s&box. Released open-source with backing from
Kintsugiyama studio.
Asahi
Linux 7.1: custom video decoder firmware, M3 audio, macOS 27 boot
fixes
Asahi’s 7.1 report covers several milestones. macOS 27’s new firmware
silently broke Asahi from the boot picker (a new APFS bootable-flag
requirement), now fixed in the installer and a standalone tool. M3 chips
gain speaker/headphone audio and CPU frequency switching. Most notably,
rather than continuing to reverse-engineer Apple’s proprietary AVD
firmware, the team built their own custom video decoder firmware —
enabling a V4L2 driver with 4K AVC support and a roadmap to VP9, HEVC,
and AV1. m1n1 1.6.0 now requires Rust and lays groundwork for M4 and A18
Pro.
Linux & Infrastructure
Home
Assistant 2026.7: automations that speak your language
The flagship feature is “purpose-specific automations” graduating
from Labs: instead of picking triggers and entity states, you describe
intent in natural language (“when the bedroom drops below 18°C, turn on
the heating”). The activity logbook is replaced by a redesigned vertical
timeline feed with grouped entries, colored state indicators, and cause
context. Also: an Update All button with grouped categories, a ZHA
device-management overhaul, Raspberry Pi firmware updates from Settings,
and 10 new integrations including Dropbox backup.
Tangled
CI runs each workflow in an isolated NixOS microVM
Tangled’s spindle CI now uses QEMU-based microVMs per workflow:
lightweight (no BIOS, no PCI bus, virtio-only), fast-booting, and
configured directly via NixOS YAML so you can declare services like
PostgreSQL that activate before steps run. A guest agent called
“shuttle” dials back over vsock, never needing SSH or network access to
the host. Built dependencies push automatically to a bidirectional Nix
cache, making subsequent runs fast.
The
Dendritic pattern: a scalable architecture for complex Nix flakes
A two-year distillation of NixOS daily-driving into a documented
flake architecture called “Dendritic.” Rather than prescribing a fixed
structure, it defines composable “aspects” — design patterns (simple,
multi-context, inheritance, conditional, collector, factory) built on
top of flake-parts. It targets the common pain point of flakes that
start clean and become unmaintainable as hosts and users multiply.
Ambience
v1.0: a condition-based scene engine for Home Assistant
Ambience is a HACS-installable HA integration that replaces
trigger-heavy automations with a declarative model: define scenes for a
room (“Movie time”, “Room is empty”) and the conditions each requires
(“Projector on”, “Daytime”, “Person present”). Ambience evaluates all
conditions continuously and applies the best-matching scene
automatically. v1.0 adds a scene-management panel, a built-in
trace/simulator for debugging, and conflict-free single-winner
selection.
Oomwoo:
an open-source, locally-operated DIY robot vacuum with Home Assistant
support
MakersPet has published Oomwoo, a fully open-source robot vacuum —
hardware schematics, firmware, and assembly instructions all public. A
Raspberry Pi handles autonomous floor mapping via distance sensing, it
operates entirely offline with no cloud dependency, and integrates
natively with Home Assistant. A rare project in a space dominated by
locked-down proprietary platforms.
A new entrypoint field underscoreHeadersStrategy lets
Traefik delete or reject inbound headers containing underscores before
routing. The attack it prevents: Go treats X-Auth-User and
X_Auth_User as separate headers, but Python/WSGI backends
normalize both to the same variable — so an attacker can inject
X_Auth_User to bypass middleware that only checks
X-Auth-User. Setting this to delete on
public-facing entrypoints is a low-cost, high-value hardening step for
any self-hosted reverse proxy.
Also today
- Hyprland & desktop
-
HyprMod v0.4.0 adds CLI profile switching
(
hyprmod profile apply/next/previous), bindable to
keybinds, plus multi-layout management — GitHub
· r/hyprland
-
GloView — a native C++ macOS Mission Control-style workspace overview
plugin for Hyprland — r/hyprland
-
Bezel — a Rust Wayland daemon adding edge/corner trackpad gestures
across Hyprland, niri, Sway, and GNOME — r/hyprland
-
One
hyprland.lua branching on /etc/hostname to
apply per-host settings across a desktop and a laptop — r/hyprland
- NixOS resources
-
All official Nix docs (nix.dev, reference manual, NixOS + NixPkgs
manuals) compiled into a single EPUB with working cross-links for
e-readers — r/NixOS
- Self-hosted
-
Release-Argus — an underrated Go/React service that watches GitHub repos
for new releases and fires Gotify/Slack/webhook alerts — GitHub · r/selfhosted
-
GeoPulse v1.33.0 — self-hosted Google Timeline alternative with Immich
integration and AI chat, <100MB RAM — GitHub · r/selfhosted
-
PulseWeaver — closed-door forward-auth that hard-blocks unknown IPs
before they ever reach a service’s login page — r/selfhosted
-
PSA — HA 2026.7.0 breaks the official NGINX add-on with a “Missing Host
header” error; workaround is to disable QUIC — GitHub
issue · r/homeassistant
A residential building destroyed by
the Russian missile attack in Kyiv, July 2. Photo: State Emergency
Service of Ukraine
Aker-sjef Øyvind Eriksen og Cognite-gründer John Markus Lervik etter
salget. Foto: E24
Delegates in ethnic minority
costumes leave the closing session of China’s National People’s Congress
in March 2026. Photo: Tingshu Wang/Reuters
Protesters gather outside a building
believed to be occupied by undocumented foreign nationals in
Johannesburg. Photo: Emmanuel Croset/AFP
Police escort Nord Stream suspect
Serhii K. in Karlsruhe, November 2025. Photo: Reuters
A firefighter at the site of a
collapsed building in La Guaira, Venezuela. Photo: Reuters
Fire at the LUKOIL refinery in
Kstovo, Russia, after a Ukrainian drone strike, July 2. Photo:
Militarnyi
Perception vs. reality in
AI-assisted development.
The new purpose-specific automation
editor describes triggers by what they do rather than their underlying
entity states.
The Ambience scene management panel
showing rooms, scenes, and active conditions.
The Oomwoo open-source robot
vacuum reference design, top view.