Russia hammers Kyiv on the eve of the NATO summit — its own refineries ablaze behind the front — while Iran’s IRGC forces ships back through Hormuz as millions bury Khamenei.

Russia strikes Kyiv with 419 aerial assets on eve of NATO summit; not one ballistic missile intercepted

Russia launched a massive overnight assault on July 5–6, firing 419 aerial assets — including 29 ballistic missiles — at Kyiv and surrounding oblasts. Ukraine’s air defences downed 363, but failed to intercept a single ballistic missile, confirming an acute shortage of Patriot interceptors capable of engaging ballistic targets. At least 21 were killed and 46 injured in the capital; a nine-storey residential block in Podilskyi district partially collapsed with people trapped, and six oblasts lost power. Russia also hit the Vizar plant, a Neptune anti-ship missile producer.

It was the second mass strike on Kyiv in under a week. Zelensky had forecast it — “This is typical of Putin: right after America’s Independence Day and before the NATO summit in Ankara” — and reported Russia had fired roughly 2,200 strike drones, 1,730+ glide bombs and 106 missiles in the past week alone. Kyiv has declared July 7 a Day of Mourning; intelligence warns another mass strike is already being prepared.

Ukrainska Pravda: air defences fail on ballistics · Ukrainska Pravda: 363 of 419 downed · AP News · Kyiv Independent · Al Jazeera · BBC · The Guardian

NATO opens in Ankara — as a cash machine

Ankara prepares to host NATO for the first time in 22 years. Photo: Al Jazeera

The first NATO summit hosted by Turkey in 22 years opens in Ankara, with Trump arriving to enforce the spending pledges he extracted last year and to meet Zelensky on the sidelines on July 8. His strategy has crystallised into a transactional two-track: demand allies hit 5% of GDP or lose US backing, while reorganising the Pentagon to prioritise foreign military sales — Hegseth has explicitly tied higher spending to faster US arms deliveries. Politico calls it turning the alliance into a cash machine; a planned Tomahawk transfer to Germany was cancelled over escalation fears, leaving allies pushed to buy American without the long-range capability they want.

Two counterweights to the transactional frame: the FT reports Russia refuses substantive talks before February 2027, banking on US pressure to squeeze Kyiv — even as VP Vance judged Russia’s offensive capability “approaching zero.” And Ukraine is arriving not just as a buyer but a seller, hoping to sign defence deals with at least seven NATO states, offering hard-won expertise in drones, radar and battlefield AI. Sharpening it all, The Telegraph reports a US warning that Russia is planning an attack on Poland to test the alliance’s resolve.

NPR · Politico: cash machine · Ukrainska Pravda: Russia won’t negotiate before 2027 · Ukrainska Pravda: Vance · Guardian: seven-nation drone deals · Telegraph: Poland warning

Iran buries Khamenei as the IRGC seizes Hormuz — and the heir stays hidden

President Pezeshkian and officials at the farewell ceremony for Ayatollah Khamenei, Tehran, July 5, 2026. Photo: Reuters

Millions filled Tehran for the funeral procession of assassinated Supreme Leader Ali Khamenei, chanting calls for Trump’s death in what The Guardian called “an extraordinary exercise in mass grief and political theatre.” Iran is using the six-day mourning period to assert control over the Strait of Hormuz — moving from warnings to action, forcing at least eight ships to turn back Saturday with more on Sunday, and competing with Oman for authority over the world’s most critical oil chokepoint. Quranic recitations doubled as coded diplomacy: Hezbollah’s name-verse pointedly recited for Lebanese delegates; the UAE boycotting entirely.

The succession, though, is not going to script. Designated heir Mojtaba Khamenei was absent from all six days — reportedly because he sustained severe injuries, including facial disfigurement, in the February strike that killed his father. Three brothers attended; Mojtaba did not, and no official medical statement has been issued, undermining the regime’s choreographed continuity narrative at the most fragile transition Iran has faced in decades.

Guardian: Hormuz control · Guardian: procession · IBTimes: where is Mojtaba? · Reuters · Al Jazeera live

Indicator	Value	Change
S&P 500 (f)	7,559.75	+0.42%
Dow 30 (f)	53,245	+0.12%
Nasdaq (f)	29,856.75	+1.02%
Russell 2000 (f)	3,018.6	+0.15%
VIX	16.37	+3.54%
Gold	4,173.8	+1.17%
BTC	$63,013	+0.09%
EUR/USD	1.1422	-0.13%
USD/NOK	9.8321	+0.01%

Gold +1.17%, VIX +3.54% — a geopolitical risk premium building: the 68-missile Kyiv strike, Iran forcing vessels back through Hormuz, and Khamenei’s succession vacuum all active at once.
Oil absent from today’s data — watch OPEC+’s 188,000 bpd increase (announced today) to weigh on crude this week (see Investigations).

World

Israel’s government vows to defy its own Supreme Court — a constitutional first

The Netanyahu government has formally announced it will not comply with a High Court ruling — the first time in the state’s history it has publicly vowed to disobey its highest judicial authority, setting up a direct executive–judiciary confrontation after years of judicial-reform tension. On the same day, Netanyahu publicly claimed some Lebanese Christian villages have asked to be “annexed” by Israel, crossing a new rhetorical threshold, while around 100 Israeli settlers were detained trying to cross into the Syrian-controlled side of Mount Hermon. In the occupied West Bank, a Palestinian infant died after Israeli forces blocked access to urgent medical care; a 16-year-old boy was shot dead, and two more Palestinians were killed in Gaza.

Times of Israel: court defiance · Times of Israel: Lebanon annexation · Jerusalem Post: Mount Hermon · Al Jazeera: West Bank

China fires nuclear-capable missile into the South Pacific from a submarine

China launched a long-range ballistic missile with a dummy warhead from a nuclear-powered submarine into the South Pacific, giving New Zealand only hours’ notice and drawing condemnation from Australia, New Zealand and other Pacific-rim states; Australia called it “destabilising to the region.” It is China’s second such Pacific test since 2024, and it landed on the same day Australia and Fiji signed a mutual-defence treaty — the “Ocean of Peace” alliance — as Canberra deepens Pacific security ties.

The Guardian · 1News NZ

Super Typhoon Bavi — 2026’s third Category 5 — hits US Pacific islands as a heat dome kills 25 at home

Super Typhoon Bavi made landfall on Rota in the Northern Mariana Islands with sustained winds near 290 km/h and gusts to 350 km/h, becoming the third Category 5 typhoon of 2026 — a record pace scientists tie to warming Pacific sea-surface temperatures. Across the mainland US, a heat dome pushed temperatures above 38°C in more than 20 states over the Independence Day weekend, killing at least 25, while wildfires in Colorado hampered firefighters amid thunderstorms and high winds.

BBC: Bavi · Yale Climate Connections · Guardian: US heat · NPR: Colorado fires

Wildfire forces 10,000 to flee southern France as Le Pen awaits her verdict

A fast-moving wildfire tears through southern France near the Spanish border. Photo: Al Jazeera

A fast-moving wildfire has burned more than 1,500 hectares in southern France near the Spanish border, forcing around 10,000 people to evacuate; authorities are assessing whether it could disrupt the Tour de France. On the same day, a French appeals court delivers its verdict on Marine Le Pen’s embezzlement conviction — a ruling that determines whether she can stand in the 2027 presidential election she currently leads in polls. If the ineligibility clause is upheld, she is barred, and the shape of French politics for the next five years is set.

Al Jazeera: wildfire · BBC: Le Pen verdict

Venezuela earthquake death toll passes 3,000 amid anger at the response

A sports stadium in La Guaira converted to a shelter for thousands displaced by the June 24 earthquakes. Photo: Al Jazeera

Interim president Delcy Rodríguez has defended her government’s handling of the June 24 twin earthquakes as the confirmed toll surpassed 3,000. Families are still being pulled from the rubble — a 10-year-old girl survived 32 hours trapped, sustained on ketchup and cheese — while a stadium in La Guaira has been converted to house thousands of the displaced. Rodríguez vowed the country would not descend into unrest despite widespread anger at the official response.

The Guardian · Al Jazeera · BBC

Also today

NATO’s host, Turkey: Deported a young Russian woman persecuted for an anti-war inscription, and blocked a cruise ship carrying 2,000 LGBTQ+ passengers from docking, citing “moral values” — both awkward against its alliance status — Nasha Niva · Guardian: cruise ship
Africa: US sanctions Rwandan firms over the conflict-minerals trade funding M23 in eastern DR Congo — Al Jazeera; Tuareg fighters release footage claiming to have shot down a Russian Africa Corps Mi-24 in Mali — Al Jazeera
Elsewhere: An Albanian court freed protesters detained over a Jared Kushner-linked resort development — Al Jazeera; FIFA reversed US striker Folarin Balogun’s ban after Trump personally called Infantino; Belgium is “astonished” — NPR · Al Jazeera

Ukraine

The oil campaign bites: Yaroslavl ablaze, and a fuel crisis across nearly all of Russia

Black smoke rising from Gazprom Neft’s Moscow refinery after an earlier strike. Photo: Getty Images

Ukrainian drones set a refinery in Yaroslavl on fire deep inside Russia, part of a campaign now hitting refineries at a record pace — CNN reports the sustained strikes on terminals, refineries and depots have produced a systemic fuel crisis affecting almost every Russian region. Ukraine’s Navy says Russia’s Black Sea Fleet no longer risks open-sea deployments even to launch Kalibrs, now fired from Novorossiysk port; Zelensky framed it bluntly as “Russia has lost the Black Sea.” Moscow’s response — recruiting Gazprom employees into mobile fire-defence groups — exposes its competing force-generation strains.

CNN: fuel crisis · RBC Ukraine: record pace · NV Ukraine: fleet avoids sea · United24: “lost the Black Sea” · CEPA: running on empty

Crimea declares an economic emergency as strikes push it toward isolation

Russia’s occupation authorities in Crimea have declared an economic state of emergency and are cutting the mainland rail link from 18 to 7 trains a day from July 8, with the Bakhchysarai–Inkerman-1 section suspended indefinitely. Sevastopol was left without electricity after a Ukrainian drone strike on energy infrastructure; drone forces hit 10 electrical substations across the peninsula between July 1–5, and fuel in Sevastopol has reached 290 rubles/litre (~$3.30/L). The cumulative damage to power, logistics and fuel is pushing the peninsula toward functional isolation.

Newsweek · Ukrainska Pravda: Sevastopol dark · RBC Ukraine

The Kostyantynivka cognitive war escalates: a fake ceasefire, floated straight to Trump

The Kremlin’s Kostyantynivka information operation entered a new phase. Putin used his July 4 call with Trump to personally claim Russian forces seized the city and will “certainly” take the rest of the Fortress Belt — contradicted by ISW, Ukrainian commanders and Russian milbloggers alike, who confirm fighting continues throughout the city. Russia then proposed a staged six-hour “shelling ceasefire” to retrieve Ukrainian KIA, which Kyiv rejected; ISW assessed the offer was designed to be refused while any lull consolidated infiltrated positions under humanitarian cover. The MoD’s accompanying flag-raising footage is, ISW says, consistent with a now-established pattern of likely AI-altered propaganda.

NV Ukraine: ISW on exaggerated gains · NV Ukraine: video disputes claim

Russia routes Japanese jet fuel via South Korea to survive the refinery campaign

Refinery storage tanks in Japan, with Mount Fuji beyond — the origin of aviation fuel now being routed covertly to Russia. Photo: United24

Russia is routing 200,000 barrels of Japanese jet fuel via ship-to-ship transfer near South Korea’s port of Yeosu — apparently one of the first foreign aviation-fuel deliveries to Russia since the full-scale invasion. The roundabout route (Chiba → South Korean intermediaries → ship-to-ship transfer → undisclosed Russian destination) is built to obscure the transaction from sanctions enforcement. The context is acute: Ukraine has struck at least 24 of Russia’s 33 largest refineries across 158 attacks, forcing Moscow to fill domestic shortfalls through covert third-country channels.

United24 · r/geopolitics

Also today

Russia is trafficking East Africans to the front via fake job offers and student visas — Ukrainian intelligence estimates 27,000+ foreign fighters from 130 countries since 2022, with 18,500 more targeted for 2026 — iNews
The seized shadow tanker Smyrtos — 101,400 tonnes of Russian Urals crude — sits in legal limbo off Dorset as the UK weighs auctioning its oil for Ukraine — iNews
Monaco issued an Interpol Red Notice for Anastasiia Berezovska, 39, over the June 30 parcel bombing that wounded a Ukrainian-born oligarch and two others; she had disguised herself as a man — DW

Investigations

OPEC+ raises output — but the barrels can’t get out

Seven OPEC+ members approved a 188,000 bpd increase for July, yet actual supply has collapsed: since Iran effectively closed Hormuz in late February, real OPEC+ output has fallen from 42.77M to 33.19M bpd even as quotas rose. Saudi Arabia, Iraq and Kuwait all depend on the strait for exports, making the production decisions largely academic for now — best read as positioning for post-conflict normalisation, not a response to current conditions. The real risk sits downstream: when the strait reopens, the accumulated quota increases could flood the market and whipsaw sentiment from shortage fear to surplus fear.

SpinDepth: analysis · Al Jazeera: the announcement

Canadian intelligence: Iran ‘realistically possibly’ directed Toronto shootings via Kata’ib Hizballah

A partly-redacted assessment from Canada’s Integrated Threat Assessment Centre, obtained by Global News, judges it a “realistic possibility” that Iranian intelligence directed attacks on Jewish, Israeli and Iranian community targets in Canada through criminal proxies. It names Mohammad Baqer Saad Dawood Al-Saadi, a Kata’ib Hizballah member US prosecutors allege directed operations in Toronto — including a synagogue shooting and a March 2026 shooting at the US Consulate. The cautious language reflects redacted sourcing, but the incidents mark an escalation from Iranian proxy harassment to direct kinetic attacks on allied soil.

Global News · r/geopolitics

Homeland Security Brief, June 2026: LinkedIn spies, fabricated protests, and Chinese ‘police stations’ in France

OPFOR Journal’s monthly brief documents four active threat streams: Chinese operatives posing as HR managers on LinkedIn to recruit US clearance holders (the FBI dismantled 13 AI-generated fake consulting sites used as cover); Chinese generative-AI disinformation fabricating fake grassroots US protests against data centres and tariffs; a 12-year Iranian sanctions-evasion network transshipping US networking gear to Iran’s nuclear and defence agencies via shell companies, run by a dual US-Iranian citizen laundering $10M a year; and the Iranian Handala group claiming breaches of FBI drone systems and California water utilities. France separately shut down nine illegal Chinese “police stations” on its territory.

OPFOR Journal · r/geopolitics

Tech

Claude’s macOS app bundles a full Ubuntu VM — not a container, not a sandbox

Inside the VM bundle: Ubuntu root filesystem, EFI firmware, a scratch disk, and virtual networking. Diagram: The First Derivative

A developer reverse-engineered Claude’s macOS app-support folder and found a 10GB Ubuntu ARM64 cloud image booted via Apple’s Virtualization.framework — a genuine full VM, not a Seatbelt sandbox or container. The evidence: a machineIdentifier bplist, a dedicated virtual MAC address and IP, EFI firmware, and a separate sessiondata.img scratch disk, with the Linux Claude binary running inside. The design insight is the point: autonomous agent operation is made safe not by policy but by engineering — worst-case actions are confined to a disposable VM that can’t touch the host or user credentials.

The First Derivative · r/ClaudeAI

Prolly trees make databases git-versionable at MySQL-level performance

Prolly trees (probabilistic B-trees) use hash-based structural determinism: any two trees with identical content are structurally identical regardless of insertion order. That property is what lets Dolt, a git-like SQL database, efficiently diff snapshots and branch/merge database state — achieving performance comparable to standard MySQL while enabling full version-control semantics. LWN walks through the data structure and how Dolt puts it to work.

LWN · Lobsters

Cascading recovery loops: how service recovery amplifies distributed-systems failures

Amplified recovery — the feedback loop where recovery work exceeds capacity and causes perpetual instability. Chart: charap.co

When a dependee recovers from failure it flushes a backlog downstream — but that recovery work often needs disproportionately more resources than steady-state load, pushing dependents into failure and triggering their own amplified recoveries. Through simulation the article formalises this “amplified recovery” as a metastability trap where the system never stabilises. The fixes require designing for additive (non-amplifying) recovery, budgeting recovery work over time, and provisioning end-to-end capacity for recovery load — not just normal load.

Metastability in Recovery · Lobsters

A CSS-only attack leaks full text-node content — no JavaScript needed

Bench Press: leaking text nodes with CSS alone. Image: pspaul.de

A new exfiltration technique bypasses Content Security Policies entirely, using CSS animation timelines, custom properties and font rendering to measure element heights and deduce characters one by one, then leak them via image requests — no JavaScript at all. It’s currently Chromium-only and constrained by floating-point precision, but it demonstrates that CSS alone has enough power to leak sensitive page content in hardened environments.

Bench Press · Lobsters

New attack recovers verbatim training data from finetuned models using only API logits

Contrastive Decoding Diffing (CDD) extracts exact implanted content — drug names, vote counts, procedural details — from narrowly finetuned LLMs using only grey-box logit access, no weights or activations. By diffing the logit distributions of a base model and its finetuned variant, CDD outperforms white-box methods that require direct weight access, runs ~170× faster than the previous SOTA, and works across four architectures from 1B to 32B parameters. The implication cuts both ways: any API endpoint for a finetuned model is potentially auditable for its training data — useful for accountability, alarming for privacy.

arXiv · r/MachineLearning

The planner/implementer split becomes AI coding’s practical pattern

With Fable’s subscription window closing July 7, the r/ClaudeAI community has converged on a clear architecture: Fable as a fast planning and review layer that drops structured task specs, with Opus as the implementation workhorse executing them in parallel. The value isn’t raw capability — users report Fable is only marginally smarter than Opus — but speed, long-project context management, and not burning Opus compute on planning overhead. The pattern is now showing up in tooling: Storybloq, a Claude Code session manager, stores tickets, handovers and lessons in a committed .story/ directory and exposes 53 MCP tools, with /story auto driving autonomous ticket progression through plan → implement → test → review → commit — solving the friction of every new session starting cold.

r/ClaudeAI: Storybloq + Fable · GitHub: Storybloq · r/ClaudeAI: vibe coding

Rayfish: a serverless P2P VPN on Iroh/QUIC — no control plane, no account

Rayfish is a peer-to-peer VPN built on Iroh (n0’s QUIC-based P2P transport) that needs no coordination server: network state is a signed record served by members themselves. Unlike Tailscale, whose control plane is always in the loop, Rayfish’s coordinator is only needed to admit new members via one-time invite codes — once everyone’s in, it can go offline. Iroh handles NAT traversal and hole punching, with encrypted QUIC relay fallback; the post includes a direct Tailscale-vs-Rayfish comparison table.

Rayfish blog · Lobsters

Also today

Languages & tooling: The wip crate emits compiler warnings — not errors — for incomplete Rust code paths; they don’t block development but fail CI, keeping WIP code off main — blog.dureuill.net · Lobsters; A practitioner’s video retrospective on three years and 100k lines of production game code in Zig — where language friction actually accumulates outside toy projects — YouTube · Lobsters; Fetching dependencies directly from VCS commit hashes (Go’s model) closes the source-to-published-package attack gap; new ecosystems should adopt it by default — arp242.net · Lobsters
AI: Competence Gate — a 10MB LoRA for Qwen3.5-4B reads a hidden-layer competence signal to route each query to answer/search/RAG/refuse (AUROC 0.868); a when-to-defer tool, not a fabrication firewall — HuggingFace · r/MachineLearning; A minimal-pair study finds code cleanliness doesn’t change whether agents succeed, but cuts token use 7–8% and file revisits 34% — reframing code hygiene as operational cost, not task outcome — arXiv · HN; An EMNLP reviewer ran their full review pool through Pangram and found every paper flagged as AI-written — one anecdote, but a striking one at a premier NLP venue — r/MachineLearning
Ideas & essays: “The Corpus Royalty” — AI labs should pay a fixed share of revenue into a public fund distributed per citizen, framed as collective restitution rather than individual copyright — wysr.xyz · HN; “A Speed Limit for Computers” — an Ivan Illich take arguing a deliberately “restrained class of computer” could expand access the way an e-bike does — caolan.uk · Lobsters; Lehmer coding — encoding arbitrary bits in the order of any uniquely-orderable sequence (Exif tags, CSS rules, API keys), leaving content unchanged; useful for watermarking, steganography, exfiltration — thoughts.hmmz.org · Lobsters
Signals & surveillance: Is Starlink a passive radar constellation? A two-hour technical investigation — with one piece of negative evidence: the US is planning separate dedicated radar satellites — YouTube · Lobsters

Long COVID & ME/CFS

IgG immune complexes from post-COVID ME/CFS fragment mitochondria in endothelial cells

Patient IgG from post-infectious and post-COVID ME/CFS induces mitochondrial fragmentation in human endothelial cells within 16 hours — without reducing ATP production. The effect requires intact IgG, disappearing when the antibody is cleaved into Fab and Fc fragments, which points to immune-complex-driven pathology rather than a receptor-specific antibody effect (tested in 39 ME/CFS + 15 post-COVID ME/CFS patients vs. 41 healthy controls). For a patient whose IgG pool is dominated by GPCR autoantibodies maxed across six receptors, this mechanistically links the elevated IgG to vascular pathology: endothelial mitochondrial stress complements the established microclot, blood-viscosity and endothelial-senescence findings. It also adds support for IgG-depleting treatments (daratumumab ResetME, TURN-LC, EXTINCT) — despite the two negative immunoadsorption RCTs, the endothelial-stress pathway may require sustained rather than episodic IgG reduction.

Prusty et al., Brain, Behavior, & Immunity – Health, Feb 2026

Glymphatic waste clearance is impaired in ME/CFS — and tracks sleep and cognition

DTI-ALPS MRI, which images fluid movement along perivascular spaces, found significantly reduced glymphatic function in ME/CFS across 58 participants (31 patients, 27 controls; p=0.014), with right-hemisphere lateralisation (p=0.009). A worse glymphatic index correlated directly with sleep-disturbance severity and impaired concentration — the first direct measurement of glymphatic dysfunction in ME/CFS. Because the glymphatic system clears metabolic waste mainly during slow-wave sleep, impaired clearance sets up a self-reinforcing cycle (waste → neuroinflammation → worse sleep). The relevance to PEM is indirect, but it adds weight to treating sleep quality as a primary target, and is consistent with the brain glucose hypometabolism seen in the PEM subgroup (Ganesh 2026).

Marshall-Gradisnik et al., Frontiers in Neuroscience, Jul 2026 · Griffith News

Tracking

RECOVER-AUTONOMIC IVIG — ivabradine arm negative (established); IVIG arm (Gamunex-C) unpublished, full paper expected “in coming months” per the June 2026 update.
ANKTIVA COVID-4.019-Long — trial window closed July 2026; no results as of July 6.
ANKTIVA INTERRUPT_LC (UCSF) — ongoing through October 2026; no interim data.
ADDRESS-LC (bezisterim) — full enrollment confirmed May 2026; topline expected Q3 2026.
REVERSE-LC (baricitinib) — 17 sites, 550 adults enrolling; neurocognition data expected Nov 2026.
Rapamycin Phase 2 (Mount Sinai + Simmaron) — ongoing; results expected Nov 2026.
Sipavibart RCT (Klimas/NSU) — ongoing; primary completion Dec 2026.
Daratumumab ResetME (Haukeland) — recruiting; facing a funding gap (~5.5M NOK short as of mid-2026).
TURN-Long COVID (immunoadsorption, Amsterdam UMC) — recruiting; estimated completion Dec 2027.
EXTINCT post COVID (immunoadsorption, MHH Hannover) — enrollment complete; no results published.
WGS severe LC (Brodin/Karolinska) — no preprint; May 2026 PolyBio symposium data still not posted.
GC B-cell dysregulation (Locci/Penn/PolyBio) — no preprint; EBV-within-SARS-CoV-2 finding still unconfirmed.
SHIELD triple antiviral (Putrino/Mount Sinai) — enrolling; no results.

cd ~/repos/josse-posten && claude --resume 35ce2500-8e78-4733-8219-af7bfb2a0448