The US–Iran war claims its first American dead as Kyiv absorbs one of its heaviest barrages — and Ukraine answers with the deadliest strikes inside Russia in two years.

US–Iran War, Day 8: Two US Soldiers Killed in Jordan as Iran Fractures Internally

Satellite image showing smoke near an oil facility in Kuwait’s Ahmadi governorate after an Iranian strike, July 18. Photo: Copernicus Sentinel-2 / Reuters

Two US service members were killed and one remains missing after Iran struck Jordan’s Muwaffaq Salti Airbase with ballistic missiles and drones — the deadliest Iranian attack on US forces since the renewed conflict began. Iran also fired drones at Gulf bases in Kuwait and Bahrain, and its foreign ministry declared the memorandum governing the conflict “suspended.” The US answered with an eighth consecutive night of strikes on Sirik and Hajiabad in Hormozgan. Trump called the deaths “a sad thing” while framing the strikes as punishment.

Inside Iran, the strain is showing. Supreme Leader Khamenei publicly called Trump’s signature “worthless,” and Tehran erected a “blood for blood” billboard depicting the Trump family in coffins. CNN reports hardliners now warn that continued US pressure — and the prospect of a negotiated truce — risks provoking an internal “coup,” a sign of deepening fractures between moderates and hardliners over how to respond.

Guardian · Al Jazeera: eighth night · NPR · BBC · AP · Reuters: Khamenei · CNN: coup warning

Russia Pounds Kyiv in One of Its Largest-Ever Ballistic Barrages

Smoke blankets Kyiv following one of Russia’s largest ballistic missile attacks on the capital, July 19. Photo: Kyiv Independent

Overnight July 18–19, Russia fired 41 missiles and 125 drones at Ukraine with Kyiv as the primary target — a five-hour raid that included 25 Iskander-M ballistic missiles and 10 Zircon hypersonic anti-ship missiles alongside Onyx and Kh-59/69 cruise missiles. Ukrainian air defenses intercepted 108 drones and 17 missiles, but 23 missiles and 10 drones struck 20 locations. At least one person was killed and 16 injured, with fires across six districts and the Lukianivska metro station closed. Zelensky called it one of Russia’s largest ballistic barrages on the capital and stressed critical shortages of Patriot interceptors.

Kyiv Independent · Guardian · Ukrainska Pravda: 41 missiles, 125 drones · Ukrainska Pravda: one killed · Al Jazeera

Ukraine Inflicts Its Deadliest Strikes Inside Russia in Two Years

Ukrainian drones obliterated Wildberries’ largest warehouse in Elektrostal, Moscow Oblast, and a second facility in Tambov overnight July 17–18, killing eight people and wiping out an estimated 7–15% of the retailer’s total warehouse capacity — projected losses up to $1.3B. Zelensky described the facilities as “major logistics hubs” supplying sanctioned components; Wildberries had been documented selling FPV drone parts. Oil depots at Noginsk and, on July 19, in Stavropol Krai were struck the same campaign, which is now reaching 500–700 km behind the front. (Maritime and frontline developments in Ukraine.)

BBC · CNN · NPR · ISW: July 18 · Ukrainska Pravda: losses over $1.3B · Meduza: sellers uncompensated

Zelenskyy Now Weighing Removal of Commander-in-Chief Syrskyi as Protests Enter Day Three

The FT and Bloomberg report Zelenskyy is actively considering replacing commander-in-chief Syrskyi if a suitable candidate emerges — a concrete step beyond earlier ambiguity as Kyiv’s protests entered their third consecutive day over last week’s abrupt dismissal of defence minister Fedorov. Zelenskyy held calls with corps commanders and spoke separately with Syrskyi, pledging army decisions would be “worked out.” Fedorov may return as a “miltech czar” coordinating drone and weapons development — a partial concession to protesters short of full reinstatement.

Bloomberg · Ukrainska Pravda: FT report · Ukrainska Pravda: protests day 3 · EuroMaidan Press: miltech czar · Mezha/Bukvy

Indicator	Value	Change
S&P 500	7,458	-1.01%
Dow 30	52,146	-0.77%
Nasdaq	25,520	-1.40%
Russell 2000	2,962	-0.42%
VIX	18.8	+12.19%
Gold	4,019	+0.67%
BTC	$64,654	+1.10%
EUR/USD	1.1438	0.00%
USD/NOK	9.65	0.00%

VIX +12.2% and equities down across the board (S&P −1.0%, Nasdaq −1.4%) as the US–Iran conflict escalates into its second week, with US soldiers killed at Jordan’s Muwaffaq Salti Airbase (see leader)
Gold +0.7% — safe-haven bid alongside the risk-off move in stocks

World

Hungary’s President Sulyok Steps Down After Opposition Parliament Forces His Removal

Hungarian President Tamás Sulyok has agreed to step down after signing a constitutional amendment passed by the Tisza-dominated parliament, citing a “serious loss of confidence.” Sulyok, a loyalist of Viktor Orbán, had until Saturday to comply with the removal measure. The move reflects the altered balance of power since Péter Magyar’s Tisza party rose to dominance, and strips Orbán of a key institutional ally.

Guardian · BBC · Telex

Germany’s Jens Spahn Resigns as CDU Parliamentary Leader Over Secret Surrogacy

Jens Spahn, a senior CDU politician and ally of Chancellor Friedrich Merz, has resigned as the party’s parliamentary group leader after it emerged he and his husband used a surrogate to have a child — a practice Spahn had previously derided as “renting wombs” and that is banned under German law. The scandal is a significant blow to CDU unity and exposes the party’s internal contradictions on social policy.

Guardian · BBC

Palestinian Teen Footballer Dies a Week After Israeli Settler Shooting in the West Bank

Mourners carry the body of 17-year-old Fadi al-Nassan during his funeral in Al-Mughayyir, east of Ramallah. Photo: AFP

Fadi al-Nassan, 17, died in the village of Al-Mughayyir east of Ramallah, a week after he was shot during an Israeli settler attack. His funeral drew large crowds. The killing comes amid what rights groups have documented as a surge in settler violence across the West Bank, intensifying since the Gaza conflict began.

Al Jazeera

Israel’s Knesset Dissolves, Snap Elections Called for October 27

Israel’s parliament has dissolved ahead of snap elections set for October 27 — the first since Netanyahu’s government pursued its controversial settlement expansion and military campaigns, and coming as the country remains engaged in Gaza and the West Bank under international pressure. Separately, Israeli officials floated surrounding a prison holding Palestinian detainees with crocodiles as a security measure — an idea drawing immediate condemnation and comparisons to Florida’s alligator-moat detention concept, and underscoring the increasingly extreme character of the security discourse.

AP: Knesset dissolves · WSET/Reuters: crocodile moat

Venezuela Earthquake Death Toll Surpasses 5,000; IMF Releases Emergency Funds

The death toll from last month’s twin earthquakes in Venezuela has passed 5,000, one of the deadliest natural disasters in recent Latin American history. The IMF has released emergency funds, and relief workers are still reaching thousands of displaced families — including some 3,000 children. The scale is straining Venezuela’s already-fragile state infrastructure.

Al Jazeera · The Hindu

Cuba’s Power Grid Collapses Three Times in Ten Days as US Oil Blockade Tightens

Cuba’s national grid has failed three times in the past ten days, deepening a crisis driven by a six-month US oil blockade. With fuel scarce, the antiquated grid cannot meet basic demand; tempers are fraying and social unrest is growing. The Guardian reports the island is edging toward societal breakdown, with economic paralysis and political pressure intensifying in tandem.

Guardian

Wildfire Smoke Chokes the US Northeast as Norway’s Drammen Fire Becomes Its Largest on Record

Dangerous air-quality warnings held across the US Northeast and Midwest as Canadian wildfire smoke drifted south, compounded by flash floods from severe thunderstorms hitting New York and other cities. Trump repeated tariff threats against Canada over the fires; Ontario’s premier called the criticism “absolutely unacceptable,” saying both countries bear equal responsibility for climate-driven conditions. In Norway, the fire near Drammen has grown into the country’s largest on modern record, burning more than 100 homes and reshaping emergency-response priorities.

Reuters: Ontario evacuations · NPR · Guardian · BBC · AP: Norway’s largest fire

Andrew and Tristan Tate Arrested in Miami; Britain Seeks Extradition on Rape and Trafficking Charges

The Tate brothers were arrested in Miami by US Marshals on a sealed warrant Saturday, after the UK Crown Prosecution Service added charges including rape, sex trafficking, “extreme pornography,” assault, and possession of indecent images of a child. Britain is seeking their extradition; their lawyer says they are innocent. The brothers had previously been subject to Romanian legal proceedings.

Guardian · Al Jazeera · NPR · BBC

ICE Agents Kill Two Men in One Week, Reigniting Debate Over Militarized Deportations

Two men have been fatally shot by ICE agents within a single week. In one case, Lorenzo Salgado Araujo, 52, was shot while driving to work in Houston with his brother and two others when agents began tailing his vehicle. The killings have renewed intense criticism of the Trump administration’s militarized approach to immigration enforcement.

Guardian

Also today

UK: incoming PM Andy Burnham will scrap Starmer’s digital ID scheme and move to abolish the technology department (DSIT), drawing fierce backlash from MPs and industry over AI-policy momentum — Guardian: digital ID · Guardian: tech dept
Latvia’s PM confronts Bulgaria and Greece over their resistance to tighter EU sanctions on Russia: “Do you want money or peace?” — Novinite
China declines to supply equipment for Russia’s planned Northern Sea Route Arctic fleet — a quiet limit on Beijing’s support — Kyiv Post
Bank of England will no longer accept coal-linked bonds as loan collateral, a win climate campaigners call significant — Guardian

Ukraine

Maritime Campaign Cascades: Russia Evacuates Crimea Families, Kazakhstan Bans Russian Wheat

Ukraine has now struck 172 Russian naval vessels in 13 days, and the cumulative pressure is turning systemic. Russia has redeployed up to 200 frontline Rubikon drone crews and an entire Black Sea Fleet anti-aircraft regiment to defend ships, and BSF commander Pinchuk has ordered evacuation lists compiled for military families in Sevastopol. Crimea’s fuel supply chain is under severe strain — strikes on 100+ river-sea tankers are cutting deliveries to a peninsula needing ~5,000 tons/day for civilian use alone — and grain analysts estimate Russian wheat exports could fall 5–10M tons short if Azov Sea shipping stays disrupted. Kazakhstan separately banned all Russian wheat imports this week, tightening the vise from within Russia’s own trade bloc.

ISW: July 18 · Reuters: farm exports squeezed · r/UkrainianConflict: 172 vessels · r/UkrainianConflict: Kazakhstan wheat ban

Frontline: Gerasimov’s Claims Debunked as Russia Loses Ground Across the Theater

In a choreographed July 18 meeting, Gerasimov claimed Russian forces had entered Dobropillya, reached within 5 km of Kramatorsk, and advanced into Oleksiyevo-Druzhkivka and Hannivka — ISW found no corroborating evidence for any of it. Russian forces have in fact been losing roughly 1.6 sq km per day since July 1. Ukrainian troops cleared infiltrators near Kharkiv and retook Kupyansk-Vuzlovyi south of Kupyansk; the 425th Skala Regiment conducted clearing operations inside Kostyantynivka.

ISW: July 18 · Ukrainska Pravda: 1,520 Russian losses

Russia’s Wartime Economy Cracks: Cash Hoarding Rises as Mobile Internet Shutdowns Spread

Russians are increasingly turning to cash as mobile-internet shutdowns proliferate and businesses seek to evade taxes after more than four years of war-driven distortion. The shift signals deepening structural strain: currency distrust, digital-infrastructure instability, and shadow commerce are all rising at once. Meanwhile the Kyiv Post reports Russia is planning to mobilize up to 500,000 additional personnel by autumn as it prepares to open new fronts.

BBC: cash hoarding · Kyiv Post: 500,000 mobilization

Tech

The Rekursiv Was Right: Workload-Shaped Hardware, Vindicated 40 Years Later

The Forth and Clyde Canal, where the Rekursiv computer was lost. Photo: Negroni Venture Studios

A superb essay about the Rekursiv — a 1984 object-oriented CPU physically dropped into Scotland’s Forth and Clyde Canal during a company move. The machine made four architectural bets (tagged memory, hardware GC, object dispatch in silicon, workload-specific design) that were all wrong given the economics of the era but are all correct today. The author’s argument: the commodity general-purpose processor was a compromise forced by a 52%-per-year improvement curve. That curve is gone. The workload-shaped machine the Rekursiv was trying to be is what comes back — “and our job now is to keep the silicon out of the water.”

Negroni Venture Studios · Lobsters

GPT-5.6 Closes a 30-Year Complexity Gap in Convex Optimization — Verified in Lean

A UC Berkeley IEOR professor used GPT-5.6 Sol in a 148-minute session to produce a proof closing a complexity lower-bound gap that had stood since 1996, then formally verified it in Lean. The work is not yet peer-reviewed, and HN discussion split on attribution — critics note the prompt included directional framing; the author compares it to giving a contractor high-level specs. Whatever the capability debate, the Lean verification anchors an actual mathematical result.

r/math · Hacker News

Digital Primordial Soup: Self-Replication and Function Co-Evolve from Scratch

A new arXiv paper demonstrates co-evolution of self-replication and functional behavior in a digital system initialized from random bits — no pre-seeded replicators, no fitness function. Replication and emergent function arise and reinforce each other from the same computational substrate. The work makes direct contact with origin-of-life questions: how replication and useful chemistry could have bootstrapped simultaneously rather than sequentially.

arXiv:2607.09211 · Hacker News

WordPress Core Pre-Auth RCE: Anonymous Shell on Any Stock Install

A critical pre-authentication RCE in WordPress Core (the REST API batch endpoint /wp-json/batch/v1) requires no preconditions and is exploitable by anonymous users on stock installs — no plugins needed. It affects WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1; technical details are withheld to allow patching. Fixed in 6.9.5 and 7.0.2. Discovered by Adam Kues at Searchlight Cyber.

wp2shell.com · Lobsters

Lone Lisp: A Lisp Interpreter That Bypasses libc Entirely

Matheus Moreira built a Lisp interpreter in C that talks directly to the Linux kernel via syscalls — roughly a dozen mmap calls for memory, openat/close for I/O, no libc, no global errno, no locale state. A system-call primitive lets Lisp code invoke any of Linux’s 300+ syscalls directly. It’s currently 10–100x slower than CPython but starts extremely fast and beats bash for short scripts. From the interview: “Modern Linux user space is monstrous and labyrinthine. Linux itself is not.”

Interview with Matheus Moreira · Lobsters

AI Mania and the Coordination Trap: Why AI Project Failures Stay Hidden

A substantive essay arguing that AI adoption has created a game-theoretic trap: executives who admit project failure risk termination, so everyone performs enthusiasm while implementations quietly fail. Drawing on 300+ professional conversations, the author documents patterns — token usage gamed to satisfy AI mandates, database migrations relabelled as AI wins, chatbot adoption in the single digits. The insight is structural: not individual dishonesty but a coordination failure where speaking truthfully is dominated by pretending success.

ludic.mataroa.blog · Hacker News

Also today

Security: OpenSSL “HollowByte” — an 11-byte TLS packet triggers an infinite RAM leak by making OpenSSL pre-allocate a full receive buffer from an attacker-declared size; 25% of 16 GB consumed from one stream. Patched in 4.0.1/3.6.3/3.5.7/3.4.6/3.0.21 — Okta Security · Lobsters; Vercel Labs open-sourced Deepsec, a scanner that deploys Claude/Codex agents to find hard-to-spot vulnerabilities at scale across large monorepos — GitHub · HN
Systems: A student found restricting multi-threaded workloads to a single NUMA socket via numactl gave up to 3x speedups — the load balancer’s cross-socket thread spreading kills cache coherence — plus a lesson on metrics that don’t move hiding real changes — pradyun.net · Lobsters; Repeatable Read vs. Snapshot Isolation — a rigorous comparison of where each isolation level permits or prevents dirty reads, phantoms, and write skew — jaymcor.github.io · Lobsters
Dev tools: GitRoot — a single-binary, zero-dependency self-hosted git forge where issues, boards, and access control all live as plain files in git — gitroot.dev · Lobsters
Languages & hardware: Neither GCC nor Clang complies with the C++ standard on language linkage — extern "C" types aren’t kept distinct — and the author argues the standard, not the compilers, is at fault — sebsite.pw · Lobsters; Chips and Cheese decodes AMD’s MI455X (GFX1250) from LLVM commits — a compute-only hybrid of RDNA4 Wave32 execution and CDNA-scale registers, powering the Helios rack — Chips and Cheese · HN
Science: FDA approves the first oral PCSK9 inhibitor, expanding access to one of the most potent LDL-lowering therapies beyond injectable biologics — FDA · HN

cd ~/repos/josse-posten && claude --resume efb0fcaa-ef97-4023-8809-566b6d6b2546