Houthis are attacking Saudi Arabia from Iraqi soil — as Riyadh prepares a major offensive

A Reuters exclusive reveals the Houthis have been conducting attacks on Saudi Arabia from Iraqi territory, coordinating directly with Iraqi Iran-aligned groups under IRGC supervision — including the March drone strike on the US embassy in Riyadh and a May strike on the UAE’s Barakah nuclear plant. Recent attacks hit Saudi oil facilities in the eastern province; US and Saudi forces launched joint retaliatory strikes on Iraqi sites, and Iraq’s PM cancelled a planned Riyadh visit. Analysts call it “direct training and coordination between members of the Axis of Resistance themselves, not just between them and Iran” — a structural shift that turns Iraq’s open terrain and 800-km Saudi border into a launch platform. Saudi Arabia is meanwhile concentrating forces for what Yemeni sources describe as a major sea and possible land assault in central Yemen, aimed at breaking the Houthi hold on the country.

Climate science confirms European wildfire conditions now 20× more likely; Crete still evacuating

A rapid attribution study found the hot, dry, and windy conditions driving Spain and France’s catastrophic wildfires were made at least 20 times more probable by human-caused climate change. Thousands continue to be evacuated in Crete as fires threaten tourist resorts in the Rethymno region. France reported its first “somewhat optimistic day” after days of uncontained fires across the southwest — though campaigners worry political attention will fade before elections.

Heat reaches the reactors: wildfire at Sizewell B, Danube drought shuts Hungary’s Paks

Climate stress is now directly touching European nuclear infrastructure. A wildfire on the Suffolk coast spread across more than 80 hectares — a few miles from the Sizewell B nuclear power station — forcing hundreds to evacuate and triggering a major incident declaration; a significant RSPB nature reserve was badly damaged. In Hungary, record-low water levels on the Danube forced the shutdown of the Paks nuclear power station, which needs river water for cooling, while Romania, Bulgaria, and Serbia grapple with knock-on effects of the heatwave and drought across the Danube basin.

Spain deploys military to Ceuta after thousands breach Morocco border; at least 9 drown

Thousands of migrants flooded into the Spanish enclave of Ceuta after overwhelming Moroccan and Spanish border controls, many swimming around the coastal fence. At least nine people died in the attempt; Ceuta’s authorities declared a state of emergency and requested army reinforcements, and Spain deployed its military to restore order. The surge appears linked to a shift in Morocco’s security posture at the border, though the precise trigger is disputed.

Nirmal Purja among 10 climbers missing after avalanche on Broad Peak

Renowned Nepali mountaineer Nirmal Purja — who led the first all-Nepalese winter summit of K2 in 2021 — is among 10 climbers reported missing on Pakistan’s Broad Peak (8,047 m) after an avalanche. The Pakistan Alpine Club confirmed the incident; search and rescue operations are underway, but conditions at altitude are extremely difficult.

Japan earthquake death toll climbs to 34; families sleeping in cars

The death toll from the southwestern Japan earthquake has risen to 34, with six more seriously injured, up from 30 reported yesterday. Rescue teams continue working at the collapsed mall in the Kumamoto area, the site of the worst damage, while displaced families sleep in cars waiting to return to damaged homes.

Dozens of Israeli soldiers walk out of Sde Teiman detention base in mutiny

Dozens of Israeli soldiers abandoned their weapons and walked out of the notorious Sde Teiman military detention facility in what is being described as a mutiny. Sde Teiman has previously been the subject of abuse allegations and international criticism; the walkout signals significant internal tension within the Israeli military over conditions and command decisions.

UEFA votes to boycott all future World Cups over FIFA privatisation plan

All 55 UEFA member associations voted to boycott future FIFA World Cups unless Gianni Infantino backs down from plans to sell minority stakes in the tournament to external investors. CONCACAF also rejected the plan; FIFA could receive its first private money as early as October under the current timeline. A European walkout would fundamentally undermine the commercial and sporting value of the World Cup — the most significant governance crisis in football in decades. (How prediction markets fed on the last World Cup in Investigations.)

US government mislabels every country on Africa map at global AIDS conference

During a State Department presentation at a major AIDS conference in Rio de Janeiro, a US government map of Africa incorrectly labelled every single country on the continent. The map circulated widely among attendees and was lampooned internationally; the State Department acknowledged “an unfortunate error” and said it takes full responsibility.

Ukraine’s deep-strike campaign reaches the Caspian Sea

An A-22 Foxbat — a civilian light aircraft converted into a heavy strike drone — hit the Russian port of Kaspiysk on the Caspian Sea, roughly 1,000 km from the front, extending the campaign to a new sea. The Ryazan oil refinery, one of Russia’s largest, suspended crude processing after a drone strike and may stay shut up to two weeks; Lukoil’s Volgograd plant was also hit, a day after the record-range strike on Lukoil’s Perm refinery. Wildberries logistics hubs burned across four Russian regions — Sarapul (90,000 m²), Penza (53,000 m²), Volgograd, and Zelenodolsk — and the retailer is now seeking state support and warehouses in Kazakhstan; analysts note the campaign targets the banking credit lines underpinning Russia’s second-largest bank, not just logistics. Ukraine’s drone strategy is shifting deliberately toward components inside Russia’s energy infrastructure that cannot easily be replaced — long-term degradation over short-term disruption. Military intelligence separately struck a Murmansk-BN long-range electronic warfare station in Crimea, and the K-2 Brigade is hunting Russian fuel trains behind the front.

North Korean missile kills six from one family near Kryvyi Rih — Reuters flags fresh DPRK stockpile

A ballistic missile destroyed a village home in Radushne near Kryvyi Rih on the night of 29–30 July, killing at least six members of the same family across three generations — among them a 6-year-old girl and boys aged 11 and 17. Zelenskyy confirmed the missile was North Korean-supplied — the first confirmed such use this year — and Reuters reports the strike indicates Russia has received a fresh DPRK missile shipment, the first in nearly a year, that could fuel intensified ballistic attacks on Ukraine.

Russian missile destroys US-owned drone factory in Kyiv — as Trump wavers on a Patriot licence

A Russian ballistic missile destroyed a Kyiv manufacturing plant belonging to Terminal Autonomy, a US company registered in Delaware — the first time Moscow has directly targeted a US firm in the conflict, per The Guardian. The factory produced AQ-400 Scythe and AQ-100 Bayonet deep-strike drones; no casualties were reported. Russian state media acknowledged targeting a “Ukrainian-American company” without naming the owner. The strike lands as Trump tells the FT he is “not sure” about granting Ukraine a licence to manufacture Patriot missiles domestically — and a defence analyst warns Russian strikes would follow any US-licensed production facility regardless of ownership.

Ukraine’s Caspian strike opens a hazardous new standoff with Iran

Ukraine struck an Iranian vessel in the Caspian Sea transporting UAV components to Russia, prompting an Iranian retaliation threat and a new diplomatic hazard for Kyiv. Analysts say the strike fits Ukraine’s strategy of targeting Iranian military supply chains to Russia, not opening a second front — but it also signals: Ukraine has sent military experts to Gulf states to help defend against Iranian drone attacks, and Zelensky is positioning Kyiv as a partner offering battlefield knowledge rather than just requesting aid. The standoff adds another layer to the interconnected US-Iran and Russia-Ukraine conflicts.

Poland investigation, Patriot talks, and US envoys pencilled for Independence Day

Forensic examination of the Kh-101 that crashed in Lublin Voivodeship continues, with a Ukrainian expert joining the Polish probe. Warsaw is considering sending additional Patriot interceptors to Ukraine, and Ukraine has proposed exchanging MiG-29 fighter jets for Polish drone technology. US envoys Witkoff and Kushner are expected in Kyiv on 24 August — Ukraine’s Independence Day — and EU-funded long-range missiles are heading to Ukraine.

High-tempo attrition continues across the east

Ukraine’s General Staff recorded 269 combat clashes over 24 hours, 45 of them on the Kostiantynivka front — the heaviest single axis — while Russian forces launched more than 840 strikes on 45 settlements in Zaporizhzhia Oblast. Overnight Russia sent 255 attack drones; air defences downed 195, but 14 locations were struck. Ukraine claims 1,340 Russian troops killed or wounded in a single day. No significant territorial shifts: the front remains a grinding attritional contest with Donetsk as the main axis.

Missing Ukrainian teenager found serving in the Russian army

A boy from the Kherson region who had been listed as missing was found to be serving in the Russian military — the latest documented case of Russia forcibly conscripting Ukrainian youth from occupied territories, adding to a growing body of evidence of systematic recruitment and coercion of civilians, including minors.

Sikorski: the Ukraine and Iran wars are merging into a single global crisis — with Russia as China’s vassal

Polish Foreign Minister Radosław Sikorski warned that the Ukraine and Iran conflicts are interconnected and the world is “entering very choppy waters.” He described Russia as becoming “with every passing year more of a vassal of China.”

The framing — two US-adjacent conflicts burning simultaneously while China conserves strength — reflects a hardening European reading of the strategic moment, from a foreign minister with direct visibility into both NATO dynamics and Poland’s exposed eastern position.

China reportedly plans to send Iran 400 air defense systems despite Trump warning

Reuters sources say Tehran could receive up to 400 Chinese-made portable air defense systems worth as much as $70 million, with the first shipment expected within weeks and routed through Pakistan — defying explicit Trump warnings. Beijing and Islamabad both deny the report. Iran is urgently rebuilding air defenses degraded by US-Israeli strikes; if confirmed, the transfer would mark a significant Chinese decision to directly re-arm Iran in the middle of active US-Iran hostilities.

Iran likely behind cyberattack on dozens of Minnesota water systems

Investigators believe Iranian hackers were likely behind a cyberattack that hit dozens of Minnesota municipal water systems this week — targeting automated operations and temporarily taking at least one well and treatment plant offline, though no water supply was rendered unsafe. The preliminary attribution rests on tradecraft signatures and the absence of a ransom demand; officials cautioned that attackers could be posing as Iranian to ratchet up tensions, though former intelligence officials call that unlikely. A significant escalation of Iranian hybrid operations against US domestic infrastructure.

Drone strikes reach the Suez corridor — Egypt’s LNG terminal hit

A drone struck a gas storage tanker at a US LNG facility in Egypt’s Mediterranean port, causing significant damage, as the US military struck dozens of IRGC targets. The attack threatens Egypt’s role as the alternative oil transit route while the Strait of Hormuz is at risk — the Suez Canal and SUMED pipeline are the only other path for Gulf oil to reach Europe. Expanding the conflict’s footprint to Egyptian territory marks a potential new escalation threshold, with major implications for energy markets and Egyptian neutrality.

Planet Labs blacked out Middle East satellite imagery for four months at US request

Planet Labs restricted access to its Middle East satellite imagery from March 9 to July 1 at the US government’s request, citing “potential misuse” and personnel safety, and has now released nearly all previously restricted imagery into its archive. European providers began filling the gap — but the EU also imposed a 24-hour delay on European Space Agency imagery over the Gulf of Oman. A House bill introduced July 9 would block US space companies from providing “sensitive imagery”; critics say it would cede competitive ground to foreign rivals and harm transparency. Commercial satellite imagery — a cornerstone of open-source intelligence — is becoming a controlled wartime resource.

Merz preparing to override German states that could block NATO troop movements

Germany is “NATO’s roundabout” — virtually all military logistics to the eastern flank pass through its 16 federal states, which hold independent administrative authority over permits for heavy military transports. AfD-controlled state governments sympathetic to Russia could delay the 5–6 week process of moving forces east by contesting paperwork — a tactic Russia would actively exploit with sabotage and cyber operations to “contest and congest” NATO’s Reinforcement and Sustainment Network. NATO rules prevent it from gathering intelligence on its own member states. Merz is preparing federal override mechanisms for crisis scenarios, per a joint Telegraph/Die Welt investigation.

Leaked document reveals Russia orchestrated anti-Western protests outside 14 embassies

A leaked document exposes how Russia staged coordinated anti-Western rallies in front of at least 14 embassies as part of its influence operations infrastructure — concrete evidence of how Moscow manufactures the appearance of organic grassroots protest as a tool of narrative warfare, part of the hybrid playbook running alongside military action.

Bellingcat: $14 billion bet on the World Cup — 1% of users captured 86% of profits

A Bellingcat analysis of Polymarket and Kalshi betting during the 2026 FIFA World Cup found over $14 billion wagered across some 60,000 markets — from match results to “Will Ronaldo cry?” The top 1% of Polymarket accounts captured 86% of profits, while the bottom half of winning accounts shared just 0.1%; the top single account netted $13M and the largest loser dropped $11.6M. The concentration is consistent with algorithmic trading and raises questions about insider advantage and manipulation in markets increasingly treated as forecasting tools for real-world events. (FIFA’s governance crisis in World.)

ASML EUV machine possibly in China — but reverse engineering faces near-insurmountable barriers

The US Department of Commerce accused ASML — which denied it — of having an EUV lithography machine reach China: the world’s most complex manufactured object, with 700,000 parts from ~5,000 suppliers. A War on the Rocks analysis argues that even with the hardware, reverse engineering faces barriers theft and poaching can’t overcome — systems integration tolerances accumulated over decades of production failures, and tacit knowledge distributed across an entire industrial ecosystem rather than codified in blueprints. The strategic implication: China’s most rational path may be leapfrogging to entirely new approaches rather than copying existing ones.

Stacked pull requests now in public preview on GitHub

GitHub has shipped stacked pull requests as a public preview — a long-requested workflow for managing chains of dependent PRs, with proper visualization of the stack, navigation between layers, and merge sequencing. Significant for teams doing trunk-based development or feature branches with sequential dependencies.

gccrs makes real progress toward compiling the Linux kernel

LWN covers the current state of gccrs, the Rust compiler implemented in GCC, which is making tangible progress toward compiling the Rust code in the Linux kernel — what currently compiles, the remaining gaps, and the path forward. A meaningful milestone for the Rust-in-Linux project’s long-term stability.

GCC steering committee establishes AI code policy

The GCC project’s steering committee has announced a formal policy on AI-generated code contributions, covering disclosure requirements for AI-assisted patches and restrictions on contributions that cannot be adequately reviewed by a human who understands the code. Significant for open-source governance as AI coding tools become standard.

AI inference APIs are quietly building provider lock-in into your sessions

Earendil Engineering publishes a thorough technical breakdown of how inference providers are making AI sessions non-portable: reasoning tokens returned as encrypted blobs only the provider can read, inter-agent messages where the task itself is sealed (OpenAI’s multi-agent beta encrypts what the parent agent told the child), web search results the client never sees, and “compaction” that turns your session history into a foreign key into someone else’s database. The piece proposes a five-test portability framework — inspect, export, replay, audit, delete — and principles: local event logs should be canonical, hosted tools must produce full-fidelity logs, subagent communication should be auditable. It also covers the moral asymmetry of distillation policy: labs train on public web content while prohibiting others from distilling their outputs.

Microsoft open-sources MLVC: neural video codec at 100fps on consumer NPUs

Microsoft released MLVC, a learned video codec achieving over 70% quality improvement over hardware H.265/HEVC (MOS-based BD-rate) while running in real time — roughly 100fps encode and decode at 540p — on consumer Apple Silicon, Intel, and Qualcomm NPUs. It ships pre-trained models, training code, C++ entropy coding, and conversion pipelines for CoreML, ONNX/OpenVINO, and QNN. Neural codecs have long beaten hand-engineered ones in research but failed the real-time deployment bar; MLVC challenges that gap directly, and its multi-platform support sidesteps the CUDA-only trap that kept prior learned codecs off most devices.

FAR.AI security leaderboard: 100× cost spread between the strongest and weakest frontier models

FAR.AI launched an independent AI security leaderboard measuring how much it costs an attacker to reliably jailbreak frontier models into assisting with chemical, biological, or cyberattacks. The spread is alarming: Claude Fable 5 and GPT-5.6 Sol resisted all tested attacks with estimated break cost above $14,000, while Grok 4.5 cost $58 overall — and just $24 for cybersecurity assistance. Gemini 3.1 Pro fell below $300. Crucially, the techniques that defeated weaker models weren’t novel research but publicly available jailbreaks. Grounds for optimism: every weakness found belongs to a known attack class with existing defenses — fixable through engineering, not fundamental. The leaderboard introduces a “Minimal Standard for Safeguards” as a shared floor for frontier model security. (Anthropic’s own eval-sandbox breaches on the front page.)

Kimi K3: open-weight frontier model releases weights, kernels, and an agentic sandbox runtime

Moonshot AI’s Kimi K3 ranks 4th globally on the Artificial Analysis Intelligence Index (57.1), trailing only Claude Fable 5, GPT-5.6 Sol, and Claude Opus 5 — and tops BrowseComp at 91.2%. The 2.78-trillion-parameter MoE activates 104B parameters per token across a 1M-token context window. Its headline innovation is Kimi Delta Attention: a linear attention variant whose per-token compute stays constant regardless of context length, using a fixed 128×128 recurrent matrix per head instead of a growing KV cache — 69 KDA layers paired with 24 standard MLA layers for 42× cache compression. Moonshot released not just weights but FlashKDA CUDA kernels, the MoonEP expert parallelism library, and AgentENV, a Firecracker microVM sandbox runtime used for agentic RL training — 51 million sandboxes during K3’s run, with 133ms checkpoint and 49ms resume. Training efficiency is 2.5× predecessor K2 at matched validation loss.

Cloudflare releases behavioral bot detector; community immediately trains an LSTM to spoof it

Cloudflare launched Precursor, a continuous client-side bot detection system that monitors cursor movement, keyboard timing, focus changes, and session-wide behavioral patterns to catch automation individual interactions can’t reveal. It’s specifically designed to defeat bots that add random noise to look human — actual human movement follows physical constraints (velocity, inertia, correction overshoots) that Gaussian noise doesn’t replicate. Within days, a community member posted training results for a 2-layer LSTM with a Mixture Density Network trained on real human mouse trajectories: it learns the underlying physics distributions rather than adding noise, and the results were reportedly convincing enough to fool bot detectors. The cat-and-mouse is now explicitly machine learning versus machine learning.

The peer review crisis deepens: AI-fabricated authors accepted as orals, PhD pipelines drying up

Two new data points on the ML review dysfunction covered Wednesday. A researcher reviewing AI conference submissions flagged two papers whose author names appeared to be AI-generated — after raising the concern through formal channels, both were accepted as oral presentations anyway; the system acknowledged the flag and proceeded regardless. Meanwhile an early-career assistant professor reports losing three promising PhD candidates — undergraduates they’d mentored through research projects — who declined graduate studies after experiencing the submission and review process firsthand, with a fourth wavering. The review crisis is no longer just producing bad reviews; it’s visibly discouraging talented people from entering research at all.

Anthropic strips most of Claude Code’s built-in system prompt

Anthropic has removed a large portion of Claude Code’s built-in system prompt, shifting responsibility for behavior configuration to users’ own CLAUDE.md files — a deliberate design philosophy that behavior customization belongs to individual users and teams, not baked uniformly into every instance. In practice, practitioners who relied on implicit behaviors now need to encode those expectations explicitly in project or user CLAUDE.md. Community reaction is largely positive — increased control and transparency — though it requires conscious setup rather than out-of-box behavior.

Dysautonomia conference: GPCR autoantibodies pushed as targets for immunosuppressive trials

At the July 2026 Dysautonomia International conference, cardiologist Blair Grubb stated that GPCR autoantibodies against adrenergic and muscarinic receptors should enhance diagnostic criteria and justify immunosuppressive drug trials in POTS — directly aligning with this reader’s β1/β2/M3/M4/ETA/AT1 profile. A new POTS BRAIN biobank launched (ages 15–80, inflammatory markers and iron storage focus). A propranolol-vs-ivabradine crossover RCT found both outperformed placebo with no significant difference between them (60/40 patient preference for propranolol) — an evidence base for propranolol in LC-POTS that was previously absent.