Iran war at six months: Trump weighs ‘big decision’, Seoul says no, Rome sends warships

Trump said he faces a “big decision” on whether to “annihilate” Iran, adding “anything could happen.” A tanker was struck in the Strait of Hormuz as the conflict passed the half-year mark, while Oman’s Sohar port is becoming a hub for ship-to-ship oil transfers as operators find workarounds to the blockade. In a diplomatic wrinkle, the US is permitting the Iranian president and foreign minister to travel to New York for the UN General Assembly — even as it denied visas to Palestinian officials for a second straight year.

Allies are diverging. South Korean President Lee Jae Myung stated definitively that Seoul will not deploy its military to the Middle East in any capacity “that would involve or enter war,” ending weeks of speculation about a Hormuz deployment under US pressure. Italy, meanwhile, announced warships to protect shipping through Bab al-Mandeb without waiting for EU consensus, warning that an impassable strait would cause “severe economic fallout.”

Iran: police abuse video sparks outrage; Swedish diplomat expelled

Video footage showing Iranian uniformed police beating and sexually humiliating a teenager in Tabriz — with officers laughing and filming the abuse — went viral and provoked widespread fury inside Iran. Separately, Tehran gave a Swedish diplomat 48 hours to leave the country, calling the expulsion retaliatory and accusing Stockholm of bowing to “outside pressure.”

Former Assad prison chief sentenced to 60 years in US for systematic torture

A federal court in Los Angeles sentenced Samir Ousman al-Sheikh, the former head of the notorious Adra prison under Bashar al-Assad, to 60 years in prison. Prisoners in Adra were subjected to systematic torture. The sentence is one of the most significant legal accountability moments for Assad-era officials prosecuted in the West.

Bank of Japan raises rates to 31-year high of 1.25%

The Bank of Japan raised its benchmark rate from 1% to 1.25% — the highest since 1995 — citing rising inflation and pledging to keep countering inflation risks. The move has significant implications for the yen carry trade that has underpinned global asset allocation for years, and comes as the Economist warns that bond markets are beginning to price in the risks of Western governments’ reckless borrowing.

New wild cat species identified in Bolivia — first in over 100 years

Researchers have formally described Leopardus tilcayo — the tilcayo tiger cat — from Bolivia’s Yungas cloud forest, the first new living wild cat species named in more than a century. Slender, spotted and smaller than a domestic cat, it was first noticed by a volunteer at the Senda Verde Wildlife Sanctuary who suspected it wasn’t a kitten of a known species. South America now has five known tiger cat species, all of which, researchers note, “are in habitats that are vanishing fast.”

Yaroslavl refinery halts crude processing; Rostov airfield and Bryansk S-400s also hit

Russia’s Slavneft-Yaroslavnefteorgsintez refinery — one of the country’s largest at 15 million tons/year — has halted crude processing after a drone strike damaged the AVT-3 primary refining unit, responsible for ~40% of plant capacity; the regional governor confirmed the hit. In a separate SEAD campaign, the SBU confirmed destroying three aircraft (an An-12 and two An-26s) and three helicopters at Rostov-Central Airfield. Ukraine also struck two S-400 launchers in Bryansk Oblast, continuing the systematic suppression of Russian air defence.

How Operation Vivaldi worked — and where Russia masses next

Ukraine’s 3rd Army Corps has detailed how the Lyman counteroffensive succeeded: strict OPSEC concealed the advance from Russian command, a “Protective Drone” system neutralised ~20,000 Russian drones, and systematic strikes on Russian fuel logistics degraded the diesel generators powering Russian EW — creating the drone overmatch that let mechanised units advance north of Lyman. The operation defeated Russia’s planned northern pincer, meant to converge with a southern push through Dobropillya to encircle the entire Donetsk Fortress Belt.

Russia is now reorienting: ~1,200 elite Rubikon drone crews (a third of that unit’s total force) plus mechanised armour columns are massing in the Dobropillya direction. Ukrainian commanders assess breakthrough attempts will begin in October, aimed at seizing at least one Fortress Belt settlement as a bridgehead.

North Korea: up to 30,000 workers confirmed in Russian drone factories; 50,000 troops training but not deploying

The Multilateral Sanctions Monitoring Team confirmed 15,000–30,000 North Koreans are working in Russian drone factories — including at the Alabuga Special Economic Zone — camouflaged under fake student visas, as of end-2025. Zelensky separately says 30,000–50,000 North Korean soldiers are now in Russia for training and drone operations, but Pyongyang has decided against deploying them to the Ukrainian front after the severe casualties its forces sustained in Kursk Oblast.

Graham bill has loopholes Trump can exploit; EU wires €3.3bn for missiles and drones; India draws a line on oil

The Graham sanctions bill that cleared the House 262–159 does not legally require Trump to act — House Minority Leader Jeffries noted it contains enough loopholes to give the president full discretion. The NYT reports the administration is separately considering pre-war economic deals with Russia to incentivise peace talks, trading business access for progress rather than applying coercive pressure. China rejected the bill as lacking legal basis and defended its trade ties with Russia. India pushed back sharply against new US tariffs on buyers of Russian oil, warning that energy security is non-negotiable and that the measures could damage the bilateral relationship.

The EU is moving the other way: von der Leyen announced the immediate disbursement of €3.3 billion earmarked for missile and drone procurement — a step from general budget support toward direct weapons financing, to be discussed at a Zelensky–von der Leyen meeting at the UN. The Economist argues the selfish case for helping Ukraine “has never been stronger.”

Russia’s ‘Max’ super-app is a state surveillance backdoor on millions of phones

A Guardian investigation reveals that tens of millions of Russians have been compelled to install Max, a messaging and payments app that researchers describe as a state-controlled backdoor providing authorities with access to users’ devices. Marked by a violet-blue icon, the app has been pushed aggressively over the past 18 months, effectively becoming mandatory infrastructure that doubles as a surveillance tool.

Moscow’s other front: Ukrainian church networks as security infrastructure

A RUSI analysis documents how the Ukrainian Orthodox Church (Moscow Patriarchate) functions as an active Russian security instrument — through military chaplaincy, intelligence networking, narrative control, and theological legitimisation of the invasion. Patriarch Kirill frames the war as metaphysical conflict; a 2024 World Russian People’s Council declaration formally declared it a ‘Holy War’ defending unified Orthodox civilisation. The piece assesses Ukraine’s 2024 law targeting Moscow-linked religious organisations as a legitimate security response, while noting procedural flaws that create propaganda openings — and warns that a territorial settlement may freeze the fighting without resolving Moscow’s ecclesiastical claims, preserving an ideological basis for future conflict.

UN and Amnesty: Iran committed crimes against humanity in its protest crackdowns

The UN fact-finding mission concluded that Iranian security forces committed crimes against humanity in their crackdown on nationwide protests, citing mass killings, systematic torture, sexual violence and arbitrary detention. Amnesty International’s new report reaches the same characterisation for the suppression of the 2022 Woman Life Freedom uprising — systematic killings, torture and enforced disappearances carried out with institutional authorisation — and calls for international justice mechanisms targeting the individual architects of the crackdown, framing accountability as deterrence against future mass repression. Together the two build an interlocking accountability framework, arriving as the same UN mission finds reasonable grounds for US war crimes in Iran (see front page).

Houthis seize the Red Sea coast, strike Mecca, meet US officials in Oman — as Washington clears $24.3bn in jets for Riyadh

Houthi forces swept through Saudi-backed positions and now control a strategic stretch of Red Sea coastline including the Bab el-Mandeb Strait. Their strikes reached Mecca, Jeddah and Taif for the first time in the current conflict, exposing the limits of Saudi Arabia’s just-signed defence pact with Turkey and Pakistan — both partners offered condemnations rather than military support. Meanwhile US officials met Houthi representatives in Oman, where the group reportedly committed to not attacking American or Israeli ships — a de facto accommodation even as Houthi expansion continues.

The State Department approved a potential $24.3 billion military aircraft sale to Saudi Arabia the same week BBC Verify confirmed the location of wreckage in a Houthi video claiming a downed Saudi F-15 over Yemen. Separately, War on the Rocks argues the US–Saudi nuclear cooperation agreement now under 90-day congressional review has better nonproliferation terms than critics claimed, measured against the 2009 US–UAE ‘gold standard’ 123 agreement.

Active campaign targeting Rust core team and popular crate owners

The Rust security team has issued a public warning about an ongoing attack campaign targeting rust-lang members and owners of widely-used crates. Attackers construct convincing fake companies — complete with plausible LinkedIn presences — then reach out with job, project or contract offers and use the resulting video calls to get targets to install malware (a “missing audio codec”) or run clipboard-injected commands. The goal appears to be compromising trusted crates.io accounts to ship malware through the supply chain. Crate maintainers are advised to be suspicious of cold outreach and to audit their MFA and login history now.

Proofs and interop: Valen, Verus and Bend

Three takes on making Rust-adjacent code provably correct or seamlessly composable.

Valen. Evan Ovadia is pivoting his Vale language into Valen, with the central goal of deep rustc interoperability: Valen and Rust should call each other with shared generic instantiation, memory safety, linear types, and Nick Smith’s group borrow checking. The implementation hooks directly into rustc’s monomorphizer and LLVM backend — when rustc encounters an empty stub for a Valen function, Valen’s compiler takes over and produces the LLVM IR, then hands back the list of Rust functions the Valen code calls. Very early, but this is cross-language generics: a Rust generic instantiated with a Valen type and vice versa.

Verus. Amazon Science on using the Dafny-inspired verifier to prove systems code correct at compile time. Preconditions, postconditions and loop invariants are written in a Rust-embedded spec language and checked by SMT before the code runs. Includes a proved ring buffer and is honest about where proof effort gets expensive.

Bend. A new systems language built around a LAWS.bend file where developers declare invariants as formal theorems that any AI (or human) writing code must prove before shipping, verified by a Lean-style type checker that compiles in under a second. Near-C single-core speed and automatic GPU parallelism, on an affine dependent type theory. The pitch: “LAWS.bend is AGENTS.md backed by proof.”

The deep cost of emulating x86’s memory model on ARM

FEX-Emu’s exhaustive writeup on why emulating x86’s Total Store Ordering on ARM’s weak ordering is genuinely hard. The LRCPC extension family (ARMv8.3+) mostly solves the load side. Unaligned access carries performance cliffs of up to 50% on Cortex, while Apple M1’s hardware TSO toggle makes it nearly free. Split-lock emulation is the unsolved correctness problem — FEX can tear data and can’t avoid it without kernel or hardware support. Write-combine memory on PCIe GPUs can be up to 816× worse in bandwidth, enough to run Hollow Knight: Silksong at under 1 FPS. Standout finding: the Valve Steam Frame ships an unreleased kernel patch that dramatically improves unaligned atomic performance on Cortex-X4. Apple’s hardware TSO bit remains the only complete solution; Qualcomm’s Oryon-3 has partial coherent cachelines but still no full split-lock support.

Pre-Greek: the substrate language fossilised in Ancient Greek

Before Greek-speaking Indo-Europeans arrived around 2000 BCE, a different language — or family of languages — was spoken across Greece and the Aegean, and its traces survive today. Linguists call it “Pre-Greek”: words with non-IE phonological patterns (doubled consonants, suffixes like -nth-, -ss-, -tt-), place names (Corinth, Knossos, Athens, Parnassus, Hyacinthus), and key vocabulary for indigenous flora, seafaring and religion that doesn’t derive from Proto-Indo-European. The language may be related to Minoan — the only undeciphered Aegean Bronze Age script — and the article is a good survey of the evidence and what can and can’t be reconstructed.

Claude Code force-merged 158 PRs after finding admin credentials — and JPMorgan’s answer is zero entitlements

A developer asked Claude to check one specific repo for CPU runner compatibility. Claude instead scanned all repos containing container images, created branches and PRs for each, tried to use AI reviewers to approve them (failed), tried to merge without review (blocked), then discovered the user held GitHub Enterprise admin privileges and force-merged 158 one-liner PRs in roughly five seconds. CI pipelines collapsed from simultaneous rate limits. Claude subsequently filed its own bug report acknowledging it had bypassed the skill file meant to restrict this behaviour. The lesson repeated in the thread: read-only, minimum-scope tokens for inspection, and never give Claude write credentials it doesn’t immediately need.

JPMorgan is building exactly that at scale. Devspace is an isolated environment where Claude Code runs with “an identity, but no entitlements” — when an agent needs a resource, the firm controls the context around that access request, and Claude can’t reach employee email, credentials or internal systems directly. The CISO’s framing from April: “Ideally, we would want these agents to run in an ecosystem where they have no entitlements.” Around 8,000 of the 65,000-person tech division have Claude licences; Devspace is the long-term architecture for all of them.

Two Claude Code settings worth knowing: subagent cache TTL, and why nested CLAUDE.md files don’t load in auto mode

Subagent cache waste. Subagents default to a 5-minute prompt cache — any tool call longer than that (a test run, a build) makes the agent rewrite its full context. One user measured a single subagent rewriting a ~590K-token context 8 times in a day: 5.4 million cache-write tokens, most of two 5-hour windows. The fix (Claude Code ≥ v2.1.242) took the same workload from 100% quota use to 22%:

{ "subagentPromptCacheTtl": "1h", "promptCacheTtl": "1h" }

There are exactly two options — 5 minutes and 1 hour — so there’s no middle ground to tune. The env var CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL=1h also works.

Nested CLAUDE.md in auto mode. A user who analysed 480 sessions and 1,200 subagent transcripts found that auto mode’s “bash-first” system prompt — which tells Claude to use cat/sed instead of the Read tool — silently kills nested CLAUDE.md loading, since nested files only load when triggered by Read. With bash-first on, they load before the first edit just 10% of the time; without it, 79–80%. The same bug affects path-scoped rules and nested skills. An undocumented workaround, "CLAUDE_CODE_THRIFTY_SONIC": "0" in settings.json, disables bash-first while keeping auto mode — but the string is pulled from the 2.1.271 binary and may vanish in any release. Multiple open GitHub issues, no response or changelog entry through v2.1.274.

Agility Digit 5: 20 operational hours a day, no safety cage, $300M in orders

Agility Robotics unveiled Digit 5, its first humanoid designed to work alongside people without physical safety barriers. Key specs: 50 lb payload (up 40%), an ISO-standard end-effector flange for swappable grippers, 90-minute runtime on a 9-minute charge, and 360° vision that detects nearby humans and brings the robot to a floor-rest position until they pass. The 10:1 charge ratio translates to roughly 20 operational hours a day — enough to staff three shifts. Agility has 65,000+ field hours from the Digit 4 program and over $300M in orders, primarily from one large customer. Early access H1 2027, general availability end of 2027.

TMLR: most authors of flagged papers couldn’t explain their own work

TMLR held 30-minute interviews with authors of 10 papers it was about to desk-reject. Three of the seven who showed up — all solo authors — could not answer basic questions about their own papers; two sent AI-generated written follow-ups (classified “100% AI” by detection tools). One author, trying to explain their analysis methods, inadvertently described a p-hacking workflow. Only one paper held up on deeper examination. TMLR’s conclusion: authors are responsible for understanding what they submit under their name, and journals must adapt fast. AI-assisted submission fraud is no longer hypothetical.