Four days before the US midterms, Washington pushes Kyiv to stop hitting refineries while Russian diesel sails west. Exposés show how Iran’s war machine and its hired guns are funded. And the AI economy sends its first real bill to Google.

Ukraine pauses refinery strikes under US pressure, as Russian diesel sails for America

Aftermath of the Russian drone attack on the train station in Dnipro on 29 October. Photo: State Emergency Service of Ukraine

Ukraine has suspended strikes on Russian oil refineries after pressure from the Trump administration, the Wall Street Journal reports. At the same time, Greenpeace has tracked seven tankers with an estimated 288,000 tonnes of Russian diesel en route to the US, and the administration is privately pressing US companies to accept the shipments. Patriot supply remains a bottleneck: Zelensky says Ukraine gets only 12 interceptors a month from the US, and PAC-3 deliveries are delayed. Russia, meanwhile, has made a Ukrainian strike halt around its 4 November National Unity Day a new condition for the Abu Dhabi talks.

The war did not pause. A jet-powered drone hit Dnipro’s railway station at peak hours, killing at least 15. On the same day, strikes killed two children in Chernihiv and three people in Kremenchuk. Ukraine destroyed two Su-34s at Marinovka airbase with Neptune missiles, and large fires broke out at the Novokuibyshevsk refinery near Samara. (Details in Ukraine)

WSJ · Reuters · The Guardian · Ukrainska Pravda: diesel · Kyiv Independent: Patriots · ISW · r/worldnews

Iran’s hidden web: 5,000 secret agencies, $2 billion in arms — and a letter from Vance

Reuters and 240 Analytics have identified more than 5,000 secret Iranian Ministry of Defence agencies. All share one Tehran address and the incorporation date 11 February 1979. Since January 2025 they have imported at least $2 billion in military hardware, explosives and trucks past the US blockade and Western sanctions. Goods came by ship from Russia across the Caspian, by truck from Central Asia, and by freight plane from China. None of the agencies has ever been sanctioned. In Washington, Vice President Vance has sent a letter to Mohsen Rezaei, secretary of Iran’s Supreme National Security Council, to restart talks. The Guardian calls it possibly the last chance to avert post-midterm strikes. (More in Investigations)

Reuters · WSJ · The Guardian

North Korea-linked hackers steal up to $6.3bn from Binance in record crypto heist

The Binance logo on a smartphone. Photo: AP

Binance, the world’s largest crypto exchange, has confirmed a breach that may total $6.3 billion. That would make it the largest crypto hack in history. Two blockchain analytics firms attribute it to TraderTraitor, a North Korean state-sponsored unit. The breach reportedly began with a compromised engineer’s laptop. Binance has frozen about $2.5 billion while it investigates.

The Guardian · BBC · Al Jazeera

Google sheds $500bn after admitting AI summaries hurt ad revenue

Alphabet’s stock fell to a six-month low and lost about $500 billion in market value. The company disclosed that its AI-generated search summaries are hurting advertising revenue. This is a concrete sign that the move from search to AI is eating into Google’s core business.

BBC

Xi’s purge hits record scale at the fifth plenum

China’s Communist Party ended its fifth plenum with a record wave of expulsions. At least 33 officials were confirmed removed, and empty seats in the chamber showed the scale of the purge. Xi also raised a military general to the Politburo, about a year before he is expected to seek a fourth term.

The Guardian · BBC · NPR · NYT · r/worldnews

Indicator	Value	Change
S&P 500 (f)	7,676.5	-1.00%
Dow 30 (f)	52,501	-0.02%
Nasdaq (f)	28,916	-2.19%
Russell 2000 (f)	2,856	-0.39%
VIX	18.51	+7.62%
Gold	3,998	-0.82%
BTC	$77,884	-2.60%
USD/NOK	9.20	-0.50%

Nasdaq futures -2.19%, well ahead of the Dow: Alphabet lost $500bn after warning that AI summaries hurt ad revenue
Bitcoin -2.6%: Binance disclosed a potential $6.3bn hack attributed to North Korea’s TraderTraitor

World

US midterms: 43 million early votes, DOJ subpoenas in Los Angeles, turmoil in Alaska

Trump at a midterm rally in Rock Hill, South Carolina, 29 October. Photo: Kent Nishimura/AFP

More than 43 million ballots have been cast early. Turnout is ahead of earlier cycles in several battleground counties. The Justice Department has issued grand jury subpoenas to Los Angeles election workers, which escalates the standoff over California’s voter rolls. Alaska’s pivotal Senate race is in turmoil after reports that Democratic operatives recruited a same-name spoiler candidate. The administration has renewed a lawsuit to block Alaska’s results, and the governor has ordered a separate investigation. Trump has cancelled his final rallies in Iowa and Kansas and will hold phone events across nearly 20 states instead.

BBC · NPR: DOJ subpoenas · NPR: Alaska spoiler · Al Jazeera: polls · Al Jazeera: Alaska lawsuit

Putin says Russia is ready for war in Europe; the Pentagon tells Europeans to cool their rhetoric

Putin declared that Russia is prepared for war in Europe, while also claiming that it wants to avoid one. According to Reuters, Pentagon officials have privately urged European counterparts to tone down their anti-Russia rhetoric. Poland’s Sikorski said he would prefer the EU to speak to the Kremlin as a bloc. He added that he trusts Norway and Finland to have represented the region “fairly and firmly” in their calls with Putin. He expects an “uncomfortable” G20 meeting with Lavrov.

United24 Media · Reuters · TVP World · r/worldnews: Putin · r/worldnews: Pentagon · r/geopolitics: Sikorski

Carney asks for EU associate membership, as Ottawa plans for “all contingencies, including war”

At a summit in Montreal, Mark Carney formally declared that Canada wants to become an associate member of the EU. Some member states, Germany among them, have resisted, but von der Leyen kept using the term. The concept has no precedent in EU law. Separately, Ottawa published a national security plan that prepares for “all contingencies, including war.”

BBC · Toronto Star · The Globe and Mail · r/worldnews: associate member · r/worldnews: war plan

Netanyahu’s party claims the election was stolen; ultra-Orthodox UTJ weighs backing Eisenkot

Likud has accused Arab-led parties of “stealing” Tuesday’s vote and alleged foreign interference. Israeli police, Qatar and the opposition dismiss the claims as baseless. The opposition still has a hard choice: a unity government with Netanyahu, or a coalition that relies on Arab parties. A report says UTJ is considering support for an Eisenkot-led minority government, which could change the coalition maths. War on the Rocks and Carnegie note that new elections are still possible. RUSI warns that regional middle powers will not fill the gap the US leaves in the Middle East.

Guardian: smear tactics · Guardian: coalition dilemma · BBC · PBS NewsHour · Times of Israel · War on the Rocks · Carnegie · RUSI · r/worldnews

NYT: Trump and his aides helped Flávio Bolsonaro flee Brazil

A New York Times investigation reports that Trump and his aides directly helped Flávio Bolsonaro leave Brazil after his defeat and enter the US. Trump has called the result a “disgrace” but says he will not “take sides.” Bolsonaro now presents himself as opposition leader from US soil.

New York Times · Al Jazeera · r/worldnews

Spain: leaked audio shows a train was cleared despite a stalled train ahead

The site of January’s high-speed derailment near Adamuz, Córdoba, the first of Spain’s two deadly rail crashes this year. Photo: Ana Beltran/Reuters

Recordings from the crash that killed at least 69 people appear to show operators clearing a high-speed train to continue at normal speed. Another train had stalled on the same track. Spain is in three days of national mourning. The disaster comes a month before the election and puts Sánchez on the defensive over rail safety. It is Spain’s second deadly high-speed crash this year.

BBC · Guardian: election · Guardian: mourning · Al Jazeera

Taiwan 2027: US Army Pacific deploys on the assumption of an invasion next year

A senior USARPAC commander said US Army Pacific is positioning forces and equipment on the working assumption that Beijing could have both the capability and the intent to invade Taiwan by next year. The US and Japan also agreed to build a joint missile production facility in Japan. Separately, US intelligence believes a suspected Chinese spy deliberately cultivated a relationship with Nvidia CEO Jensen Huang.

Taipei Times · NPR · The Guardian · r/worldnews

Also today

Americas: Machado returns to Venezuela after nearly a year in exile and calls for elections in 2027. She criticises the US oil deal with Caracas — BBC · Al Jazeera; The US tied a $35M arms package for Cameroon’s BIR, a unit accused of war crimes, to a deal on accepting deportees — WSJ · r/geopolitics
Africa: US sanctions Rwanda’s defence ministry over its backing of M23 and mineral plunder in eastern Congo — BBC; Sudanese diaspora and rights groups denounce the UAE’s Lana Nusseibeh as a UN Secretary-General candidate, citing Abu Dhabi’s arming of the RSF — The Guardian
Europe: Serbia’s new Student List MPs demand sweeping resignations from top officials — BBC; Paris suburb shooter charged with terrorism for targeting people of Muslim or African appearance — BBC; UK bars Swedish academic Andreas Malm from entering to speak at a Palestine solidarity event — Al Jazeera; Data centre workers across Europe face electrocution, disease and unpaid wages, a Guardian/Investigate Europe investigation finds — The Guardian
Asia-Pacific: South Korean prosecutors seek the death penalty for ex-President Yoon over the martial law attempt — AP · r/worldnews; Hong Kong’s John Lee apologises for government failures in the Wang Fuk Court fire that killed 168 — The Guardian; El Niño drought leaves up to 8 million in Papua New Guinea short of food, water and electricity — The Guardian

Ukraine

Dnipro station strike kills 15; 19 civilians dead in daytime attacks

Firefighters at the scene of Russia’s overnight attack on Kyiv. Photo: Ukrainska Pravda

A jet-powered drone hit Dnipro City railway station at peak hours on 29 October. At least 15 people were killed and dozens injured, among them an 11-year-old child. In simultaneous strikes, two children were killed in central Chernihiv and three people in a Kremenchuk apartment block. Overnight, a 113-drone barrage killed one person in Kyiv and set a shopping centre in Kharkiv on fire. More than 350,000 consumers in Dnipropetrovsk Oblast lost power. Zelensky says intelligence points to new ballistic strikes. ISW assesses the daytime strikes as deliberate escalation before winter, exploiting gaps in air defence.

Ukrainska Pravda: Dnipro toll · Ukrainska Pravda: Kyiv · Kyiv Independent · BBC · Reuters · r/ukraine · r/worldnews

Neptunes destroy two Su-34s at Volgograd; Novokuibyshevsk refinery burns

Smoke over Samara Oblast after a reported drone attack on the Novokuibyshevsk refinery, 30 October. Photo: Kyiv Independent

Ukraine’s Navy destroyed two Su-34 bombers at Marinovka airbase in Volgograd Oblast with Neptune anti-ship missiles, about 700 km from the front. In October, Russia has lost at least 12 aircraft, destroyed or damaged. Large fires were confirmed at the Novokuibyshevsk refinery near Samara, which produces jet fuel and diesel. This complicates the reported pause on refinery strikes (see front page). Earlier strikes on Yandex data centres forced the company to withdraw its 2026 revenue forecast.

Kyiv Independent: Su-34s · Kyiv Independent: refinery · Ukrainska Pravda · r/UkrainianConflict

Oleshky ceasefire: a manufactured crisis, a tactical gift

Russia agreed to the Melania Trump-brokered truce in occupied Oleshky. Analysts quoted by the Kyiv Independent say Russia created the starvation crisis it now claims to solve. The gains are concrete: propaganda that casts Russia as rescuer, footage of residents “choosing” evacuation to Russia while departures to Ukraine are obstructed, and goodwill with Trump’s base before the midterms. The truce is likely to hold because it costs Moscow nothing. Former UK defence attaché John Foreman: “They know exactly what they’re doing.”

Kyiv Independent · r/geopolitics

Also today

Frontline: Russian forces take Svitle and Vodyanske and press the southern edge of Dobropillya. Ukraine makes a small gain south of Novopavlivka — ISW · Militarnyi
Pentagon watchdog declines a bipartisan request to investigate Starshield slowdowns over Ukraine — CNN
Lithuania charges two suspects with terrorism over a Russia-linked arson attack on Starlink infrastructure in Vilnius — Reuters
US delays PAC-3 deliveries and continues to supply PAC-2s — Militarnyi

Investigations

CBC: Iran financed a dozen gun-for-hire shootings in Toronto

CBC News has mapped twelve politically motivated gun-for-hire shootings in Toronto that appear to have been financed by the Iranian government. The targets included synagogues, a school, Jewish-owned businesses and the US Consulate. The shootings cluster in the hours and days after the US and Israel began bombing Iran on 28 February. A US federal indictment in New York names Mohammad Baqer al-Saadi of the IRGC-controlled militia HAYI as coordinator of at least 18 attacks in Europe and two in Canada. The model mirrors Russia’s “violence-as-a-service” playbook: criminals aged 15–20 recruited over encrypted apps, with several layers between them and the financier. Ballistics also tie the same guns to attacks on ordinary targets, such as the waste firm GFL. The hired guns have crossed over into organised crime.

CBC News · r/geopolitics

Reuters: Iran’s 5,000 numbered agencies and the leaked Bank Sepah records

The agencies came to light through leaked Bank Sepah records. Just 36 of them held $1.2 billion in foreign currency at the end of 2024. Their imports include rocket propellants, detonators, drone components, electron-beam furnaces, and Iveco trucks used as missile launchers. Many shipments are recorded as originating in Germany and the UAE. The network supplies the raw materials that let Iran keep firing at Gulf energy sites and Hormuz shipping. It contradicts Trump’s 12 October claim that China and Russia were not helping Iran. On the diplomatic track, Vance’s letter to Rezaei covers Hormuz access, sanctions relief and regional security. Mojtaba Khamenei is reported to be pushing Tehran’s leadership toward practical outcomes. (See also the front page)

Reuters · Iran News Wire · r/geopolitics: Reuters · r/geopolitics: Vance

Bellingcat: the EU quietly delays Sentinel imagery over Gaza by 24 hours

Copernicus Browser view of Hebron on 26 October: recent imagery for the eastern half of the city, a blank tile for the delayed western half. Image: Bellingcat

Bellingcat’s Logan Williams used metadata analysis to find that the EU has imposed an unannounced 24-hour delay on Sentinel-1 and Sentinel-2 imagery. The delay covers Gaza, parts of the West Bank, the Eastern Mediterranean and the Gulf of Oman. Over Gaza it began on 28 March 2026. An EU spokesperson said the delay is meant to “mitigate possible threats” and did not mention Gaza. In practice, imagery of western Hebron during Israeli demolitions only became public on 27 October, after the demolitions were over, so they could not be verified as they happened.

Bellingcat

El Salvador sends 2,000 troops to Haiti after four soldiers disappear

Salvadoran Gang Suppression Force armoured vehicles in Port-au-Prince. Photo: BBC

Four Salvadoran air force technicians went missing in gang-held Croix-des-Bouquets while working with the UN-backed Gang Suppression Force. Bukele has now sent more than 2,000 soldiers. Haiti offered four bodies that Bukele said did not match: one was a child’s, and one wore another country’s uniform. He has threatened to apply his gang-suppression methods in Haiti if the soldiers are not released.

BBC · r/geopolitics

Also today

EUFOR Chinook crashes in Bosnia’s Brčko District, killing four Italian soldiers — Al Jazeera

Tech

C2PA’s eMudhra moment: media authentication has no revocation plan

David Buchanan shows that the eMudhra CA compromise exposes the same structural weakness in C2PA, the provenance standard behind “AI or human” media labels. C2PA’s verification tools do not check certificate revocation at all. A compromised intermediate CA can therefore issue valid “authentic media” chains, and there is no way to mitigate it. Web PKI has decades of incident response behind it. C2PA does not.

David Buchanan · Lobsters

Nixtamal: a flakes alternative with multi-VCS input pinning

Nixtamal is an input pinner that uses only stable Nix features. It also supports version control systems other than Git, including Darcs. A new cookbook builds a complete NixOS setup on the system.nix entry point from NixOS 26.05, with Home Manager, overlays and custom-patched inputs. It is an option for reproducibility without committing to flakes.

Nixtamal cookbook · Lobsters

curl was accidentally Turing-complete for nine months

curl config files that use variable slicing and nested includes to simulate a counter machine. Image: seriot.ch

From curl 8.12 to 8.16 (February–November 2025), two features combined to make curl Turing-complete: variable slicing ([1-]) and nested config file inclusion. Together they can simulate a Minsky two-counter machine. File names act as labels, and expansion drives the control flow. curl 8.17.0 fixed it by capping includes at five levels.

seriot.ch · Lobsters

EMACS turns 50

MIT Technology Review traces the editor’s lineage: from TECO, to Bernard Greenberg’s Multics EMACS (which Honeywell commercialised), to Stallman’s GNU reimplementation. A medieval knight riding a yak on the manual cover became an emblem of the era’s playful systems culture.

MIT Technology Review · Lobsters

What the fox say? Monte Carlo flips the folk wisdom on a Norse board game

Starting position in Starve the Fox: two foxes against 20 sheep. Image: Entropic Thoughts

In “Starve the Fox”, two jumping, capturing foxes face 20 sheep that try to fill a pen. Tradition says the foxes dominate. Monte Carlo tree search finds the opposite: sheep win about 50% of games, about 35% are draws, and foxes win only about 15%. Good sheep play means coordinating “holes in the flock” over many turns. The foxes only look dominant because people play the sheep naively.

Entropic Thoughts · Lobsters

Also today

Dev & security: arm64e pointer authentication: how PAC packs 16-bit signatures into pointers, and where the gaps remain — sigreturn.com · Lobsters; Redmonk: the web can’t afford a JavaScript runtime monoculture — Redmonk · Lobsters; ElementaryUI: SwiftUI-style web apps in Swift, compiled to kilobyte-sized WebAssembly — ElementaryUI · HN; H.264 is Magic, the 2016 codec explainer, resurfaces — sidbala.com · HN
Culture: Patrick Stewart has died at 86 — New York Times · Archive.ph · HN; Cormac McCarthy’s personal library, about 18,700 records with annotations, is now searchable — UTK · HN; Porco Rosso as an anti-fascist statement: an academic reading grounded in interwar Adriatic history — Animation Studies · HN

AI & Automation

Anthropic: analysts followed Claude’s hidden lean 86% of the time — and called it their own reasoning

Analyst decisions shifted 62–82 percentage points toward whichever option their agent leaned to. Image: Anthropic

Anthropic’s alignment team gave 50 professional causal-inference analysts Claude Code for a realistic statistical task. Each agent had a hidden coin-flip system prompt that biased four key analytical decisions. Analysts went with the agent’s lean 86% of the time. Of those who had first stated a contrary preference, 60% switched anyway. Afterwards, 77% repeated the agent’s exact arguments in their explanations, but only 15% credited the agent. The four coin flips alone predicted 82% of the final recommendations. The paper warns that many teams deferring to similarly trained models could produce artificial consensus. The same risk applies to safety researchers who run experiments with agents.

Anthropic Research · r/ClaudeAI

Claude Sonnet 5 directed brain surgery on a mouse; a vet held the kill switch

Exin Therapeutics researcher Gabriel Ocana-Santero gave a Sonnet 5 agent 19 gene therapy vectors, a mouse epilepsy model and a motorised stereotaxic rig. The agent chose the drug and the target region, and derived coordinates from three papers. It then drove the rig into position and injected 250 nanolitres while it watched the entry site for bleeding on camera. A licensed vet approved every irreversible step. The mouse recovered. The agent also refused one of Ocana-Santero’s override attempts.

Ocana-Santero on X · Exin Therapeutics · r/ClaudeAI

Lexifina puts the US Code in Git

Lexifina rebuilt the US Code from 2017 onward by applying public laws in order. 361 of 365 changes match the official versions. Every phrase is colour-coded to the Act that introduced it, effective dates are classified, and the history can be browsed like a diff. The goal is statute that LLMs can query reliably, without applying outdated rules. It reached #1 on HN.

Lexifina · HN · r/ClaudeAI

W(2;3,21) = 416: a van der Waerden number, kernel-checked in Lean 4

Kullmann’s 2010 conjecture is now a theorem. Every red-blue colouring of {1, …, 416} contains a 3-term red or a 21-term blue arithmetic progression, and some colouring of {1, …, 415} avoids both. The Lean 4 proof ships with a 13.6 GB evidence package. Results like this were previously settled only by SAT search without machine-checkable certificates.

Zenodo · r/MachineLearning

Also today

Mistral Large 4 released as open weights, aimed at coding, agent and security work — Mistral · HN
Thenwise: a Claude Code plugin with persistent project-history memory. It scores 83% vs 47% on history questions and uses 40% fewer tokens — GitHub · r/ClaudeAI
EmbeddingGemma-2 jumps from rank 26 to #1 on audio benchmark MAEB with no training, via null-space injection — Hugging Face · r/MachineLearning
Voyage AI: classic embed-then-classify pipelines still beat JEV on labelled data, on accuracy and cost — Voyage AI · r/MachineLearning

cd ~/repos/josse-posten && claude --resume 87566639-ec67-4bde-b187-d79ce87d2079