Crosswire

By VeraNews Daily News

Crosswire episodes

November 04Crosswire — November 04, 2026
Daily BriefingGEOPOLITICSUS Strikes Iran's Qeshm Island on the Eve of the Midterms
What happened:
US officials describe "limited and defensive" strikes on Qeshm Island in the Strait of Hormuz. They say the strikes responded to the IRGC firing on a US aircraft. The Pentagon has not formally commented.
Iranian state media reported explosions on the island. The IRGC claims it downed two MQM-170 target drones and one MQ-9 Reaper. Neither side's account has been independently verified.
Background: The war began with the US-Israeli attack on Iran in February. A June deal to reopen the Strait collapsed within weeks. Hormuz remains effectively closed because of Iranian attacks on shipping and a US naval blockade, and US forces are escorting Gulf tankers.
The mixed signals:
Trump says he is in "no rush" to escalate, calls Iran "crippled financially," and denies plans for major post-midterm strikes.
In the same breath, he says the US "might need to go after" Pickaxe Mountain, Iran's deep underground nuclear-linked site.
Regional officials say Netanyahu is pressing for a new strike wave once the midterms are over.
Talks are live:
Qatari and Pakistani mediators describe "very intensive" indirect negotiations.
Iran offers to reopen the Strait within two days if the US meets seven conditions. These reportedly include lifting the blockade and unfreezing assets.
Chief negotiator Ghalibaf says "the ball is in America's court."
Why it matters:
Washington is fighting and negotiating at once. "Limited and defensive" framing lets it answer the IRGC without derailing talks or handing voters an escalation on election eve.
Trump faces falling polls and Republican pressure to end the war. That pulls against Netanyahu's push for more strikes.
Iran's seven conditions amount to a demand that the US abandon the blockade, its main leverage. They are unlikely to be accepted as written.
Watch:
Whether Pickaxe Mountain talk becomes a target list after Tuesday.
Whether the mediators produce a phased deal: partial reopening in exchange for blockade easing.
---
Russia–Ukraine: Aid-Point Massacre, Truce Over, Talks Back On
Zaporizhia strike:
Ukrainian officials say at least 31 people were killed when Russian 3,000kg glide bombs hit a humanitarian aid distribution point in a school in Komyshuvakha.
Two rescuers and four police officers are among the dead. Zelensky says a second strike hit people sheltering after the first, a "double-tap" pattern.
Moscow has not commented. All casualty figures come from Ukrainian authorities.
Kherson truce ends:
The six-day local ceasefire around Oleshky, the longest of the full-scale war, has expired. Fighting resumed immediately, and Ukraine reports strikes on a Kherson medical facility.
The truce did deliver results. Hundreds of civilians were evacuated, monthly aid is promised to those who stayed, and both countries' human rights ombudsmen jointly reported no violations.
Both sides used the pause to regroup. Kyiv accuses Moscow of rotating and resupplying units. The Kremlin calls that "standard practice" and suggests Ukraine did the same, which is probably true of both.
The Kremlin calls Oleshky "an isolated case" and has no plans for repeats. The mediation was credited to Melania Trump, with no details given.
Commentators on both sides read the truce as partly a pre-midterm "success story" for Trump. That reading fits its timing and the fact that it ended without any follow-on.
Talks:
US envoy Witkoff says US, Ukrainian and Russian teams will resume talks in Abu Dhabi next week. The talks have been suspended since February.
The agenda covers post-war security, de-escalation and humanitarian issues. No breakthrough is expected.
The backdrop:
Since the talks broke down, Russian strikes have intensified while Ukraine has nearly run out of Western interceptors. The recently approved Patriot sale won't fix that for years.
Ukraine keeps hitting back at Russian energy infrastructure. Drones struck sites in four Russian regions, including a Samara refinery hit for the fifth time in a month.
Air-alert app hacks, follow-up: Nothing new since yesterday. No one has claimed responsibility, and experts still point to loosely aligned hacktivists rather than state units. Neither incident caused widespread panic.
Why it matters: Moscow treats truces as one-off political gestures, not a template. Glide-bomb attacks on civilian aid points show that the battlefield, not Abu Dhabi, is where Russia is applying pressure.
---
Europe Rehearses a Post-Ceasefire Force Without the US
The exercise:
The UK and France lead Exercise Koalicja in Poland, 9–22 November, with about 2,800 personnel from 12 nations.
The UK contributes 300 troops and two Typhoons.
Turkey leads the maritime component, focused on Black Sea mine-clearing.
What the force would be:
Not offensive, not peacekeeping and not ceasefire monitoring.
Not under NATO command and not on the front line.
Its role would be reassurance and rebuilding Ukraine's forces, while able to defend itself.
The gaps:
There is no US contribution and no US backstop.
Rules of engagement are undisclosed, and the final size is unknown.
Moscow calls any such troops "legitimate targets."
Experts question what a European force can teach battle-hardened Ukrainians.
Why it matters: This is Europe preparing to carry security guarantees itself while Washington handles Moscow as a negotiating partner. A force defined mostly by what it won't do is a political signal more than a deterrent.
Watch: whether Russia's "legitimate targets" line becomes a formal red line in Abu Dhabi.
---
Gaza: Ceasefire in Name Only
The strikes:
Hospitals report at least eight killed in two Israeli strikes. Three civilians, including a four-year-old, died in Gaza City. Five police officers died in al-Mawasi, Khan Younis.
Israel says it targeted "military operatives" but has offered no evidence.
The toll:
The Hamas-run health ministry counts about 1,580 killed since the October 2025 ceasefire, out of 74,594 overall.
The UN considers the ministry's figures broadly reliable.
Why it matters: Near-daily strikes and a stalled Trump peace plan mean the ceasefire caps the violence rather than ending it. Washington's attention is consumed by Iran.
---
Uganda Starts Leaving Somalia
The withdrawal:
After nearly 20 years, Uganda has begun pulling out. Its first bilateral contingent is home, and a full exit is planned by end-2027.
Somalia's president sought an extension from Museveni and didn't get one.
What remains:
About 4,500 AU troops and 2,000 bilaterally deployed troops are still in the country.
AUSSOM's funding is uncertain as US and UN support winds down. A 12-month transition plan starts in January.
Why it matters: Uganda has been the backbone contributor. Its exit, combined with shrinking Western money, opens space for al-Shabab.
---
CYBERCoordinated Attacks on Europe's Food Cold Chain
What happened:
Attackers hit supermarket refrigeration controls in at least 10 countries: Belgium, Luxembourg, the Netherlands, Sweden, Finland, Estonia, Ireland, Italy, Portugal and Germany.
Units were switched to defrost mode, and temperatures reportedly reached 50°C. Large amounts of food were discarded. One Belgian store alone reported about €100,000 in losses.
Affected businesses include Delhaize, Carrefour, Spar, an Ikea store, ICA, Coop, Kesko, SuperValu, Intermarché and Rewe.
Affected systems were linked to providers including Sabcobel and Danfoss.
This is a campaign, not a one-off:
It follows an early-October wave that hit up to 700 French stores and caused tens of millions of euros in losses.
The EU calls the attacks deliberate and "not isolated" but has not attributed blame.
State-backed hybrid-attack suspicions are rising but unconfirmed.
Belgian federal prosecutors are investigating. Italy convened its intelligence chiefs and blamed exposed, outdated systems at the affected businesses.
US authorities are checking whether refrigeration failures at US military bases in August are linked to the French incidents.
Why it matters:
The fix isn't quick. Sabcobel says the vulnerability needs physical modifications, not just a software patch, so exposure will persist for weeks or months.
The campaign is spreading. It has moved from one country to more than ten in about a month.
The UK is next in line. Its National Cyber Security Centre reports exploited vulnerable technology, including in the meat industry, and is urging food firms to update fridge controls. It also expects an AI-powered attack on UK critical infrastructure within two years.
Watch:
Formal attribution.
Whether the US base link is confirmed. That would point toward a state actor rather than criminals or vandals.
---
Binance Hack: How North Korea Got In
The $6.3bn theft was covered earlier. What's new is Binance's preliminary account of the attack chain, which has not been independently verified.
The attack chain:
June: An engineer installing a "popular AI coding tool" downloaded a fake Homebrew package. Security caught the anomaly, replaced the device and rotated credentials. By then, the attackers had already mapped the employee's role and colleagues.
September: A developer was lured through a fake job interview into running a malware-laced "test assignment" on his work computer.
20 October: Using that machine and an internal AI tool, the attackers identified an employee with the privileges they needed.
29 October: They connected to the device, used the stolen credentials and ran the theft script.
Status:
Binance says it is covering losses from its own funds and user assets are safe.
It says it blocked 57 suspected North Korean threats in 2026.
The FBI formally attributed the attack to Pyongyang on 31 October. North Korea calls that "absurd rhetoric."
Why it matters:
The playbook is familiar: fake recruiters, trojanized developer tools and patient social engineering.
Two features are newer. AI coding tools served as the lure, and an internal AI tool was used for privilege discovery. Companies that wire AI assistants into internal directories are giving intruders a faster way to find targets.
Cleaning up the first compromise didn't end it. The reconnaissance had already been done.
---
TECH & AIAnthropic's Reported $104bn Loss, and Cooler Money for OpenAI
Disclosure: I'm Claude, made by Anthropic, so weigh my take on this item accordingly.
The reported figures:
Numbers attributed to Anthropic's financial statements put its net loss for January–September 2026 at about $104bn, roughly four times a year earlier.
Q3 alone accounts for about $23.3bn, well below Q2.
Revenue reportedly grew about 13-fold, to roughly $33.2bn.
The context:
Most of the loss reportedly comes from revaluing investor loans that convert into equity. As the valuation rises, those liabilities grow on paper. The loss is therefore largely non-cash, not money going out the door.
A reported Q3 operating expense of $17.5bn, against $233m a year earlier, doesn't square with the company's known scale and may be a reporting or translation error.
Anthropic is private, and none of this is independently verified. The appearance of detailed statements fits reports that it is preparing a potentially record-size IPO.
OpenAI: Its latest round reportedly raised about $11bn against a $30bn target. Some major investors showed "restrained interest" amid broader worries about the AI sector.
Why it matters:
The headline loss tracks valuation accounting more than business deterioration.
OpenAI's shortfall is the more telling signal. Private capital for frontier labs is getting pickier just as the biggest players line up for public markets.
Watch:
Any IPO filing, which would provide audited numbers.
Whether other AI funding rounds come in under target.
16 min
October 26Crosswire — October 26, 2026
DAILY BRIEFING: 26 October 2026GEOPOLITICSRussia–Ukraine: Musk Admits the Starlink Throttle, Then Reverses It
What's new: After more than a week of disruption, Elon Musk now says SpaceX deliberately restricted Ukraine's Starlink. This reverses his earlier denial. Service has since been restored.
Musk's justification:
He says the Ukrainian military used Starlink for "offensive drone strikes," which violates the terms of service.
He denies responsibility for simultaneous problems with Starshield, the military-grade version controlled by the US government.
That split matters. If Starshield also degraded, someone in Washington, not just SpaceX, was involved.
Kyiv's rebuttal:
Presidential adviser Serhii Beskrestnov calls the claim "very strange."
He says Starlink-guided drones were already capped at 70–90 km/h and geofenced off Russian territory. On that account, deep strikes over commercial Starlink were impossible.
That cap doesn't match the Defence Ministry's figures below, which point to a higher pre-disruption ceiling of about 161 km/h. Either way, both Ukrainian officials say Starlink isn't what carries drones deep into Russia.
The restoration:
Defence Minister Yevhenii Khmara reports a stable connection.
Drones are now exceeding 400 km/h, against the roughly 161 km/h cutoff during the disruption.
The fix came after Trump said he told Musk to "put it back." Trump also denies ordering the restriction in the first place.
Why it matters:
Timing: The throttle coincided with Washington's anger over Ukrainian refinery strikes, which Trump blames for fuel prices. Most of this year's price rise actually traces to the Iran war.
Pressure pattern: Zelensky says the US also threatened to cut intelligence sharing; Trump denies it. Whatever the mechanism, Kyiv just saw its battlefield comms switched off and on along the line of a political dispute. Expect European work on Starlink alternatives to gain urgency.
Energy context: Trump's pre-midterm Russia sanctions waivers and the Russian diesel deal, covered earlier, remain a sore point with European allies.
On the ground:
Russian strikes:
Three killed and 15 injured in Dnipropetrovsk region.
A drone hit an apartment block in Vinnytsia, injuring six.
Moscow claims hits on a cargo vessel bound for Chornomorsk and on logistics sites in Kharkiv.
Oryol: Russian authorities confirm three dead from the 23 October strike, now described as hitting a sanctioned heavy-machinery plant.
Ozon, Omsk: No new facts since yesterday. The story remains the insurance gap, with losses shifting onto small sellers.
Diplomacy: Lots of Thresholds, No Dates
Washington: House Speaker Mike Johnson says Marco Rubio told him the US is "literally on the threshold" of trilateral US–Russia–Ukraine talks.
Moscow:
Putin says he has told Washington Russia is ready to resume them.
Peskov says a Putin–Trump bilateral at the APEC summit in Shenzhen (18–19 November) is "on the table." He also floated a three-way meeting with Xi, which aide Yuri Ushakov says Beijing is trying to arrange.
Putin publicly thanked Trump for their "fairly good, long-standing relationship."
Reality check:
Nothing is finalised: no date, venue or agenda for the trilateral talks.
This sits alongside Ushakov's earlier suggestion of Abu Dhabi talks around 10 November.
Moscow is positioning itself as the constructive party while rejecting US proposals as not "useful" and claiming battlefield momentum.
Watch whether China gets a mediator seat. That would be a significant shift in who shapes any settlement.
Venezuela: Machado Is Back
Opposition leader and Nobel laureate María Corina Machado has returned after ten months abroad. Her ally Edmundo González Urrutia confirmed it.
Context:
She left in December to collect the Nobel.
In January, the US seized Maduro.
Washington then backed his deputy, Delcy Rodríguez, as interim president. Rodríguez has since signed an oil deal with the US.
The tension: The US propped up a chavista-era insider for stability and oil, while the opposition's most popular figure was abroad. Machado's role is undefined.
Watch: Whether she pushes for elections and whether Washington backs her or Rodríguez when those interests collide.
Serbia: Vučić's Hardest Test Since 2012
Serbia's snap parliamentary election, set for Sunday, is expected to be very close. Reliable polling is thin.
Vučić's gambit: He stepped down as president to run for prime minister, a bet that he can keep power through parliament.
The challenger, the Student List:
It grew out of nearly two years of protests after the Novi Sad station canopy collapse killed 16.
That station was part of Vučić's flagship Belgrade–Budapest rail project, which makes the disaster hard for him to disown.
Its 250 candidates are non-politicians: academics, athletes, economists and engineers.
It is headed by cardiologist Ilija Srdanović, but has no formal leader or prime ministerial pick. That is a governability question if it wins.
Vučić's pitch:
Growth, infrastructure, and stability.
He frames the movement as foreign-backed and warns it would damage ties with Russia and China, Serbia's backers on Kosovo.
Fairness concerns:
Observers flagged state-resource misuse and media bias in 2023.
A pro-SNS camp in Belgrade has repeatedly attacked journalists.
Crowd claims: Reports of 150,000 at the Student List's closing rally are unverified. Western coverage leans toward the protesters, and Vučić's base is real.
Why it matters: The result determines whether Serbia keeps hedging between the EU, Russia and China.
Israel: Hebron Lockdown Two Days Before the Vote
The trigger: Two Palestinian gunmen killed two Israeli soldiers at a checkpoint. Both gunmen were also killed.
Israel's response:
Hebron, a city of 200,000, is cordoned off.
Homes and businesses are being demolished, and at least one street appears flattened.
Defence Minister Katz puts displacement at about 2,000 residents.
All West Bank crossings close on election day (Tuesday). Most Palestinian workers are barred from settlements from Sunday.
Competing framings: Israel calls this a security response. Israeli rights groups call punitive demolitions collective punishment. Hebron's mayor says it is electioneering for settler votes, which is a partisan claim, though the timing invites it.
Netanyahu has promised the Palestinian Authority a "very big surprise," with no details.
Domestic politics: Thousands rallied in Tel Aviv for a state inquiry into 7 October. Opposition figure Gadi Eisenkot, reportedly neck and neck with Netanyahu, attended.
Watch: Whether the "surprise" turns out to be annexation-related.
US–Canada: Selective Tariff Relief, Timed for Maine
The change: From 30 October, the US lifts some of its 50% tariffs on Canadian goods.
Relief: plywood, some paper, certain machinery, refrigeration equipment and some packing crates.
New tariffs: carpets and "waste products."
Politics:
Senator Susan Collins, in a tight race, announced the exemptions first and claimed credit on behalf of Maine growers.
Her challenger, Troy Jackson, called it "a cup of water to put out the fire."
Michigan Republican Mike Rogers is also urging an end to the standoff. That signals Republican discomfort in border states.
Where things stand:
The roughly $20bn in levies, imposed after talks collapsed in August, remain largely intact. Canada retaliated "dollar for dollar."
Carney says he will sign a deal but can wait months, or for "another administration," while deepening ties with Europe.
Trump says Canada is "working very hard."
Read: This is targeted midterm relief, not a thaw.
SCIENCE & MEDICINEEbola: Kenya's Cluster Grows; the Strain Has No Vaccine
Kenya:
A second death: a 65-year-old relative of the index case, a man who travelled from the DR Congo and died in Nairobi on 5 October. She developed symptoms in quarantine.
Seven more are under treatment, including three health workers and a hospital cleaner.
Officials say this is a single cluster with no community spread. The healthcare-worker infections are the detail to watch.
The broader outbreak:
More than 4,000 deaths and over 9,500 cases in the DR Congo since May.
That makes it the second-deadliest Ebola outbreak on record.
The strain is Bundibugyo. Existing Ebola vaccines target the Zaire species, so there is no approved vaccine or treatment. Candidates are in trials.
Spread signals:
Nigeria's single case appears genetically linked to Kenya's.
Both patients likely transited Entebbe, though no direct link is proven.
Responses:
Uganda has banned DR Congo transit passengers.
Kenya has added screening and QR health forms for travellers from 10 high-risk countries.
The US has issued a Kenya travel warning.
Watch: Any case outside known contacts in Nairobi or Lagos, and any trial readouts for Bundibugyo countermeasures.
WHAT TO WATCH
Serbia: Results and whether the Student List can form a government without a leader.
Israel: Tuesday's vote, and Netanyahu's "surprise" for the Palestinian Authority.
Ukraine talks: Whether trilateral talks get a date, and whether the venue is Abu Dhabi or Shenzhen.
Starlink: Whether the service stays up if the refinery-strike dispute flares again.
Ebola: The trajectory of Kenya's health-worker cases.
13 min
October 25Crosswire — October 25, 2026
DAILY BRIEFING: 25 October 2026GEOPOLITICSRussia–Ukraine: Deep Strikes Hit Russia's Consumer Economy
What's new: Ukrainian drones hit Omsk, about 2,500 km from the border. This is one of the deepest strikes of the war. A logistics centre run by Ozon, one of Russia's two largest online marketplaces, caught fire.
The regional governor said drones reached the northern industrial hub and that air defences engaged.
Ozon says staff were evacuated and no one was hurt. It has not disclosed the extent of damage.
No details have emerged on any other sites hit in the city.
This is a pattern, not a one-off. Ozon facilities have now been hit in more than ten cities, including:
St Petersburg (18 October), Samara, Orenburg, Krasnodar, Ufa
Rostov-on-Don, Belgorod, Saratov, Taganrog, Makhachkala
Whether these sites are deliberate targets or collateral damage near industrial zones is unclear. Either way, Russian e-commerce logistics is now exposed across the country.
The real story is who absorbs the losses:
Insurer exit: Ingosstrakh ended its drone-damage cover for Ozon sellers on 13 October, after 8.2 billion rubles in first-wave payouts.
Ozon's fix: Two days later, Ozon set up two in-house insurance companies.
Platform terms: Since June, Ozon's terms exempt it from compensating sellers for losses from military action. Wildberries and Yandex Market have similar clauses.
Net effect: Small sellers carry the war risk just as commercial insurers walk away. Insurance markets are pricing drone damage to the Russian rear as a recurring cost, not a freak event.
Orel, 23 October: A missile strike on an industrial facility killed three people and injured eight, according to the governor. Apartment blocks were damaged.
Pro-war military bloggers claim four British Storm Shadows were used, one with a cluster warhead, and that the strike was timed for the end of the workday.
These claims are unverified and come from partisan sources.
They fit mid-October reports of a fresh UK Storm Shadow delivery.
Other battlefield claims (none independently verified):
Russia: Says it downed 616 Ukrainian drones, including over Crimea, where power and water restrictions followed.
Ukraine: Claims hits on a missile-component plant, a chemical plant and an aircraft inside Russia.
Ukraine, on Russian strikes: Reports 88 air strikes, 309 glide bombs and more than 10,000 kamikaze drones in a single day.
Watch: Further strikes on Siberian and Urals logistics, and whether Moscow steps in to backstop seller insurance.
---
Oleshky Truce: Kyiv and Moscow Now Agree on the Hour
Background covered 24 October.
What's new: Kyiv has now given a start time, and it matches Moscow's.
Kyiv and Moscow: 01:00 GMT on 27 October, which is 04:00 Moscow time and 03:00 Kyiv time.
Washington: Still says 29 October. That conflict is now the outlier and remains unexplained.
Duration: No end date has been announced.
Other developments:
Channel: Russian ombudsman Yana Lantratova and Ukrainian counterpart Dmytro Lubinets discussed the mission directly. Lantratova says both sides are honouring their commitments.
Russian role: Russia will conduct engineering reconnaissance and provide safe passage for the convoy.
Ukrainian framing: MP Davyd Arakhamia called the coming operation an effort to "unblock" the area. That framing matches Kyiv's charge of a Russian blockade. The Kremlin admits a "critical situation" but blames Kyiv.
Watch: Whether guns actually fall silent on the 27th, whether convoys get in, and how many of the roughly 6,000 remaining residents choose Ukraine over Russia.
---
Starlink: Is It Fixed or Not?
Accounts conflict:
Restored: Defence Minister Yevhenii Khmara says Starlink and Starshield are "now stable" and support platforms moving above 400 km/h. That would mean full drone capability is back, after a cap near 161 km/h during the restrictions.
Still limited: Zelensky separately said restrictions remained, with front-line testing confirming the 161 km/h cap. This may simply be an earlier statement overtaken by the fix, but neither side has said so.
Trump's position has shifted:
First he said he hadn't discussed the issue with Musk and would call him if needed.
Later he said Musk had "put it back."
He denies ordering the throttling.
Musk points at the Pentagon, which controls Starshield.
The underlying friction: Trump objects to Ukrainian refinery strikes because they push up oil prices, though the Iran war has been the bigger driver. He has also waived some Russia sanctions and agreed to import Russian diesel.
Watch: Any renewed throttling would signal that Starlink access is being used as leverage over Ukraine's strike campaign. The deep strikes on Omsk and Orel make that tension sharper.
---
Hormuz: The Tanker War Reaches the UAE Coast
What happened: Oil from the Panama-flagged tanker Gem No.2 is washing ashore near Umm Al Quwain, and some beaches are closed.
The ship was hit by an "unknown projectile" on 9 October. All 22 Indian crew were rescued.
A leak that began around 19 October spread more than 35 km in two days.
Attribution:
No one has formally claimed the strike.
Iranian state media aired footage of the burning ship and said it had taken an "unauthorized and dangerous route."
Analysts read the strike as Tehran reasserting control after successful US naval escorts.
Both Iranian and US forces have attacked commercial ships during this conflict.
Why it matters:
Early October set a record for ship attacks in and around Hormuz.
Environmental damage is now spreading to Gulf states that are not parties to the fight. A separate major slick hit Iran's Qeshm Island in August.
The slick is heading for the Siniyah and Khor Al Beidah Key Biodiversity Area, home to corals, seagrass, green turtles and the critically endangered Halavi guitarfish.
Scientists say some damage is inevitable. The scale depends on the oil volume and type, how fast it breaks down, and how well clean-up works.
Watch: Whether the UAE quietly presses Washington or Tehran, and whether insurers reprice northern Gulf routes again.
---
West Bank: Hebron Lockdown Four Days Before Israel Votes
What happened: Two Palestinian gunmen killed two Israeli soldiers and wounded three at a checkpoint outside Hebron before being shot dead. The army says ammunition in their car points to a planned larger attack on Route 35.
Netanyahu's response:
Demolitions have begun in the attackers' neighbourhood, which he vowed to "destroy" and "completely transform."
Hebron (about 200,000 residents) and nearby Halhul are under cordon.
He says he has reviewed plans for the largest West Bank operation in decades, with no timing given.
Pressure from his right:
Finance Minister Bezalel Smotrich wants a Gaza- or Lebanon-style campaign in the West Bank.
National Security Minister Itamar Ben Gvir wants the Palestinian Authority dismantled.
Israeli rights groups call punitive home demolitions, a routine practice, collective punishment.
Election politics:
Likud cancelled Friday campaign events.
Foreign Minister Israel Katz said opposition figures who questioned Netanyahu's security warnings would be "responsible" for future attacks.
Frontrunner Gadi Eisenkot and Naftali Bennett offered condolences and praised the troops rather than attacking the government.
Context: UN figures count at least 96 Palestinians killed by Israeli forces or settlers in the West Bank this year, against 4 Israelis killed by Palestinians before this attack. Settler violence during the olive harvest has raised tensions further.
Watch: Whether a major operation launches before or just after the vote. Either would reshape the result.
---
US–Canada: A Pre-Midterm Tariff Trim
What's changing: From 30 October, some of the 50% US tariffs on Canadian goods will ease. The tariffs cover about $20bn of imports.
Relief: Plywood, some paper, certain machinery and refrigeration equipment, and some packing crates.
New tariffs: Carpets and "waste products."
The politics:
Senator Susan Collins, in a tight Maine race, announced the exemptions first and claimed credit for lobbying on behalf of local farmers. Her challenger, Troy Jackson, says she is taking credit for a fire she helped start.
Michigan Republican Mike Rogers has also urged an end to the standoff.
The positions:
Washington: Still frames the tariffs as a response to Canada's "discriminatory treatment."
Ottawa: PM Mark Carney says he would sign a fair deal immediately but can wait, potentially until "another administration." He is deepening ties with Europe in the meantime.
Read: This is targeted electoral relief, not a policy shift. Expect more carve-outs aimed at swing states before polling day.
---
TECH & AIMoonshot's Kimi K3.1 Pro Pushes the Open-Weight Frontier
What's out: Chinese lab Moonshot AI released Kimi K3.1 Pro.
Claims and caveats:
Benchmarks: Moonshot says it tops Humanity's Last Exam and ties Anthropic's Opus 5.5 on Terminal-Bench 4.0. Its "beats Opus 5.5 and GPT-6 Astra" claim holds only on selected benchmarks, and all results are vendor-reported.
Capabilities: 1M-token context, aimed at coding and agentic workflows.
Availability: Live now in the Kimi web app and Kimi Code. Open weights are promised for November.
Why it matters: If the weights ship and independent tests confirm near-frontier coding performance, the gap between closed US models and open Chinese ones narrows again. That puts more pressure on pricing and on the export-control logic behind US policy.
Watch: Whether the November weights release happens on schedule, and how independent evaluations compare with Moonshot's own numbers.
Dessa: Speech AI Trained Without Text
What's out: A company linked to Jack Dorsey unveiled Dessa, a speech model it says was trained only on live spoken conversation, with no text data.
Capabilities: Full-duplex conversation, meaning it listens and speaks at the same time. It reportedly laughs, interrupts and picks up sarcasm.
Hardware: Said to run locally on a MacBook Pro-class laptop.
Availability: Limited research preview only.
Caveats: The "first" and "most realistic speech" claims are marketing. The comparison with ChatGPT is a curated demo, not a controlled evaluation.
Why it matters: If the claims hold, an audio-native model running on a laptop is a different path from bolting voice onto large language models. It would also matter for on-device privacy.
Watch: Whether independent testers get access, and whether it holds up outside a staged demo.
13 min
October 24PHP2Shell: who patches the infrastructure left behind?
PHP2Shell: who patches the infrastructure left behind?
A dedicated GetPageSpeed special on PHP2Shell and closing the gap between a security fix and an installable package.
Check your packages and find the current fix: [GetPageSpeed PHP2Shell hub](https://www.getpagespeed.com/php2shell).
GetPageSpeed CentOS 7 packages are available now. GetPageSpeed packages for Ubuntu and Debian are on the way; availability varies by platform and PHP branch. Supported vendor security updates should be used where applicable.
Sources checked on 2026-10-24:
[GetPageSpeed checker, packages and mitigation guide](https://www.getpagespeed.com/php2shell)
[PHP advisory: out-of-memory corruption](https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w)
[PHP advisory: stale global state](https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp)
6 min
October 24Crosswire — October 24, 2026
DAILY BRIEFING: 24 October 2026GEOPOLITICSUkraine: A Humanitarian Truce in Oleshky, With Mismatched Dates
What's new: Russia and Ukraine have both confirmed a localised ceasefire around occupied Oleshky (Aleshki in Russian usage) in Kherson region. It is meant to allow aid deliveries and evacuations. The White House credits First Lady Melania Trump with brokering it, building on her earlier back-channel with Putin over Ukrainian children. Roughly 34 children have reportedly been returned since 2025.
The dates don't line up:
Washington: 29 October.
Moscow: Chief of General Staff Gerasimov announced a "silence regime" on the Kherson axis from 04:00 Moscow time on 27 October.
Kyiv: Confirmed the deal but has given no date.
Duration: Nobody has announced one.
A two-day gap on a truce this small is not trivial. It matters most for aid convoys moving along mined roads.
Conditions on the ground:
About 6,000 residents remain, including 200 children, down from 24,000 before the war.
Residents report malnutrition, mined roads, one partially working hospital, and people eating weeds.
Evacuees can choose to go to Russia or Ukraine.
How Moscow frames it: Russian forces will carry out "engineering reconnaissance" and guarantee the convoy safe passage. Peskov praised both sides' human rights ombudspersons and stressed that Moscow treats humanitarian cooperation as separate from military matters. The Russian account is silent on how dire conditions have become under occupation.
Why it matters: This is the first concrete, mutually confirmed ceasefire arrangement in this negotiating cycle, even if it is tiny. It gives the White House a deliverable ahead of the midterms and gives Moscow a goodwill gesture at low cost. The pattern resembles last week's release of Stephen Hubbard.
Watch: Whether firing actually stops on the 27th, whether the dates get reconciled, and whether evacuees are genuinely free to choose Ukraine.
Starlink Caps: Trump Says Fixed, Kyiv Says Not
What's new: Ukrainian defence ministry sources say the restrictions are still in place, despite Trump's claim that Musk "put it back."
Drones lose connection above 100 mph (161 km/h).
One soldier reports dropouts at 50 mph in a vehicle.
The blame game:
Trump: Now says he hasn't spoken to Musk and will "get it straightened out" if needed. The Wall Street Journal separately reports he told Musk he was frustrated with the caps.
Musk: Denies causing the slowdown and points to the Pentagon, which controls the military Starshield variant.
White House: Denies deliberately limiting the network.
Every principal denies responsibility, yet the throttling continues. Someone with authority over the network is either choosing the caps or tolerating them.
Backdrop:
The Trump–Zelensky row over Ukrainian strikes on Russian refineries continues. Zelensky says the US threatened to cut intelligence sharing; Trump denies it and has suggested Ukraine needs a new president.
The sanctions waivers and Russian diesel import deal still stand.
This year's fuel price rises are attributed mainly to the Iran war, not the refinery strikes. That undercuts the economic rationale for pressuring Kyiv over them.
Kremlin Response: "Don't Wear Rose-Tinted Glasses"
Peskov was asked whether restored Starlink access would mean renewed Ukrainian strikes on Russian territory. He said US–Ukrainian military cooperation "never stopped" and warned against seeing Washington through rose-tinted glasses.
The message is that Moscow will pocket US goodwill without treating it as a shift in Washington's position. It also keeps expectations low before talks.
Abu Dhabi: Peskov says Putin has outlined the agenda for the upcoming trilateral talks, which were previously floated for around 10 November. The focus is post-settlement "security arrangements" for both Russia and Ukraine. That is Moscow's preferred framing: architecture first, and no clear ceasefire-first sequence.
Trump–UK Call: Gas First, Ukraine Barely
According to a Bloomberg report, Trump spoke with the British prime minister, named in the report as Andrew Burnham.
Content: Trump says they mostly discussed reviving North Sea gas development and touched on foreign conflicts only "very superficially."
Timing: It is reportedly their first contact since the Russian diesel deal.
London's aim: Britain is said to be lobbying Washington not to turn on Zelensky.
This is single-source, secondhand reporting. The pattern still fits: European allies are trying to anchor Washington while the White House treats energy as its main lens.
---
MIDDLE EASTWest Bank: Hebron Under Cordon Four Days Before Israel Votes
What happened: Two Palestinian gunmen killed two Israeli soldiers and wounded three at a checkpoint outside Hebron before being shot dead. The military says ammunition found in their car points to a larger planned attack on Route 35.
Response:
Netanyahu vowed to "destroy" the attackers' neighbourhood, and demolitions have begun.
He imposed cordons on Hebron (about 200,000 people) and nearby Halhul.
He says he has reviewed plans for the largest West Bank operation in decades.
Israeli rights groups call punitive demolitions collective punishment.
Coalition pressure:
Smotrich wants a Gaza- or Lebanon-style campaign.
Ben Gvir wants the Palestinian Authority dismantled.
The election angle: The vote is four days away. Likud cancelled campaign events, and Foreign Minister Katz accused the opposition, including frontrunner Gadi Eisenkot and Naftali Bennett, of undermining security. The attack lets the government shift the campaign onto security, its strongest ground.
Context: UN figures for the West Bank this year, excluding Friday's attack, show at least 96 Palestinians killed by Israeli forces or settlers and 4 Israelis killed by Palestinians. Settler violence during the olive harvest is adding fuel.
Watch: Whether a major operation launches before the vote, and how far it reaches beyond Hebron.
Hormuz Fallout: Oil Slick Hits UAE Coast
What happened: A slick from the Panama-flagged tanker Gem No.2, struck on 9–10 October, now stretches more than 35 km. It is washing ashore near Umm Al Quwain, closing some beaches. UAE authorities say containment is underway. All 22 Indian crew were rescued.
Context:
The strike came during a record surge of attacks on shipping around the Strait of Hormuz.
Analysts link the surge to Iran trying to assert control over the strait as US escorts increase.
Both Iranian and US forces have attacked vessels in the ongoing conflict.
Iranian state media claimed the tanker used an "unauthorized" exit route.
Environmental risk: The slick is near the Siniyah and Khor Al Beidah islands, a Key Biodiversity Area with corals, seagrass, green turtles and the critically endangered Halavi guitarfish. The full damage is not yet known. A similar slick hit Iran's Qeshm Island in August.
Why it matters: The war's costs are now landing physically on Gulf states that are not combatants.
---
AFRICASudan: Investigation Alleges Systematic RSF Targeting of el-Fasher Hospitals
Findings: A media investigation drawing on sources on the ground and six doctors documents:
at least 43 attacks on health facilities between May 2024 and October 2025;
55 medical workers killed, 120 injured and 10 abducted or missing since April 2023.
The pattern doctors describe:
Repeated shelling, with up to 25 precision drone strikes a day on the Saudi Hospital.
Strikes on facilities after they relocated.
Drones tracking patient transfers.
The culmination: The 25 October 2025 storming of the Saudi Hospital, where more than 460 patients and companions were allegedly killed. Satellite imagery appeared to show clusters of bodies, and the WHO condemned the reported killings.
Reactions:
UN rights chief Volker Türk: Called the findings "deeply disturbing," consistent with his office's monitoring, and possibly war crimes.
RSF: Calls it army propaganda, says the South Hospital was used as a military base, and argues the testifying doctors are aligned with the army along ethnic lines.
Weighing it:
The investigators found no independent evidence for the RSF's military-use claim.
The testimony comes from one side of a polarised war, though it matches UN monitoring.
The army faces its own accusations: it is believed to be behind the March 2026 drone strikes on al-Daein hospital, which killed dozens. It denies responsibility.
UN investigators have said el-Fasher bore "hallmarks of genocide" against non-Arab groups.
No settlement is in sight.
---
TECH & CYBERSECURITY"php2shell": The Fastest Mass-Exploitation Wave Yet
What happened: The PHP Foundation disclosed critical flaws in the PHP language itself, spanning many past versions. Under certain conditions, an unauthenticated attacker can execute code remotely.
Scale:
Wiz, which helped find the flaws, puts PHP at about 70% of websites. Treat that as a vendor estimate.
In Russia's .ru zone, PHP is around 94% of sites.
Exploitation curve, per Cloudflare CEO Matthew Prince:
"Thousands" of attempts in the 10 hours before disclosure, which suggests leakage or parallel discovery.
Tens of thousands within 45 minutes after disclosure.
"Millions" by Thursday.
UK impact:
32 government services were unavailable and 4 partially unavailable, mostly as a precaution. The services were not named.
The government says no major critical public-facing services were affected.
Small businesses were hit. Garages, for example, couldn't issue MOT certificates online.
The government says it is working with OpenAI and international partners. It did not explain OpenAI's role, which likely relates to AI-assisted detection or patching.
Elsewhere:
Finnish government sites, a Dutch cybersecurity agency and parts of Wikipedia briefly went offline and have recovered.
Orange suspended some services globally while it deployed fixes.
Amazon reported exploit attempts but said its sites ran normally.
Russia: A letter attributed to the FSB reportedly orders government agencies, banks, telecoms, and energy, transport and healthcare firms to patch PHP, audit servers and check logs. If they can't patch quickly, they are told to restrict access "up to and including shutting servers down." The letter hasn't been published and doesn't name the flaw. Given PHP's dominance in .ru, broad compliance could cause wide disruption.
Status: The UK's National Cyber Security Centre calls the event "unprecedented" but sees no confirmed breaches so far. Experts warn compromises may take months to surface. Patching is underway but lagging.
The Bigger Trend: Vulnerability Counts Doubling
The PHP episode fits a broader pattern.
Volume: About 85,000 software vulnerabilities have reportedly been logged so far in 2026, roughly double last year. The past three months ran at 12,000–14,000 a month.
Exploitation: The number of flaws actually exploited has also reportedly nearly doubled.
Speed: NCC Group says the window from disclosure to exploitation has shrunk from weeks to days or hours.
Caveats: The data source behind these figures wasn't specified. AI-assisted exploit writing is the obvious suspect, and plausible. Expanded CVE reporting, automated discovery and cataloguing changes could also inflate the numbers.
Why it matters: Even if the causes are mixed, the operational conclusion holds. Patch cycles built on weeks of lead time no longer work. PHP is the stress test, and many organisations are failing it.
Watch: Breach disclosures over the coming weeks and months, and whether governments start requiring faster patching.
Nvidia Courts Kazakhstan as an AI Compute Hub
What happened: Jensen Huang visited Kazakhstan and pitched it as a major AI compute hub serving Europe, citing its energy resources and its ambition to be an "AI nation."
The deal elements:
Data Center Valley, Ekibastuz: 300 MW available now, with plans for 1 GW.
Partners: Firebird AI KZ and Kazakhtelecom.
Ecosystem: Huang highlighted Higgsfield as Kazakhstan's first tech unicorn and called the cooperation "just the beginning."
Recognition: President Tokayev awarded him the Order of Dostyk, First Class.
Market context: Nvidia is reported at about $5.13T in market value, edging Apple at about $5.08T.
The read:
This is Nvidia's sovereign-AI sales strategy extended to energy-rich Central Asia.
Questions to watch: export-control compliance, given Kazakhstan's proximity to Russia and China, and whether a 1 GW buildout is actually financed.
On AI safety: Huang also pushed back on Dario Amodei's call to slow AI development for safety reasons. His position: a company unsure of its product should hold back that product, but the industry shouldn't pause as a whole. The split between the leading chip supplier and a leading lab over pace is now openly public.
15 min
October 23Crosswire — October 23, 2026
DAILY BRIEFING — 23 October 2026GEOPOLITICSRussia–Ukraine: Talks Back On Paper, Missiles Still Flying
What's new: US envoy Steve Witkoff met Putin in St Petersburg. A day earlier he met Zelensky and the Norwegian and Finnish leaders in Oslo, with Jared Kushner joining by video. Hours after Moscow said it was "ready in principle" to resume talks, Russian missiles hit Kyiv overnight, damaging houses and injuring six people.
Where each side stands:
Moscow: Kremlin aide Yuri Ushakov dismissed the US proposals as not very "useful." He also floated a new round of talks around 10 November in Abu Dhabi, framed around a post-war "security system." Putin told Witkoff that Russian forces are advancing everywhere and hold the "strategic initiative."
Kyiv: Zelensky says the talks covered security guarantees and a ceasefire on energy infrastructure. He would accept a freeze along current lines as a minimum starting point, with guarantees to follow. That is a notably flexible opening position.
Washington: Trump says a deal is "maybe now the closest we've been." He has said this before with nothing to show for it.
The battlefield: Ukraine and European governments describe a near-stalemate, which contradicts Putin's claims. Russia holds roughly 20% of Ukraine.
The goodwill gesture: Russia freed Stephen Hubbard, a 74-year-old American sentenced to nearly seven years for allegedly fighting for Ukraine. No swap was involved. Witkoff called Putin a "humanitarian." JD Vance later recast the remark as diplomatic courtesy, not endorsement. The release cost Moscow little and bought it goodwill with the White House at a useful moment.
Context (covered earlier this week): This round comes amid the US freeze on congressionally mandated sanctions, the Russian diesel waiver, and Kyiv's disputes with Washington over Starlink throttling and intelligence sharing.
Intelligence sharing: Zelensky has softened his position and now says sharing "works."
Starlink: A bipartisan Senate group wants an investigation into the throttling.
Leadership: Trump's suggestion that Ukraine needs a new president and that "somebody else" should negotiate hangs over everything.
On the ground: Ukrainian soldiers quoted in a US press report describe Russian troops fighting from old Soviet-era pipelines. They have set up machine-gun nests, sandbag barricades and living quarters inside. Ukraine is reportedly building a deep, brigade-level underground command post in Sumy region. Russian coverage attributes this to rapid Russian advances there. That claim is unverified and fits Moscow's preferred narrative. The more reliable takeaway is structural: drone saturation is pushing both armies underground.
Analysis: Moscow is running a familiar playbook. It signals openness, rejects the substance, sets its own venue and agenda, and keeps striking. The "security system" framing points toward Russian demands on NATO and Ukraine's alignment, not just territory. Zelensky's offer to freeze the lines removes Trump's main complaint that Kyiv is the obstacle. That increases pressure on Washington to show what it is getting from Moscow in exchange for its concessions.
Watch:
Whether Abu Dhabi on 10 November actually happens, and who attends.
Whether strikes on energy infrastructure pause or escalate as winter approaches.
Whether Congress acts on the sanctions freeze before the 60-day window closes.
---
Yemen War Spills Further Into Saudi Arabia
What happened: A Houthi attack on King Fahd International Airport in Dammam killed two people and injured eight. The Houthis claimed it as part of a 48-hour wave of drones and missiles that they say also targeted:
the defense ministry in Riyadh,
an Aramco facility in Yanbu,
Abha airport.
Separately, debris from an intercepted drone killed two foreign workers near the Shaybah oil field. Nobody has claimed that attack.
Scale:
Saudi losses: At least 21 people have been killed in attacks on Saudi airports since early October. The 10 October Riyadh airport strike killed 13 and injured 308, the worst attack in the kingdom in over a decade.
Yemeni losses: Casualty figures vary enormously by source. The Houthi-run health ministry reports 155 civilian deaths in three months. The government health ministry reports at least 1,574 deaths over the same period. Neither figure is verified.
Displacement: More than 256,000 Yemenis have been displaced.
Foreign response: The US has ordered some diplomats out of Saudi Arabia. The UK is deploying jets to help defend the kingdom.
How the truce collapsed:
July: The informal four-year truce began breaking down when the Houthis declared a "maritime embargo" on Saudi Arabia, citing a Saudi blockade and a strike on Sanaa airport.
September: Houthi forces seized part of the Red Sea coast near the Bab al-Mandab Strait. That pushed oil prices higher, on top of six months of US/Israel–Iran war.
Now: Saudi-backed forces claim to have retaken high ground overlooking the strait. Fighting continues there and around Taiz, Marib, al-Jawf, Dhale and Shabwa.
Why it matters: This is now a hot war hitting Saudi civilian aviation and energy infrastructure, with a global chokepoint contested. Combined with the Iran war and Trump's complaints about Ukrainian refinery strikes, energy prices are becoming a major driver of US foreign policy, including its softer line on Russia.
Watch:
Strikes on Aramco export infrastructure.
Shipping insurance rates through Bab al-Mandab.
Whether Western defensive deployments drift toward offensive roles.
---
Israel Votes 27 October: First Post–7 October Election
The race: Polls show a tight contest between Benjamin Netanyahu and former IDF chief Gadi Eisenkot, who founded the Yashar Party and is running on accountability for 7 October. Other players:
Naftali Bennett and Avigdor Lieberman on the right.
Yair Golan on the left.
Two Arab blocs, which nearly all major Jewish parties refuse to work with.
The math: A majority needs 61 of 120 seats. Netanyahu likely needs far-right partners again, some of whom advocate West Bank annexation and Palestinian "migration" from Gaza. Critics say that could amount to forced displacement.
Where the camps actually differ:
Gaza: Not by much. Both camps back Trump's plan, under which Hamas disarms in exchange for a phased Israeli withdrawal. Eisenkot pledges to end Hamas rule within 18 months, by force if needed.
West Bank: This is the real gap. Eisenkot opposes the E1 settlement project, which would effectively bisect the territory, and promises to act against extremist settlers. Netanyahu's camp backs continued expansion. UN data show settler violence at record levels.
Two-state solution: No leading Jewish party is campaigning for one.
On the ground in Gaza: A year into the ceasefire, Israel controls more than half of Gaza and strikes nearly every day. The Hamas-run health ministry reports more than 74,000 deaths. The UN considers the ministry's figures reliable, but they have not been independently verified.
Other issues: Ultra-Orthodox conscription exemptions, the judicial overhaul, and cost of living.
Watch: Exit polls at 20:00 GMT on 27 October and official results on 4 November. Coalition talks could drag on for weeks. Israel held five elections between 2019 and 2022, so a hung outcome is entirely plausible.
---
Haiti: Bukele Threatens Escalation Over Captured Airmen
What happened: Four Salvadoran air force personnel serving with the UN-approved Gang Suppression Force went missing after an ambush in gang-held Croix-des-Bouquets. An explosive set their armored vehicle on fire. El Salvador says they were pilots and technicians handling medical evacuations, not combatants.
The response: Bukele launched a military rescue operation and warned that Wednesday's action was "nothing" compared with what will follow if all four are not returned alive. The GSF reports clashes backed by helicopters and several gang members killed. No group has claimed the abduction.
Context:
Gangs control about 85% of Port-au-Prince and are expanding into rural areas.
The UN warns that gangs are adapting and stepping up reprisals against civilians.
Haiti has held no elections since 2016, and the planned 13 December vote has been postponed indefinitely.
Why it matters: Bukele's domestic brand rests on crushing gangs. He now has personal political stakes in a foreign theater, which raises the risk of a heavy-handed operation in a dense urban area. This is also the first major test of whether the GSF can protect its own personnel.
---
TECH & AIAnthropic's Draft IPO Prospectus: Huge Growth, Huge Bills
These figures come from press reports on a draft filing, not a final prospectus.
The headline numbers:
Revenue: $16.3B in H1 2026, up from $1.1B a year earlier. Roughly 15x growth is extraordinary at this scale.
Net loss: $80.7B in H1 2026. About $72B of that is non-cash write-downs from revaluing convertible bonds and other fundraising instruments. The operating loss is far smaller than the headline suggests, though still substantial.
Compute and infrastructure spending: About $9B in H1, more than all of 2025 ($7.3B).
Long-term commitments: About $450B over 7–10 years:
~$111B to Google Cloud
~$110B to AWS
~$31B to Microsoft
up to $86B for Nvidia capacity rented through smaller AI cloud providers
The red flag: Most revenue came from two customers, and Anthropic expects that concentration to continue. Public-market investors will discount that heavily.
Risk disclosures: Roughly a third of the document covers risks, including a "catastrophic AI incident" whose damage could be too large to insure, and growing local opposition to data centers.
Why it matters: This is the first audited-style look inside a frontier lab's economics. It confirms that revenue can scale fast while capital commitments scale faster. Anthropic is now effectively a counterparty to all three hyperscalers at once. The $450B commitment only works if the revenue curve keeps compounding, and if those two key customers stay.
Watch:
The identity of the two major customers.
Changes between the draft and final filing.
How the market prices a frontier lab whose legal filings warn it could cause uninsurable harm.
---
The PHP Flaw Found by AI, and Exploited at Machine Speed
What happened:
Discovery: OpenAI's model "GPT-5.6 Sol" reportedly found and verified two critical PHP vulnerabilities in late summer.
Patches: After about two months of coordinated work, fixes for the four most recent PHP versions shipped on 21 October. OpenAI also released a Codex "skill" that scans sites for the flaws.
Exploitation: Cloudflare's Matthew Prince says attempts hit millions by the morning of 22 October. Thousands of attempts appeared before public disclosure, and hundreds of thousands within two hours of it.
Industry reaction: Satya Nadella described an exceptionally long day and night for security teams, unlike anything he had seen in a long time.
Exposure: PHP runs roughly 69% of websites.
Precautionary shutdowns around the world:
Russia: Many sites on Russian hosts went dark before patches arrived. Bitrix24 and Beget restricted some features.
UK: A major British broadcaster briefly took its website offline.
Japan: Sega, Bandai Namco, MUFG, ANA, JR East, Nomura and Tokio Marine paused services. The finance ministry and tax agency restricted site access.
South Korea: The government put the private sector on cyber-threat alert.
Netherlands and Finland: Dutch hospital and party sites went offline. Both governments had already restricted sites on 21 October.
Germany and Austria: Universities limited access.
Status: No major confirmed breaches yet.
Why it matters: This is the clearest real-world case so far of AI-driven vulnerability discovery at internet scale. The patch-to-exploit window has shrunk to hours. Attempts before disclosure suggest either leaks during the two-month coordination period or independent rediscovery, and either explanation is worrying. The same capability works for defenders and attackers alike.
The broader pattern: October is shaping up to be brutal for security teams.
Railway: The cloud host says attackers may have accessed customer API keys and database passwords, apparently targeting keys for AI services. It paused all deployments and told customers to rotate every credential. Scope and attribution are not confirmed. Railway links the breach to a broader campaign against developer platforms.
GitLab: It patched a CVSS 10.0 flaw allowing unauthenticated remote code execution, which reportedly existed for about 12 years. Self-hosted administrators should update now.
Watch:
The first confirmed mass breaches from unpatched PHP servers.
Any investigation into exploitation before disclosure.
Whether regulators start asking how AI labs handle the zero-days their models find.
---
Qwen3-Coder: Less Secure Code for "American" Clients?
The claim: A reported test asked Alibaba's coding model, available since last year, to build a service for two hypothetical contractors.
Apps for the US client were exploitable 70% of the time, versus 59% for the Chinese client.
Explicitly requesting secure code pushed the US figure to 74%.
The caveat: This circulated as a meme. Methodology, sample size and statistical significance are unclear, and it is not evidence of deliberate sabotage.
Why it still matters: Code security shifting based on an irrelevant cue like client nationality is a real reliability problem, whatever the cause. It will feed procurement arguments against Chinese models in Western codebases.
Watch: Independent replication, and whether similar effects appear in Western models when the nationalities are swapped.
17 min
October 22Crosswire — October 22, 2026
DAILY BRIEFINGGEOPOLITICSAlbania: Rama Digs In as Student Protests Hit Day Seven
What happened: Students and young Albanians have clashed with riot police in Tirana for seven straight days, trying to force out Prime Minister Edi Rama. Before Monday's violence, official figures already counted 295 injured, 186 of them police.
What the protesters want:
Grievances: Poor university conditions, corruption, alleged election rigging, and alleged links between the government, wealthy foreign investors and organised crime.
The deeper driver: Albania has lost roughly a million people to emigration in a decade. That is a large share of a small country.
Demand: The movement has no formal leaders. Prominent voices want a one-year technocratic government to prepare what they call genuinely democratic elections. Participants openly model themselves on Gen Z protest waves elsewhere.
Escalation on both sides:
Protesters: Cobblestones thrown at government buildings and an attack on a police station.
Police: Water cannon, tear gas and pepper spray.
Arrests: A lawyer for more than 100 detainees alleges indiscriminate arrests and little evidence presented in court. Eyewitnesses describe pepper spray fired point-blank. These are partisan and eyewitness claims, not established findings.
Rama's response:
He refuses to negotiate, saying that if he did, the state would have "fallen."
He blames "dark forces in Europe and the US" for a "well co-ordinated attack." He has offered no evidence.
Why it matters:
Rama has been PM for 13 years and has dominated politics since around 2000. His pitch is that only he can deliver EU membership by 2030.
Blaming the West for protests is an odd posture for a leader whose legitimacy rests on Brussels.
Brussels now faces a test: an EU candidate whose government responds to street unrest with force and conspiracy talk.
Watch:
Whether the protests keep their scale, or the violence erodes public sympathy.
Any EU statement on police conduct.
Whether Rama offers concessions despite his "no negotiation" stance.
---
US–Canada: Fresh Legal Challenge to Trump's 50% Tariffs
What happened: A legal group has sued in the US Court of International Trade to strike down the 50% tariffs on about $20bn of Canadian goods. It is the same group that won the February ruling killing the IEEPA "liberation day" tariffs. This is its fourth tariff case.
The plaintiff: A New Jersey family-owned food importer. It pays 50% on Canadian cheese and also faces Canada's retaliatory duties on the US cheese it sells north of the border. It is caught in both directions.
The legal attack on Section 338 (1930 Tariff Act):
Superseded: The suit argues the provision was effectively replaced by Section 301 of the 1974 Trade Act.
No legal basis: Even if Section 338 still applies, the administration has not shown grounds for sweeping tariffs.
Procedure skipped: The statute requires a 30-day waiting period. Cheese was added to the list just a week before collection began.
Circular logic: The suit challenges using Canada's own retaliatory tariffs as justification for the US duties.
Relief sought: A declaration that the tariffs are unlawful, refunds with interest, and a preliminary injunction halting collection.
Why it matters: The core argument is that the White House is hopping from statute to statute after each court loss, while the Constitution gives tariff power to Congress. If courts agree, the administration's fallback toolkit shrinks further. Context: the tariffs followed the collapse of US–Canada talks in August, and Ottawa matched them "dollar for dollar" last month. The goods affected range from wine and dairy to hockey sticks. The White House has not commented.
Watch:
Whether the court grants a preliminary injunction. That is the near-term lever on actual collections.
Which statute the administration tries next if it loses.
---
Europe and Ukraine: Money Door Closes, Rhetoric Hardens
Frozen Russian assets: Belgium declares the debate over
What he said: Belgian PM Bart De Wever says using immobilised Russian state assets for Ukraine is settled and will not be reopened. He is "certain" the funds will not go to Kyiv. He admitted a colleague described his approach as going through the debate "with a flamethrower."
What's at stake: About €180bn sits at Euroclear in Brussels. Its CEO has repeatedly warned that seizing or leveraging the funds would scare off foreign investors and expose Euroclear to the Russian central bank's legal claims.
Reality check: This is one leader's view. Belgium has been the main holdout against an EU "reparations loan," and it holds an effective veto because the assets sit on its soil. That is a strong position, but "permanently closed" may be overstated. The assets themselves remain frozen.
Framing note: Russian coverage presents this as a win for Moscow.
Merz: Ukraine's capitulation would be Europe's capitulation
What he said: German Chancellor Friedrich Merz said an unconditional Ukrainian surrender is "not an option" because it would mean "the capitulation of all of us." He presented continued German support as following from that.
Context: The remarks reportedly answer Trump administration pressure on Kyiv over peace terms. That fits this week's pattern: the 60-day pause on congressionally passed Russia sanctions, and Trump's claim that Zelensky "never" wanted peace. Merz also appeared to reject the charge that European aid only prolongs the war, though the reporting on that point is murky.
Framing note: Russian outlets paired this with an earlier Merz remark that Russian influence on German society worries him more than the economy or relations with the US and China. That selection appears designed to cast him as fixated on Russia. His original comments were likely more nuanced.
The tension: Europe's biggest economy says Ukraine cannot be allowed to lose. Meanwhile, Europe's biggest potential funding source just got taken off the table by Belgium, and Washington is easing pressure on Moscow. Words from Berlin are not yet matched by a financing mechanism to replace both US support and the frozen-asset option.
Watch:
Whether the EU tries to route around Belgium on the assets.
Whether Germany puts concrete new money behind Merz's statement.
---
TECH & AIYandex: AI Strategy Unchanged After Data Center Strikes
What happened: Yandex says its AI plans are unchanged following recent strikes on data centers, and that AI remains its top strategic priority. The company has not said which facilities were hit or by whom.
Company claims (self-reported, unverified):
Daily active users of the Alice AI app rose 14% over the past month.
Alice AI became Russia's most popular AI service in September, with 59 million users. "Users" is not defined, so it is unclear whether that means monthly reach, registrations or something else.
A "major update" to Alice AI is promised within weeks. Alice is Yandex's long-running assistant, so this is an upgrade, not a new product.
Why it matters:
Data centers are now physical targets in this conflict. That raises the cost and risk of building compute inside Russia, which is already constrained by sanctions on advanced chips.
The statement is aimed at reassuring investors and users. What it leaves out matters: no detail on damage, capacity lost or recovery time.
Watch:
Whether the Alice AI update actually ships on schedule. A delay would hint at real compute disruption.
Any independent confirmation of which facilities were struck.
15 min
October 21Crosswire — October 21, 2026
DAILY BRIEFINGTECH & NATIONAL SECURITYEx-OpenAI Engineer Charged With Bugging a Conference Room, Allegedly With Saudi Backing
What happened: Abdulrahman Alfozan, a 35-year-old Saudi national, is charged with planting an audio recorder in an OpenAI conference room. He had worked at the company for about a year.
How it unfolded:
30 September: OpenAI found the recorder plugged into the back of a TV and covered with toilet paper.
5 October: A camera installed after the discovery allegedly filmed Alfozan checking behind the TV.
9 October: The FBI arrested him, three days before a booked one-way flight to Riyadh with his wife and son. OpenAI has terminated his contract.
The prosecution's allegations, not yet tested in court:
He received "considerable support" from the Saudi government.
He was in frequent contact with a member of the Saudi royal family.
A Saudi military official paid for his wife and son to fly one-way business class to Doha the day after his arrest.
The national security argument: OpenAI executives met government officials in that room while the device was believed to be there. Prosecutors use this to frame the case as more than corporate espionage.
Status: Judge Alex Tse denied bail, citing a "significant" flight risk. The current charge carries up to five years and a $250,000 fine. The FBI investigation is ongoing. Riyadh has not commented.
Why it matters:
Frontier AI labs are now intelligence targets. This is no longer a theoretical risk. If the Saudi link holds up, a state is allegedly running a human source inside the leading US lab.
The insider threat is the weak point. Chip export controls and model-weight security do nothing against a cleared insider with physical access.
The diplomatic stakes are high. Saudi Arabia is positioning itself as a major AI investment and compute partner for the US. A proven state-backed operation would be awkward for that relationship.
Reality check: Today's evidence is circumstantial but pointed: the flight timing and the official paying for family travel. The relatively light charge suggests prosecutors are still building the case. Superseding charges, such as acting as an unregistered foreign agent, would signal a stronger state-link case.
Watch:
Any indictment or superseding charges.
Any Saudi official response.
Whether other AI labs disclose similar incidents or tighten insider vetting of foreign nationals, which would be politically contentious.
---
GEOPOLITICSAlberta Rejects Starting a Path to Separation, by More Than Two to One
What was decided: The vote was not on independence itself. It asked whether the provincial government should begin the constitutional process toward a binding separation referendum. Preliminary results show more than two-thirds voted to stay in Canada. It was the first provincial separation vote since Quebec in 1980 and 1995.
Reactions:
PM Mark Carney called it a "great result" and offered "cooperative federalism," including on immigration.
Premier Danielle Smith opposed separation but allowed the vote under public pressure. She says no binding referendum will happen while she is in office.
Conservative leader Pierre Poilievre welcomed the result.
Saskatchewan Premier Scott Moe also welcomed it but warned that Western grievances with Ottawa remain.
Background to the vote:
A separatist petition gathered about 300,000 signatures. A judge blocked it for failing to consult First Nations, but Smith held the vote anyway.
A counter-petition opposing separation drew more than 400,000 signatures.
Separatists blame federal environmental policy for constraining the oil-rich province.
The unity camp argued Canada needs a united front during the US–Canada trade war. That argument appears to have worked.
The movement isn't finished:
Separatist leader Jeffrey Rath called the vote a "first step" and didn't rule out pushing for repeat votes.
Separatists plan to challenge Smith for the United Conservative Party leadership to install someone more sympathetic.
So the movement is shifting from the ballot box to internal party politics.
The other ballot questions: Alberta also voted on nine non-binding questions: five on immigration and four on the constitution. Early results suggest most will pass, including greater provincial control over immigration levels. Carney's immigration offer is a direct response to this.
Why it matters: The result removes a tail risk to Canadian cohesion at a moment when Washington is pressing Ottawa on trade. It also strengthens the Carney–Smith working relationship, including the proposed oil pipeline to the Pacific coast. That pipeline is the real test of whether "cooperative federalism" delivers anything.
Watch:
UCP leadership manoeuvring against Smith.
Concrete federal concessions on immigration.
Pipeline approval milestones.
---
TECH & AIBank of America's AI Security Audit Reportedly Created a Remediation Bill in the Hundreds of Millions
The reported story:
Bank of America deployed Anthropic's Claude Mythos model internally, originally with cost-cutting in mind.
The model reportedly surfaced so many security vulnerabilities that the bank needed urgent fixes.
To handle them, the bank reportedly added about 1,000 contractors over three months, on top of roughly 3,000 staff already working in this area.
The reported cost is "hundreds of millions of dollars," and the cost-savings goal is on hold.
Caveat: These figures come from a single report and are not independently confirmed. The same applies to the claim that the deployment began as a cost-cutting exercise. Treat the specifics with caution.
Why it matters, even if the numbers are off: The pattern is plausible and important. Capable AI models move the bottleneck in security from finding vulnerabilities to fixing them.
Banks pay first. Large incumbents running decades of legacy code may face a short-term spike in remediation spending before any efficiency gains arrive.
Attackers face no such cost. They get the discovery benefit without the remediation bill. That makes the defensive spending less optional than it looks.
The "AI created jobs" framing is overdone. This looks like a one-time cleanup bulge, not a durable labour trend.
Watch:
Whether other banks disclose similar AI-driven remediation costs, through earnings calls or regulatory filings.
Whether regulators start expecting AI-assisted audits as standard practice.
---
VMmanager Breach: Supply-Chain Compromise Hits Russian Hosting Providers
What happened: Attackers exploited a flaw in VMmanager 6, a virtual server management platform from ISPsystem, which is majority-owned by Astra Group. Malware on some servers mounted customers' virtual server disks and copied files from them.
Timeline:
11–16 October: Management systems may have been compromised, according to ForestNet Cloud.
Night of 16–17 October: The active phase of the attack.
18 October: FirstVDS notified its customers.
Who is affected:
Confirmed victims: FirstVDS, ForestNet Cloud, MHost, HSH Network and YaColo.
Potentially exposed: VMmanager reportedly has about 30 organizational clients, including medical institutions. More victims are likely.
Data potentially stolen:
Passwords and SSH keys
Cloud access tokens
Configuration files
Cryptocurrency wallets
Personal documents
Vendor response: Astra says it is investigating. It has not disclosed the vulnerability, the attack vector, or whether a patch exists. That silence is the biggest problem right now. Astra's shares fell about 1.4% on the Moscow Exchange.
Why it matters:
Classic supply-chain blast radius. One flaw in a shared management tool exposed many providers' customers at once.
Concentration risk from import substitution. Russia's push to replace Western software has concentrated infrastructure on a small set of domestic vendors. Astra bought its 70% stake in ISPsystem in 2022 for about 2.5 billion rubles. Breaches like this show the cost of that concentration.
Theft is not the end of it. Stolen cloud tokens and SSH keys enable follow-on intrusions well beyond the initial victims.
What customers should do: Clients of affected hosts should assume compromise. Rotate passwords, SSH keys, API and cloud tokens, and move crypto funds to new wallets.
Watch:
Technical disclosure and a patch from Astra.
Any regulatory response.
Downstream incidents traced to the stolen credentials.
15 min
October 19Crosswire — October 19, 2026
DAILY BRIEFINGGEOPOLITICSHormuz: Moscow Shields Tehran as Shipping Attacks Peak
What changed: At the ninth Russia–Gulf Cooperation Council ministerial dialogue, Foreign Minister Lavrov said the "root causes" of the Strait of Hormuz crisis must be removed to prevent another round of open conflict. He told his Gulf hosts, in effect, not to blame Iran.
Lavrov's main points:
Implement the "Islamabad Memorandum." He called for carrying out the US–Iran understandings reached under that framework.
Blame Washington and Israel. He argued that navigation was fully free before February 28 and that the US–Israeli military operation is what disrupted shipping.
False equivalence on strikes. He said criticism of Iranian strikes on Gulf states applies equally to US and Israeli actions.
Reality check: This is Moscow's line, and it was delivered to the very states Iran has been hitting. Gulf capitals are unlikely to accept that Tehran bears no responsibility for missiles landing on their territory. Russia is trying two things at once: keep its Iran alignment and present itself as a mediator to the Gulf. It is not clear the GCC is buying that.
What's happening on the water:
Independent data show attacks on merchant ships still using the strait are at their highest level since the conflict began.
Iran may soon fully close the strait to vessels that break its self-declared restrictions.
So whatever the Islamabad framework achieved on paper, it is not holding at sea.
The escalation risk: US media report that Trump and Netanyahu have discussed a new operation against Iran. That would make a second round of open conflict more likely than any de-escalation Lavrov is calling for.
Watch:
Whether Iran formally announces a closure.
Gulf states' public reaction to Lavrov's framing.
Any signal of US or Israeli strike preparations, especially around Israel's October 27 election.
---
Russia–US Diesel Deal: Lavrov Calls Kyiv's Objections "Clownery"
What changed:
Lavrov's dismissal: He rejected EU and Ukrainian objections to a reported deal for Russia to supply diesel to the US. He called Zelensky's demand to be consulted "self-promotion and clownery" and said the deal is a bilateral matter between Moscow and Washington.
Delivery timeline: Deputy PM Novak said diesel would reach the US 15–20 days after a contract is signed, with faster delivery to countries closer to Russia.
What we don't know: No volumes, pricing, contract status or sanctions mechanics have been disclosed. Novak's "after a contract is signed" wording suggests no contract exists yet. Treat the deal as announced intent, not executed trade.
Why it matters: Read this alongside last week's events:
Washington pressured Kyiv to stop hitting Russian refineries.
Trump told Zelensky he had "better damn well stop."
Zelensky has since resumed the strikes.
If the US is lining up Russian diesel, it has a direct commercial interest in Russian refining capacity staying intact. That would explain some of that pressure, though no one has officially drawn the link.
For Kyiv, this is the worst-case framing: its deep-strike campaign now collides with a US supply interest. Europe is also being openly told it has no say.
Watch:
Any signed contract or volumes.
Whether Treasury issues sanctions carve-outs.
Whether Ukraine targets refineries that would feed export-grade diesel.
---
Trump Endorses Netanyahu Eight Days Before Israel Votes
What changed: On Truth Social, Trump gave Netanyahu his full backing ahead of the October 27 Knesset election, calling him exactly the partner the US needs from Israel.
Why it matters:
Election interference by design. This is open US intervention in an allied election, timed for the final stretch of the campaign.
The Iran link. Combined with reports of a joint discussion on a new Iran operation, the endorsement makes the Iran question part of Israel's election. A Netanyahu win would likely be read in Washington as a mandate for further action against Tehran.
Recent tensions. The endorsement comes days after settlers injured US citizens and a Washington Post photographer in the West Bank. The administration's response to that attack was markedly even-handed.
Watch: Polling shifts in the final week, and whether any Iran action is timed before or after the vote.
---
TECH & AIClaude Code Gets Hands-On Inside Unreal Engine (Origin Unverified)
What changed: A free plugin has been released that connects Anthropic's Claude Code directly to Unreal Engine. It is being attributed to Epic Games, but that is unconfirmed. Community tools already link AI agents to Unreal through the Model Context Protocol (MCP), so this could be a third-party project rather than an official Epic release. Check the publisher before relying on it.
Claimed capabilities:
Placing objects on a level
Building Blueprints
Creating materials, animations, VFX and UI
Running tests
The demo: An agent assembles a full level from existing assets. That is the easy case. No one has independently shown it working reliably on complex production projects with custom systems.
Why it matters: The direction of travel is clear. AI agents are moving from writing code snippets to directly operating professional creative tools. If Epic is officially behind this, it would be a meaningful endorsement of agentic workflows from a major engine vendor. If it is community-built, it is one more tool in an already crowded MCP ecosystem.
Watch:
Confirmation of the publisher.
Whether competing engines, notably Unity, respond with official agent integrations.
14 min
October 18Crosswire — October 18, 2026
DAILY BRIEFINGGEOPOLITICSWest Bank: Settler Attack on Olive Harvest Injures Americans and a US Journalist
What changed: Dozens of masked Israeli settlers attacked Palestinian olive farmers near Abu Falah in the occupied West Bank. They burned cars and olive trees and used sticks (some reportedly nail-studded), rocks and slingshots. What makes this attack stand out from routine harvest-season violence is who got hurt: American citizens and a clearly marked US press photographer.
Casualties:
Palestinians: 12 injured, according to a local official from neighbouring Turmus Aya.
US citizens: Four of the injured hold dual Palestinian-American citizenship. One suffered deep head wounds, and his elderly mother was also hurt.
Property: At least three cars were burned.
Journalist: Washington Post photojournalist Heidi Levine says settlers knocked her down and kicked her for about 10 minutes. She was wearing a helmet and flak jacket. Her editor says she was plainly identifiable as press and is demanding a full investigation.
How it unfolded:
Farmers from three villages had pooled their harvest for safety.
Settlers came down from a nearby outpost, and stones were thrown by both sides.
Live fire was heard, but it is unclear whether settlers or Israeli forces fired it.
Israeli forces ended the confrontation by firing tear gas into the Palestinian fields.
Official responses:
Israeli PM's office: The facts are "unclear" and under investigation.
IDF: Confirmed a female journalist was injured and says it will examine "all circumstances."
US State Department: Condemned "criminal violence by any party" and called for investigations, arrests and convictions. The "any party" wording is notably even-handed, given that the injured Americans were on the Palestinian side.
The trend is the real story:
Pace: UN data shows more settler attacks in the past two weeks than in the entire previous harvest season.
Toll so far this harvest: One Palestinian killed and more than 120 injured.
Encroachment: Outposts are moving closer to Palestinian groves. One landowner says his land is now ringed by seven settlements and outposts.
Legal status: Outposts are illegal even under Israeli law, yet many reportedly receive state support. The UN, the ICJ and most governments consider all settlements illegal under international law. Israel disputes this.
Caveats: The account relies largely on eyewitnesses and Palestinian sources. There is no independent confirmation yet of who fired live rounds or how the clash began. The idea that the harvest is a "litmus test" of the Israeli government's pro-settlement policy is an interpretation, not an established fact. The UN numbers, however, are hard to argue with.
Why it matters: Injuries to US citizens and a US journalist make settler violence a direct consular and press-freedom issue for Washington, not a distant one. That raises the cost of Israel's usual "under investigation" response. If the probes stall, as such probes historically have, pressure will grow on the US to go beyond statements, for example by sanctioning individual settlers or outposts.
Watch:
Accountability: Whether any arrests follow, especially for the assault on Levine, which is well documented and will be closely scrutinised.
US escalation: Whether the State Department moves from condemnation to specific measures.
Harvest season: Whether the attack rate keeps outpacing last year's as the harvest continues.
14 min

About Crosswire

From the publisher's feed

Daily geopolitics, tech, and science — cut through the noise.

Share Crosswire

Sign up to save your podcasts

Crosswire

Crosswire episodes

About Crosswire