Daily Briefing

The Wake — Saturday, July 25, 2026

What happened while you slept.

The Lead

For the first time in nearly two weeks, US forces did not announce overnight strikes on Iran — but Trump called the United States "locked and loaded" and said he was close to ordering a "massive attack." The pause came the same day Iranian-backed Houthis fired a missile at a Saudi vessel in the Red Sea, triggering Saudi airstrikes on the port city of Hodeidah — the first direct Saudi-Houthi exchange of fire in years, threatening a 2022 truce that had quietly held through the war's opening phase. A US Navy vessel separately disabled a tanker attempting to evade the American blockade on Iranian ports.

India's education minister has resigned, the most concrete political concession since the "Cockroach" protests began weeks ago. Demonstrators had hardened their demands to the minister's removal after rejecting the government's fast-track courts offer; the resignation answers that specific ask, though protest leaders have not yet confirmed whether it satisfies the movement. The streets will determine whether this is a landing zone or a waypoint.

Saudi Arabia and the Houthis trade direct fire for the first time since 2022. Riyadh bombed Hodeidah after a Houthi missile struck one of its tankers; the Houthis are now running a maritime embargo against Saudi shipping through the Bab el-Mandeb Strait. What had been an Iran-proxies-versus-West conflict now has a second bilateral front opening between Riyadh and Sanaa.

Framing: Al Jazeera leads with Yemeni civilian casualties in Hodeidah; Western outlets frame the exchange as Saudi self-defense within the broader Iran war.

ICC chief prosecutor Karim Khan voted out by member states. The International Criminal Court's oversight body removed Khan on Friday after nearly two years of sexual misconduct allegations, which he denies. The Trump administration simultaneously vowed to do "whatever it can" to dismantle the court itself, adding a geopolitical dimension to what began as an institutional accountability case.

Why it matters: Khan's removal stalls active ICC cases — including proceedings with implications for the Gaza conflict — at a moment of peak institutional vulnerability.

Wildfires burning across France and Spain have now forced more than 220,000 people from their homes. A blaze is advancing toward Bordeaux from the Cap Ferret direction — a day after the entire peninsula was evacuated by boat — while Spanish officials declared a national emergency and described the Madrid-area fires as "the worst in the region's history." France has issued an international aid appeal; Canada is simultaneously fighting 90-plus active fires in British Columbia after 34,000 lightning strikes in a single week.

A Russian ballistic missile strike on a Ukrainian drone exhibition near Kyiv killed ten people, including defense industry figures. The daytime strike on an event attended by prominent members of Ukraine's defense sector was a deliberate targeting of the country's weapons production network, not a blind civilian attack. Separately, Zelensky is managing political fallout from his dismissal of Defense Minister Fedorov, with protests continuing and commentators describing visible damage to his standing.

A Canadian intern at NATO's military headquarters in Belgium was arrested on suspicion of espionage. Belgian authorities described the woman as being "of Chinese origin" but did not name the suspected handler country. The arrest surfaces as Xi Jinping's diplomatic engagement with Washington continues and Canada is already managing a Thomson Reuters-ICE data deal controversy at home.

Taiwan quietly stepped up planning for siege-condition supply security as Chinese government ships practice blockade-style maneuvers. Taipei is mapping how it would secure fuel and vital imports if China encircles the island — the first detailed public acknowledgment that blockade contingency planning has moved from theoretical to operational. This comes as one of the world's other key chokepoints, Hormuz-Bab el-Mandeb, is actively under stress.

Court documents show the Trump administration canceled $7.5 billion in clean energy grants based purely on how states voted in 2024. Federal officials acknowledged in filings that the terminations were made "based solely" on political criteria, targeting Democratic-majority states. The administration is calling the characterization a "misrepresentation" — but the language is in their own court documents.

Why it matters: If upheld, the admission establishes a legal record that federal funding was weaponized against political opponents — a standard that cuts beyond clean energy to any discretionary grant program.

An NYT investigation found Trump's new Air Force One — the Qatari-donated Boeing 747 — lacks the defensive systems of the old aircraft, and that Trump had to switch planes mid-trip in Turkey after a credible Iranian proxy threat was detected. The rushed push to speed delivery led to ballooning costs and omitted key security modifications; the incident in Ankara is the first confirmed operational consequence of those trade-offs.

Trump attended the White House Correspondents' Dinner and joked about running for a "fourth term" while spending most of an hour relitigating grievances and insulting opponents. The dinner came one day after his DOJ dropped subpoenas against New York Times journalists; the juxtaposition — a press freedom event bookended by a surveillance attempt and a presidential joke about constitutional limits — was not lost on attendees.

Framing: The Guardian described the speech as "rambling" and quickly off-script; NPR covered the security logistics as the real story given the shooting at last year's event.

Trump ordered the Interior Department to post signs outside the Smithsonian National Museum of American History warning visitors of "inaccurate" content, citing a "white, male, Christian" audit of its exhibits. The executive order is the latest escalation in a pattern of using federal authority to reshape how public institutions narrate American history.

The cyclospora outbreak has now spread to nine states, becoming the largest recorded cyclosporiasis event in US history. Illinois, Kansas, Oklahoma, and Pennsylvania joined the original five states; the FDA has not yet confirmed a source. The outbreak is running parallel to a separate 1.6-million-carton egg recall over salmonella risk — two simultaneous food safety crises with no unified public communication.

US measles cases have hit a 35-year high at 2,318 confirmed infections — already above last year's full-year total with five months remaining. The milestone arrives as the administration has cut research funding across public health agencies and the AHRQ discontinued dozens of active research grants this week.

Oil at $100 and a fresh tariff round are now hitting simultaneously — and small businesses are already fighting back in court. Two small businesses filed suit in the US Trade Court on Friday arguing the new "forced labour" tariffs on 60+ trading partners lack the legally required country-specific findings. Australia and the EU formally objected to the forced-labour rationale; the UK, which negotiated a separate deal, found its arrangement undercut as other countries secured comparable or better terms.

Why it matters: The Liberty Justice Center, which backed this suit, has already successfully challenged two prior Trump tariff regimes — making this a credible legal threat, not a protest filing.

Trump escalated against the EU by threatening "substantial" new tariffs after the €890M Google fine, explicitly targeting Apple, Meta, and Amazon alongside Google. The EU DMA enforcement action — the first major test of the regulation — has now triggered a potential trade retaliation loop: Brussels fines US tech companies, Washington responds with tariffs on European goods, Brussels considers counter-tariffs.

Moody's flagged that AI spending is now threatening the credit quality of Amazon, Meta, Alphabet, and other cash-rich tech giants. The rating agency said the scale of investment is forcing even the world's most liquid corporations to lean on debt, equity issuance, and off-balance-sheet structures — a warning that the AI capex supercycle is beginning to stress balance sheets previously considered bulletproof.

Paramount agreed to delay its Warner Bros. Discovery acquisition until as late as June 2027 as legal challenges from a dozen states and the Writers Guild of America play out. The companies called the freeze a "significant win," which reads as spin: they wanted to close by September and now face nine additional months of uncertainty while the media landscape shifts beneath them.

CYBER An AI agent running without human oversight conducted an autonomous post-exploitation operation against Thailand's Ministry of Finance. The attacker installed the Hermes AI agent on a rented server, disabled the permission-asking setting, and let it work independently through the ministry's treasury and tax network, checking hosts for root access and hunting through file systems. This is a documented, confirmed case of an autonomous AI agent conducting state-level intrusion work without human guidance at each step.

Why it matters: The threat model everyone worried about theoretically — AI-accelerated, minimally supervised cyberattacks on government infrastructure — has a real-world case study now.

CYBER Three significant vulnerability disclosures landed simultaneously: a GitLab remote-code-execution exploit requiring only a standard authenticated account, a new Active Directory flaw ("Certighost") letting low-privileged users impersonate domain controllers and retrieve master credentials via DCSync, and a patched ChatGPT Workspace flaw that could have deployed rogue AI agents inside an organization via a single phishing link. The Certighost and GitLab flaws are unpatched as of publication; proof-of-concept code for both is now public.

Why it matters: Public PoC exploits compress the window between disclosure and weaponization to hours — any organization running self-managed GitLab 18.11.3 or unpatched Active Directory should treat this as active-threat priority.

CYBER North Korean threat actor BlueNoroff has operationalized a new phishing kit that profiles cryptocurrency wallets before delivering malware, using compromised industry contacts to impersonate Zoom and Microsoft Teams. Separately, Golden Chickens malware-as-a-service resurfaced with four new malware families including modular implants — an unusually large simultaneous release for a group that typically evolves incrementally.

AI Silicon Valley is now openly fractured on Chinese AI: billion-dollar AI startups are sounding alarms about Chinese models as a strategic threat, while smaller players and open-source developers see Chinese releases as useful tools and potential collaborators. The split maps almost exactly onto who has the most to lose commercially from Chinese model commoditization — large incumbents with proprietary model advantages versus developers who benefit from any capable open-weight release.

Why it matters: Wired's reporting suggests the "Chinese AI threat" narrative is being shaped partly by parties with competitive interests in keeping the US market closed.

HARDWARE SpaceX's second Starship V3 test flight achieved a soft splashdown in the Indian Ocean but suffered another booster engine relight failure. The success matters for NASA's Artemis moon program timeline and SpaceX's stated ambition to deploy a million data centers in orbit; the recurring booster recovery failures mean full reusability — the economic foundation of that ambition — remains unproven at this vehicle generation.

BIOTECH The 2026 El Niño is now tracking to be the strongest on record, with projections of a massive global temperature spike and $10 trillion in cumulative economic losses by 2032. This arrives as one NASA deep space observatory near Madrid — the Deep Space Communications Complex — was damaged by the Spanish wildfires, with damage assessment impossible while evacuations continue.

The Clearing

Documentary: "The Square" (2013) — Dir. Jehane Noujaim

Why now: India's education minister just resigned under sustained street pressure from a Gen Z-led protest movement using smartphones to outmaneuver a government's media machine — a dynamic Noujaim documented in Tahrir Square over a decade ago. The film captures what today's India coverage hasn't yet shown: what happens to a protest movement the morning after it wins its first demand, when the question shifts from "will they concede?" to "was that the concession, or just the opening offer?" Every revolution that outlasts its first victory faces the same rupture between those who want to declare victory and those who know the real fight is just starting.