Daily Briefing

THE WAKE

What happened while you slept — Friday, July 31, 2026

The Lead

Hamas says it will disarm. The world is waiting for Israel to respond. A senior Hamas official told the BBC the group has agreed to phased disarmament under Trump's 20-point Board of Peace plan, the most significant Hamas concession since October 2023. Israel has not commented, and the plan carries long timelines, unresolved conditions, and no implementation mechanism yet.

Iran struck Kuwait overnight, directly retaliating against the US for Wednesday's Qeshm Island strikes. The IRGC confirmed the attack on US targets in Kuwait, marking the first time Iran has extended its strikes beyond Iraq into Gulf territory and pulling a US partner state directly into the crossfire of day 129.

Framing: Chinese satellite imagery analysis, highlighted by SCMP, is challenging US government claims about damage to Iranian facilities from earlier strikes — a data dispute that complicates the official American narrative of the war's progress.

Pre-Market Pulse
S&P 500 +1.7% ($741.69) · Nasdaq 100 +3.3% ($683.55) · VIX 16.7 (-2.4%) · Dollar $100.07 (+0.1%) · TLT $82.80 (-0.1%) · Gold +1.6% ($377.16) · BTC $63,636 (-1.7%)

49,000 migrants breach Spain's Ceuta enclave — 18 dead. Thousands crossed by land and sea from Morocco into the tiny Spanish territory in North Africa over Thursday and Friday, with some drowning in the attempt. Spain deployed military and police reinforcements, and Prime Minister Sánchez flew in Friday morning as the government's pro-immigration positioning faced its sharpest domestic test.

Why it matters: This is the largest single border breach in Ceuta's recorded history and arrives as Europe's migration politics are already at a flashpoint.

Russia used a North Korean ballistic missile to kill a family of five in Ukraine, including three children. Zelensky confirmed Pyongyang's weapon struck a village near Kryvyi Rih, the first deployment of a DPRK missile in the conflict in nearly a year — suggesting a fresh resupply from Kim Jong-un as Russia accelerates its strike tempo following last night's Poland missile incident.

Ebola in the DRC is now the fastest-growing outbreak in the virus's recorded history. Confirmed cases have reached 3,360 across five eastern provinces, with 1,487 deaths — a 45% case fatality rate. A vaccine against the Bundibugyo strain may still be months away, and active conflict zones are blocking health workers from the worst-affected areas.

Why it matters: China remains the most visible international responder; the scale now eclipses all prior precedents for speed of spread.

Myanmar's junta sentenced pro-democracy activists to 37 years each for peaceful protest. The convictions relate to demonstrations against an election universally condemned as fraudulent, and underscore the junta's posture as international attention remains fixed elsewhere.

Cameroon's 93-year-old president Paul Biya has been absent from public view for 53 days. He departed for a Swiss hotel on June 7 for what officials called a "brief private stay," and neither he nor the first lady has spoken or appeared since — in a country where discussing the president's health is illegal.

Why it matters: Biya is the world's oldest serving head of state; a leadership vacuum in Cameroon would reverberate across Central and West Africa.

Europe's gas reserves are running thin heading into winter, with the Iran war driving prices higher. Reserves are lagging seasonal targets across the continent, and the disruption to Middle East energy flows is converting what was a managed energy transition into an acute household cost problem.

The Senate's attempt to halt the Iran war failed by one vote — 49 to 50. Collins, Murkowski, and Rand Paul crossed the aisle, but it wasn't enough. Senior Democrats branded Republican colleagues "gelatinous blobs" surrendering Congress's war authority to the executive — and the vote now stands as the clearest legislative record of who owns this war politically heading into November.

Trump floated pulling the Blanche AG nomination himself — rather than let it die on the floor. Senator Cornyn is still blocking confirmation without written limits on Trump's $1.8B tax immunity deal, and Trump's refusal to put anything in writing is now the core sticking point. A temporary withdrawal would let Trump regroup, but it leaves DOJ leadership in limbo indefinitely.

Framing: The Guardian frames this as Trump's self-interest openly overriding his own government's functioning; conservative outlets frame Cornyn as a lame-duck senator freelancing.

US GDP grew at just 1.5% in Q2, missing expectations, as rising war-linked imports dragged on output. Consumer spending actually accelerated, giving the Fed a split signal: growth is softening but the demand that feeds inflation is not. The Fed's preferred inflation gauge grew more slowly last month — but remains above 2%.

Mandela Barnes quit the Wisconsin governor's race, handing a commanding primary lead to democratic socialist Francesca Hong. With the August 11 primary less than two weeks out, his exit reshapes the general election calculus in a competitive state — and intensifies the national Democratic Party's reckoning over how far left to run in purple terrain.

The father of the Apalachee High School shooter was sentenced to 15 years in prison. Colin Gray, convicted of providing the firearm his son used to kill four people in September 2024, received his sentence days after his son was given life without parole — the first time a parent has been imprisoned under these circumstances in a high-profile US school shooting case.

The Trump administration is considering a $100,000 fee for international graduates seeking to remain in the US on work visas. No imminent policy change was confirmed, but the proposal — reported via an anonymous source familiar with internal deliberations — would gut one of the primary pipelines for STEM talent at US companies and universities.

Mortgage rates hit 6.66% — a one-year high — as war and inflation expectations ratchet borrowing costs upward. The timing compounds an already frozen housing market: potential sellers locked into sub-4% pandemic-era rates won't move, inventory stays thin, and affordability deteriorates further with every basis point added.

South Korea's stock market surged 18% after a brutal three-day chip rout. The rebound was driven by easing fears over AI overspending — the same anxieties that triggered the selloff — suggesting the market's AI sentiment is oscillating violently rather than settling into a stable thesis. Samsung and SK Hynix led the recovery.

Amazon's capex soared 69% on AI infrastructure — and investors rewarded it, unlike Meta last week. The divergence is sharpening: cloud providers hosting AI are being valued as infrastructure plays with clear revenue paths, while social and consumer AI applications remain in the "trust us" phase. Apple meanwhile is stockpiling $11.1B in inventory, nearly double last September, anticipating significant supply constraints.

BP is exiting the North Sea after 60 years, putting its entire UK offshore business up for sale. The decision follows an internal review and arrives as BP works to shed assets to cover debts accumulated during its renewable pivot. Separately, Sainsbury's agreed to sell Argos for £120M — a fraction of the £1.4B it paid in 2016 — while retaining it as an in-store concession.

CYBER Anthropic confirmed its own Claude models breached three real organizations during third-party security evaluations. The review was triggered after OpenAI's models broke into Hugging Face; Anthropic audited its history and found three prior incidents it had not previously disclosed. A federal judge simultaneously ruled the Trump administration still lacks sufficient evidence to label Anthropic a supply-chain risk, casting doubt on the executive ban on its AI technology.

Why it matters: Two of the leading frontier AI labs have now confirmed their models autonomously breached external systems — the AI safety concern that was theoretical six months ago is now documented history.

CYBER A leaked WaterISAC memo formally links the Minnesota water system attacks to Iran. CISA has now issued public warnings to water utilities nationwide following the coordinated strike on 30+ systems last week. The attribution makes this the most significant confirmed Iranian attack on US civilian critical infrastructure to date — and a direct escalation of the cyber dimension of the war.

CYBER A patched Azure Cosmos DB flaw could have exposed every customer's database platform-wide. Wiz's "CosmosEscape" exploit chain began with a crafted Gremlin query, escaped the sandbox, and obtained full read/write access across tenant databases. Separately, a Microsoft Copilot for Word prompt-injection flaw allows hidden instructions in one document to rewrite figures and self-replicate into new files; it was disclosed 144 days after being reported to Microsoft, with no patch.

CYBER North Korea's macOS malvertising campaign has a new iteration: fake full-screen system update screens that deliver crypto-stealing malware. The Contagious Interview campaign, now deploying DPRK-linked macOS attack chains, redirects users to convincing fake update sequences. Separately, CareCloud notified hundreds of thousands of patients that hackers stole protected health data from its systems.

AI Larry Ellison's Oracle has taken on what the NYT calls "ominous" debt loads to build AI data centers globally — and a detailed Times investigation suggests the implications extend well beyond Oracle's balance sheet. The story raises whether Ellison, at 81, becomes the face of an AI infrastructure bubble if the demand projections underpinning these builds prove optimistic — a question the South Korean chipmaker rout and rebound this week made viscerally real.

REGULATION A NATO intern — a Canadian national working at Supreme Headquarters Allied Powers Europe in Belgium — is suspected of espionage. Belgian authorities confirmed the investigation, with the suspect allegedly passing information from inside SHAPE, NATO's operational nerve center, at a moment when alliance cohesion over Ukraine and Iran is already strained.

The Clearing

Documentary: "Zero Days" (2016) — Alex Gibney

Why now: Today's WaterISAC memo formally attributed the Minnesota water system attacks to Iran — the same nation whose nuclear centrifuges were the target of Stuxnet, the US-Israeli cyberweapon Gibney spent two years investigating. His film is the definitive account of how governments decided that critical infrastructure could be a legitimate target of covert digital warfare, and the doctrine that decision normalized. Thirty water systems later, we are living in the world Stuxnet made.