RSnake Report 20260711
Russian dark fleet attacked, Chinese space orbiter, etc

Skip to the Articles

A residential building in the Podilskyi district was hit directly. Russian forces reduced the number of ballistic missiles in strike packages and timed the attack ahead of the NATO summit in Turkey. These kinds of scenes serve no strategic use, but given that Russia's guidance systems tend to be somewhat suspect, it's not even clear what the target may have been.









Geopolitics
An espionage ring involving members of Italy's intelligence services were allegedly gathering information on Western air defense systems provided to Ukraine. Key figures include a Russian military officer and a former Italian intelligence official, with reports detailing payments for classified information related to military equipment and defense strategies.
An alleged Russian espionage operation in Italy aimed to gather intelligence on air defense systems sent to Ukraine.
Two former Italian intelligence officials were arrested for providing sensitive information in exchange for cash from a Russian military attaché.
[RSnake: Typical spycraft. This is happening all over the world. Russia is really good at this exact kind of operation - HUMINT.]
Source: https://www.defensenews.com/global/europe/2026/07/10/italy-busts-russian-spy-ring-collecting-data-on-ukrainian-air-defense-vulnerabilities/
Tensions between the United States and Iran have escalated as President Trump has threatened severe military action against Iran if they attempt to harm him. The U.S. military has missiles on standby aimed at Iran, coinciding with criticism from Iran regarding the U.S.'s failure to adhere to an interim agreement.
President Trump has indicated readiness for potential military strikes against Iran.
Iran's Foreign Minister has condemned the U.S. for not fulfilling its commitments in a previous agreement.
[RSnake: Really, this whole thing just needs to stay on hold or go back to a peacetime stance until at least November due to the midterm elections. Iran knows this and has a hand to play, but the closer it gets to November, the worse that hand gets. But right now it has a relatively strong hand to play in reducing the oil flow to the world, driving up costs to the average American. The other day I paid over $100 to fill my tank for the very first time. I hear others complaining. It's not awful yet, but it could easily become a massive wedge issue.]
Source: https://www.aljazeera.com/news/liveblog/2026/7/11/iran-war-live-us-demands-iran-publicly-state-strait-of-hormuz-open-for-all?traffic_source=rss
Eight suspects have been indicted for their alleged conspiracy to carry out an attack during a UFC event at the White House, using drones and snipers to target high-profile political figures. The Justice Department claims these individuals had organized a structured plan with roles assigned, and could face life imprisonment if convicted.
The suspects planned to use drones to create a diversion and attack attendees at a White House event.
Charges include conspiracy to provide material support to terrorists and conspiracy to commit murder of federal officials.
[RSnake: I suspected this group would start talking. These are not hardened criminals. Their worst day is losing a video game. They're going to flip on each other the first chance they get.]
Source: https://abcnews.com/US/total-8-suspects-now-indicted-alleged-plot-attack/story?id=134638906
On July 10, 2023, Russian attacks in Donetsk Oblast resulted in the deaths of seven civilians and injuries to 21 others across multiple locations. The assaults included strikes on residential areas and infrastructure in the region, further escalating the ongoing conflict between Russia and Ukraine.
Seven civilians were killed in Russian attacks in Donetsk Oblast on July 10.
A total of 21 people were injured in various locations due to the strikes.
[RSnake: Again, I think this is short-sighted, and only makes Russia look like the bad guys for no upside to the local populace.]
Source: https://www.pravda.com.ua/eng/news/2026/07/11/8043542/
The killing of Iranian Supreme Leader Ayatollah Ali Khamenei in a joint U.S.-Israeli operation has led to an escalation of threats against U.S. President Donald Trump and other prominent figures. Following Khamenei's death, Iran organized large funeral ceremonies where attendees displayed violent rhetoric and the regime vowed retaliation, amid rising hostilities between Iran and the United States, including military exchanges in the region.
Khamenei's assassination by U.S. and Israeli forces marks a significant shift in Iranian leadership.
The funeral showcased public threats against Trump, reflecting heightened tensions between Iran and the U.S.
[RSnake: I'm not sure how the Iranian regime can walk this back.] I think they're asking to be killed, because there is no way to salvage this during peace negotiations.]
Source: https://www.dailywire.com/news/khameneis-funeral-mourners-send-threatening-message-to-america
South Korea is negotiating a historic defense procurement agreement with NATO, which, if finalized, would mark the first such deal between NATO and any country in its 77-year history. This agreement would facilitate South Korean defense companies' access to NATO’s $9.9 billion joint procurement market and align their defense standards with NATO's requirements, reflecting South Korea's rapid growth as a significant player in the global defense sector.
South Korea is set to become the first country to negotiate a defense procurement agreement with NATO.
The agreement is expected to enhance South Korean companies' access to NATO's significant defense market and standardization efforts.
[RSnake: That would definitely put North Korea in a position where it would seriously think about whether it wanted to go after South Korea, even beyond the US bases there.]
Source: https://www.eurasiantimes.com/?p=296737
Cybersecurity
Cyberattacks on the healthcare sector have seen a notable increase in 2026, particularly against service providers, with a 35% rise in attacks compared to the second half of 2025. Ransomware incidents, which disrupt services and can lead to severe patient care consequences, continue to threaten healthcare organizations as attackers exploit vulnerabilities in systems and third-party vendors.
Healthcare businesses experienced a 110% increase in cyberattacks compared to the same period the previous year.
Cybercriminals target healthcare providers due to their vulnerability and the potential for high ransom payouts.
[RSnake: These are pretty nasty attacks, and they really do need to pay out, because the patient's health is too critical not to pay out. Therefore, they are pretty juicy targets.]
Source: https://www.darkreading.com/threat-intelligence/cybercriminals-healthcare-businesses-attacks-surge
Nine vulnerabilities have been discovered in an ATM and corporate security program, which could potentially allow attackers to steal cash. The ATM manufacturer Diebold Nixdorf disputes the significance of the findings, claiming they are not directly applicable to their systems, although some vulnerabilities may have a theoretical impact. This situation raises questions about the security of ATM software and the reliance on third-party encryption tools like CryptoPro Secure Disk.
Nine vulnerabilities were found in an ATM security program, leading to potential risks of cash theft.
Diebold Nixdorf argues that the findings are not relevant to their ATMs, while acknowledging that some vulnerabilities might theoretically apply.
[RSnake: Sadly, I am aware of a LOT more than 9 that have previously affected ATMs and probably still do. One of my hacker friends refers to it as a "retirement plan" if things go south in his day job. Yep. You're probably just as horrified as I am.]
Source: https://www.darkreading.com/vulnerabilities-threats/atm-crypto-software-bugs-jackpot-bust
Countries are increasingly implementing laws to restrict social media use among minors, with Australia, Canada, and the UK all introducing legislation aimed at protecting children online. These laws face challenges in enforcement and compliance from tech companies, as they seek to balance user retention with legal requirements over age verification and data privacy. As various nations experiment with different regulations, the need for effective solutions for age verification and user data management continues to grow.
Countries like Australia, Canada, and the UK have enacted laws to limit social media access for minors.
Tech companies are struggling to comply with these regulations while maintaining user satisfaction and privacy.
[RSnake: Obviously, censorship is a bad thing, but I do think minors should be off social media entirely. It's a cesspool.]
Source: https://www.darkreading.com/cyber-risk/more-countries-jump-on-the-social-media-ban-wagon
Three former employees of a cybersecurity firm were sentenced for their involvement in BlackCat ransomware attacks, which targeted various U.S. companies and extorted millions in ransom. These individuals facilitated ransomware negotiations, shared sensitive information, and received significant payments in return for their cooperation with cybercriminals. The attacks resulted in considerable financial losses for victims across multiple sectors, including financial services and healthcare.
Three former employees of DigitalMint were sentenced for participating in BlackCat ransomware attacks.
The cybercriminals extorted millions from various U.S. organizations by encrypting data and demanding ransom payments.
[RSnake: I discussed this issue previously. This is a pretty nasty new-ish trend of companies having employees paid a pittance to hand over data to malware groups. In larger companies this is nearly impossible to stop, because there is no loyalty and sociopathy is high enough that people will do whatever they can for a few extra bucks.]
Source: https://www.bleepingcomputer.com/news/security/us-ransomware-negotiator-gets-4-years-in-prison-for-blackcat-attacks/
In recent developments related to web security, the focus has been on the vulnerabilities related to storing authentication tokens. Current best practices emphasize using HTTPOnly cookies to safeguard tokens against cross-site scripting attacks and limiting their exposure, while new technologies like device-bound session credentials aim to enhance session security further.
Storing authentication tokens securely is critical due to various web vulnerabilities, particularly cross-site scripting (XSS) attacks.
The adoption of HTTPOnly cookies for token storage and the introduction of device-bound session credentials represent significant improvements in web security.
[RSnake: A bit of a blast from the past here. HTTPOnly and secure flags on cookies are a really good practice. Bonus points if you don't make the path "/" but something more specific so not every page has access to them. That said, there really are no losses on custom-built web apps these days. It's not like it used to be.]
Source: https://neciudan.dev/most-secure-way-to-store-auth-token
A vulnerability, named GhostLock (CVE-2026-43499), exists in the Linux kernel affecting all major distributions, allowing unprivileged local attackers to escalate privileges and potentially escape containers. This issue has persisted for over 15 years and has only recently been patched in Linux version 7.1. Exploiting this vulnerability does not require special kernel configurations or privileges, making it a significant concern for system security.
GhostLock is a critical privilege escalation vulnerability affecting all Linux distributions.
The issue has existed for over 15 years and was patched in Linux version 7.1.
Exploitation of this vulnerability allows unprivileged local attackers to gain root access.
[RSnake: It's old, very old, but not currently being exploited according to VulnCheck. It makes you wonder, why, doesn't it?]
Source: https://nebusec.ai/research/ionstack-part-2/
Technology
SpaceX has filed with the FCC to launch 100,000 additional Starlink satellites, aiming to greatly enhance internet bandwidth and coverage, particularly for rural areas. This expansion, if approved, could position Starlink as the dominant provider in satellite internet, despite concerns from competitors and astronomers about potential interference and the impact on astronomical observations.
SpaceX plans to deploy 100,000 new Starlink satellites for increased internet bandwidth.
The new satellites could redefine satellite broadband services, especially for rural customers.
Concerns have been raised about potential interference with other services and the impact on astronomy.
[RSnake: They are building a new system to launch one new rocket once an hour, every hour, indefinitely. A pretty wild concept.]
Source: https://www.zdnet.com/home-and-office/networking/spacex-wants-to-launch-100000-more-starlink-satellites/
Moss has developed a real-time semantic search layer for conversational AI, aiming to address the latency issues in retrieval infrastructure that can disrupt AI interactions. The service is currently operational in over 100 countries and processes millions of voice minutes for various enterprises. Moss is seeking to hire a Senior or Staff SDK Engineer to lead the development and improvement of their software development kits across multiple programming languages and platforms.
The company operates globally, serving enterprise customers and handling significant voice processing workloads.
There is a current job opening for a Senior or Staff SDK Engineer to enhance the usability and performance of Moss's developer tools.
[RSnake: That is one of the things we really have not solved: time-series and unique data fed into LLMs in real-time. It's going to take some work before that's the case. Right now the solution is to carry along all the data in a single prompt, and that's not at all a tenable long-term solution.]
Source: https://www.ycombinator.com/companies/moss/jobs/52LnqLQ-software-engineer-sdk
A new AI research tool called Sixtyfour is being developed to improve the reliability and accuracy of AI outputs by implementing rigorous evaluation systems that grade the agents' performance against known answers. This approach emphasizes the importance of verifiable sourcing and deep investigative methods to ensure that AI can answer complex queries correctly, rather than just producing plausible-sounding responses. The system not only learns from previous investigations but also aims to outperform traditional human investigative methods by continuously refining its benchmarks.
Sixtyfour uses a grading system to evaluate AI performance and ensure only reliable information is delivered.
The tool combines live web research, public records, and proprietary data to verify claims, improving the quality of AI-generated answers.
[RSnake: There are many such synthetic grading systems. Oddly, they do seem to work okay, but I liken it to system-2 level thinking where you slow down and ask "wait, did I do that right, I had better check my sources" instead of one-shotting your answer.]
Source: https://thenextweb.com/news/the-eval-stack-proving-the-agents-are-right-instead-of-claiming-it
The United States is developing nuclear waste-powered drones capable of flying for over 30 years without refueling. This technology, known as the 'Rads to Watts' program, aims to convert nuclear waste into high-density electrical power for military applications and potentially other uses. The program is being led by DARPA and involves collaboration with various research institutions and companies.
The U.S. is creating drones that harness nuclear waste for long-term power.
This technology could revolutionize military operations and drone capabilities.
[RSnake: It's not exactly clear what they mean by nuclear waste, but likely spent fuel rods that still have some ability to turn a turbine but less efficiently than they used to.]
Source: https://www.eurasiantimes.com/?p=296684
Palo Alto Networks CEO has called for a drastic reduction in artificial intelligence token prices, suggesting they need to drop by 90% to enable broader enterprise adoption. This sentiment is echoed by various other tech executives facing increased costs associated with AI models, prompting an ongoing price war among leading AI firms such as OpenAI and Meta, which are launching new models with varying pricing structures. Simultaneously, major tech companies continue to invest heavily in AI infrastructure despite concerns over sustainability and profitability.
Palo Alto Networks CEO demands a 90% price reduction in AI token costs.
Companies like OpenAI and Meta are in a competitive pricing war to retain enterprise customers.
Heavy investments in AI infrastructure by tech giants suggest a significant industry focus despite profitability concerns.
[RSnake: Sure and yes, I mean I could say 99% too. The odd thing is this has already happened; it's just that people don't like the old models compared to the newer models.]
Source: https://www.zerohedge.com/ai/token-revolt-goes-mainstream-palo-alto-ceo-demands-90-ai-price-collapse-meta-and-openai-reach
Business
New York City has implemented a rule banning deceptive subscriptions and requires transparent pricing for all goods and services, starting in October 2026. This legislation aims to combat 'junk fees' and protect consumers from hidden charges in various sectors, including housing and entertainment. The proposed measures are part of broader efforts by city officials to address affordability and corporate malpractice.
New York City is banning deceptive subscription practices and imposing fines for companies that don't simplify cancellation processes.
The city is targeting hidden fees in pricing for rentals and services to promote transparency for consumers.
[RSnake: This will be welcomed by the average person. But there is a lot of other policies happening in NYC that the average person doesn't realize will likely be wildly bad for the local economy.]
Source: https://www.theguardian.com/us-news/2026/jul/10/new-york-city-deceptive-subscriptions-ban
Volkswagen is implementing cuts to its model lineup and production capacity in response to financial difficulties and increased competition, particularly from Chinese manufacturers. The company plans to reduce its model offerings by up to half and production to nine million vehicles annually, but has not confirmed details regarding potential job cuts, leading to protests and tensions with labor unions.
Volkswagen will cut its model range by up to half and reduce production capacity, citing financial challenges.
The company has faced strong opposition from unions regarding potential job losses and plant closures.
[RSnake: They really should be lobbying to impose tariffs on Chinese vehicle imports. That the Chinese are able to put their vehicles on the road in Europe is only a factor of wildly shaping their currency and underpaying their employees.]
Source: https://thenextweb.com/news/volkswagen-halve-model-lineup-capacity-cuts
HS 2028 introduces significant changes to global tariff classifications, impacting how goods are categorized for trade.
The update emphasizes health, technology, and environmental concerns, which could lead to changes in duty costs and compliance requirements.
[RSnake: What a complex mess. I keep thinking that with volatility come market changes investors can capitalize on. If things are too stable, there is no variability.]
Source: https://www.supplychainbrain.com/blogs/1-think-tank/post/44282-hs-2028-the-next-major-evolution-of-global-tariff-classification
The Venezuelan interim government is negotiating a significant $240 billion debt restructuring, with various creditors competing for favorable terms, particularly in light of the nation's oil industry revenue. US leverage in the situation has increased after the removal of Nicolás Maduro, complicating negotiations due to fragmented debts owed to multiple parties including China, which has significant stakes in the process. While bond investors may see potential returns during the restructuring, the ultimate burden will likely fall on Venezuelans, who will contribute to debt repayment through oil revenues and taxes amidst a need for sustainable economic recovery.
Venezuela's interim government is undergoing a $240 billion debt restructuring process.
The US has gained leverage over Venezuela's oil revenues, impacting creditor negotiations.
The resolution of this restructuring process is crucial for Venezuela's economic recovery.
[RSnake: What a messy negotiation that must be. I am sure China will want to hold firm on a lot of that debt obligation.]
Source: https://www.atlanticcouncil.org/?p=934365
Meta is facing legal scrutiny from the European Commission and U.S. states over allegedly addictive designs of its social media platforms, including Facebook and Instagram. The European Commission's preliminary findings indicate that Meta's practices violate EU digital service laws, while a U.S. court filing reveals potential penalties of $1.4 trillion from several states over user safety allegations.
The European Commission has demanded changes to Meta's platforms to reduce addictiveness.
Meta is facing significant legal and financial repercussions from potential penalties in the U.S.
[RSnake: Frankly, as they probably should. Again, kids should not be on social media. If your kid is, get them off there. Trust me, they're better off.]
Source: https://gizmodo.com/?p=2000784135
Got a useful tip? Looking to chat with me? Click here.