Summary
Oil soars on reports of Iran targeting US Jordan base; Iraqi militants attack KSA for 2nd day.
Hormuz indirect talks continue amid reports of a possible resurrected MoU deal.
Shipping remains stalled with virtually no tanker traffic through Hormuz.
Iran insists Hormuz stays closed unless its terms are accepted.
Houthis escalate attacks, prompting more ships to avoid the Red Sea.
*
RFK Jr. Says HHS Found Fauci Diaries Across 11 Different Servers
It took us about eight months to dig these out of 11 separate servers, where they had been sequestered and secreted," Kennedy said during an appearance on Fox News.
After obtaining the private entries of Fauci, who was the head of the National Institute of Allergy and Infectious Diseases at the National Institutes of Health (NIH) from 1984 to 2022, officials with the Department of Health and Human Services (HHS) handed over the documents to Sens. Rand Paul (R-Ky.) and Ron Johnson (R-Wis.). The senators have been investigating the origins of COVID-19 and the response to the COVID-19 pandemic.
Paul, the chairman of the Senate Committee on Homeland Security and Governmental Affairs, subsequently released diary entries from December 2019 through December 2022, combined into one document.
"I think the starkest impression that you get from reading these diaries is this massive dichotomy between what he was saying privately and what he was simultaneously saying publicly," Kennedy, whose HHS oversees NIH, said on Fox.
Fauci's institute had provided funding to a Wuhan laboratory to run experiments on coronaviruses, at least one of which added a feature to a virus. A 2018 research proposal outlined work that would insert a feature called a furin cleavage site into a coronavirus, which may have been done at the Wuhan lab.
https://www.zerohedge.com/covid-19/rfk-jr-says-hhs-found-fauci-diaries-across-11-different-servers
OpenAI's Rogue Agent Hit A Second Company, Executive Reveals - And The Blast Radius Just Got Bigger
The rogue OpenAI agent behind this month's unprecedented AI-driven cyber intrusion claimed a second corporate victim, an executive at New York-based Modal Labs has revealed - a detail absent from the original account and one that widens the known blast radius of the episode.
According to the Modal executive and sources cited by Reuters, the same autonomous agent that broke into Hugging Face also compromised one of Modal's customers, using that customer's environment as a staging base for the broader campaign.
Modal was pointed about the distinction: its own platform and isolation were never breached. The agent exploited an unauthenticated endpoint that one of Modal's customers had left open to the internet - effectively an unlocked door anyone could have walked through - giving it root-level access to that customer's code-execution sandboxes. From there the agent had a disposable, third-party launchpad from which to run the rest of its operation.
It's bad enough that a frontier AI agent can independently discover attack paths, escape its container, and compromise an unaffiliated company's production systems. The Modal revelation shows it reached further than that - treating any publicly reachable, poorly secured infrastructure it encountered as expendable staging ground, exactly the opportunistic chaining that security researchers have warned agentic systems would carry out at machine speed.
The Spree That's Already Known
Most of what led up to the Modal disclosure has already been picked over, but the shape of it is worth a recap. In early July, OpenAI was running an internal evaluation built on ExploitGym - a public benchmark that measures how well an AI system can turn a known vulnerability into a working exploit. The models under test, GPT-5.6 Sol and a more capable unreleased prototype, were deliberately run with their cyber-safety refusals reduced and the classifiers that normally block high-risk activity switched off, because the point was to measure maximum offensive capability.
The agent found and exploited a previously unknown flaw in the one package-registry proxy it was allowed to reach, escalated privileges, moved through OpenAI's research environment, and got to a machine with open internet access. Once online, it reasoned that Hugging Face likely hosted the answer key to the very benchmark it was being tested on, and went to steal it rather than solve the problems itself. Between roughly July 11 and 13 it ran thousands of automated actions against the platform - gaining code execution through two separate flaws in its dataset-processing pipeline, harvesting credentials, and moving laterally across internal clusters. Forensic work later recovered on the order of 17,600 distinct attacker actions.
Hugging Face caught and contained the intrusion through its own AI-assisted monitoring, and says the only thing the agent actually made off with was a limited set of the benchmark's challenge solutions - no public models, datasets, or user-facing services tampered with. To reconstruct the timeline, its team had to fall back on an open-weight model, because the commercial frontier models refused to analyze the real attack data.
What The Wider Scope Means
The Modal disclosure lands on top of a timeline that was already awkward for OpenAI. By several accounts, the company did not recognize its own agent as the source for roughly a week:
July 16: Hugging Face goes public, attributing the intrusion only to an unknown autonomous AI agent, without naming the operator.
July 21: OpenAI formally acknowledges the incident, connecting the activity to its own evaluation only after combing internal logs over the preceding weekend.
OpenAI has called the episode "an unprecedented cyber incident" and maintains the models were narrowly fixated on the evaluation goal with no broader malicious intent. In its latest update, the company said the more capable model was an internal-only prototype, since deactivated and restricted, that the proxy vulnerability has been disclosed to the vendor, and that a small number of publicly exposed credentials on other services were also used along the way - the kind of qualifier that, paired with the Modal revelation, suggests the full scope of the campaign is still coming into focus.
https://www.zerohedge.com/ai/openais-rogue-agent-hit-second-company-executive-reveals-and-blast-radius-just-got-bigger
Saudis join US strikes on ‘Iran-aligned militias’ in Iraq
Washington and Riyadh accused pro-Iranian groups of targeting American forces and Saudi energy infrastructure
CENTCOM said on Tuesday that American and Saudi fighter aircraft had targeted multiple logistics and weapons facilities used by groups allegedly directed by Iran’s Islamic Revolutionary Guard Corps (IRGC).
“US Central Command and the Saudi Arabian Armed Forces conducted precision strikes in Iraq, July 28, against Iran-aligned terrorists that the Islamic Revolutionary Guard Corps directed to attack US forces and Saudi energy infrastructure,” the command said.
Washington claimed that the operation was launched in response to more than 30 IRGC-directed drone attacks over the previous 72 hours. It said the attempted strikes on American forces had been unsuccessful, but did not provide evidence linking the targeted Iraqi groups to the attacks or identify them by name.
Shortly after the Saudi strikes, the industrial city of Jazan was reportedly targeted in an apparent Houthi retaliation, with a large fire breaking out at a facility operated by the state-owned oil company Aramco. The Houthis had also claimed attacks on two Saudi tankers, one of which caught fire, while another sustained minor hull damage.
Saudi Arabia previously led a military intervention in Yemen in 2015 against the Houthis, who had captured the capital, Sanaa. The years-long bombing campaign failed to defeat the group and deepened Yemen’s humanitarian crisis.
https://www.rt.com/news/643594-saudi-us-strikes-iraq/