FlashFeed

Full text

U.S. Central Command (CENTCOM) announced that its forces have launched “a series of powerful strikes against Iran to impose heavy costs for targeting and attacking commercial shipping crewed by innocent civilians in an international waterway.” The U.S. strikes “are in response to Iranian attacks on three commercial vessels that were transiting the Strait of Hormuz,” CENTCOM stated on X. “Iran’s demonstrated aggression was unwarranted, dangerous, and a clear violation of the ceasefire.”

The official Iranian state media outlet IRIB reported 13 explosions in southern Iran.

Iranian state media IRIB reports 13 explosions heard in Iran (six near Qeshm and seven near Tahrovi in Sirik County) pic.twitter.com/7Ym3KcefgV

— Steve Lookner (@lookner) July 7, 2026

The CENTCOM attacks follow the U.S. Treasury Department revoking a general license authorizing the sale of Iranian oil. That abrogates a key part of the Memorandum of Understanding (MoU) signed by Washington and Tehran on June 18.

Here's the new Treasury license on Iran: "Revocation and Wind Down of June 21, 2026 Authorization for the Production, Delivery and Sale of Crude Oil, Petrochemical Products, and Petroleum Products of Iranian Origin" pic.twitter.com/2jgRRTQudu

— Phil Mattingly (@Phil_Mattingly) July 7, 2026

While the future of Iran’s nuclear ambitions and its stockpile of enriched uranium are among other key issues addressed in the document, the Strait of Hormuz continues to be a flashpoint.

The latest attacks on shipping all involved tankers.

“A LNG tanker reported being hit by an unknown projectile on the port side engine room causing a fire, whilst travelling southbound through the SOH,” UKMTO reported. That incident took place about eight nautical miles east of Limah, Oman.

Before that, a “VLCC reported being hit by an unknown projectile on the port side upon exiting the SOH” about 16 nautical miles east of Khor Fakkan, UAE, UKMTO added. “Vessel was able to proceed to NPOC [nearest point of call] and no crew injuries were reported.”

The first of the three vessels struck today was a tanker that reported being attacked six nautical miles east of Musandam Peninsula, Oman “by an unknown projectile and has sustained minor structural damage,” UKMTO stated. “No casualties or environmental impact reported and vessel is proceeding to NPOC.”

UPDATE 068-JMIC ADISORY NOTE

Click here to view the full advisory note https://t.co/YusqNRTxM4 #MaritimeSecurity #MarSec pic.twitter.com/kMzR4BHBYE

— UKMTO Operations Centre (@UK_MTO) July 7, 2026

These attacks all took place along the southern-most route in the Strait, which is controlled by the U.S. and Oman recently recommended. Iran controls the northern route and the mid-section of the body of water is considered too dangerous to transit due to the threat of mines.

Last Thursday, Iran’s military warned that all oil tankers moving through the Strait must use its approved routes. It also said that interference by U.S. forces in the strait “will be met with a rapid and decisive reaction.”

But the Joint Maritime Information Center (JMIC), a multinational body overseen by the U.S. Navy, told shippers Monday that the route around Oman “has been expanded and remains available for all traffic.”

The most recent attacks on shipping came after that JMIC notification and about a week after Iran and the U.S. promised to stop striking each other.

JMIC

What happens next is unknown. The peace talks were paused while Iran holds a weeklong funeral for former Supreme Leader Ayatollah Ali Khamenei, who was killed on the first day of the war in an airstrike.

In an interview with Iranian media posted on X, Iranian Maj. Gen. Mohsen Rezaei, advisor to Iran’s supreme leader Mojtaba Khamenei, seemed to appeal to Iranian hardliners who want to resume fighting.

“Friends who oppose negotiations, be patient; the Americans themselves will derail these talks,” he posited.

سرلشکر رضایی: دوستانی که مخالف مذاکره هستند صبر کنند؛ خود آمریکایی‌ها این مذاکرات را ازبین می‌برند. https://t.co/Gzqq24IhiS pic.twitter.com/hRIQWsO1ql

— خبرگزاری فارس (@FarsNews_Agency) July 7, 2026

This is a developing story.

UPDATE: 6:22 PM EDT –

Video and still images purporting to show the U.S. attacks on Iran are emerging on social media. Bandar Abbas, site of Iran’s key naval base on the Strait of Hormuz, appears to be one of the targets. Bandar Abbas has come under attack several times during this conflict.

Footage of US airstrikes hitting Iran’s Bandar Abbas tonight: pic.twitter.com/ycUezpWhCH

— OSINTtechnical (@Osinttechnical) July 7, 2026

Fires seen burning at the Port of Shahid Haqqani in Bandar Abbas, Southern Iran, following tonight’s wave of retaliatory strikes against Iranian military and infrastructure sites by the U.S. Air Force and Navy. pic.twitter.com/ccZPuZvDPG

— OSINTdefender (@sentdefender) July 7, 2026

Bandar Abbas Airport was a major target tonight, where a senior figure in the Islamic regime was present and from where the regime has launched missiles and drones toward neighboring countries. This regime only understands Hebrew and Arabic; it does not understand American… pic.twitter.com/RdDPTgR87T

— Amjad Taha أمجد طه (@amjadt25) July 7, 2026

Video from Shahid Haqqani Port, validated by the network, following U.S. airstrikes on the facility in Bandar Abbas, Iran. pic.twitter.com/msNbYm6r7O

— Faytuks Network (@FaytuksNetwork) July 7, 2026

In a post on X, Axios reporter Barak Ravid said the U.S. strikes on Iran today were “four or five times bigger in scope and power than the previous strikes 10 days ago.”

Iran’s Shahid Haghani port in Bandar Abbas is ablaze after a series of US airstrikes tonight. pic.twitter.com/VkkT3BhTNN

— OSINTtechnical (@Osinttechnical) July 7, 2026

The U.S. strikes in Iran on Tuesday were four or five times bigger in scope and power than the previous strikes 10 days ago, the U.S. official told me https://t.co/TiDTGTxMTV

— Barak Ravid (@BarakRavid) July 7, 2026

Authorities “have launched a search effort for K2 Airways Cargo 737 AP-BOI after the flight did not land as scheduled in Karachi,” FlightRadar24 reported . “KTA1732 was en route from Sharjah to Karachi when contact was lost with the aircraft. Preliminary ADS-B data indicate a loss of altitude, followed by a climb, and then a second, sudden and dramatic loss of altitude. The final received data point from the aircraft was at 16:21 UTC, placing the aircraft at 1,100 ft AMSL with a reported vertical rate of -22,400 feet per minute.”

According to FlightRadar24’s data, the cargo jet flew east over the Strait of Hormuz and the Gulf of Oman when it disappeared from radar screens at about 12:20 PM EDT.

K2 Airways #KTA1732 is reportedly missing. Preliminary ADS-B data indicate a possible crash in the sea southwest of Karachi. https://t.co/IIMDHaGTAy pic.twitter.com/KbyI5kKmh1

— Flightradar24 (@flightradar24) July 7, 2026

The Pakistan Airports Authority reported on X that the aircraft was suffering a “navigational system issue” before contact was lost. There were five people onboard at the time.

However; at time 2121PST aircraft was observed on RADAR rapidly descending and with rapid heading change, subsequently RADAR contact and communication was lost approximately 155 NM west of Karachi.

— Pakistan Airports Authority (@Pk_PAA_Official) July 7, 2026

The exact cause of this incident is unknown at this time. While there are no indications that the aircraft was lost due to hostile activity, the area is extremely tense.

Contact the author: howard@twz.com

The post U.S. Strikes Iran In Retaliation For Multiple Attacks On Shipping In Strait Of Hormuz Over Last 24 Hours (Updated) appeared first on TWZ .

Full text

DeepSeek connected a theoretical browser flaw to a working attack chain

The ransomware sample targets Android's photo folder through a fake permission prompt

Check Point classified 1,383 DeepSeek-linked files as malicious or dangerous

A Chinese AI model accidentally stumbled into a working ransomware technique while trying to satisfy an unrealistic, broad prompt.

New findings from Check Point Research say the DeepSeek-generated sample connected a theoretical browser risk to a functioning attack method, requiring no exploit, no app installation, and no real technical skill from the attacker.

It targets Android's photo storage through a legitimate browser feature called the File System Access API, disguised as a simple AI photo-enhancing tool.

How the attack actually works

The technique abuses Android's DCIM folder, which typically holds years of personal photos, scanned identification documents, and banking screenshots.

Victims grant access through a single permission prompt disguised as an AI-powered photo enhancer, unaware they are handing over control of an entire directory.

Check Point's dataset included nearly 3,000 files attributed to DeepSeek, and researchers classified 1,383 of them as malicious or dangerous using VirusTotal and static analysis methods.

The team found a sample implementing a dangerous browser-native technique which has never been observed before in real-world attacks.

The sample, nicknamed InfernoGrabber 9000, was incomplete, yet testing showed it required little additional effort to become fully functional.

“Very little effort is needed. Low-level expertise is sufficient. You don't need to be a sophisticated cybercriminal or advanced persistent threat group,” said Pedro Drimel Neto, malware analysis team leader at Check Point

“In fact, we've already observed evidence of actual threat actors attempting this attack using straightforward LLM prompts.”

Why this marks a turning point

"What we are witnessing is a fundamental shift in how novel cyber attacks are born. For the first time, we have evidence that an AI model can independently reason across legitimate platform features," said Eli Smadja, Head of Research at Check Point

This represents a major shift in how novel cyber-attacks are discovered and developed.

However, the underlying browser risk is not entirely new. A 2023 USENIX Security paper examined how the File System Access API could theoretically enable ransomware .

What changed, according to Check Point, is that DeepSeek connected these previously theoretical ideas into a realistic, working attack chain without human guidance.

When researchers tested the same concept using the latest DeepSeek V4 model, it refused direct ransomware requests but complied once explicit terms were removed.

Comparable testing against other LLMs produced only refusals or heavily constrained, browser-safe implementations lacking the same file-access capability.

Check Point ultimately built a working proof of concept, successfully encrypting photos on Android devices running Chrome 148, confirming the danger extends well beyond a single flawed sample.

Organizations embedding AI into their workflows must now treat every browser permission prompt as a genuine security decision rather than a routine click.

Full text

Toyota has added a 20-liter AdBlue tank to ensure compliance with emissions regs.

The system injects urea into the powertrain’s exhaust stream to cut emissions.

Toyota has yet to recommence sales of models with the five-speed manual.

Roughly a year after Toyota stopped taking orders for the 70 Series Land Cruiser in Australia , the popular off-roader is back on the market after some powertrain updates. As before, Aussies can expect to flock to the model, despite it dating back to the 1980s.

var adpushup = window.adpushup = window.adpushup || {que:[]};

adpushup.que.push(function() {

if (adpushup.config.platform !== "DESKTOP"){

adpushup.triggerAd("0f7e3106-c4d6-4db4-8135-c508879a76f8");

} else {

adpushup.triggerAd("82503191-e1d1-435a-874f-9c78a2a54a2f");

}

});

The most significant change is on the engine front. To ensure the 2.8-liter turbo-diesel engine complies with the Euro 6d emissions standard used in Australia, Toyota has added a 20-liter AdBlue tank. It injects urea into the powertrain’s exhaust stream to help reduce nitrogen oxide emissions and has its own refueling flap on the front left fender in double cab-chassis models and between the cab and rear wheels in single cab-chassis versions.

Read: The Land Cruiser 70 Was Built For The Outback, Toyota Just Made One For The City

Power figures from the 2.8-liter remain unchanged. As such, the tweaked 70 Series continues to produce 201 hp (150 kW) between 3000 and 3,400 rpm and 369 lb-ft (500 Nm) of torque from 1,600 to 2,800 rpm.

var adpushup = window.adpushup = window.adpushup || {que:[]};

adpushup.que.push(function() {

if (adpushup.config.platform === "DESKTOP"){

adpushup.triggerAd("ea4d4b5a-f8e5-4d5d-9d9a-53a3b956b6cd");

} else{

adpushup.triggerAd("44c0a4dc-e25b-4ba5-ac64-2c510461b92a");

}

});

Interestingly, the Land Cruiser has so far only been re-introduced with the six-speed automatic transmission. As per the company’s Australian division, 78 Series, 79 Series double-cab chassis, and 76 Series GXL versions with the old five-speed manual transmission remain “unavailable for the time being.” The lack of confirmation that the manual has been axed leads us to believe it still has some life left, even though it’s unclear when it could be re-introduced.

Old, But Popular

Toyota Australia

The only other noteworthy change has been to the 78-Series Troopcarrier model, whose fuel tank has been reduced from 180 liters (47.5 gallons) to 130 liters (34.3 gallons), matching all other 70 Series models.

“After pausing orders for certain LandCruiser 70 Series in 2025 to manage customer expectations around vehicle supply challenges, we are excited to say that order books are now back open,” Toyota Australia vice president of sales, marketing, and franchise operations, John Pappas said.

The model’s current 2.8-liter turbodiesel four-cylinder engine is borrowed from the Hilux and replaces the 4.5-liter turbodiesel V8, which had been available until mid-2024.

var adpushup = window.adpushup = window.adpushup || {que:[]};

adpushup.que.push(function() {

if (adpushup.config.platform !== "DESKTOP"){

adpushup.triggerAd("bb7964e9-07de-4b06-a83e-ead35079d53c");

} else {

adpushup.triggerAd("9b1169d9-7a89-4971-a77f-1397f7588751");

}

});

Photos Toyota