TCG Isin expected to play vital role in locating Filo Jet’s voyage data recorder 514 metres below surface

A deep-sea search and rescue vessel is on its way to Cyprus as Turkey joins efforts to retrieve the 20 people still missing after a passenger ferry capsized off the island’s northern coast.

The TCG Isin will join the vast operation to find survivors after the high-speed ferry sank on Sunday barely four nautical miles outside the port town of Kyrenia.

Continue reading...

16 Horsepower

Personal work Q3 2026

Social

Toch een verrassende analyse uit verrassende hoek, namelijk door CNN-columnist Brett McGurk (wiki), Midden-Oostengezant onder Obama, Biden en tot januari 2020 onder Trump. Zijn lezing is als volgt: sinds vorige week is het scheepsverkeer door Hormuz terug naar 2/3 van het pre-oorlogniveau, Iran was voor deze oorlog al ernstig verzwakt door economische sancties en staat er sinds de oorlog aanzienlijk slechter voor, en tegenstelling tot tijdens de oorlog lijkt Amerika nu een coherent plan te hebben. Hij schrijft het als volgt op:

"Sinds half juli hebben de VS opnieuw een militaire blokkade van Iraanse havens en sancties op de Iraanse oliehandel ingesteld. Tegelijkertijd heeft het Amerikaanse leger onvermoeibaar gewerkt aan het vrijhouden van vaarroutes en het beschermen van koopvaardijschepen die door de Straat varen. Dit heeft geleid tot een effectieve blokkade van Iraanse olietransporten, waarbij de wereldwijde verschepingen zich herstellen en de energieprijzen opmerkelijk stabiel blijven. Bloomberg meldde deze week dat de oliestromen door de Straat zich hebben hersteld tot twee derde van het niveau van vóór het conflict. Dit betekent dat de druk nu toeneemt voor Iran, en niet voor de VS. En als Iran niet langer in staat is de Straat als gijzelaar te gebruiken, verliest het snel zijn onderhandelingsmacht.

(...)

Iran ging de oorlog in, verzwakt door jaren van sancties en economisch wanbeheer. De huidige positie van het land is aanzienlijk slechter. Volgens het Internationaal Monetair Fonds zal de Iraanse economie dit jaar naar verwachting met meer dan 5% krimpen, terwijl de inflatie richting de 70% gaat. De waarde van de Iraanse munteenheid is sterk gedaald. De prijzen van basisgoederen zijn enorm gestegen. Een functionaris van het Iraanse ministerie van Arbeid schatte onlangs dat er alleen al in de eerste drie maanden van de oorlog meer dan een miljoen banen verloren zijn gegaan.

(...)

Maar de Revolutionaire Garde heeft middelen nodig om met geweld te kunnen regeren, en deze nieuwe vierde maatregel – een militair embargo – is iets waarmee Iran nog niet eerder is geconfronteerd. Het is zelfs de eerste keer sinds de revolutie van 1979 dat Iran te maken krijgt met een blokkade van zijn economische levensader via de Straat van Hormuz.

(...) De uitweg voor hen is te stoppen met het bedreigen van schepen in de zeestraat en afstand te doen van wat er nog over is van hun grotendeels vernietigde verrijkingsprogramma. Dat is een deal waarmee Trump zou instemmen. Vanuit het perspectief van de Revolutionaire Garde zou een dergelijke stap echter getuigen van zwakte en hun machtspositie in gevaar brengen. Teheran zou kunnen proberen zich met geweld uit deze wurggreep te bevrijden. De strategie tijdens de eerste drie bedrijven was duidelijk: de scheepvaart in de zeestraat bedreigen, de energieprijzen wereldwijd en de benzineprijzen in de VS opdrijven, de wereldwijde economische druk verhogen en Trump uiteindelijk dwingen in te binden, vooral met het oog op de naderende tussentijdse verkiezingen.

(...) Deze strijd kan, in de een of andere vorm, voortduren tot het einde van Trumps presidentschap en daarna. Hij is al bijna vijf decennia aan de gang. De eerdere fasen van deze oorlog werden aan Amerikaanse zijde gekenmerkt door wisselende en onduidelijke doelstellingen, sterk uiteenlopende standpunten en inconsistente uitspraken. Maar de vierde fase lijkt anders te zijn. Het Amerikaanse leger heeft een duidelijk doel, zoals deze week uiteengezet door de commandant van CENTCOM, admiraal Brad Cooper: het handhaven van de blokkade van Iran en het faciliteren van de doorvaart van commercieel scheepvaartverkeer.

Het doel van de VS zou eveneens duidelijk omschreven moeten zijn. Iran moet zijn aanspraken op de zeestraat laten vallen en het nucleaire verrijkingsprogramma opgeven. Tot die tijd zal dit de nieuwe status quo zijn. En die status quo — wellicht voor het eerst sinds het begin van de oorlog — is nu in het voordeel van Washington, niet van Teheran."

WAARVAN AKTE.

Animated characters, patterned textiles, logos from iconic fashion labels, graffiti, and more coalesce in the vibrant portraits of Victor Quiñonez. Born in Mexico, raised in East Dallas, and now based in Brooklyn, the artist, who works as Marka27, is interested in the ways activism and pop culture converge, and he infuses the visual language of contemporary street art with Indigenous imagery and Mexican mural traditions. Whether working on large-scale walls or more intimate canvases, Quiñonez taps into his own experiences of living between cultures and the arbitrary nature of national borders.

Portraits like “Luchando Por Mi Alma” superimpose the signature Louis Vuitton pattern, desert flora, a striped weaving, a masked Lucha Libre figure, and a stereotypical, low-wage character from the television show Family Guy atop a portrait of a man in a wide-brimmed hat. This pastiche is emblematic of what Quiñonez dubs his “neo Indigenous” style in which potent cultural symbols and a critical consideration of the social and political landscape converge.

In his solo exhibition Ni de Aquí, Ni de Allá, which translates to “not from here, not from there,” the artist presents several portraits alongside a collection of sculptures and immersive installations. Following its debut at Boston University in 2025, the exhibition traveled to the University of North Texas in Denton, where it was on view briefly before being shut down by the administration. Now at its third venue, Ni de Aquí, Ni de Allá will open at Institute of the Arts and Sciences in Santa Cruz this October.

The censored show is explicitly critical of the Trump administration’s immigration crackdown, with the artist’s I.C.E. Scream series confronting the mandate. This particular body of work includes a street vendor’s pushcart and sculptural paletas, one of which encases handcuffs in its translucent resin body with a faint image of a person in a cage imprinted on the oversized stick. Smaller acrylic iterations contain photographic portraits of street vendors embedded within. Etched onto the wooden sticks are a government logo paired with a mock agency called “U.S. Inhumane and Cruelty Enforcement.” By placing portraiture at the center of every work large and small, the artist directs our attentions to the very people most impacted by these actions, while emphasizing our shared humanity.

“At first glance, you’re like, ‘Oh, wow, that’s a popsicle.’ You want to approach it. It brings back nostalgia for everyone. It symbolizes something fun, innocent and childlike,” Quiñonez told The Los Angeles Times. “But then when you get closer, you see the writing on the popsicle sticks. … I wanted to show the two different sides of the world that we’re living in.”

In addition to his studio works, the artist has painted murals in cities across the U.S., which you can explore more of on his website and Instagram.

Do stories and artists like this matter to you? Become a Colossal Member today and support independent arts publishing for as little as $7 per month. The article Marka27 Superimposes Pop Culture, Graffiti, and Political Critique in Urgent Portraits appeared first on Colossal.

An unknown miscreant is using "TerminalFix" to trick unsuspecting users into running PowerShell commands that infect their computers with a reverse tunnel granting attackers access to their networks. Some of the malware is even hidden inside PNG graphics the PC downloads. TerminalFix is the latest variant of the wildly popular ClickFix initial access method for attackers. This type of social engineering technique tricks users into running malicious commands by promoting them with a phony fix or CAPTCHA verification. While traditional ClickFix attacks point victims to the Windows Run dialog, TerminalFix directs users to Windows Terminal or PowerShell, which increases the likelihood that they will unknowingly run multi-line scripts on their own computers, Redmond says. Plus, instead of delivering just one infostealer, this campaign kicks off a multi-stage attack chain that combines DLL sideloading, steganographic payload extraction, and Active Directory reconnaissance. It ultimately deploys a custom reverse tunnel on the infected machine that gives the attacker persistent, network-level proxy access through the compromised device. Microsoft declined to answer The Register’s questions, including how many organizations were targeted and victimized in this TerminalFix campaign, and which attacker or criminal crew is responsible for these attacks. The attack chain begins when the victim interacts with a phony overlay that spoofs the Cloudflare CAPTCHA “verify you are human” checkbox and includes a Cloudflare logo, causing a fake verification command to be copied to the clipboard before the victim pastes it into Windows Terminal or PowerShell. This command runs a hidden PowerShell script that prints a fake “Starting Cloudflare verification…” message and downloads a ZIP archive from an attacker-controlled server. It extracts the archive under C:\ProgramData and launches a batch file (1.bat) that silently executes LockScreenContentServer.exe. LockScreenContentServer.exe is a legitimate, signed Windows executable - and it acts as the DLL sideloading host for a second file: dui70.dll. This purports to be a “Windows DirectUI Engine,” but is actually the malicious payload, which executes a second-stage PowerShell script once it’s sideloaded. The second PowerShell script downloads additional payloads hidden inside PNG images - this is called steganography, and it makes file- and content-type inspection more difficult, and thus easier to hide malicious payloads. In an attempt to further obfuscate the payload and avoid being detected, the attacker split the payload into multiple PNGs. The PowerShell script downloads the three images, extracts an executable from the first image and two halves of the DLL from the second and third images, and then reassembles the components on disk. “After extraction, the source images are deleted to reduce forensic artifacts,” Microsoft researchers Sagar Patil, Suriyaraj Natarajan, and Parasharan Raghavan wrote. The malware establishes redundant persistence through both HKCU\…\Run registry keys and scheduled tasks that re-execute LockScreenContentServer.exe every 60 minutes to ensure it survives reboots. It then does reconnaissance on the compromised machine, scooping up system information across multiple language configurations including English, Spanish, and German. It also performs domain trust discovery, domain admin enumeration, and Active Directory user and computer searches, while pinging targeted, named servers. “The observed names correspond to common infrastructure roles, including domain controllers, databases, backup, gateways, and mail systems,” according to the threat hunters. “This probing could help an attacker identify accessible target systems for follow-on activity.” Next, the malware drops a persistent PowerShell file-watch loop that monitors a text file for new commands, executes them via Invoke-Expression, and writes results to an output file. This allows the attacker to execute additional PowerShell commands by writing them to the text file. And finally, the attacker deploys a custom, Python-based reverse-tunnel implant. The tunnel launches with no visible window via pythonw.exe, and it sets up a reverse WebSocket tunnel to gitnow[.]dev:443. This implant, combined with earlier reconnaissance data, gives the attacker SOCKS-style TCP proxy access through the victim’s network. Microsoft recommends organizations take several steps to avoid becoming a victim of this campaign. These include restricting PowerShell and Run dialog execution, and either blocking or auditing the Windows Run dialog (Win+R) if it’s not needed for daily work. Also, train employees on how to look for ClickFix tactics, like fake CAPTCHA verification pages that tell them to paste commands into Terminal or the Run dialog. ®

It sure seems like it.

The stores confirmed to be affected include Fort Irwin, Calif.; F.E. Warren Air Force Base, Wyo.; Fort Huachuca, Ariz.; Naval Station Newport, R.I.; Columbus Air Force Base, Miss.; and Travis Air Force Base, Calif., according to announcements made online by each installation.

Naval Air Station Lemoore, Calif., also experienced an outage, according to M. Elizabeth, writer of the Substack newsletter Signal and Silence.

Each service declined to answer questions about how many bases are affected by the outages, referring all questions to the Defense Department. Pentagon officials did not respond to questions.

However, a defense official said the department is aware of a “possible refrigeration disruption at some Defense Commissary Agency commissaries.” The official was not authorized to comment publicly and spoke on the condition of anonymity.

All speculation at this point, but it’s hard to come up with another explanation for the coincidence.

Chris Medland runs through the biggest talking points as F1 heads to Monza for Round 13 of the 2026 season.

Ahead of the Italian Grand Prix we look back on some of the most memorable moments from Monza.