The most consequential attack on American soil this week did not involve a missile, a warship, or a strait. It involved a programmable logic controller — a small, unglamorous industrial computer that opens and closes valves — sitting on the public internet in a Minnesota water plant, answering to the password it came with from the factory.

Starting the weekend of July 26, according to the FBI and the EPA, attackers reached those controllers in more than thirty Minnesota community water systems and then, over the following days, in utilities across at least seven states. The FBI now reportedly believes Iran is the likely culprit. But the attribution is almost the least interesting part of the story. The method is the story, and the method is humiliating.

There was no vulnerability in the classic sense — no unpatched flaw, no clever exploit, no CVE number for a security team to scramble against. On July 30, CISA's instruction to water utilities was not "patch this." It was: get these devices off the internet. The devices were reachable by anyone, from anywhere, and guarded by a default or trivially weak password. The exposure *was* the weakness. As one security analysis put it bluntly this week, the control computer was answering on the open internet with the password it shipped with, and that instruction — disconnect it now — is the whole story.

What that access bought the attackers is worth stating plainly. They changed passwords, locking legitimate operators out of their own equipment. They altered the network addresses of the controllers, knocking devices offline entirely. Four Minnesota cities have said publicly they were hit — South St. Paul, Plymouth, Maple Plain, and Braham. Some utilities issued boil-water notices. Some fell back to the last available option: running the pumps by hand. In this decade of trillion-dollar AI buildouts and autonomous everything, the resilience plan that actually worked was a human being standing at a valve, turning it.

The FBI and EPA advisory named specific brands of control system — reporting since has pointed to internet-exposed equipment from vendors including Schneider Electric and Siemens among those reached — but urged operators of every system to take precautions, because the underlying condition is not brand-specific. It is architectural. Somewhere in the last two decades, tens of thousands of these devices were connected to the internet for the convenience of remote monitoring, and nobody changed the password. That is not an Iranian achievement. That is an American one.

There is a grim symmetry to the timing. As we report elsewhere in this issue, the President spent Monday insisting that talks with Iran were underway and that the Strait of Hormuz would be "completely open" by Tuesday — a claim Tehran flatly denied. The entire news cycle organized itself around the strait: the warships, the blockade, the projectile that struck a cargo vessel off Al Khasab. Meanwhile, the actual, verified, this-happened breach of American critical infrastructure was a quieter thing entirely. It happened at the pump station. It is still happening. Michigan confirmed a small number of incidents; Rapid City, South Dakota, reported one at a lift station in its wastewater system; ABC News reported Georgia among the seven.

Officials stress there is no confirmed case of a contaminated water supply, and that matters — the failure was operational, not yet catastrophic. But the reassurance contains its own alarm. The reason no one was poisoned is not that the systems were defended. It is that the attackers, for now, chose disruption over destruction. That is a decision made in Tehran, or wherever the operators sat, and not one made in South St. Paul.

A nation-state does not need a zero-day to reach a nation that leaves its front door open. The most expensive lesson of the AI decade may turn out to be the cheapest one to fix: change the password. The bill for not doing it is now arriving, plant by plant, and it is being paid in boil-water notices and manual labor by the people least responsible for the exposure.

We will keep counting the plants.

President Trump said the Strait of Hormuz would be "completely open" by Tuesday. It is Tuesday. On the water, almost nothing has changed.

Speaking at the White House on Monday, Trump insisted that negotiations with Iran were already underway — "We are talking right now," he said — and framed the moment as Tehran's "last chance" to sign a deal "before decapitation." He described a two-phase sequence: reopen the strait first, address the nuclear program second. He said the U.S. Navy had "complete control" of the waterway and that "nothing would reach Iran" without Washington's permission.

Tehran's account bears almost no resemblance. Foreign Ministry spokesman Esmail Baghaei said Monday there were no negotiations with the United States taking place and no meetings scheduled. Iran, he said, had no plans to host a delegation or send negotiators abroad in the coming days. The only talks Iran confirms are bilateral discussions with Oman over a *temporary* shipping corridor — and Baghaei was explicit that reaching an understanding with Muscat over that corridor would not, by itself, amount to reopening the strait. He said the waterway would "remain closed until US violations end." A senior Iranian source told Reuters no talks were planned and that Foreign Minister Abbas Araqchi — on a religious pilgrimage in Iraq — would be unavailable at least until week's end.

The physical world sided with Tehran. On Tuesday, the UK Maritime Trade Operations agency reported that a cargo vessel had been struck by an "unknown projectile" roughly 37 kilometers northeast of Al Khasab, Oman. No name, no casualty figures, an investigation opened. Traffic stayed thin: Kpler counted six vessels transiting Hormuz on Monday — three tankers, three bulk carriers — down from seven the day before. This is a strait that carried about a fifth of the world's traded oil and gas before the war.

Then the threats hardened. Major General Mohsen Rezaei, a senior adviser to the Supreme Leader and former IRGC commander, warned that Iran would target any U.S. warship attempting to force open an "unauthorized" second corridor. "Even if they deploy warships, we will target them," he said, adding that continued blockade would bring "serious dangers to the US ships and bases." U.S. Central Command, for its part, said it had redirected 44 commercial vessels, disabled two, and boarded two others while enforcing what it calls a blockade of Iranian ports — not of the strait itself.

Strip away the announcements and the dispute reduces to a single contested sentence in the June memorandum. Washington says the text required Iran to open the strait. Tehran says the text preserved its authority over shipping. Both cannot be reading the same document; only one of them controls the water. As Kpler advised operators this week: treat the chokepoint as contested, not normalized.

It is Tuesday. The strait is not completely open. That is the only verified fact in the paragraph the President wrote.

The fires around Spokane began Saturday, when extreme drought, bone-dry brush, high heat, and hard wind met over Washington's second-largest city. By Monday, three blazes — Old Trails, Autumn Lane, and Fairview — had burned a combined 10,265 acres, destroyed roughly 700 buildings with another 400 unassessed, and put about 67,000 people under evacuation orders. They were completely uncontained.

Some residents have already been back. What they found, in the accounts collected by wire reporters, was reduction: yards under charred debris, and in some cases only a chimney left standing. These are among the most destructive fires in state history.

The response has been enormous and, at its core, manual. More than 1,000 firefighters had arrived by Monday, many from out of state — hotshot crews from Oregon among them — with the count expected to double within days. They went door to door on Saturday trying to save homes one at a time, and were soon overwhelmed by fire moving faster than a line could be cut. Heavy winds pushed flames across containment lines.

On the human side, the arithmetic is anxious but not yet tragic. As of Monday no deaths had been reported. Spokane County Sheriff John Knowles said authorities were trying to reach 14 people, while carefully declining to call them missing — poor cell coverage, dead batteries, people sheltering somewhere off the grid. About 400 to 500 people spent Sunday night at the Spokane Convention Center, converted to a 24-hour shelter where pets are welcome and parking is free; the county fairgrounds opened for livestock and RVs. Spokane Public Schools stood up a free emergency drop-in camp so parents could run recovery errands. The Mann-Grandstaff VA Medical Center was evacuated.

Washington's entire congressional delegation wrote to President Trump on Monday, asking him to approve expedited emergency aid "as quickly as possible," noting that hundreds have lost homes and farms outright. The Pacific Northwest is having one of its worst fire seasons in three decades; at least 16 major fires are burning in Washington alone, with more in Utah and Idaho.

The part that should worry people who are already exhausted is the forecast. Officials say a heat trend is due Wednesday into Friday, back into the 90s — which is why crews are racing to harden lines and get residents home before conditions turn again. August is normally where fire season *starts*. There are months to go.

Here is the transaction, translated out of press-release language. OpenAI wants to lease a ten-gigawatt data center campus in Pike County, Ohio — a site that was once a uranium-enrichment plant — being developed by SoftBank's energy subsidiary, SB Energy. The lease and construction debt could run past a quarter of a trillion dollars. OpenAI cannot borrow that money on its own terms, because OpenAI has never turned a profit and therefore has no investment-grade credit rating. So Nvidia, per reporting confirmed by CNBC and first detailed by the Wall Street Journal, is in talks to guarantee roughly $250 billion of it — to lend OpenAI its balance sheet, so lenders price the debt against Nvidia's creditworthiness instead of the borrower's.

Now the part the announcements bury. That $250 billion is only the *building*. The chips that go inside the building are a separate negotiation, one the Journal reported could reach a further $350 billion. Nvidia has already put $30 billion directly into OpenAI. So the structure, laid end to end, is this: Nvidia invests in OpenAI, Nvidia guarantees the debt that lets OpenAI build the hall, and Nvidia finances the purchase of the Nvidia hardware that fills it. The chipmaker is on three sides of a deal whose entire economic purpose is to sell Nvidia chips.

This is what a demand guarantee looks like when it gets large enough to lose its disguise. There is nothing illegal about it, and there is a coherent bull case: every specialist workload standardized on CUDA makes Nvidia harder to displace, and hyperscaler capex keeps rising — Amazon lifted full-year guidance to $220 billion in late July, and Nvidia's own revenue was up 85% year over year last quarter, 92% of it from data centers. But concentration is the risk the company itself discloses: three direct customers already account for 54% of revenue. A backstop of this size does not diversify that risk. It deepens it, and then it lends the deepening a credit rating.

The caveats are load-bearing. Nothing is signed. The talks "remain in progress and subject to change," which, for a $250 billion contingent liability, is not a footnote — it is the headline. The power for the Ohio site is controlled by the U.S. government and funded separately by Japan under a trade deal, with Commerce Secretary Howard Lutnick deciding who gets access; OpenAI, Anthropic, Microsoft, and Google have all lobbied him. First phase, roughly 800 megawatts, is due in 2028.

Nvidia stock closed Monday at $206.64, up 2.93%, back above $200 on strong Microsoft and Palantir results but stalling under $210 resistance. The market is treating the backstop as bullish. It should perhaps treat it as a tell. When a supplier has to guarantee the loans its customers need to buy its product, the demand is real — but the balance sheet holding it up is starting to be the same one on both sides of the trade.

Nvidia reclaimed $200 this week and then bounced off $210 like a ceiling — because that is what it is. The stock closed Monday at $206.64, up nearly 3%, lifted by strong Microsoft and Palantir earnings that revived confidence in AI infrastructure spending. But the recovery hasn't reversed the technical damage, and analysts are watching $210 as the level that decides whether this is a bottom or a bounce.

What the chart is really measuring is a disagreement about whether the AI buildout is a durable business or a self-reinforcing belief. The bull evidence is concrete: Amazon raised full-year capex guidance to $220 billion in late July; Microsoft's cloud numbers gave fresh proof that heavy AI investment is producing revenue; Jensen Huang argues the semiconductor industry needs to be five to ten times larger and that this cycle is infrastructure-driven, not consumer-driven, so it won't bust like past cycles. He has been right so far — Nvidia's revenue rose 85% year over year last quarter.

The bear evidence is structural and, notably, comes partly from Nvidia's own filings. Data center sales are 92% of revenue. Three direct customers are 54% of it. If any hyperscaler blinks on capex, the concentration that has powered the run reverses hard. Analysts also flag that a squeeze in U.S. core capital spending could force a "major readjustment" among investors who have bought the AI-spending story whole.

Nvidia reports fiscal Q2 2027 on August 26, with revenue guidance around $91 billion. That number, and whatever the company says about the OpenAI financing exposure detailed elsewhere in this issue, is what the $210 line is waiting on. Until then the chart is a poll, and the electorate is nervous.

It is easy to file this weekend under "franchise wins again" and move on. Resist that. *Spider-Man: Brand New Day* opened to roughly $360 million domestically, dethroning *Avengers: Endgame*'s $357 million for the biggest opening of all time, on its way to about $932 million worldwide. That alone is a headline. But it did not power the record by itself.

The record — approximately $430 million across all films in North American theaters, the biggest single weekend ever, ahead of *Endgame*'s peak frame and roughly double the first Barbenheimer weekend — required a second engine. And the second engine was Christopher Nolan's *The Odyssey*, which held $51 million in its *third* weekend and has crossed $911 million globally, closing in on a billion dollars for an adaptation of a nearly-3,000-year-old poem. Add Disney's *Toy Story 5* and *Moana* holdovers, Universal's *Minions & Monsters*, and the machine was full.

The interesting fact is the *pairing*. A comic-book fourth installment and a subtitled-adjacent Greek epic, both drawing enormous crowds in the same building on the same weekend. The lesson the industry keeps mislearning is that audiences want spectacle, or want IP, or want stars — Tom Holland and Zendaya, as it happens, are in both films. The truer lesson is narrower and harder to manufacture: audiences will leave the house for an hour that feels *unmissable* and *communal* — a thing worth being in a room full of strangers for. Nolan sells the *event*; Marvel sells the *appointment*. Both are, at bottom, arguments against watching alone.

Streaming spent five years teaching people that everything is available forever, which quietly taught them that nothing is urgent. This weekend was the counter-argument, cashed at $430 million. The couch is comfortable. It is not, it turns out, unbeatable. You just have to give people a reason that expires.

There is a specific, quantifiable thing a great power's leader possesses, and Donald Trump is spending it faster than any president in memory. It is not credibility in the moral sense — that ship sailed years ago and the argument bores me. It is credibility in the *evidentiary* sense: the working assumption, held by allies, adversaries, and markets alike, that when the President of the United States asserts a fact about the physical world, the fact is probably true.

Watch it drain in real time. On Sunday and Monday, Trump said negotiations with Iran were underway — "We are talking right now" — and that the Strait of Hormuz would be "completely open" by Tuesday. Tehran said, flatly, that there were no talks, no scheduled meetings, and no delegation, only a bilateral conversation with Oman about a temporary route. It is Tuesday. The strait is not open. A cargo ship took a projectile off Oman's coast. The declaration and the world diverged, again, publicly, within 24 hours.

Here is why this is a strategic problem and not a stylistic one. Deterrence, diplomacy, and market stability all run on a shared premise: that a superpower's stated position is a reliable input. When Trump announces a deal that does not exist, he does not gain leverage — he *destroys the instrument* by which leverage is communicated. Allies in the Gulf now have to independently verify the American account before acting on it, which means the American account has stopped functioning as information. Iran, meanwhile, gets to look like the sober party simply by describing what is actually happening. That is an extraordinary own-goal: the adversary has been handed the role of truth-teller.

And the domestic cost compounds it. A president who says "the biggest attack since World War II" was planned and then called off, who insists on talks his own counterpart denies, teaches his own government to discount him. The next time he says something is true and it matters urgently — a real attack, a real deal, a real red line — the reflex he has built is to wait and check. In a crisis measured in minutes, that reflex kills.

You cannot bluff a strait open. The water does not read Truth Social. The tragedy of governing by press release is not that people stop believing you. It's that they stop being *able* to, even when, someday, you happen to be telling the truth.

Watch what got sacrificed and what got kept, because the choice is the confession.

The loud thing was the "Anti-Weaponization Fund" — $1.8 billion to compensate people who felt unfairly prosecuted, a category that conspicuously included January 6 defendants Trump has championed. It was gaudy. It drew bipartisan disgust. Two Republican senators, John Cornyn and Thom Tillis — one who lost a Trump-backed primary, one retiring in January, both therefore beyond his reach — refused to advance acting Attorney General Todd Blanche's confirmation without written proof the fund was dead. So on Sunday night, Blanche formally rescinded it. By Monday, Cornyn and Tillis were on board, and Blanche's path to running the Justice Department was clear.

Now watch what stayed. The audit immunity — the part of the same IRS settlement that shields Trump, his sons Eric and Donald Jr., and the Trump Organization from examination of prior tax filings — remains in place. It was tweaked to appease the senators: limited to retroactive claims, narrowed in scope and timeframe. But it survived. And by prior New York Times and ProPublica reporting, it could wipe away what may be more than $100 million in back taxes. Four former IRS and DOJ officials — including a former IRS commissioner and a former national taxpayer advocate — filed an amicus brief this week arguing the immunity violates the Domestic Emoluments Clause and asking whether the underlying lawsuit was a "fig leaf" to give private self-dealing "the imprimatur of legality." A judge has already called the settlement improper self-dealing and referred a Trump attorney for possible discipline.

So: the $1.8 billion spectacle, designed to reward allies, was surrendered. The $100 million personal benefit, wrapped in tax-procedure language most reporters won't chase past the second paragraph, was preserved. That is not a defeat dressed as a compromise. It is a magician's misdirection executed in public. The senators got their scalp; the scalp was the decoy.

The durable lesson for anyone watching how power actually launders itself in 2026 is this: the corruption that survives is never the corruption that trends. Outrage is a targeting system, and it targets the vivid. Give it something vivid to kill — a fund, a slogan, a number with a "billion" attached — and it will feast on that while the quiet, technical, individually-enriching provision walks out the back door in a suit. Trump even told us it was theater: he posted that if Blanche weren't confirmed, the fund would be "immediately" back on the table. It was always the bargaining chip. The immunity was always the point.

Democrats now want legislation to bar the fund permanently. Fine. But they are still fighting the decoy. The thing worth a hundred million dollars already got away, and it got away by being boring on purpose.