MAGNET S2 SNAPSHOT 260712-1200z

Download a PDF version of this repor

MAGNET S2 WEEKLY SNAPSHOT — 260712-1200Z

MAGNET S2

Weekly OSINT Intelligence Snapshot

DTG: 260712-1200Z | Reporting Period: 6–12 July 2026 | United States Focus

www.magnethf.com

MAGCON STATUS

MAGCON

LEVEL 3

ELEVATED

MAGCON HOLDS AT LEVEL 3 – ELEVATED; TREND SHIFTS TO WORSENING. The one-week US–Iran Hormuz de-escalation pause reported last cycle expired ~6 July, and combat resumed within days. Iran’s IRGC fired on multiple commercial vessels 6–7 July, prompting escalating US retaliation — CENTCOM struck ~80 Iranian targets 8–9 July and ~140 targets 11 July, its third round of strikes this week. On 11 July, Iran struck a Cyprus-flagged container ship, a Qatari LNG tanker, and a Saudi-flagged crude tanker, and formally declared the strait closed; the IRGC also struck Prince Hassan Air Base in Jordan, and the UAE reported responding to missile/drone threats. Lloyd’s List reports no large vessel has transited the US-coordinated southern route since 7 July. Oman has drafted a two-corridor proposal (free southern route / Iran-approval-only northern route, no tolls) — discussed in Muscat 11 July, not finalized. Separately, the Israel–Lebanon Trilateral Framework is advancing: a US official says the first pilot zone in southern Lebanon will launch within days, with Rome follow-on talks 15–16 July; Hezbollah’s rejection is unchanged. Domestically, Senate Judiciary Chairman Lindsey Graham (R-SC) died suddenly on 11 July at age 71, and Sen. Mitch McConnell (R-KY) remains hospitalized for a fourth week with cause undisclosed — an unverified “braindead” claim has circulated but is disputed by senators reporting recent phone contact with him. Four new critical/high CISA KEV entries were added this cycle (ColdFusion, JoomShaper, Langflow, Joomlack); SharePoint and SimpleHelp KEVs remain active, unresolved risks. The PJM grid emergency flagged last cycle resolved without blackouts. The FIFA World Cup enters its semifinal round with no new incident, though Iran’s continued participation carries added sensitivity given the resumption of open combat.

TREND VS LAST WEEK: WORSENING — HORMUZ CEASEFIRE COLLAPSED / COMBAT RESUMED / STRAIT DECLARED CLOSED / ISRAEL-LEBANON IMPLEMENTATION ADVANCING / SEN. GRAHAM DECEASED / SEN. MCCONNELL HOSPITALIZATION ONGOING / FOUR NEW CRITICAL KEVs

PRIMARY RISK DRIVERS

NEW / WORSENING — Strait of Hormuz Ceasefire Collapse: One-week pause expired ~6 July. IRGC fired on multiple vessels 6–7 July; US struck ~80 then ~140 Iranian targets (8–9, 11 July) — third strike round this week. Iran struck 3 vessels and declared the strait closed 11 July. IRGC struck Prince Hassan Air Base, Jordan; UAE responded to missile/drone threats.
NEW — Oman Two-Corridor Hormuz Proposal: Draft plan for a toll-free Southern Corridor (Omani waters) and an Iran-approval-only Northern Corridor, no tolls. Discussed Muscat 11 July; not finalized.
ADVANCING — Israel–Lebanon Trilateral Framework Implementation: First pilot zone in south Lebanon to launch within days; Rome follow-on talks 15–16 July. Hezbollah rejection unchanged; no major new strikes confirmed.
NEW — Death of Sen. Lindsey Graham (R-SC): Senate Judiciary Chairman and Trump ally died 11 July, age 71, “brief and sudden illness.” Confirmed by his office and multiple national outlets.
ONGOING — Sen. Mitch McConnell (R-KY) Hospitalization: Fourth week hospitalized, cause undisclosed. Unverified “braindead” claim circulating — disputed by Sens. Thune, Barrasso, and commentator Scott Jennings, each reporting direct phone contact this past week.
NEW — Four Additional Critical CISA KEV Entries: Adobe ColdFusion (CVE-2026-48282), JoomShaper SP Page Builder (CVE-2026-48908), Langflow (CVE-2026-55255), Joomlack Page Builder (CVE-2026-56290), added ~7 July.
NO CHANGE — Delaney Hall, PJM Grid, Section 702: Delaney Hall strike remains reportedly ended. PJM grid emergency resolved without blackouts. Section 702 posture unchanged from last cycle.
ONGOING — FIFA World Cup Semifinal Round: No new incident this cycle. Iran’s continued participation carries elevated sensitivity given resumed combat; final scheduled 19 July at MetLife Stadium.

DELTA SUMMARY – CHANGES FROM LAST REPORT (260705-1200Z)

TOPIC	DELTA FROM 260705-1200Z / STATUS
Strait of Hormuz — Ceasefire Status	WORSENING — CEASEFIRE COLLAPSED, COMBAT RESUMED. One-week pause expired ~6 July. Iran fired on multiple ships 6–7 July; US struck ~80 then ~140 Iranian targets (8–9, 11 July). Iran declared strait closed 11 July after striking 3 vessels. Coordinated-route traffic near zero since 7 July — reverses last cycle’s “STABLE — PAUSED, NOT RESOLVED.”
Hormuz Toll/Fee Dispute	UPDATED. Oman has drafted a new two-corridor proposal (free Southern Corridor / Iran-approval-only Northern Corridor, no tolls), discussed in Muscat 11 July. Supersedes but has not resolved the prior joint fee proposal; not finalized.
Israel–Lebanon Trilateral Framework	ADVANCING. Moving into implementation phase; first pilot zone to launch “within days.” Rome talks scheduled 15–16 July. Hezbollah rejection unchanged; no major new strikes confirmed.
Sen. Lindsey Graham (R-SC)	NEW. Died 11 July, age 71, “brief and sudden illness.” Senate Judiciary Chairman; continuity implications for committee leadership during an active-conflict cycle.
Sen. Mitch McConnell (R-KY)	ONGOING. Hospitalized since 14 June (4th week), cause undisclosed. Unverified “braindead” claim disputed by direct phone contact reported by Thune, Barrasso, Jennings. Marked ✗ Not Confirmed.
CISA KEV — 4 New Entries	NEW. Adobe ColdFusion (CVE-2026-48282), JoomShaper SP Page Builder (CVE-2026-48908), Langflow (CVE-2026-55255), Joomlack Page Builder (CVE-2026-56290) added ~7 July.
SharePoint RCE / SimpleHelp RMM KEVs	ONGOING — NO CHANGE. Both federal deadlines remain past-due; continue to treat any unpatched, internet-exposed instance as compromised.
Delaney Hall Hunger/Labor Strike	NO CHANGE. Independently corroborated as ended ~22 June following ICE/GEO retaliation. DHS maintains standing denial.
PJM Grid Reliability Emergency	RESOLVED / NO CHANGE. The 30 June–3 July emergency (Report 260702-2359Z) concluded without blackouts. No new PJM emergency this cycle.
FIFA World Cup	ONGOING. Semifinal round underway; final 19 July at MetLife Stadium. No new incident. Elevated sensitivity given Iran’s participation amid resumed combat.
Section 702 Lapse	NO CHANGE. Statutorily lapsed since 12 June; FISC certifications keep obligations in force through ~March 2027.

NO CHANGE

MAGCON level holds at 3 – ELEVATED (trend revised to WORSENING)
Bab el-Mandeb / Red Sea stable at ELEVATED — Houthi posture unchanged
Converse Reservoir IED (Mobile, AL) — FBI investigation ongoing, no arrest, no confirmed motive
GKN Aerospace Garden Grove, CA groundwater contamination testing — results still pending
Canvas LMS breach phishing risk window — continues through mid-August
CISA CI Fortify initiative — ongoing
Section 702 — statutorily lapsed, FISC certifications in force through ~March 2027
Delaney Hall — strike status remains “reportedly ended”; NJ AG lawsuit against GEO Group remains active

SECTOR THREAT LEVELS

SECTOR	LEVEL	NOTES
Terrorism / Extremism	ELEVATED	IRGC strikes on Jordan base and expanding regional strike pattern raise retaliatory/lone-actor risk. FIFA World Cup carries added sensitivity given Iran’s participation amid resumed combat.
Cyber Activity	ELEVATED	Four new critical/high KEVs this cycle (ColdFusion, JoomShaper, Langflow, Joomlack). SharePoint RCE and SimpleHelp RMM auth bypass (CVSS 10.0) remain active, unresolved.
Critical Infrastructure	ELEVATED	PJM grid emergency from last cycle resolved without blackouts. SimpleHelp compromise remains a live MSP/CI supply-chain concern.
Energy / Fuel Sector	WORSENING	Reverses last cycle’s “stable” assessment. Ceasefire collapse, strait closure declaration, and tanker strikes have driven coordinated-route transit to near zero since 7 July.
Education Sector	ELEVATED	No change. Canvas breach phishing risk continues through mid-August.
Civil Unrest	ELEVATED	No change. Delaney Hall strike status remains “reportedly ended,” independently corroborated. Watch other ICE facilities nationally.
Transportation Systems	WORSENING	Hormuz combat resumption directly disrupts maritime transit; FIFA World Cup travel continues through the 19 July final.
Supply Chain / Logistics	WORSENING	Hormuz shipping collapse reintroduces near-term global energy supply-chain risk. SimpleHelp RMM compromise remains an active MSP supply-chain risk.
Mass Gatherings / Public Safety	ELEVATED	FIFA World Cup semifinal round underway, final 19 July; no new incident, but Iran’s participation amid resumed combat is a heightened watch item.

GLOBAL CHOKEPOINT WATCH

CHOKEPOINT	STATUS	ASSESSMENT
Strait of Hormuz	CRITICAL	Upgraded from ELEVATED. Ceasefire collapsed ~6 July; active strikes resumed (3 rounds, ~140 targets 11 July). Iran declared the strait closed 11 July. No large vessel has transited the coordinated southern route since 7 July. Oman’s two-corridor proposal unfinalized. Do not transit without current TRANSCOM/JMIC guidance.
Bab el-Mandeb / Red Sea	ELEVATED	Stable. Houthi threat posture unchanged. No significant new incidents this cycle.
Panama Canal	ROUTINE	Stable. Normal operations.
Strait of Malacca	ELEVATED	SE Asia energy stress likely to re-intensify given the renewed Hormuz disruption; monitor closely.

KEY INCIDENTS

US–Iran Hormuz Ceasefire Collapse — Combat Resumed (6–12 July)

The one-week Hormuz de-escalation pause reported last cycle — tied to America’s 250th anniversary and Ali Khamenei’s funeral — expired around 6 July without extension. Iran’s IRGC fired on multiple commercial vessels on the night of 6–7 July; the UK Maritime Trade Operations Center separately reported a tanker struck and set afire off Oman. The United States retaliated with escalating strikes: approximately 80 Iranian targets, including more than 60 IRGC boats, on 8–9 July, then approximately 140 targets on 11 July — the third round of US strikes within the week. Iranian parliamentary speaker Mohammad Bagher Qalibaf warned: “If you strike, you’ll get hit,” while CENTCOM issued a public fact-check on 9 July reasserting that Iran does not control the strait.

On 11 July, Iran struck three vessels within roughly 24 hours — a Cyprus-flagged container ship (one crew member missing), a Qatari-flagged LNG tanker, and a Saudi-flagged crude tanker — and formally declared the strait closed to shipping via “unauthorized routes.” The IRGC separately struck Prince Hassan Air Base in Jordan; the UAE reported responding to missile and drone threats. Lloyd’s List Intelligence data shows no large vessel has transited the US-coordinated southern route with AIS active since 7 July, a sharp reversal from 108 verified crossings the prior weekend. Oman has drafted a new two-corridor proposal — a toll-free Southern Corridor through Omani waters, and a Northern Corridor through Iranian waters requiring prior Iranian approval but no tolls — discussed 11 July in Muscat, remaining unfinalized. Assessment: this is a genuine escalatory reversal, not a continuation of last cycle’s pause — three rounds of US strikes in one week indicates an active exchange, and the near-total collapse of coordinated-route traffic is materially worse than the “paused, not resolved” assessment carried last cycle.

Israel–Lebanon Trilateral Framework — Moves Toward Implementation

The Israel–Lebanon–US Trilateral Framework signed 26 June is advancing into an implementation phase. A US official said the first pilot zone in southern Lebanon will launch “in a matter of days,” with additional pilot zones being mapped. Israeli Ambassador Yechiel Leiter announced talks will resume in Rome 15–16 July to hand off technical work to working-level teams. Lebanon has reportedly conditioned participation on Israel fulfilling its withdrawal pledge. Hezbollah’s rejection of the framework as “null and void” remains unchanged, and no major new Israeli strikes on Lebanon were confirmed this cycle. Assessment: incremental forward movement rather than resolution — the first concrete test will be whether LAF forces actually enter and hold a pilot zone without incident.

Death of Sen. Lindsey Graham (R-SC)

Sen. Lindsey Graham, Chairman of the Senate Judiciary Committee and a close ally of President Trump on foreign policy, died 11 July 2026 at age 71 following what his office described as a “brief and sudden illness”; multiple outlets report emergency personnel responded to a cardiac-arrest call at his residence. Confirmed by his office and widely reported. Assessment: raises near-term Judiciary Committee leadership-succession questions and removes a key national-security voice during an active-conflict reporting cycle; watch for committee reassignment and any effect on confirmation or oversight schedules.

Sen. Mitch McConnell (R-KY) — Extended Hospitalization, Unconfirmed Claims

Sen. Mitch McConnell has now been hospitalized for a fourth week (since 14 June), with his office declining to disclose either the cause of admission or his current condition beyond stating he “continues to improve.” The information vacuum has produced online speculation, including an unverified claim — amplified by a fringe activist account — that McConnell is “braindead” and on life support. This claim is directly disputed: commentator Scott Jennings, Senate Majority Leader John Thune, and Senate GOP Whip John Barrasso have each separately reported direct phone conversations with McConnell within the past week. CNN footage reportedly shows McConnell loaded into an ambulance the morning of 14 June. Assessment: per this cycle’s Verified Status standard, the “braindead” claim is marked NOT CONFIRMED and should not be repeated as fact; the confirmed picture is an unusually long, undisclosed hospitalization with no vote cast since 11 June, during a narrow-majority period with pending NDAA and appropriations work.

Carryover — Delaney Hall / PJM Grid / FIFA World Cup

No material change this cycle on three items flagged previously. The Delaney Hall hunger/labor strike remains reportedly ended (independently corroborated); the NJ AG lawsuit against GEO Group remains active with no ruling. The PJM grid reliability emergency (Report 260702-2359Z) concluded without blackouts. The FIFA World Cup has entered its semifinal round with no new confirmed security incident; the 19 July final at MetLife Stadium remains the standing high-visibility watch item, now carrying added sensitivity given Iran’s continued participation amid resumed Hormuz combat.

CYBER / INFRASTRUCTURE KEV BULLETIN

KEV Bulletin — Patch Immediately

CVE / SYSTEM	SEVERITY	ACTION REQUIRED
CVE-2026-48282 Adobe ColdFusion	HIGH	NEW Added ~7 July. Path traversal. Apply Adobe’s security patch immediately; audit for unauthorized file access on internet-facing servers.
CVE-2026-48908 JoomShaper SP Page Builder	CRITICAL	NEW Added ~7 July. Unauthenticated attacker can upload arbitrary PHP files for RCE. Patch or disable the plugin immediately.
CVE-2026-55255 Langflow	CRITICAL	NEW Added ~7 July. Authorization bypass — authenticated attacker can execute another user’s AI workflow via flow ID. Patch immediately; audit execution logs.
CVE-2026-56290 Joomlack Page Builder	HIGH	NEW Added ~7 July. Improper access control. Apply vendor patch immediately; review logs for unauthorized config changes.
CVE-2026-45659 Microsoft SharePoint Server	CVSS 8.8	ONGOING. Federal deadline (4 July) passed. Authenticated Site Member-level attacker can achieve RCE. Apply May 2026 patch if not already done.
CVE-2026-48558 SimpleHelp RMM	CVSS 10.0	ONGOING. Federal deadline (2 July) passed. Actively exploited — TaskWeaver/Djinn Stealer MSP supply-chain campaign. Upgrade to 5.5.16/6.0 RC2; audit Technician accounts.
Fortinet “FortiBleed” (70,000+ devices)	HIGH	ONGOING WATCH — not a formal KEV; intelligence-confirmed mass exploitation. Patch, hunt, rotate all Fortinet VPN credentials.

EMERGING INDICATORS

Watch: Oman’s two-corridor Hormuz proposal — formal acceptance, rejection, or counter-proposal will determine whether this cycle’s escalation becomes the new baseline or a step toward a renewed pause.
Watch: Further US-Iran strike rounds — three rounds in one week suggests an active escalatory cycle; monitor for a fourth round or a reciprocal pause announcement.
Watch: Israel-Lebanon pilot zone launch and the 15–16 July Rome talks — the first concrete test of LAF deployment into a pilot zone.
Watch: Sen. McConnell’s health status — any official disclosure of cause/prognosis, given the vacuum has already produced one disputed rumor this cycle.
Watch: Senate leadership/committee continuity following Sen. Graham’s death — Judiciary Committee succession and effect on NDAA/appropriations timelines during a narrow-majority period.
Watch: SimpleHelp and SharePoint exploitation scope — both remain unresolved; watch for confirmed ransomware deployment or new victim disclosures.
Watch: FIFA World Cup semifinal/final security posture through 19 July — Iran’s participation now carries added sensitivity.
Watch: Converse Reservoir IED and GKN Garden Grove groundwater results — both remain open with no material update this cycle.

VERIFIED STATUS

✓CONFIRMED Iran’s IRGC fired on multiple commercial vessels in the Strait of Hormuz 6–7 July, unraveling the prior de-escalation pause. (Axios, UK Maritime Trade Operations — 7 July 2026)
✓CONFIRMED US retaliated with strikes on ~80 Iranian targets 8–9 July, then ~140 targets 11 July. (CNN, RFE/RL — 9, 11 July 2026)
✓CONFIRMED Iran struck a Cyprus-flagged container ship, a Qatari LNG tanker, and a Saudi-flagged crude tanker, and declared the Strait of Hormuz closed 11 July. (CNN — 11 July 2026)
✓CONFIRMED IRGC struck Prince Hassan Air Base in Jordan; UAE reported responding to missile/drone threats. (CNN — 11 July 2026)
✓CONFIRMED No large vessel has transited the US-coordinated southern Hormuz route with AIS on since 7 July. (Lloyd’s List Intelligence via Al Jazeera — 10 July 2026)
✓CONFIRMED Oman has drafted (not finalized) a two-corridor Hormuz transit proposal, discussed in Muscat 11 July. (CNN, Fortune — 11 July 2026)
✓CONFIRMED Israel-Lebanon talks to resume in Rome 15–16 July; first pilot zone to launch “within days.” (JNS — 7 July 2026)
✓CONFIRMED Sen. Lindsey Graham (R-SC) died 11 July 2026 at age 71 following a “brief and sudden illness.” (NBC, Fox, CBS, NPR, CBC, France24, Al Jazeera — 12 July 2026)
✓CONFIRMED Sen. Mitch McConnell has been hospitalized since 14 June 2026, now in a fourth week, cause undisclosed. (CNN, Washington Post — 6–7 July 2026)
✓CONFIRMED Sens. Thune, Barrasso, and commentator Scott Jennings each report direct recent phone contact with Sen. McConnell. (Forbes, CNN — 7–9 July 2026)
✓CONFIRMED CISA added four new vulnerabilities to the KEV catalog this cycle: CVE-2026-48282, -48908, -55255, -56290. (CISA.gov — 7 July 2026)
✓CONFIRMED Delaney Hall hunger/labor strike ended ~22 June following facility retaliation actions. (Wikipedia — accessed 12 July 2026)
✗NOT CONFIRMED Claim that Sen. McConnell is “braindead” or on life support — directly disputed by senators’ reports of recent phone contact.
✗NOT CONFIRMED Cause of Sen. Graham’s death beyond the office’s description of a “brief and sudden illness.”
✗NOT CONFIRMED Whether Oman’s two-corridor Hormuz proposal has been accepted by either the US or Iran.
✗NOT CONFIRMED US-Iran broader MOU/final peace agreement signed; underlying toll dispute and Lebanon linkage remain unresolved, now compounded by renewed combat.
✗NOT CONFIRMED Hezbollah disarmament under the Israel-Lebanon framework has begun; no confirmed LAF deployment into pilot zones as of DTG.
✗NOT CONFIRMED DHS acknowledgment of a Delaney Hall hunger strike having occurred; DHS maintains its standing denial.
✗NOT CONFIRMED GKN Garden Grove groundwater contamination results; testing ongoing.
✗NOT CONFIRMED Converse Reservoir IED suspect or motive; FBI investigation ongoing, no arrest.

OPERATOR GUIDANCE

HORMUZ TRANSIT — SUSPEND ROUTING PENDING CURRENT GUIDANCE: Military action has resumed and Iran has declared the strait closed. Verify current TRANSCOM/JMIC guidance before any Hormuz-adjacent operation.
PATCH FOUR NEW KEVs IMMEDIATELY: Adobe ColdFusion, JoomShaper SP Page Builder, Langflow, Joomlack Page Builder. Apply vendor patches per CISA guidance; audit for exploitation since ~29 June.
CONTINUE SHAREPOINT / SIMPLEHELP REMEDIATION: Both KEVs remain unresolved risks with passed federal deadlines. Treat any unpatched, internet-exposed instance as compromised.
DO NOT AMPLIFY UNVERIFIED MCCONNELL HEALTH CLAIMS: Treat the “braindead” claim as unconfirmed. Rely on official statements and direct-contact reports from named officials only.
SENATE-CONTINUITY SITUATIONAL AWARENESS (NO ACTION REQUIRED): Monitor Senate leadership/committee dynamics following Sen. Graham’s death and Sen. McConnell’s extended absence.
NJ / NORTHEAST OPERATORS — DELANEY HALL: No change. Strike remains reportedly ended; underlying conditions dispute and litigation remain active.
ICE-FACILITY-ADJACENT OPERATORS NATIONALLY: Five other ICE facilities have active or recent hunger-labor strikes — continue treating as a national pattern.
FIFA WORLD CUP HOST-CITY OPERATORS: Semifinal round underway; final 19 July at MetLife Stadium. Resumed combat adds sensitivity around Iran’s remaining fixtures and traveling delegation.
FORTINET — URGENT IOC CHECK (STANDING): 70,000+ confirmed-compromised firewalls remains an active, unresolved intelligence item.
GENERAL: Report cyber incidents to cisa.gov or IC3.gov. Check magnethf.com/reports for any MAGNET S2 flash reports published since this snapshot.

SOURCE LIST

All sources open-source. Admiralty rating: letter = reliability, number = confidence (e.g. A1 = fully reliable, confirmed).

[1] [A1] CNN — US strikes Iran after ship attack in Strait of Hormuz, 11 Jul 2026 — cnn.com
[2] [B2] Wikipedia — 2026 Strait of Hormuz crisis, updated 12 Jul 2026 — wikipedia.org
[3] [A2] RFE/RL — US Insists Iran ‘Does Not Control’ Strait of Hormuz, 9 Jul 2026 — rferl.org
[4] [A2] Fortune — US and Iran can’t agree on fully reopening the Strait of Hormuz, 11 Jul 2026 — fortune.com
[5] [A1] Axios — Strait of Hormuz: Iran attacks three ships in 24 hours, 7 Jul 2026 — axios.com
[6] [A1] Al Jazeera — Strait of Hormuz traffic plunges as US, Iran resume fighting, 10 Jul 2026 — aljazeera.com
[7] [A2] Al Jazeera — Ships attacked in the Strait of Hormuz: what that means for talks, 7–8 Jul 2026 — aljazeera.com
[8] [B2] Jerusalem Post — Israel-Lebanon framework is a first step, but Hezbollah remains the test, 11 Jul 2026 — jpost.com
[9] [A2] JNS — Israel, Lebanon move to implementation phase of framework agreement, 7 Jul 2026 — jns.org
[10] [B2] Security Council Report — Lebanon, July 2026 Monthly Forecast — securitycouncilreport.org
[11] [A1] NBC News — Sen. Lindsey Graham dies at 71 after ‘brief and sudden illness’, 12 Jul 2026 — nbcnews.com
[12] [A1] Fox News — Sen. Lindsey Graham dead at 71, 12 Jul 2026 — foxnews.com
[13] [A1] CBS News — Senator Lindsey Graham dies after brief and sudden illness, 12 Jul 2026 — cbsnews.com
[14] [A1] NPR — Sen. Lindsey Graham of South Carolina dies at 71, 12 Jul 2026 — npr.org
[15] [A2] CBC — US Republican Senator Lindsey Graham dead at 71, 12 Jul 2026 — cbc.ca
[16] [A2] France24 — US senator and Trump ally Lindsey Graham dies, 12 Jul 2026 — france24.com
[17] [A2] Al Jazeera — Lindsey Graham, one of Israel’s strongest US Senate allies, dies at 71, 12 Jul 2026 — aljazeera.com
[18] [A2] CBS News — US and world leaders pay tribute to Lindsey Graham following sudden death, 12 Jul 2026 — cbsnews.com
[19] [A2] Forbes — What We Know About Mitch McConnell’s Health, 7 Jul 2026 — forbes.com
[20] [A2] Democracy Now! — Kentucky Governor Demands Update on Sen. McConnell’s Health, 9 Jul 2026 — democracynow.org
[21] [A2] Forbes — Video Footage Shows McConnell Taken By Ambulance, 10 Jul 2026 — forbes.com
[22] [A1] Washington Post — Here’s what we know about Sen. McConnell’s health, 6 Jul 2026 — washingtonpost.com
[23] [A1] CNN — Mitch McConnell has been hospitalized for three weeks, 7 Jul 2026 — cnn.com
[24] [A1] CISA — Adds Three Known Exploited Vulnerabilities to Catalog, 7 Jul 2026 — cisa.gov
[25] [A1] CISA — Adds One Known Exploited Vulnerability to Catalog, 7 Jul 2026 — cisa.gov
[26] [B2] Wikipedia — Delaney Hall, updated Jul 2026 — wikipedia.org
[27] [A1] MAGNET S2 Report 260702-2359Z — PJM Grid Reliability Emergency (carryover) — magnethf.com
[28] [B2] Wikipedia — List of 2026 FIFA World Cup controversies, updated 12 Jul 2026 — wikipedia.org

FLMSG / TERMINAL BULLETIN

BEG FLMSG DE MAGNET S2 / DTG 260712-1200Z SUBJ: WEEKLY OSINT SNAPSHOT // UNCLASSIFIED // OSINT PERIOD: 06-12 JUL 2026 // MAGCON: L3 ELEVATED (WORSENING) PRIORITY ITEMS: 1. HORMUZ CEASEFIRE COLLAPSED ~6 JUL. IRAN FIRED ON MULT SHIPS 6-7 JUL; US STRUCK ~80 THEN ~140 IRANIAN TARGETS (8-9, 11 JUL), 3RD STRIKE ROUND THIS WK. IRAN DECLARED STRAIT CLOSED 11 JUL AFTER HITTING 3 VESSELS; STRUCK JORDAN AB. COORDINATED-ROUTE TRAFFIC NIL SINCE 7 JUL. OMAN DRAFTING 2-CORRIDOR PLAN, NOT FINAL. 2. ISRAEL-LEBANON FRAMEWORK ADVANCING: PILOT ZONE LAUNCH IMMINENT, ROME TALKS 15-16 JUL. HEZBOLLAH STILL REJECTS. 3. SEN LINDSEY GRAHAM (R-SC) DIED 11 JUL, SUDDEN ILLNESS, AGE 71. SJC CHAIRMAN. 4. SEN MCCONNELL HOSPITALIZED 4TH WK, CAUSE UNDISCLOSED. UNCONFIRMED “BRAINDEAD” CLAIM DISPUTED BY THUNE/BARRASSO DIRECT CONTACT. 5. 4 NEW CISA KEVS: COLDFUSION (CVE-2026-48282), JOOMSHAPER (-48908), LANGFLOW (-55255), JOOMLACK (-56290). SHAREPOINT/SIMPLEHELP KEVS STILL ACTIVE, UNRESOLVED. 6. DELANEY HALL STATUS HELD (ENDED). PJM EMERGENCY RESOLVED, NO BLACKOUTS. FIFA WC SEMIS UNDERWAY, FINAL 19 JUL, NO INCIDENT. SEC 702 NO MATERIAL CHANGE. REF FULL REPORT: MAGNETHF.COM/REPORTS // NEXT REPORT: 260719-1200Z END FLMSG END FLMSG

Submit reports through established MAGNET situational awareness channels.
To Learn More About MAGNET, Visit www.MAGNETHF.COM