Normal view

Someone targeted security researchers using a fake crypto conference as a lure

20 August 2026 at 23:00
A hacker pretending to work for a leading cryptocurrency news website targeted several cybersecurity professionals using Google Docs as a way to deliver malware.

Why Trump can’t rekindle the spark with Kim Jong Un

19 August 2026 at 19:25
Donald Trump and Kim Jong Un smiling at each other.
President Donald Trump and North Korea's Kim Jong Un talk before a meeting in the demilitarized zone on June 30, 2019, in Panmunjom, Korea. | Brendan Smialowski/AFP via Getty Images

Can President Donald Trump pen a new chapter in his love story with North Korea’s Kim Jong Un? 

In Trump’s first term, the two leaders, in Trump’s words, “fell in love” after exchanging letters and held three historic meetings, but failed to make much progress toward the goal of denuclearizing the heavily armed hermit state. 

Now, Trump appears to be trying to recapture the magic, reportedly urging aides to set up a meeting with Kim as soon as this fall. This news comes soon after Trump’s Truth Social post on Sunday announcing he had ordered the US military to “substantially reduce” joint military exercises with ally South Korea in part because it would send “a signal that is totally inappropriate and hostile, to a Country that, as long as Donald J. Trump has been President, has been unthreatening and respectful” — North Korea. 

Key takeaways

  • Trump is trying to restart talks with North Korea’s Kim Jong Un, scaling back a planned joint military exercise with South Korea and instructing aides to prioritize setting up a new meeting. 
  • Trump’s three historic meetings with Kim were a diplomatic high point of his first term, but since Trump returned to office, the North Koreans have been rebuffing American advances. 
  • Much has chanced in North Korea since the last time the two met: The country is wealthier, less isolated, and more militarily secure. A Trump meeting might not have the same appeal it once did.

Trump has claimed, without elaborating, that Kim has responded to this overture, but there’s been no public response from Pyongyang yet. 

Trump’s outreach didn’t come entirely out of nowhere. Trump has made clear since the beginning of his term that he would like to meet with Kim again, and there was speculation that a meeting might happen when Trump traveled to South Korea for a summit last fall. North Korea’s UN Mission in New York has also rebuffed several attempts by US officials to deliver a personal letter from Trump seeking to restart dialogue. 

In the midst of an unpopular conflict with Iran that seems unlikely to end in anything resembling a victory, it makes sense that Trump might be reaching back to what he sees as one of the foreign policy high points of his first term. “Kim Jong ​Un has always treated me with great respect,” Trump told reporters on Monday. “I understand him. He understands me.”

Beyond reconnecting with an old friend, it’s not entirely clear what Trump actually wants out of North Korea. But if his goal is a new diplomatic breakthrough, that will be even harder than it was the first time: The country is a much different place than it was the last time the two leaders sat down and even if they were to meet again, Kim seems even less likely to make real concessions. 

Like it or not, North Korea is a nuclear power now

Analysts believe North Korea possesses around 50 nuclear weapons with enough fissile material to build 40 more. It has missiles that are theoretically capable of reaching the US mainland. There was a time when the North Koreans were willing to at least discuss giving up their program in exchange for sanctions relief and major concessions on US military support to South Korea, but that time is probably over, partly thanks to Trump’s own actions

“There is no chance that North Korea is going to denuclearize. Zero chance,” said Joseph Yun, a veteran US-North Korea negotiator who recently served as acting US ambassador to South Korea. “They have seen what happened to Iran. They have seen what happened to Ukraine. The way they see it, their nuclear weapons are what protects them.” Last year, the country’s official news agency dismissed denuclearization as an “unrealizable pipe dream.”

On top of that, North Korea is in a much stronger negotiating position than it was the last time these two leaders met for a photo op.

“It’s a very different North Korea now. It’s stronger geopolitically, and Kim is stronger domestically.”

Jung Pak, served as US special representative for North Korea in the Biden administration

In 2018, North Korea was heavily isolated and struggling under an international sanctions regime that was at least officially — if not always in practice — supported by China and Russia as well as the United States. For a young leader still looking to establish his internal legitimacy and international standing, a meeting with the sitting US president was a major coup. 

But things improved dramatically for North Korea after the pandemic. After it began lifting its Covid-era lockdown — one of the toughest in the world — North Korea has become what the Wall Street Journal has called the world’s most unlikely growth story.”

The country’s economy has grown for three straight years, and while it’s still an impoverished country where nearly half the population is malnourished, Pyongyang is by all accounts booming, with thousands of new homes built along with a surge in Western-style restaurants and ride-hailing apps. 

“North Korea emerged from the pandemic stronger, despite the odds,” said Jung Pak, who served as US special representative for North Korea in the Biden administration. “It’s a very different North Korea now. It’s stronger geopolitically, and Kim is stronger domestically.”

North Korea has been one of the main beneficiaries of the war in Ukraine, sending thousands of soldiers and munitions to help the Russian war effort. While thousands of those troops have died, the North Korean regime has gained billions of dollars in revenue and military aid from Russia in response, as well as invaluable battlefield experience for its commanders and weapons systems.     

Russian President Vladimir Putin has come through for the North Koreans in other ways. In 2024, Russia vetoed the mandate of the UN body that monitored the enforcement of international sanctions on North Korea, effectively shredding the international sanctions regime. In 2025, trade between North Korea and China, its main economic partner, rose 25 percent.  

The regime has found other innovative ways of raising revenue, reportedly netting billions through cybercrime targeted at foreign banks and cryptocurrency exchanges. 

Kim is also less desperate for legitimacy these days. In September 2025, he stood alongside Xi Jinping and Vladimir Putin at a massive military parade in Beijing, a powerful demonstration of unity among three US adversaries. These days, Kim likely feels he’s the one being wooed. Xi’s high profile trip to Pyongyang in June was interpreted by many as a sign that China, warily eyeing the increasingly close relationship between Russia and North Korea, was looking to shore up its ties with its longtime ally. 

Domestically, when the world’s first millennial dictator took power after his father died in 2011, many wondered how long he would last. Today, he’s feeling secure enough to be thinking about long-term handoff plans, publicly positioning his 13-year-old daughter as his future successor

Kim is clearly not desperate to meet with Trump, and these days, the United States has fewer means to pressure him. Without Chinese and Russian support, the US can only dial up international sanctions so much. As for military pressure, the US has been moving military assets out of the Korean peninsula to the Middle East and recently redeployed its last aircraft carrier out of Asia

As Trump’s actions this week demonstrate, he’s not all that interested in working with US allies in the region to pressure the North Koreans. But if he were considering pairing his warm overtures to Kim with a stick, a “fire and fury” threat wouldn’t pack the same punch today.  

Is there any reason for new US-North Korea talks?

Still, there are reasons Kim might want to sit down with Trump again. North Korea would still like US sanctions lifted. Kim’s influential sister has stated that the regime is looking for the US to formally accept its status as a nuclear power, as Russia has now done.  

Former US State Department North Korea negotiator Joel Wit suspects that given Trump’s desperation for talks, Pyongyang might try to press its advantage even further. 

“If I was a North Korean, I would ask the United States for what I would call a ‘peace agenda,’” he said. “That would mean more than just reducing the size of US-[South Korean] exercises. It could include cutting back on US troops in South Korea or even Guam.”

Trump, who has repeatedly, including in his recent Truth Social post, made clear that he sees the US military presence in South Korea as a waste and the South Koreans as coddled, wealthy freeloaders, might be amenable to concessions like this. 

But what could the US get out of talking to North Korea if denuclearization is off the table? Some analysts have suggested a limited deal might be possible, which could see North Korea dismantle its reactors or some of its centrifuges, slowing down the growth of its nuclear program if not eliminating it. 

Pak also noted that given North Korea’s refusal to engage in nearly any diplomacy with the US since 2019, just holding talks and building some confidence between the two sides would be progress. “The meeting itself would be the win,” Pak said. 

On the other hand, holding talks that do not explicitly aim at eliminating North Korea’s nuclear program would be seen as effectively accepting that North Korea is a nuclear power now. At this point, there’s a strong realist case to be made for accepting North Korea’s nuclear status and proceeding from there, but it’s hard to square with the administration’s stance on Iran’s nuclear program. 

It’s also likely that the kind of incremental concessions North Korea might, in the best of circumstances, be willing to offer, would not satisfy a US president with a penchant for grand bargains. 

In his first term, just the fact that Trump and Kim sat down made history. Now that that’s been accomplished, they may find that, like many a romance a few years in, they’ve run out of things to talk about. 

Hackers just broke into America’s tap water

6 August 2026 at 13:30
A water treatment facility in Massachusetts.
Your credit card is better protected from hackers than your drinking water. | Jonathan Wiggs/The Boston Globe/Getty Images

Support Vox’s reporting on important issues like this. Become a Vox Member today.

In the teensy Midwestern town of Braham, homemade pie capital of Minnesota, something unusual in the municipality’s computer systems knocked the city’s entire water supply offline last week.

Within a few hours, dozens of other Minnesota cities discovered that their water and wastewater utilities, too, had been compromised, most likely as part of a massive Iranian cyberattack, the kind that US officials have been warning about since the war began. 

At least a dozen states have been affected by the attack, which briefly led to a flurry of small-town service disruptions, boil-water notices, and local flooding. Water wells, dams, sewers, and pipelines are some of America’s oldest and creakiest pieces of infrastructure, built long before the internet existed, and certainly long before AI made hacking much easier. While you may assume most hackers are in it for the money or for data, some have targeted critical infrastructure like water systems or energy grids in ploys for control or disruption — or worse still, as acts of war. 

And, as last week’s attacks show, the nation’s water system is woefully unprepared. But how worried should you be that the very infrastructure that keeps our water taps running is, apparently, hackable? 

Quite worried, indeed. 

When we say the water supply got hacked, what we really mean is that someone, somewhere has broken into the computer that controls a local water treatment plant or reservoir, and is now pulling the levers, like the one that decides how much of a corrosive chemical can safely go into cleaning the water that comes out of your tap. 

These levers were once manual buttons and knobs operated in-person by real live humans, meaning that — barring a natural disaster, bomb, or break-in — protecting them was about as simple as building a fence and hiring guards. Increasingly, however, these levers have gone digital, meaning that they are now remotely operable from anywhere in the world. 

Those upgrades have been convenient, allowing technicians to monitor and troubleshoot problems in real time. But, in the process, they have exposed at times centuries-old infrastructure to distinctly modern vulnerabilities. Most local water systems are operated by local authorities, don’t have a dedicated IT team, and lack the money or resources to thoroughly protect themselves without some extra help. Hackers know this, which is why they’ve increasingly targeted local agencies in such attacks. 

Workers on walkways over green lagoons in an indoor water treatment plant.

“With great connectivity comes great responsibility,” said Joshua Corman, founder of I Am The Cavalry, a nonprofit focused on helping critical infrastructure withstand hackers. And yet, even when it comes to critical services like water, “our dependence on connected technology is growing faster than our ability to secure it.” 

About 97 percent of water systems are small, run by local agencies that often barely lock the proverbial front door. America’s water system is like an expensive heirloom bicycle that’s been left on a busy street, protected by only the flimsiest of padlocks. And that very vulnerability has made tiny towns like Braham prime targets for faraway adversaries. Accessing the computers that operate most water systems — known as programmable logic controllers or PLCs — is often as simple as entering a username and password on a public-facing webpage. Sometimes, there is no real password at all, because PLCs were initially intended to be accessed only within locked, secure facilities, not on the open internet. If the US wants to avoid a far more severe version of what happened last week, then it will need to start taking the security of tiny water systems like Braham’s seriously.

“Any sociopath from anywhere in the world can see these things on the internet,” said Corman. And in the case of last week’s attacks, “these were devices with no password, no firewall or VPN shielding them — they just had to log in” as whoever the intended operator was, and just like that, they were inside a local water plant. 

How did this happen at all? 

When municipalities began hooking up their old water and wastewater systems to the internet — a trend that accelerated during the pandemic as water operators, like everyone else, adapted to remote work — cybersecurity was rarely front of mind, neither for individual utilities nor for regulators as a whole. 

Two water towers on a rural American street.

“We have more cybersecurity regulations for your credit card than we have for the nation’s water supply,” said Corman. Only recently have some municipalities begun to take steps to decrease the exposure of their water plants to hacks. In March, New York state, for example, launched a set of grants and basic cybersecurity regulations mandating security training for all water operators. 

Basic cybersecurity hygiene isn’t always enough. More than half of all credit card holders have been hacked, even with the help of mandatory firewalls and data encryption. You can imagine how vulnerable our water must be without the assistance of such guardrails. In a worst-case scenario, a malicious actor could quite literally open the floodgates, as Russian hackers did to a Norwegian dam last year. They could poison the tap water, as a still unidentified hacker almost did in Florida in 2021, dialing up the levels of sodium hydroxide used at a water treatment plant by over 100 times its normal levels. In a severe scenario, they could indefinitely cut off access to all water entirely.

The good news is, none of this happened last week. Nobody died, nobody lost water for more than a few hours, no fire hydrants ran dry, and no hospitals were forced to cut off their dialysis machines (which can use more than a hundred gallons of water per treatment session). There’s no need to panic, and your drinking water is almost certainly still safe to drink, assuming it was safe before. Even the city of Braham, within a few hours, was able to bring its water tower back online, pumping groundwater back to its 1,800 residents. 

How do we avoid cyber-armageddon?

If you’ve watched the Julia Roberts and Mahershala Ali-starring thriller Leave the World Behind, in which a cyberattack apocalyptically spoils a family vacation, then you might have some idea of where this story could go. 

Cyberattacks on critical infrastructure can be extraordinarily dangerous, but thankfully, none have directly cost lives or severely disrupted services in this country so far. If the US wants to keep it that way, that will mean doing more to help small cities like Braham adapt and better monitor for potential threats. As it stands, of the roughly 151,000 water facilities in the US, only about 420 participate in voluntary information sharing on their own cybersecurity practices, says Corman, who has been leading his own project that recruits volunteers to give free cybersecurity support to water utilities in the nation’s roughly 6,000 hospital towns, where a disruption could be particularly deadly. 

Cybersecurity experts like Corman believe that hackers from other nations like China have already quietly established cyber intrusions in countless local US utilities, water systems, and power grids, lying in wait to attack or act as leverage if a conflict arises

Unfortunately, the Trump administration has hardly treated last week’s attacks as symptoms of a system in need of much broader strengthening, at least in its public statements. “I think Minnesota is behind it. You know who’s behind it? Minnesota,” the president baselessly claimed during a Cabinet meeting last Friday. “I think the governor is behind it. I don’t think there was an Iranian cyber attack.” 

A group including Governor Tim Walz, Lieutenant Governor Peggy Flanagan, Saint Paul Mayor Melvin Carter and General Manager Patrick Shea stand in the center of a lime softening clarifier during a tour of McCarrons Water Treatment Plant on January 26, 2023 at St. Paul Regional Water Services in Maplewood, Minn.

Just a few months ago, he proposed $707 million in cuts to the US Cybersecurity and Infrastructure Security Agency (CISA), the agency responsible for protecting the nation’s infrastructure from cyberattacks. He did so, at least in part, out of anger over the agency’s role in confirming the validity of the 2020 election results. If Iran is, indeed, responsible, for the recent water system intrusions, all of this means that Trump has effectively made us more vulnerable to the consequences of a conflict he initiated.

At the end of the day,“nation-state hackers do not respect the jurisdictional lines separating federal, state, and local responsibility,” Jen Easterly, who led CISA under the Biden administration, wrote in the New York Times this week. “They search for the most vulnerable way to disrupt American life, and too often they find it in small communities that lack the resources to defend themselves.” Easterly’s role has remained vacant for the past 18 months.

Kurt Gaudette, a senior vice president at the cybersecurity firm Dragos, told me that water systems have got to get into the habit of monitoring their networks for suspicious activity. Most power utilities have begun doing so in recent years, with some bipartisan backing from Congress. 

In some cases, however, the most cost-effective and safest way to avoid a repeat of last week’s mess might be to unplug the most vital controls — like the one that decides the chemical levels in a water treatment plant — from the web entirely. 

As Corman puts it, “if you can’t protect it, disconnect it.”

❌