The Big Picture

A war that's "on pause" is still extracting its price from working people — at the pump, at the grocery store, and at the airline gate — while defense contractors collect and executives pocket hundreds of millions in golden parachutes. Meanwhile, the digital infrastructure ordinary people depend on is being quietly compromised from inside the pipelines they trust, and the biggest media merger in a generation just got blessed by a White House whose correspondents were being wined and dined by the very CEO seeking regulatory approval. Power is consolidating. The bill is being sent to everyone else.

Today's Stories

The Hormuz "Ceasefire" Is a Gift to Oil Markets and a Tax on Everyone Else

Brent crude hit $105.63 intraday this week. The Strait of Hormuz remains effectively closed. The Trump administration calls it a ceasefire — but the naval blockade of Iranian ports continues, the U.S. Navy has been authorized to fire on Iranian mine-laying vessels, and Gulf producers have already cut output roughly 6%. American Airlines has already slashed its 2026 outlook, citing billions in added fuel costs, and analysts expect airline, trucking, and grocery prices to follow crude with a lag. Here's who doesn't bear that cost: the energy sector, where the supply shock is a windfall. Here's who does: the working-class families who can't absorb $5 gas or $400 flights. An "open-ended ceasefire" with a closed strait isn't peace — it's a structural transfer of wealth from consumers to oil markets, dressed up in diplomatic language while the Fed prepares to name energy-driven inflation at next week's FOMC meeting.

$887 Million for Zaslav. Mass Layoffs for Everyone Else. Shareholders Said No. Didn't Matter.

Warner Bros. Discovery shareholders voted 82% against the compensation packages for CEO David Zaslav and named executives tied to the Paramount-WBD merger. The vote was non-binding. Zaslav gets the money anyway — nearly $887 million, including roughly $500 million in stock awards and $335 million in an excise tax gross-up, meaning the company pays the taxes on a payout Congress designed in the 1980s specifically to discourage. The combined Paramount-WBD entity will carry roughly $80 billion in debt, with Paramount's debt already rated junk by Fitch and S&P. The promised "cost savings" — $6 billion — translate directly into mass layoffs across writers' rooms, development slates, and below-the-line crews. The night of the shareholder vote, Paramount CEO David Ellison was in Washington dining with Trump White House officials. FCC chair Brendan Carr has already said the deal "should get through pretty quickly." Institutional investors and 4,194 Hollywood workers — including over 75 Oscar winners — have signed an open letter calling it a threat to democratic media. The regulators who could stop it are the ones getting the dinner invitations.

The Password Manager That Ratted Itself Out — and What It Reveals About Who Owns Your Security

For 93 minutes on Wednesday evening, the legitimate Bitwarden command-line tool on the npm registry was secretly a credential-harvesting worm. Attackers didn't breach Bitwarden's servers — they compromised the CI/CD pipeline itself, riding in on a stolen token from a trusted security scanning tool. The payload, dubbed "Shai-Hulud," targeted SSH keys, cloud secrets, environment files, shell history, and GitHub Actions tokens — and if it found a GitHub token, it weaponized it to spread further. This isn't an isolated incident: the same Checkmarx pipeline access has been linked to poisoned Docker images for other security tools. The through-line is structural: the tools developers trust most — password managers, infrastructure scanners, AI coding assistants — are becoming the shortest path into enterprise systems. The people who bear the consequences of these breaches are rarely the executives who made the procurement decisions. They're the workers, the users, and the public whose data ends up for sale.

France's Identity Agency Was Breached. 19 Million Records. Data That Can Never Be Reset.

France's Agence Nationale des Titres Sécurisés — the national body issuing passports, ID cards, residence permits, and driver's licenses — confirmed an intrusion detected April 15. A threat actor claims to be offering 18 to 19 million records: names, emails, phone numbers, birth details, addresses. That's roughly a third of France's population. ANTS says the exposed data doesn't grant portal access. That's technically true and entirely beside the point. Government-verified identity data doesn't rotate. It doesn't expire. It can't be reset. Every phishing campaign, every impersonation fraud, every downstream service that treats "data from the passport office" as a verification anchor is now compromised for years — possibly decades. The critical unanswered question, per cybersecurity researchers, is whether the root cause is an API flaw in infrastructure shared across French government portals. If it is, this isn't an ANTS story. It's a state infrastructure story — and the silence from regulators will tell you exactly how large the exposure really is.

Washington State Calls Out the "Labor Shortage" Lie — Nearly 10,000 Union Workers Are Out of Work

The dominant narrative in construction is that there aren't enough skilled workers. Washington State's Building and Construction Trades Council says that's wrong — and they have numbers. At the end of 2025, with only 75% of affiliated unions reporting, nearly 10,000 union construction workers in Washington were out of work, including more than 1,700 apprentices who couldn't get dispatched to complete their required hours. More than 8,000 Washingtonians are on waitlists to get into union apprenticeship programs. The problem, according to the council, isn't a shortage of people who want to build — it's a shortage of jobs for them to go to. This matters because the "shortage" narrative is being used to justify loosening labor standards, importing non-union labor, and suppressing wages in markets where the real constraint is project flow and contractor decision-making. When the industry's own data contradicts the story being told in Washington, ask who benefits from the story.

What to Watch

• [CONFIRMED] If WTI closes above $100 before Wednesday's FOMC meeting, the Fed will be forced to name energy-driven inflation explicitly — and a rate hold lands hawkish, tightening conditions for working-class borrowers already squeezed by fuel costs. (Confirmed: based on reported Fed meeting timeline and current WTI trajectory)
• [ASSESSED] If California AG Rob Bonta files a formal challenge to the Paramount-WBD merger, the deal moves from regulatory formality to a multi-year state-court fight — the one arena where Ellison's Washington dinner strategy offers no protection. (Assessed: Bonta challenge widely speculated per Deadline; state AGs explicitly cited as examining the deal)
• [ASSESSED] If SAG-AFTRA talks collapse before the June 30 contract expiration, actors walk into a strike during Paramount's regulatory window — and the merger's quarterly "ticking fee" to shareholders gives labor more leverage than the current mood suggests. (Assessed: based on reported negotiating impasse on AI protections and merger timeline pressure)
• [SPECULATIVE] If no national telecom regulator publicly responds to Citizen Lab's findings that SS7 and Diameter signaling protocols are being exploited for warrantless location tracking, read the silence as evidence the exposure is too large to address — not too small to matter. (Speculative: regulatory response timeline uncertain; Citizen Lab findings reported this week)

The Closer

A CEO dines with the White House the night his merger gets rubber-stamped. An executive collects $887 million while his company prepares mass layoffs. A "ceasefire" keeps oil above $105 while grocery prices follow. The infrastructure workers, the journalists, the activists, the union members on waitlists — they're not at those dinners. They're paying for them. Accountability journalism exists because someone has to say that out loud.