DEFENSEMay 22, 2026

Defense & Security Desk

Daily defense and security brief: situation room, procurement watch, theater analysis, strategic forces monitor, homefront security.

← Back to Defense & Security Desk (latest)

Chart auto-generated from this brief's structured fields. See methodology for how the underlying data is collected.

Today’s Snapshot

Iran War Ceasefire on Knife's Edge as DNI Gabbard Exits, Epic Fury Losses Tallied

The dominant story cluster on May 22 is the convergence of three pressure points: a fragile US-Iran ceasefire is being held together by Pakistani and Qatari mediators dispatched to Tehran while Congress is unable to assert war-powers authority; Director of National Intelligence Tulsi Gabbard resigned effective June 30, creating a leadership vacuum at ODNI during an active-war intelligence cycle; and a congressional report confirmed 42 US aircraft lost or damaged in Operation Epic Fury, with drones accounting for 25 of those losses. Simultaneously, NATO allies gathered in Helsingborg are absorbing Secretary Rubio's confirmation that US force reductions in Europe are an ongoing process, not a hypothetical. The Pakistan-Turkey defense alignment and Pakistan Army Chief Munir's Tehran visit add a South Asia mediation dimension to an already crowded Middle East operational picture.

Synthesis

Points of Agreement

Situation Room reads the DNI vacancy as a functional operational gap, not a ceremonial one; Homefront Security reads it identically, with specific concern for degraded interagency cyber coordination. Theater Analysis and Strategic Forces Monitor agree that congressional paralysis on war powers — HCONRES 83 stalled since March 27, the fourth House attempt failing — gives Iran structural leverage and damages extended deterrence credibility with US allies. Procurement Watch and Situation Room agree that 25 drone losses in Epic Fury is a procurement and replenishment signal that will materialize in the next supplemental budget request. Theater Analysis and Strategic Forces Monitor agree that Pakistan's dual role as mediator and regional nuclear power, combined with active Turkey-Pakistan drone-technology alignment, is the most underweighted variable in current coverage.

Points of Disagreement

Theater Analysis emphasizes that Iran has structural leverage from US domestic political dysfunction and will use the mediation process to extract maximum concessions; Strategic Forces Monitor counters that Iran's post-strike nuclear incentive calculus has changed in ways that may actually accelerate a deal — a damaged state with a documented nuclear program faces different trade-offs than an intact one. The tension: does US demonstrated willingness to strike make Iran more or less likely to accept a settlement? Theater Analysis leans toward 'more leverage for Iran in negotiations'; Strategic Forces Monitor leans toward 'changed nuclear incentives could drive faster deal.' Procurement Watch is skeptical that the Army's FMS Marketplace will genuinely accelerate UAS exports; Situation Room treats the marketplace announcement as an operational readiness signal worth watching. The tension: is this acquisition reform or acquisition theater?

Pivotal Question

The pivotal question is this: if Pakistan's Field Marshal Munir and Qatar's negotiating team secure a written ceasefire framework with Iran in the next 72 hours, does the US intelligence community have the confirmed leadership and interagency coordination capacity to verify Iranian compliance — and if not, does the ceasefire hold on paper while Iran reconstitutes? The data that would move Theater Analysis's 'Iran has leverage' view toward Strategic Forces Monitor's 'changed nuclear incentives drive faster deal' view is a confirmed Iranian agreement to international inspection access for its nuclear facilities as part of any ceasefire terms.

Analyst Voices

Situation Room Gen. Claire Hawkins, Ret. & Col. David Park, Ret.

The congressional report tallying 42 US aircraft lost or damaged in Operation Epic Fury demands a clear-eyed accounting. The deployment is a fact. The loss rate is a fact. The operational implications are an inference we are prepared to make carefully. Twenty-five of 42 losses were unmanned platforms — that is a drone attrition rate that tells us Iran's integrated air defense and counter-UAS envelope performed at a level that should recalibrate our assumptions about drone survivability in a contested, near-peer-adjacent environment. The manned aircraft losses are the more sensitive number and the report does not yet characterize whether those were destroyed, captured, or operationally damaged. That distinction matters enormously for both force reconstitution planning and intelligence equities.

On the DNI transition: Gabbard's resignation, effective June 30, creates a 39-day gap in confirmed ODNI leadership during an active kinetic operation against Iran. Acting DNI Aaron Lukas is a name without a public intelligence-community footprint in open sources as of this writing. The intelligence community does not stop functioning, but collection priorities, interagency coordination authority, and congressional notification obligations all flow through the DNI chair. A gap here, during active hostilities, is not a ceremonial vacancy — it is a functional one.

On force posture: Secretary Rubio's remarks in Helsingborg confirming ongoing US troop reductions in Europe are operationally significant. This is not a future planning signal; it is an ongoing process acknowledgment. The deployment is moving. The intention — whether this is burden-sharing leverage or genuine reorientation toward the Pacific and Middle East — remains an inference. Report them separately. NATO allies are not wrong to treat Rubio's remarks as confirmation rather than reassurance.

Key point: A 60% drone loss rate in Epic Fury, an acting DNI with no public profile taking the chair during active war, and Rubio confirming European drawdowns are happening — these are three simultaneous capability and posture stress signals that compound rather than cancel.

Theater Analysis Dr. Farid Hassan

Washington frames the US-Iran situation as a bilateral confrontation trending toward negotiated resolution. The regional actors see at least five overlapping conflicts: the US-Iran war proper, the Israeli-Hezbollah grinding engagement in South Lebanon that has continued despite April's formal ceasefire announcement, the question of what reconstituted Iranian nuclear capability means for Gulf Arab states, Pakistan's precarious dual role as both a regional nuclear power and now an active mediator with Field Marshal Munir traveling to Tehran, and the Strait of Hormuz transit question that ties all of this to global energy markets. The Mehrnews report that 35 vessels passed through Hormuz in the last 24 hours is the IRGC Navy's chosen signal — not a military communiqué but a commercial-traffic data point released to demonstrate that the strait remains open on Iran's terms. That framing matters.

The Pakistan dimension is the most underweighted variable in Western coverage. Munir's Tehran visit comes simultaneously with the Pakistan Air Force reaffirming 'growing strategic convergence' with Turkey, including meetings with Baykar Technologies CTO Selçuk Bayraktar — the manufacturer of Bayraktar drones that are now a currency of regional military relationships. Pakistan is simultaneously mediating between Iran and the US, deepening drone-technology ties with Turkey, and managing its own post-India-Pakistan tensions. Munir is not playing one role; he is playing four. Qatar dispatching a parallel negotiating team to Tehran on the same day as Munir's arrival is coordination, not competition — it signals that a genuine diplomatic push is underway with multiple guarantors, not just one.

The Lebanon situation is the forgotten war in this context. The Soufan Center's assessment that it receives less urgent attention because global economic stakes are lower is operationally accurate but strategically incomplete. South Lebanon is where Hezbollah's reconstitution capacity, Iran's residual proxy leverage, and Israel's deterrence posture intersect. IDF strikes on Hezbollah operatives and the continued drone incidents along the border on May 22 confirm that the April ceasefire is a diplomatic label applied to an ongoing military engagement. The House Republicans canceling the Iran war-powers vote — the fourth such attempt, with the last ending in a 212-212 tie — means Congress has now abdicated its constitutional role in shaping the operational parameters of this war four times in succession. That creates an executive branch with unconstrained operational authority and regional actors who read that as a signal of US strategic incoherence.

Key point: The US-Iran ceasefire mediation is a multi-actor diplomatic operation with Pakistan and Qatar as co-guarantors, but it is running in parallel with an unresolved Israeli-Hezbollah conflict and congressional paralysis on war powers — a combination that gives Iran structural leverage to wait out US domestic political dysfunction.

Strategic Forces Monitor Dr. Nina Orlova

The CRS report to Congress on US Extended Deterrence and Regional Nuclear Capabilities, released May 21, arrives at a moment of maximum stress on the extended deterrence architecture. The report surveys the 2010, 2018, and 2022 Nuclear Posture Reviews and the framework of assurance extended to over 30 allies and partners. What the report cannot fully capture — because it was written before the current Iran conflict's full escalation — is the question of whether the extended deterrence umbrella's credibility is being tested in real time. Iran is not a nuclear-armed state, but it is a state with a documented advanced nuclear program. The US-Israeli strike campaign changes Iran's nuclear calculation in ways that are not yet visible in public reporting. A state that has suffered strikes on its territory has different incentives regarding nuclear capability development than a state operating under deterrence-by-threat.

The HCONRES 83 war-powers resolution — last action March 27, referred to the House Committee on Foreign Affairs, now effectively stalled — is directly relevant here. Extended deterrence commitments function through the credibility of the US decision-making process. When Congress cannot or will not assert its war-powers role in an active conflict, it sends a signal to both allies and adversaries about the robustness of US commitment mechanisms. For allies under the extended deterrence umbrella — South Korea, Japan, the NATO states — the question is not just whether the US will use nuclear weapons on their behalf, but whether the US government is coherent enough to make that decision. The DNI vacancy at ODNI compounds this: the intelligence assessments that inform nuclear-use decisions flow through that office.

Detterence works until it does not. The question is always: what changed in the calculation? Today's answer is: the US demonstrated willingness to strike Iran kinetically, but simultaneously demonstrated congressional paralysis, an acting DNI with no confirmed intelligence-community standing, and a posture of force reduction in Europe. For states calculating whether to develop their own deterrents — a question South Korea and Japan revisit with every US domestic political crisis — today's signals are not reassuring.

Key point: The CRS extended deterrence report drops precisely as the US demonstrates both willingness to strike Iran and structural incoherence in its decision-making architecture — a combination that moves allied nuclear hedging calculations in the wrong direction.

Procurement Watch Margaret Avery

The congressional tallying of 42 US aircraft lost or damaged in Operation Epic Fury — 25 of them drones — is the defense industrial base story of the week, and it is not being covered as such. Twenty-five drone losses in a single operation represent a procurement and replenishment signal that will flow into supplemental appropriations requests within the next budget cycle. The General Atomics drone-wingman resumption of flights after a software-triggered mishap, reported May 21, lands in this context with additional weight: the Collaborative Combat Aircraft program is the next-generation drone wingman platform, and if the Epic Fury loss rate is the benchmark for attrition in a medium-intensity air campaign against Iran, the Pentagon needs to be sizing its CCA procurement pipeline accordingly. General Atomics' software fix is a fact. Whether the fix addresses the failure modes that produced 25 Epic Fury losses is an open question.

The DoD contract data this week is dominated by SKANSKA USA CIVIL NORTHEAST INC receiving $149,686,843 for the NOAA OMAO Ship & Repair Facility — a large infrastructure award that, while DoD-tagged, is principally a maritime support facility contract rather than a combat systems procurement. ARCADIS U.S., INC. received $14,316,473 and VERIZON BUSINESS NETWORK SERVICES LLC received $2,634,407. The Verizon award is worth noting in the context of SOCOM's fielding of Reveal Technology's Identifi battlefield biometrics platform — network services contracts supporting deployed intelligence collection systems are the unsexy connective tissue that enables the capability headlines.

The Army's planned FMS Marketplace for UAS and counter-UAS technologies is the most strategically interesting procurement signal of the week. Foreign Military Sales have historically been a slow, bureaucratically strangled process. An Army-built digital marketplace starting with UAS and C-UAS — the two categories that took the heaviest losses in Epic Fury — is either an acquisition reform breakthrough or a repackaging of existing FMS mechanisms with a new interface. The program of record says it will streamline exports to allies. The GAO would ask: what is the baseline processing time, what is the target, and how does the new marketplace integrate with DSCA's existing case management infrastructure? I will believe 'streamlined' when I see the data. The RTX 10-K novelty score of 65.1% in Risk Factors and LMT at 61.7% — the two highest among major primes — suggests both companies are significantly rewriting their risk disclosures in the current cycle, consistent with a contract environment shaped by active-war surge demand and supply chain stress.

Key point: Twenty-five drone losses in Epic Fury is a procurement crisis disguised as a battle-damage report — it will drive supplemental UAS replenishment requests and reshape the CCA program timeline, while the new FMS Marketplace for UAS is either the fix or a glossy repackaging of the same slow pipeline.

Homefront Security Special Agent Marcus Webb, Ret.

The DNI transition is the domestic security story that is being covered as a personnel story. It is not. Tulsi Gabbard's resignation, effective June 30, leaves a confirmed vacancy at the top of the US intelligence community's coordination architecture during an active war with Iran, an ongoing Iranian cyber operations campaign, and a mid-term election cycle where foreign-influence spending is already the dominant concern. The FBI's concurrent warning about Kali365 OAuth token-stealing phishing attacks targeting Microsoft 365 accounts is not coincidental context — it is the operating environment into which that leadership gap lands. OAuth token theft at scale against .gov and defense-contractor accounts is exactly the type of campaign that Iran-nexus actors run when they assess US institutional attention is elsewhere.

Check Point Research's May 22 report on Nimbus Manticore — the IRGC-affiliated threat actor (also tracked as UNC1549) — conducting cyber operations targeting US and Israeli entities including destructive attacks and cloud data exfiltration is the clearest illustration of this threat translation. Unit 42's concurrent reporting on 'Screening Serpens,' an Iranian APT using AppDomainManager hijacking and new RAT variants against tech and defense sectors, confirms this is not a single-actor phenomenon — it is a coordinated Iranian cyber campaign running in parallel with the kinetic conflict. The foreign threat brief has already crossed the border. The question is whether ODNI's acting leadership has the authority and institutional relationships to coordinate the FBI, NSA, and CISA response at the pace this operational environment demands.

The Cipher Brief's analysis of DHS strategy deserves more attention than it is getting. A generation after 9/11, DHS is being asked to be 'central to American national security strategy' by the 2025 NSS, the NDS, and the new Counterterrorism Strategy simultaneously — but its institutional capacity has not grown proportionally with those ambitions. The gap between DHS's assigned strategic role and its operational capacity is a structural vulnerability. When the DNI chair is vacant and DHS is being asked to carry more weight, that gap widens in real time.

Key point: Iran's parallel cyber campaign against US and Israeli targets — confirmed by both Check Point and Unit 42 reporting — is the homeland manifestation of the kinetic conflict, and it is landing into a 39-day ODNI leadership vacuum that degrades the interagency coordination this threat environment requires.

Simulated Opinion

If you had to form a single opinion having heard the roundtable, weighted for known biases, it would be: May 22 is a day when three structural vulnerabilities converged simultaneously — a DNI leadership gap during active war, congressional abdication of war-powers authority for the fourth consecutive time, and a 42-aircraft loss tally that confirms the US drone attrition problem is real and not hypothetical. The Pakistan-Qatar mediation push is the most consequential diplomatic event of the day, and it is happening without a confirmed US intelligence chief to verify whatever Iran agrees to. The extended deterrence architecture is under stress not because the US lacks capability — the Epic Fury strikes demonstrated willingness to use force — but because the US is demonstrating institutional incoherence at precisely the moment its allies need to calibrate their own nuclear hedging decisions. Iran's parallel cyber campaign against US and Israeli infrastructure, confirmed by two independent research groups on the same day, is the clearest evidence that Tehran views the ceasefire negotiations and the cyber-operations campaign as complementary tracks, not alternatives. A careful reader should weight the DNI vacancy and the Iranian cyber campaign as the under-reported story, the Epic Fury drone losses as the procurement crisis hiding inside a battle-damage report, and the congressional war-powers paralysis as the structural condition that makes all the other vulnerabilities harder to manage.

Watch Next

Pakistan Field Marshal Munir's Tehran meetings: whether a written ceasefire framework emerges with Iranian nuclear-access provisions in next 24-72 hours
Acting DNI Aaron Lukas's first intelligence community directive or congressional notification — the substance will define whether the ODNI transition is functional or ceremonial
House Iran War Powers Resolution: whether Speaker Johnson schedules a fifth vote or formally tables the issue, given the 212-212 tie outcome of the most recent attempt
General Atomics drone-wingman program: next test flight schedule and whether the Air Force formally certifies the software fix addresses Epic Fury-relevant failure modes
IDF activity in South Lebanon: whether the ongoing strikes on Hezbollah operatives trigger a Hezbollah response that complicates the broader US-Iran ceasefire framework
ODNI transition timeline: watch for whether a permanent DNI nominee is sent to the Senate before Gabbard's June 30 effective departure date — any gap between the two dates is a confirmed leadership vacuum
Iran cyber operations: monitor for escalation of Nimbus Manticore / Screening Serpens activity against US .gov and defense-contractor networks in the ceasefire negotiation window

Historical Power Lenses

Sun Tzu ~544-496 BC

Sun Tzu's foundational insight was that supreme excellence consists in breaking the enemy's resistance without fighting — and Iran's concurrent diplomatic and cyber tracks on May 22 are a textbook application of this principle. Tehran is simultaneously sending 35 vessels through Hormuz to demonstrate it controls the chokepoint, accepting Pakistani and Qatari mediators to demonstrate it wants a deal on its terms, and running Iranian APT operations against US and Israeli infrastructure to impose costs without formally resuming kinetic hostilities. This is precisely the stratagem Sun Tzu described in his treatment of the 'indirect approach' — using multiple pressure vectors so that the adversary cannot concentrate its response. The US, by contrast, is demonstrating the opposite: congressional paralysis, a DNI vacancy, and an executive branch that has authorized kinetic strikes but cannot consolidate the political will to define their objectives.

Machiavelli 1469-1527

Machiavelli's warning in The Prince that a ruler who relies on mercenaries and auxiliaries rather than his own arms will never be secure finds a modern echo in the congressional war-powers collapse. A prince who cannot make his allies bear the costs of war — and cannot compel his own legislature to authorize it — has, in Machiavelli's framework, a paper army. The repeated failure of the Iran War Powers Resolution, four times in succession with the last ending in a 212-212 tie, is not legislative dysfunction — it is the architecture of US executive power operating exactly as Machiavelli would have predicted for a state conducting war without formal legislative sanction: the executive retains operational freedom but loses political authority, which eventually undermines the capacity to sustain the campaign. The DNI resignation is the Machiavellian subplot: when the prince loses his counselors mid-campaign, the vulnerability is not the counselors' absence but the signal it sends to both allies and adversaries about the coherence of command.

Andrew Carnegie 1835-1919

Carnegie built his steel empire on vertical integration — controlling every step from raw material to finished product so that no external supplier could impose costs or delays on his operations. The Army's FMS Marketplace for UAS and counter-UAS technologies is, in Carnegie's framework, an attempt to vertically integrate the foreign military sales pipeline — to own the channel from US manufacturer to allied end-user without the friction of the traditional DSCA bureaucracy. Carnegie would recognize the logic immediately: if you control the marketplace, you control the pricing, the timeline, and the relationship. What Carnegie would also note is that vertical integration only works when you control the supply — and with 25 drones lost in Epic Fury and the US domestic UAS industrial base still dependent on components that flow through supply chains with significant Chinese exposure, the marketplace is being built without the supply-chain control that makes it durable. Carnegie solved this problem by buying the ore mines before building the steel mills. The US is building the marketplace before solving the industrial base.

Genghis Khan 1206-1227

Genghis Khan's most underappreciated strategic capability was his information network — the yam relay system that gave him faster situational awareness than any contemporary adversary. Pakistan Field Marshal Munir's simultaneous presence in Tehran as a mediator, combined with Pakistan Air Force Chief Sidhu's concurrent visit to Ankara for drone-technology discussions with Baykar, is a modern yam system: Islamabad is running parallel information-collection and relationship-maintenance operations across Tehran and Ankara simultaneously, building a picture of the operational environment that no single Western intelligence service has access to. The Mongol parallel is instructive — Khan never attacked a city without first exhausting his network of merchants, envoys, and defectors for intelligence. Pakistan is performing the same function for the US-Iran negotiation that Khan's network performed before major campaigns: providing the ground-truth that the principal powers cannot collect themselves. The question is whether Washington is reading the intelligence Islamabad is gathering, or whether the ODNI vacancy means that product is sitting in a queue.

Thomas Edison 1847-1931

Edison's invention factory at Menlo Park operated on the principle that breakthrough capabilities emerge from systematic iteration at industrial scale — not from isolated genius. Ukraine's battlefield innovation loop, described in the War on the Rocks interview with the Snake Island Institute, is the closest contemporary analog: a defense analytics organization turning battlefield feedback into rapid capability iteration, with drones at the center. The contrast with the US program-of-record system is sharp. The US tallied 25 drone losses in Epic Fury and is now processing that loss data through a congressional report, a GAO audit cycle, and a program management review — Edison's rough equivalent of losing a light-bulb prototype and then convening a six-month patent committee. The General Atomics drone-wingman software fix after a mishap is at least a faster cycle than the traditional acquisition process, but the question Edison would ask is: how many iterations does the industrial process permit per quarter, and is that rate faster than the adversary's counter-UAS adaptation rate? Ukraine's answer to that question is currently more impressive than the Pentagon's.

Sources Cited

Related story trackers

Strait of Hormuz Crisis: News & Analysis Taiwan Strait Tensions: News & Analysis Gaza & Israel-Hamas War: Latest News Russia-Ukraine War: Latest News & Updates

Other desks

Intelligence Desk Markets Desk Energy & Climate Desk Tech & Cyber Desk Health & Science Desk Culture & Society Desk Sports Desk World Desk Local Wire