Defense & Security Desk

Situation Room Gen. Claire Hawkins, Ret. & Col. David Park, Ret.

The operational picture today is unusually dense across three geographic commands. In CENTCOM, U.S. forces conducted strikes against Iranian naval assets — specifically speedboats reportedly laying mines in the Strait of Hormuz — following what the White House characterized as defensive action. The Iranian Foreign Ministry subsequently accused the U.S. of a ceasefire violation. The deployment is a fact. The characterization of 'defensive' versus 'offensive' is a contested inference that both capitals are now weaponizing for negotiating leverage. Iran's Revolutionary Guards separately stated that a return to full-scale war was of 'low' possibility while simultaneously warning of readiness to respond — a posture consistent with signaling deterrence without foreclosing negotiation.

In EUCOM, Latvia's deployment of mobile intercept units equipped with local interceptor drones to its Russian border is a measured, proportional response to documented drone incursions — not an escalatory act, but a defensive posture hardening along NATO's eastern flank. The suspected Russian military aircraft entry into Finnish airspace near Porkkala, attributed to storm-avoidance routing per Finnish MoD, warrants investigation but should not be read as deliberate provocation absent further pattern evidence. The Finnish Navy's concurrent participation in the Narrow Waters military exercise involving German and other allied forces is the more significant operational signal — it represents real integration of Nordic-Baltic maritime defense. A senior Ukrainian commander's assessment of a 'six-month window' to seize battlefield initiative is a commander's call to action, not an intelligence estimate; it demands resources, not just rhetoric.

In INDOPACOM, China's PLA Southern Theater Command reporting that it 'drove off' Dutch frigate HNLMS De Ruyter (F804) near the Paracel Islands using electronic warfare and warnings represents an escalation in how Beijing is choosing to document and publicize its enforcement of contested maritime claims. The deployment of a Type 054B frigate with the Liaoning carrier group in the Western Pacific — confirmed by Japan — is a genuine capability integration milestone: it signals PLAN is actively testing blue-water escort doctrine in open ocean conditions, not merely exercising near-shore.

Three simultaneous theaters — CENTCOM's active Iran confrontation, EUCOM's hardening eastern NATO flank, and INDOPACOM's Chinese naval integration — are generating operational facts faster than policy frameworks are being updated.

Bias flag — Briefing-style discipline correctly separates capability from intent in the INDOPACOM Type 054B deployment, but may underweight the speed of Chinese blue-water integration — a pattern now spanning multiple confirmed carrier group exercises — as a strategic capability shift, not merely a posture shift.

Theater Analysis Dr. Farid Hassan

Washington is framing the Hormuz confrontation as a bilateral U.S.-Iran escalation-management problem. The regional actors see something considerably more complex. Iran's senior advisor Ali Akbar Velayati describing the Strait of Hormuz as the 'real guarantor' of any nuclear deal is not mere rhetoric — it is a structural position: Tehran has concluded that its leverage is geographic, not diplomatic. The Strait is Iran's deterrent instrument in a world where its nuclear program is contested and its conventional forces are degraded. Any framework that does not address the Strait's status as a coercive tool leaves the core tension unresolved regardless of what paper agreement is reached.

The simultaneous Iranian drone and missile strikes on Kurdish opposition facilities near Erbil — wounding nine Peshmerga on May 25, per Long War Journal — reflect a separate but concurrent Iranian strategic track: pressuring its periphery while engaging the center. Baghdad's new government is caught between its obligation to curb armed groups under U.S. and regional pressure and its inability to confront Tehran directly. This is not a bilateral Iran-U.S. confrontation; it is at minimum a five-actor problem involving Iran, the U.S., Iraq's government, Kurdish opposition groups, and Gulf states recalculating their exposure.

In the Levant, Israeli strikes near Lebanon's Qaraoun dam and the outskirts of Tyre, combined with Netanyahu's stated acceleration of operations, represent continued military pressure on Hezbollah infrastructure — reportedly including strikes that, per BBC Urdu corpus translation context, involved Lebanese civilian casualties. The Abraham Accords expansion discussion surfaced by SOFREP is analytically correct in one register: Gulf state normalization with Israel does strengthen a deterrence architecture against Iran. But it will not alter Iranian behavior unless Tehran's cost calculus actually shifts, which requires more than paper accords. The regional logic here is deterrence by coalition, not deterrence by negotiation.

Mali's cluster munition findings — Russian-made bomblets verified by Bellingcat and Jeune Afrique in a country that is a state party to the convention banning them — add another layer to Africa's emerging as a theater of Russian grey-zone influence. The Islamic State Central Africa Province's documented adaptation to Operation Shujaa, per The Soufan Center, and the DRC's 'catastrophic collision' of Ebola and conflict illustrate that sub-Saharan Africa is simultaneously absorbing Russian military materiel, jihadist expansion, and public health collapse — conditions that historically produce the governance vacuums in which great-power competition accelerates.

The Hormuz confrontation cannot be resolved bilaterally because Iran's leverage is structural and geographic, not purely diplomatic — and multiple overlapping regional conflicts will complicate any deal's implementation.

Bias flag — Regional-first lens may underweight the extent to which U.S. domestic political constraints — weapons inventory depletion, S 4537 mobilization architecture debate, election-cycle defense spending dynamics — are overriding local and regional logic in shaping U.S. negotiating posture toward Iran.

Strategic Forces Monitor Dr. Nina Orlova

The weapons-depletion signal from today's reporting is the most consequential strategic fact on the desk. Reporting in Middle East Eye states that replenishing key U.S. weapons systems used against Iran — specifically Tomahawk cruise missiles, Patriot interceptors, and THAAD systems — could take over three years. If accurate, this is not an inventory management problem; it is a deterrence gap. The question is always: what changed in the calculation? What changed is that the U.S. has now consumed strategic munitions in an active medium-intensity conflict at a rate that has opened a temporal window during which adversary calculations about U.S. resolve and reach in a second theater — specifically, a Taiwan contingency — are likely to shift, even if only incrementally.

The HASC's pending request for an updated E-7 Wedgetail funding amendment, reported by Defense One, is directly connected to this picture. The Wedgetail is the airborne battle management platform that would orchestrate the very missile defense assets now being depleted. Congressional patience with the administration's budget timeline is thinning. 'We would like to see that budget amendment' is committee-speak for 'the clock is running.'

Iran's position that uranium stockpiles are 'not on the agenda' for negotiations — per the BBC Persian corpus — while simultaneously claiming that the Strait of Hormuz is the 'real guarantor' of any deal, describes a negotiating posture designed to separate the nuclear question from the coercive-geography question. From an arms-control standpoint, this is a trap: any deal that addresses the Strait without addressing enrichment levels leaves the foundational proliferation risk intact. The White House's denial of Iranian state media's reported 'unofficial deal' outline — under which Iran would reopen the Strait for a lifting of the naval blockade — is the correct institutional response, but the reported framework's existence as a public signal, whether accurate or planted, is itself a coercive act designed to pressure U.S. allies into lobbying Washington toward concessions.

S 4537, the bill to repeal the Military Selective Service Act — last action May 14, referred to the Committee on Armed Services — is a low-probability passage item but its surface-level appearance in this environment is worth noting. At a moment when the U.S. is depleting strategic inventories in an active conflict while simultaneously managing INDOPACOM deterrence requirements, a bill removing the legal architecture for rapid manpower mobilization is strategically discordant at best.

A three-year-plus replenishment timeline for Tomahawks, Patriots, and THAAD systems consumed against Iran is the week's sharpest deterrence signal — it opens a temporal window of vulnerability that adversaries in a second theater will not ignore.

Bias flag — Arms-control institutional bias toward treaty frameworks may underestimate Iran's demonstrated willingness to use sub-treaty grey-zone instruments (MOIS cyberattacks, Hormuz mine-laying) as the primary coercive tool, rendering formal arms-control frameworks structurally insufficient as the primary response.

Procurement Watch Margaret Avery

The L3Harris Iver4 900 AUV story, sourced from Naval News, is the week's most significant quiet acquisition disclosure. A previously unknown Defense Innovation Unit effort delivering torpedo-tube-launch-and-recovery autonomous undersea vehicles to the U.S. Navy's attack submarine fleet is exactly the kind of capability-via-acquisition-channel that skips the standard program-of-record process to get hardware to operators faster. The program reportedly spans multiple submarine classes. DIU vehicles are designed to move at program speed, not Pentagon speed — which means the capability is being delivered now, not in 2031. The calibration flag here: DIU speed comes with reduced lifecycle oversight. What is the logistics tail? What is the maintenance contract structure? These questions are not answered in a single Naval News feature.

On the named contract awards from USAspending.gov for the window May 20–27: FINCANTIERI MARINE REPAIR LLC received $3,588,353 for the USCGC GLEN HARRIS AND USCGC CLARENCE SUTPHIN QL3 FY26 — coast guard vessel maintenance, not a headline number but a steady-state industrial-base signal. ARINC INCORPORATED received $3,978,328 across two awards. AT&T MOBILITY LLC received $6,259 across two awards, a de minimis communications-services line. Total DoD contract awards in the window: $7,572,941 across five awards — a thin week by any measure, suggesting the larger procurement action is in pipeline, not yet awarded.

GE Aerospace securing an order from Austal USA to supply propulsion for the Navy's Explorer-class T-AGOS ocean surveillance ships is a cleaner story: GE Marine Engines is in the propulsion supply chain for a platform explicitly designed for undersea surveillance — directly relevant to the AUV and submarine fleet conversation. Canada's entry into talks with Saab for a GlobalEye airborne early warning purchase, and Germany's $86 billion economic pitch for Canada's submarine program, are both FMS-adjacent stories that reflect allied nations diversifying away from exclusive U.S. defense dependence — a trend with direct implications for the U.S. industrial base's export revenue assumptions.

The defense and aerospace sector's SEC 10-K novelty scores deserve attention in the procurement context: RTX (RTX Corp) at 65.1% Item 1A novelty, LMT (Lockheed Martin) at 61.7%, and GD (General Dynamics) at 54.0% — all reflecting substantial rewrites of risk factor language. At a moment when Tomahawk and Patriot inventories are reportedly under strain, Raytheon (RTX) and Lockheed's elevated risk-language rewrites are worth reading as acknowledgment that production rate, supply chain, and demand visibility have all shifted materially since the prior filing cycle. That is not a smoking gun, but it is a corroborating data point.

The DIU-routed L3Harris AUV program and GE Aerospace's T-AGOS propulsion award both point to undersea and surveillance capability investment accelerating outside traditional program-of-record timelines — while RTX and LMT's elevated SEC risk-language novelty scores corroborate supply chain and production-rate stress.

Bias flag — Structural skepticism of contractor timelines is well-calibrated here, but the DIU-channel AUV program specifically is designed to route around legacy prime acquisition pathologies — the usual timeline skepticism may not fully apply, and underweighting genuine DIU-speed delivery would be an error.

Homefront Security Special Agent Marcus Webb, Ret.

The LA Metro cyberattack attribution is the domestic security lead today, and it needs to be read clearly: Security Affairs reports that the 'hacktivist' group Ababil of Minab, which hit Los Angeles County Metropolitan Transportation Authority and wiped terabytes of data, is forensically linked to Iran's Ministry of Intelligence and Security (MOIS). This was not hacktivism. It was a state-directed infrastructure attack wearing a hacktivist costume. The foreign threat crossed the border; here is how it translates domestically. The LA Metro attack represents exactly the kind of grey-zone coercive action Iran deploys in parallel with kinetic military operations — designed to impose costs on the U.S. homeland while maintaining plausible deniability in a negotiating context. With the U.S.-Iran military confrontation now active, the probability of additional MOIS-directed infrastructure targeting is elevated, not reduced.

Separately, the FBI issued a public advisory warning that a hacking group has targeted U.S. law firms using social engineering to gain remote access and exfiltrate data. The advisory does not attribute this to a state actor in the reported corpus summary, but law firms are high-value targets for intelligence collection — particularly those handling sensitive government contracts, merger and acquisition activity in the defense industrial base, or litigation involving classified programs. The timing, against the backdrop of active U.S.-Iran hostilities, warrants attention.

DHS Secretary's reported plan to halt international flights to cities that do not cooperate with ICE enforcement is a separate track — an immigration enforcement posture question, not a counterterrorism tool — but it would have second-order effects on international air traffic management and CBP processing capacity at major hubs, reducing bandwidth for actual threat screening. The foreign threat brief matters when it crosses the border. Right now, the MOIS-LA Metro nexus is the most concrete example of that crossing, and it should be driving a re-evaluation of critical infrastructure threat postures in every major transit authority operating under elevated Iran-conflict conditions.

The forensic linkage of the LA Metro cyberattack to Iran's MOIS — occurring during active U.S.-Iran military hostilities — is the clearest domestic homeland security signal of the day and warrants immediate critical infrastructure posture review.

Bias flag — Domestic-threat lens may inflate the MOIS-LA Metro nexus into a systemic infrastructure-attack campaign when the forensic evidence, as reported, links one group to one attack — a serious signal, but not yet a confirmed pattern of simultaneous multi-target infrastructure operations.