Defense & Security Desk

Situation Room Gen. Claire Hawkins, Ret. & Col. David Park, Ret.

Two facts on the board this morning that must be reported separately. First: U.S. Central Command has conducted at least two rounds of what it calls 'purely defensive' strikes on Iranian forces this week, and Iran has responded by targeting what it claims is a U.S. base in Kuwait with a ballistic missile. Task & Purpose and CBS News both confirm the exchange. The ceasefire that took effect roughly seven weeks ago is, operationally speaking, a hot truce. The deployment footprint that generated these exchanges is a fact. Whether Iranian command assessed this as retaliation or escalation is an inference we cannot settle from open sources. Second: the Pentagon has confirmed, as reported by C4ISRNET and corroborated by Wired, that adversaries are using commercially available location data to target U.S. forces in active war zones. That is not a new vulnerability — Wired's reporting indicates the military has understood the threat for years and adopted almost none of the cheap fixes available. The targeting is now occurring. Those are two separate facts with compounding operational implications.

On force movements of note: the U.S. Navy's Pacific Partnership 2026 mission departed San Diego for its coordinating hub in the Philippines on May 27, a routine humanitarian and civic-assistance deployment but one that underlines sustained U.S. presence architecture in the Indo-Pacific. Separately, Germany and the Netherlands will assume NATO's primary command responsibility for Estonia and Latvia's defense posture in mid-2026, per Estonia's Ministry of Defense — a command transition that is a fact; its deterrence signal to Moscow is an inference, though not an implausible one. In Ukraine, the ISW assessment for May 27 notes Russia's battlefield advance rate has slowed, and Sweden has announced it will provide 16 JAS-39 Gripen fighters to Ukraine at no cost with 22 more available for purchase, along with Meteor long-range air-to-air missiles — the first delivery expected by end of 2026.

Key point: The U.S.-Iran ceasefire is a declared status, not an operational reality; troops are being targeted with commercially available location data the Pentagon knew about and did not fix.

Theater Analysis Dr. Farid Hassan

Washington is analyzing this as a U.S.-Iran bilateral ceasefire negotiation. The regional actors are navigating at least five overlapping conflict lines simultaneously: the U.S.-Iran direct exchange with Gulf basing implications; the Iran-Israel front where Tehran claims a ballistic missile strike on Kuwait was a response to U.S. attacks on Iranian territory; Hezbollah's ongoing drone and rocket operations against Israeli forces that crossed the Litani River into Zawtar al-Sharqiyah; Israel's Gaza campaign where Netanyahu has directed forces to seize 70 percent of the territory; and the fragile nuclear negotiation track where Euronews and the New York Times report a tentative 60-day ceasefire extension is awaiting Trump's signature. Start there, not with the bilateral framing.

The tentative deal, if approved, would extend the ceasefire to create space for nuclear and other negotiations. But War on the Rocks' analysis notes the truce 'has been a prickly affair, with occasional fire at Gulf states and tit-for-tats at sea.' Iran's restoration of South Pars natural gas production to pre-war levels — confirmed by Mehr News — indicates Tehran is signaling economic recovery capacity even as military exchanges continue. Meanwhile, Iran reconnected to the global internet after 88 days of digital blackout, per OilPrice.com, and internal dissatisfaction is significant. The IRGC's external posture and the regime's internal pressure calculus are running on different tracks. The Soufan Center's assessment that Ukraine may be approaching a battlefield inflection point — citing ISW's finding that Russia's advances have slowed and Ukraine has reestablished 'overall drone advantage' — is directly conditioned on continued U.S.-European support, which the House NDAA draft leaves ambiguous. Sweden's Gripen transfer is a meaningful capability injection, but the first delivery is not expected until late 2026, and the air war math over Ukraine does not change overnight.

HR 8696, the 'Russia is a State Sponsor of Terrorism Act,' was referred to the House Committee on Foreign Affairs with its most recent action dated 2026-05-07. That bill's trajectory is worth tracking: if it advances, it structurally forecloses certain diplomatic off-ramps with Moscow that negotiators in other theaters — including the Iran track — may need. The legislative and operational pictures are not talking to each other.

Key point: The U.S.-Iran theater is not a bilateral ceasefire negotiation; it is five overlapping conflict lines where a tentative 60-day extension awaits Trump's approval while kinetic exchanges and regional proxy operations continue simultaneously.

Strategic Forces Monitor Dr. Nina Orlova

Two strategic-forces signals today, one from Albuquerque and one from the Gulf, and they deserve to be read together. Sandia National Laboratories announced completion of the W88 Alt 370 production program, fully transitioning the modified thermonuclear warhead into the U.S. stockpile. This is not a new capability in the aggressive sense — the Alt 370 is a life-extension modification to an existing warhead — but it marks the completion of a critical stockpile sustainment milestone. Sandia's statement indicates the program is transitioning to its 'next phase,' language that should be tracked. The W88 sits atop Trident II D5 submarine-launched ballistic missiles — the same fleet whose sustainment the Navy is investing in and whose undersea basing posture the Canadian submarine competition (discussed below by Procurement Watch) is relevant to on the allied flanks.

The India-Pakistan angle is the one I want to flag most sharply. World Politics Review published analysis today — one year after what it describes as a four-day India-Pakistan war — concluding that the risk of renewed conflict between the two nuclear-armed neighbors 'remains high' and framing the episode as evidence of 'the erosion of nuclear restraint.' If that characterization is accurate, it represents the most dangerous structural shift in the nuclear environment since the Cold War's bilateral framework: two states with growing arsenals, contested territorial claims, demonstrated willingness to exchange fire across the nuclear threshold's lower rungs, and no functional arms-control architecture. My Cold War institutional bias defaults to treaty frameworks, and I recognize there is no treaty framework here to lean on — that is precisely the problem.

The Iran nuclear negotiation track — tentative 60-day ceasefire extension pending Trump's approval — is being assessed by prediction markets as having made little movement toward an actual deal, per CNBC. Deterrence works until it does not. The question is what changed in the calculation when the U.S. and Israel initiated direct strikes on Iran on February 28, and whether seven weeks of hot truce followed by a potential 60-day extension reconstitutes a stable deterrence architecture or merely defers the inflection.

Key point: W88 Alt 370 stockpile completion marks a U.S. sustainment milestone, but the more urgent strategic signal is the World Politics Review assessment that India-Pakistan nuclear restraint has structurally eroded one year after their four-day war.

Procurement Watch Margaret Avery

Three procurement items today, and the NDAA picture that shapes the funding environment for all of them. BAE Systems won the Army's Soft Kill Active Protection System contract, with the first phase valued at $20 million, per Breaking Defense. The system — BAE's Rapid Optical Observation and Kill (ROOK) program — uses jamming and confusion to defeat missile and drone threats rather than kinetic interception. First-phase award is a reasonable procurement posture for an emerging capability class: the Army is buying proof-of-concept at scale before committing to a larger program of record. Whether BAE can deliver on timeline is a separate question, and the history of vehicle protection programs suggests skepticism is warranted. Watch for the follow-on phase valuation and any GAO interest if the program accelerates.

The Canadian submarine competition is the biggest allied-FMS story of the week. The Republic of Korea Navy's ROKS Dosan Ahn Chang-ho (SS-083), a KSS-III-class boat, arrived at Victoria, Canada, after a 14,000-kilometer transit from Busan — the longest voyage of a South Korean submarine in history, per USNI News. This is a deliberate demonstration ahead of Ottawa's procurement decision for its next submarine class. Simultaneously, Thales Canada was awarded a contract by Lockheed Martin Canada to supply S2087 low-frequency towed-array sonar for Canada's future River-class destroyers — a Thales press release confirms this. The sonar award and the submarine competition are parallel signals that Canada's naval recapitalization is moving, which has direct implications for U.S. industrial-base partners and allied undersea warfare integration in the Pacific.

The House NDAA draft is the funding story that overrides everything else. GovExec reports the draft leaves some of the Trump administration's top defense priorities unfunded because it does not include reconciliation dollars. Defense Scoop adds that the draft would dissolve the Space Development Agency and the Space Rapid Capabilities Office — two organizations specifically designed to accelerate acquisition. The program-of-record logic here is that the Pentagon wants to replicate their acquisition processes department-wide, which sounds administratively tidy until you ask who owns the transition risk. DEFEND AMERICAN JOBS PAC spent $1,007,369 in independent expenditures in the last seven days per FEC filings — the third-largest independent spender in the window — suggesting defense-industry advocacy is active in the cycle even as the NDAA picture remains unsettled. On the USAspending side, the largest DoD contract award in the tracked window was FINCANTIERI MARINE REPAIR LLC at $3,588,353 for USCGC GLEN HARRIS and USCGC CLARENCE SUTPHIN QL3 FY26 maintenance — Coast Guard sustainment, not a major weapons program. ARINC INCORPORATED received $3,978,328 across two awards. Contract volume this window is modest; the real procurement action is in the NDAA markup.

Key point: The House NDAA draft's refusal to include reconciliation dollars leaves the Trump administration's top defense priorities unfunded, and the proposed dissolution of the Space Development Agency and Space RCO introduces transition risk exactly when the Pentagon needs acquisition speed.

Homefront Security Special Agent Marcus Webb, Ret.

The location-data targeting story crosses the border — and that is the threshold I watch. The Pentagon confirmed to C4ISRNET that U.S. forces deployed to war zones have been targeted using commercially available location data. Wired's reporting frames this as an institutional failure: the military has known about cheap mitigation measures for years and adopted almost none of them. That's an overseas operational problem, but the data pipeline that enables it runs through domestic commercial brokers. The same data ecosystem that exposed troop locations to adversaries is operating right now, sourcing from American smartphones, fitness apps, and ad-tech networks, with no real-time restriction on who purchases it. That is a homeland-adjacent infrastructure vulnerability, not just a deployed-forces problem.

The Winterthur, Switzerland blade attack — three wounded, Swiss authorities declaring it a 'terrorist act' per The Local — is a reminder that soft-target, bladed-weapon attacks continue as a low-sophistication, high-impact template in Western public spaces. No direct U.S. nexus in this incident, but the FBI and DHS threat bulletins have consistently flagged this attack vector for domestic awareness. The Swiss designation as a terrorist act, rather than criminal violence, will shape the investigative and intelligence-sharing picture. I am watching whether any foreign-influence or ideological flag emerges in the attribution. On the domestic cyber side, Microsoft Threat Intelligence published analysis of 'The Gentlemen' ransomware — a Go-based, self-propagating encryptor deployed by Storm-2697 affiliates — which uses per-file ephemeral key encryption and aggressive lateral movement. Defense contractors and critical infrastructure operators with legacy network architectures should treat this as an active threat signal, not a research paper.

Key point: The commercial location-data pipeline that adversaries are using to target deployed U.S. troops originates in domestic data markets; the same infrastructure vulnerability that is a foreign-forces problem overseas is an unaddressed homeland commercial data exposure at home.