Defense & Security Desk

Situation Room Gen. Claire Hawkins, Ret. & Col. David Park, Ret.

Two facts dominate the weekly operational picture. First, the Army has formally activated Multi-Domain Command-Pacific (MDC-PAC), a two-star command that consolidates the 7th Infantry Division and the 1st Multi-Domain Task Force into what officials describe as a 'self-contained,' mobile formation capable of delivering cyber, space, electronic warfare, intelligence, and fires effects across the Indo-Pacific theater. That is a fact. The intent — to serve as a covering force capable of deterring or contesting a Chinese amphibious operation — is an inference supported by doctrinal context, but it should be labeled as such. The activation is concurrent with Exercise Valiant Shield 26, running June 22–July 1 across the Commonwealth of the Northern Mariana Islands, Guam, Japan, and the Mariana Islands Range Complex, and with multiple allied ships transiting toward RIMPAC 2026 in Hawaii, scheduled June 24–July 12.

Second, the deployment picture in Finland: U.S. Marine F-35B Lightning IIs have conducted the first-ever road-basing flight operations on Finnish highways, an operationally significant proof-of-concept for distributed basing under NATO Article 5 contingencies. Operating from dispersed road strips denies adversaries the fixed-base targeting geometry that underpins most Russian air-strike planning. The deployment is a fact. Whether it shifts Russian operational calculus is an inference. Separately, at sea: South Korea delivered the second Ulsan-class Batch-III frigate ROKS Gyeongbuk ahead of schedule, and Turkey and Romania simultaneously received sister offshore patrol vessels — both indicators of allied naval capacity growth that matters to distributed maritime operations.

MDC-PAC activation and concurrent Valiant Shield 26 exercise mark a concrete structural shift in U.S. Army Pacific posture toward mobile, multidomain covering-force operations.

Procurement Watch Margaret Avery

Three procurement signals this week deserve parsing, and two of them involve the word 'billion' in ways that mask distinct problems. The Pentagon has inked $1.2 billion in rare-earth mineral loans — Assistant Secretary of Defense Michael Cadenazzi was direct at the CNAS event: 'You can dream all day long about scaling [weapons production but] if you don't have germanium, gallium, and rare earths, it is a pipe dream.' That quote should be read as a quiet acknowledgment of a structural industrial-base failure that predates this administration. Loans are not production capacity. They are bridge financing. The question is whether the downstream processing infrastructure — which doesn't yet exist at scale domestically — will materialize before the next conflict stress-test.

On the contract-award side, the DoD's top award in the last seven days per USAspending.gov was AT&T ENTERPRISES, LLC at $65,068,583 for a VPNS DEDICATED ACCESS ARRANGEMENT — communications infrastructure, not platforms. The second largest was APTIM FEDERAL SERVICES, LLC at $29,942,923, and Johns Hopkins APL received $2,853,014 for research work. The combined top-16 window totals $101,714,408 — a relatively thin week for major platform contracts, which aligns with the broader concern that munitions accounts are stressed. Separately, the NDAA Senate panel is moving to place guardrails on Pentagon direct equity investments in private companies and require an oversight board — a structurally important governance move given the Defense Production Act invocations. Honeywell's board approved a spin-off of Honeywell Aerospace, set for June 29, which will create a standalone tier-1 defense and aerospace supplier. Spin-offs of this type can clarify capital allocation but introduce supply-chain fragmentation risk for programs that depend on integrated Honeywell systems. The Defense and Aerospace sector's 10-K risk-factor language novelty is running at 54.5% average this cycle, with RTX at 65.1% and Lockheed at 61.7% — meaning both companies are significantly rewriting their risk disclosures, likely reflecting post-Iran-conflict munitions burn-rate exposure and supply-chain uncertainty. Budget accordingly.

Pentagon rare-earth loans and solid-rocket-motor shortfalls expose a structural industrial-base gap that $1.2 billion in bridge financing addresses symptomatically but not systemically.

Bias flag — Structural skepticism of contractor timelines and program offices may be underweighting the genuine urgency signal in the Defense Production Act invocation — this is not a normal procurement cycle.

Theater Analysis Dr. Farid Hassan

Washington is processing the U.S.-Iran Memorandum of Understanding as a bilateral negotiation outcome. The regional actors are reading something more complicated. The Soufan Center reports Ukraine launched what may be its largest-ever drone strike on Russia during this period, hitting a Moscow oil refinery for the second time in a week — that is not an Iran story, but it is the same story: autonomous systems are rewriting the military-political grammar of coercion, and the lesson is being absorbed simultaneously in Tehran, Kyiv, Moscow, and Beijing. The Arms Control Association's Kelsey Davenport, cited in Der Spiegel, frames the Western negotiating position as 'much worse than before the war.' That is the correct baseline. The MoU deferred the hardest questions on Iran's nuclear program while the 110-day conflict depleted U.S. and Israeli munitions stockpiles and demonstrated the limits of air-superiority-based coercive campaigns.

The internal Iranian reaction, per The Intercept's reporting, is not uniformly jubilant — past betrayals create skepticism even among those who extracted concessions. This matters: a leadership that distrusts its own diplomatic wins is not reliably predictable in how it interprets ambiguous signals. RUSI's assessment is pointed — the MoU risks 'permanent crisis' by deferring resolution. Hudson Institute's Rebeccah Heinrichs argues the MoU 'gives the momentum to Iran,' and the Hudson podcast on Indo-Pacific leaders' views of the Iran deal raises a second-order question: how do Tokyo, Seoul, Canberra, and Manila read a U.S. that fought a 110-day war against Iran and emerged with a deferred nuclear deal and depleted stockpiles? That credibility question is the thread connecting the Iran theater to the Pacific posture hardening represented by MDC-PAC.

The Iran MoU's deferral of nuclear resolution, combined with visible U.S. munitions depletion, creates a regional credibility deficit that Indo-Pacific allies are already calculating.

Bias flag — Regional-first lens may be underweighting the great-power deterrence second-order effects of the Iran MoU — the Iran story is also a China and North Korea story that the regional framing does not fully capture.

Strategic Forces Monitor Dr. Nina Orlova

The Iran MoU is generating the right questions in the wrong forums. The arms-control community's focus — correctly — is on what the MoU's nuclear provisions actually require of Tehran, and the Davenport analysis in Der Spiegel suggests the Western position is structurally weakened relative to pre-conflict. But the deterrence question that is not being adequately surfaced is this: a 110-day conflict in which U.S. and Israeli conventional strike packages were expended at scale, against a regional power that did not cross the nuclear threshold, is a data point that multiple nuclear-armed states are now processing. North Korea, Pakistan, and China all observed that the conflict's conclusion was negotiated — not decisive. Deterrence works until the adversary updates their model of your resolve and capability. The question is: what changed in the calculation?

On the legislative side, the Congress.gov tracking for this period flags HR 8855 — amending title 18 for concealed carry reciprocity for certain military members — as the lone defense-axis bill with a last action of 2026-05-15, referred to House Judiciary. No arms-control or strategic-posture legislation is surfacing in the active bill queue this week, which is itself a signal: the NDAA cycle is consuming the legislative oxygen, and the MoU's nuclear provisions are not being subjected to Senate advice-and-consent review — a gap that the Arms Control Association will flag and that I will flag here. The French Navy intercepted a sanctioned Russian tanker (the Tagor), per BBC Russian reporting; the Kremlin characterized it as piracy. These maritime interdiction actions, multiplied across global chokepoints, are part of the coercive architecture that constrains Russian logistics — and they are happening below the threshold of formal escalation management.

The Iran MoU's nuclear deferral, absent Senate review, sets a precedent that adversary nuclear calculations will exploit — the deterrence gap is not in warheads but in political will demonstrated by the deal's structure.

Kill Chain Maj. Dale Okonkwo, Ret.

The operational signal of the week is Ukraine's reported largest-ever drone strike on Russia — targeting a Moscow oil refinery for the second time in seven days. This is not a news story about drones. It is a story about sense-to-shoot loop compression at strategic depth. Ukraine is demonstrating that a non-peer actor, given sufficient mass and sensor integration, can reach targets 1,000-plus kilometers inside Russian territory with attritable systems that cost a fraction of the interceptors required to stop them. Russia's response — flight disruptions in and out of Moscow, per the Soufan Center — is an infrastructure fragility signal. The cost-exchange ratio is breaking against the defender.

Simultaneously: Poland is weighing entry into the X-BAT autonomous vertical-takeoff fighter program. This is worth watching not as a procurement story but as a doctrine story — a NATO flank state considering autonomous combat aircraft is a qualitative threshold, and the political-legal limits on lethal autonomy are being tested in real time by the Ukrainian campaign. The Lieber Institute's publication on LOAC compliance in U.S. software for autonomous combat systems, published June 17, is the governance community trying to catch up. Meanwhile, Renault and Thales have signed an agreement to produce the Toutatis loitering munition at an automotive factory at an estimated rate of 1,000 units per month — this is the Carnegie vertical-integration move applied to drone warfare: repurpose existing high-volume manufacturing infrastructure for attritable munitions. The RC-135 Rivet Joint drone-teaming concept reported by The War Zone closes another loop: legacy ISR platforms extending their collection aperture via drone wingmen compresses the sensor-to-analyst step, not just the sensor-to-shooter step. The kill chain is being shortened at every node simultaneously.

The AI decision-advantage story from Navy.mil — a Marine Corps NPS graduate delivering AI-driven decision support to 2nd MLG — is a small unit signal, but it points to the correct direction: the advantage is not in the platform, it is in the decision speed of the human-machine team operating it.

Ukraine's strategic-depth drone campaign against Moscow infrastructure demonstrates that attritable mass compresses the sense-to-shoot loop at ranges previously reserved for cruise missiles — every adversary is taking notes.

Bias flag — Autonomy-first lens may be over-indexing the Ukraine drone campaign as a universal template — mass attritable systems require sustained industrial throughput and permissive airspace conditions that do not automatically transfer to the Pacific.

Apogee Watch Col. Priya Ramanathan, Ret.

Two space-domain stories this week, and they sit at opposite ends of the threat spectrum. DARPA is soliciting innovative technology to reconstitute Space Force satellites during conflict — the framing is explicit: rapidly launching new payloads or tapping commercial constellations to fill gaps in real time. This is the U.S. military acknowledging, in an open solicitation, that its exquisite satellite architecture is not survivable under contested conditions and that reconstitution speed, not survivability hardening alone, is the operational answer. The decisive terrain is a thin shell of vacuum 400 km up, and the current U.S. posture treats that terrain as though it is a peacetime utility. DARPA's solicitation is the first serious institutional acknowledgment that we need to hold it under fire.

The second story is structurally more alarming: Defense One reports that Chinese investors secretly acquired stakes in SpaceX before a potential IPO, and one previously unreported investor has ties to Chinese military contractors. This was revealed only after ProPublica went to court to obtain the information. SpaceX's Starshield division is the primary commercial-constellation combatant asset for U.S. military communications and ISR. A foreign equity stake with PRC military-contractor ties in that company is not an investment story — it is a counterspace story. You do not need an ASAT missile if you have an equity position in the adversary's orbital backbone. The Committee on Foreign Investment in the United States (CFIUS) process either missed this or was circumvented, and neither answer is acceptable when the asset in question is the satellite architecture that the joint force depends on for PNT, communications, and targeting.

DARPA's satellite-reconstitution solicitation and the Chinese investor penetration of SpaceX are the same threat from opposite directions — one is the U.S. building resilience against a counterspace attack it knows is coming, the other suggests the attack vector may already be inside the wire.

Bias flag — Space-centric lens elevates the SpaceX Chinese-investor story to a counterspace priority before CFIUS remediation status and actual operational access are confirmed — the threat inference may be running ahead of the established facts.

Homefront Security Special Agent Marcus Webb, Ret.

Two domestic signals this week that sit at the intersection of counterintelligence and civil liberties, and they need to be read together. First: the FBI attempted to recruit anti-ICE protesters as informants, per The Intercept's reporting. Individuals arrested — including one playing a cello — were approached by federal agents and asked to inform. This is the bureau operating at the edge of its First Amendment guardrails. The legitimate counterterrorism justification for informant networks is real; the operational risk of chilling lawful dissent through informant recruitment at political demonstrations is also real. These are not the same thing, and conflating them is how both security equities and civil liberties get degraded simultaneously.

Second, and more operationally urgent: the FortiBleed campaign, documented by Recorded Future, has exposed valid administrative and VPN credentials for 73,932 FortiGate firewall systems. FortiGate is pervasive in critical infrastructure, federal networks, and defense contractor environments. Credential exposure at that scale is not a cyber story — it is a physical infrastructure story wearing a cyber label. The foreign threat brief matters when it crosses the border, and 73,932 valid admin credentials crossing from adversary hands to network access is precisely how it crosses. Defense contractors under CMMC requirements who are running unpatched FortiGate systems are simultaneously exposed to this breach and to the False Claims Act cybersecurity settlement precedent reported by DefenseScoop — a contractor settled this week for failing to implement required cybersecurity measures. The CMMC enforcement environment is tightening exactly as the FortiBleed exposure widens the attack surface.

The FortiBleed credential breach — 73,932 FortiGate systems exposed — combined with the CMMC False Claims Act settlement creates a compliance-plus-exploitation pincer that defense contractors are underprepared for.

Bias flag — Domestic-threat lens on the FBI informant-recruitment story may be inflating the civil-liberties concern relative to the operational counterterrorism justification — the facts as reported are concerning but the full investigative predicate is not public.