//
OFFLINE — VIEWING CACHED CONTENT
← Back to Archive

IC BRIEF

Current as of 1505 EDT (UTC-04), Monday 23 March 2026

Contents

10 stories from 11 sources across 11 organizations

BOTTOM LINE UP FRONT

Ukraine claims 'irrefutable evidence' Russia is providing satellite imagery and drone technology to Iran for strikes on US forces — while Russia simultaneously offered to halt this intelligence sharing if the US stopped supporting Ukraine, a quid pro quo Washington rejected. The three-way intelligence dynamic now directly links the Iran war and Ukraine conflict through competing intelligence-sharing arrangements, complicating IC assessments of both theaters.

Defense Intelligence Agency (DIA) assesses Iran retains 80-90% of its minelayer capacity and could close the Strait of Hormuz for 1-6 months despite CENTCOM destroying 40+ minelaying vessels. A dozen-plus mines are already in the strait. This assessment arrives as Trump's 48-hour Hormuz ultimatum expires Monday and Iran denies ongoing negotiations.

Monday brings two pivotal IC events: District Judge Rita Lin hears Anthropic's preliminary injunction against the Pentagon supply chain risk label — with legal experts now giving the company better than even odds after inflammatory public statements by Trump, Hegseth, and Pentagon officials constitute 'admissions against interest.' Simultaneously, the Senate is expected to confirm Mullin as Department of Homeland Security (DHS) Secretary, inheriting a department in its sixth week of funding shutdown with CISA at 38% staffing during peak Iranian cyber threat activity.

Leadership & Organization

Senate Advances Mullin for DHS Secretary as Department Funding Shutdown Enters Sixth Week

The Senate advanced Markwayne Mullin's nomination for DHS Secretary on a 54-37 party-line vote during a rare weekend session, with confirmation expected Monday. Mullin replaces Kristi Noem, who was fired amid backlash over immigration enforcement. DHS routine funding has been shut down since mid-February, creating long airport waits during spring break as Democrats demand immigration enforcement reforms including body cameras, warrant requirements, and no-mask policies for officers. Trump announced he is ordering immigration officers to assist Transportation Security Administration (TSA) agents — a move lawmakers warned could escalate tensions at crowded airports.

Sources:

Warren Accuses Pentagon of Retaliating Against Anthropic Over AI Weapons Safeguards; Court Hearing Monday

Sen. Warren wrote to Defense Secretary Hegseth calling the Pentagon's supply chain risk designation of Anthropic 'retaliation' for the company's refusal to allow Claude AI for mass surveillance or fully autonomous weapons without human oversight. Warren argued DOD could have simply terminated its contract rather than applying a label that bars all Pentagon contractors from using Anthropic products. Separately, legal experts told Breaking Defense that inflammatory public statements by Trump ('Leftwing nut jobs'), Hegseth ('arrogance and betrayal'), and Pentagon CTO Michael ('a liar with a God-complex') constitute 'admissions against interest' that strengthen Anthropic's legal position. A former JAG gave Anthropic 'greater than 50 percent odds' of securing a preliminary injunction when District Judge Rita Lin hears the case Monday.

Sources:

Watch Items - Mullin DHS confirmation vote expected Monday — first major decision will be CISA director nominee Plankey's stalled confirmation - Anthropic v. Pentagon preliminary injunction hearing Monday before Judge Lin in San Francisco - NCTC director position remains vacant — watch for acting or permanent appointment this week

Operations & Intelligence Failures

Zelenskyy Claims 'Irrefutable Evidence' Russia Providing Intelligence to Iran During US-Iran War

Ukrainian President Zelenskyy stated after meeting top military intelligence leadership that Ukraine possesses 'irrefutable evidence' Russia is providing intelligence to Iran, including satellite imagery and drone technology for strikes on US forces. Russia previously offered to halt intelligence-sharing with Iran if the US suspended intelligence support to Ukraine — Washington rejected the offer. Kremlin spokesman Peskov dismissed the allegations as 'false.' The development underscores a three-way intelligence dynamic where the Iran war and Ukraine conflict are now directly linked through intelligence-sharing arrangements.

Analyst Note: Prior briefs tracked Russia's initial intelligence provision to Iran starting around March 8. The escalation from 'sources say' reporting to Zelenskyy personally citing 'irrefutable evidence' after meeting military intelligence leadership signals Ukraine has intercepted specific Russian-to-Iran intelligence transfers — likely SIGINT or satellite imagery metadata. The rejected quid pro quo (halt Iran intel for halt Ukraine intel) reveals Russia views the two conflicts as a single strategic leverage opportunity.

Sources:

US Intelligence Assesses Dozen-Plus Iranian Mines in Strait of Hormuz; DIA Projects 1-6 Month Closure Capability

Current US intelligence assessments identify at least a dozen Iranian naval mines in the Strait of Hormuz, including Maham 3 moored mines (magnetic/acoustic sensors, 10-foot engagement range) and Maham 7 seabed mines engineered to scatter incoming sonar waves and complicate minesweeping. Iran retains 80-90% of its small boat and minelayer capacity despite CENTCOM destroying 40+ minelaying vessels. A DIA internal assessment projects Iran could keep the strait shut for 1-6 months. Iran's total mine arsenal is estimated at 2,000-6,000 devices. The assessment arrives as Trump's 48-hour Hormuz ultimatum deadline approaches and Iran denies ongoing negotiations.

Analyst Note: The prior brief noted CENTCOM's claim that Iranian drone launches were down 86% and missile capacity cut 73%. DIA's mine assessment — projecting 1-6 month closure capability despite kinetic strikes on minelayers — suggests Iran's asymmetric Hormuz denial strategy remains largely intact even as conventional military capacity degrades. The 80-90% minelayer retention rate contradicts the narrative of comprehensive Iranian military degradation.

Sources:

FBI Issues FLASH Alert: Iranian MOIS Handala Group Deploying Telegram-Based Malware Against Dissidents

The FBI published IC3 FLASH 260320 warning that Iranian Ministry of Intelligence and Security (Iran) (MOIS)-linked Handala hackers are using Telegram bot infrastructure for command-and-control in malware campaigns targeting Iranian dissidents, journalists, and opposition figures globally. Attackers impersonate legitimate apps (Pictory, KeePass, Telegram) to deliver Windows malware enabling screenshot capture and file exfiltration. The campaign dates to 2023 with gathered intelligence used in Handala's 2025 hack-and-leak operations and the March 2026 Stryker medical device breach. DOJ previously seized four Handala/Homeland Justice websites and attributed both groups to MOIS.

Sources:

Hungary Accused of Leaking EU Diplomatic Deliberations to Russia During Active Conflict

The Washington Post reported that Hungary's Foreign Minister Szijjarto 'regularly called his Russian counterpart Lavrov during breaks in EU meetings to provide direct reports on what was discussed.' The European Commission demanded clarification, Germany called the allegations 'very serious,' and Poland's PM Tusk said it 'shouldn't come as a surprise.' The alleged intelligence leak to a nation actively providing targeting intelligence to Iran represents a counterintelligence failure within the NATO alliance — directly relevant as the IC relies on allied intelligence-sharing arrangements now complicated by questions about information security within EU diplomatic channels.

Sources:

Watch Items - Trump Hormuz ultimatum deadline expires Monday evening — watch for IC BDA and escalation assessments if strikes on Iranian power infrastructure proceed - Russia-Iran intelligence sharing: Ukraine's 'irrefutable evidence' claim may trigger US reassessment of allied intelligence-sharing protocols - MOIS Handala operations post-FBI FLASH: watch for follow-on malware campaigns targeting IC or defense sector personnel

Congressional Oversight & Policy

Just Security: Chadha Decision Leaves Congress Unable to Halt Unauthorized Iran War Without Veto-Proof Majority

Legal scholar Michael Glennon argues in Just Security that the Supreme Court's 1983 Chadha decision inverted the Framers' war powers design: presidents can now wage war indefinitely without authorization while Congress needs a veto-proof supermajority to halt operations. The Iran conflict exemplifies the dysfunction — VP Vance cast a tie-breaking vote to defeat a bipartisan war powers resolution on Venezuela while declaring the War Powers Act 'fundamentally fake and unconstitutional,' then the administration escalated into full-scale war with Iran without congressional authorization. Glennon calls for either overruling Chadha or limiting it to delegated-power contexts, leaving the War Powers Resolution's concurrent resolution mechanism intact for constitutional authority disputes.

Sources:

Watch Items - Section 702 vote now punted to week of April 14 after Easter/Passover recess — 6 days of legislative calendar before April 20 expiration - Iran war authorization: no AUMF or congressional vote authorizing operations — Chadha precedent prevents concurrent resolution from halting war

Technology & OSINT

Pentagon Locks Palantir Maven AI Into Permanent Military Targeting Program of Record

Deputy Defense Secretary Steve Feinberg signed a March 9 directive formalizing Palantir's Maven Smart System as an official DOD program of record, ensuring stable long-term funding through the fiscal year. Maven functions as the primary AI operating system for the US military, ingesting satellite imagery, drone feeds, radar data, and intelligence reports to flag targets in near real time. The system reportedly identified 1,000+ targets within the first hours of Operation Epic Fury and has supported thousands of subsequent strikes. Maven currently relies on Anthropic's Claude model for data analysis — creating a technical dependency the Pentagon's supply chain risk designation of Anthropic complicates significantly.

Analyst Note: The prior brief tracked Maven's 8,000+ targets in 24 days and the transition from National Geospatial-Intelligence Agency (NGA) to Chief Digital and Artificial Intelligence Officer (CDAO) oversight. Formalizing Maven as a program of record while its primary AI component (Claude) is under supply chain risk designation creates an unprecedented procurement contradiction — the Pentagon is simultaneously institutionalizing and blacklisting components of the same weapons system. Monday's court hearing could force a resolution.

Sources:

Space Force Activates Defensive Cyber Squadrons to Protect Launch Operations from Adversary Attacks

Space Systems Command activated the 630th Cyberspace Squadron at Vandenberg Space Force Base (SFB) on March 10 and reassigned the 645th Cyberspace Squadron (CYS) to Patrick SFB in September, creating dedicated cyber defense units for the Eastern and Western launch ranges. The squadrons protect ground terminals, satellite systems, and launch infrastructure against hijacking, malware, and unauthorized access. The commander noted adversaries 'are constantly looking for ways to deny, disrupt or destroy our ability to launch.' The units use an eight-crew model integrating space operators, intelligence personnel, and cyber operators side-by-side.

Sources:

Watch Items - Maven-Claude dependency: if Judge Lin grants Anthropic's injunction Monday, it could freeze the supply chain risk label — directly affecting Maven's AI pipeline during active combat operations - Space Force cyber integration: 630th and 645th CYS operational maturity assessments expected as part of Integrated Mission Delta transition

Hiring & Workforce

Van Hollen Challenges OPM Rules That Would Strip Federal Employees of Independent Appeal Rights

Sen. Van Hollen is leading Senate efforts to block two Office of Personnel Management (OPM) proposed rules that would transfer jurisdiction over suitability action appeals and Reduction in Force (RIF) appeals from the independent Merit Systems Protection Board (MSPB) to internal OPM processes overseen by political appointees. Van Hollen argues this creates a 'clear conflict of interest' where OPM becomes policymaker, enforcer, and final arbiter — violating the 1978 Civil Service Reform Act's intentional separation of policy and adjudication. The rules would affect all federal employees subject to OPM jurisdiction, including IC personnel facing suitability determinations. Combined with a separate OPM final rule stripping 50,000 'policy-influencing' positions of civil service protections, the changes represent the broadest erosion of federal workforce appeal rights in decades.

Sources:

Watch Items - OPM RIF and suitability appeal rule comment periods closed March 9-12 — watch for final rules that would strip MSPB independent review from IC workforce actions - Schedule Policy/Career reclassification of 50,000 'policy-influencing' positions — implementation timeline and which IC positions are affected remains unclear

COLLECTION GAPS

UNCLASSIFIED // OPEN SOURCE