//
OFFLINE — VIEWING CACHED CONTENT
← Back to Archive

IC BRIEF

Current as of 0027 EDT (UTC-04), Tuesday 24 March 2026

Contents

6 stories from 10 sources across 10 organizations

BOTTOM LINE UP FRONT

Mullin's Department of Homeland Security (DHS) confirmation Monday night (54-45) puts a new crisis manager atop the department but changes nothing structurally: Cybersecurity and Infrastructure Security Agency (CISA) remains at 38% staffing, 100,000 DHS employees are working without pay, and no funding deal is in sight. His refusal during confirmation hearings to commit to restoring CISA's workforce signals the cybersecurity staffing deficit will persist through the Iran conflict's cyber escalation.

The Anthropic v. Pentagon preliminary injunction hearing before Judge Rita Lin today is the IC's pivotal legal event. Amicus briefs from nearly 150 retired judges, 22 former generals, Microsoft, and employees from OpenAI and Google overwhelmingly support Anthropic, while the Pentagon's own pre-designation email showing the two sides were 'very close' undercuts the national security rationale. A ruling pausing the supply-chain risk designation would force DOD to reverse its Maven AI transition timeline.

Israel's exploitation of Iran's domestic surveillance camera network to locate and kill Khamenei, revealed in detail today, demonstrates how authoritarian control infrastructure becomes a targeting vector. The operation relied on camera feeds compromised since 2021 despite public Iranian warnings, with Israel Defense Forces (IDF) Unit 8200 algorithms processing pattern-of-life data to map the supreme leader's security posture.

Leadership & Organization

Senate Confirms Mullin as DHS Secretary 54-45 During Record Department Shutdown

The Senate confirmed Sen. Markwayne Mullin (R-OK) as Homeland Security Secretary by a 54-45 vote, with Democrats Fetterman and Heinrich crossing party lines. Republican Homeland Security Committee Chairman Rand Paul voted against, citing Mullin's 'anger issues' and questioning whether he could set a proper example for ICE and Border Patrol agents. Mullin replaces Kristi Noem, fired after DHS agents shot and killed two American citizens during an immigration operation. He inherits a department in simultaneous crisis: funding shut down since February 14, 50,000 Transportation Security Administration (TSA) agents working without pay, CISA at 38% staffing, and over 300 TSA officers resigned. Sunday set a new record with the highest TSA callout rate at 11.76%. Mullin pledged to require judicial warrants for home entries during immigration enforcement but declined to commit to restoring CISA staffing when pressed by Sen. Hassan.

Analyst Note: Prior IC briefs tracked Mullin through committee (8-7 vote March 19) and predicted late-week confirmation. Paul's opposition from the Republican committee chairman signals Mullin will face skeptical oversight from his own party on civil liberties, potentially creating space for FISA and surveillance reform that DHS equities would normally oppose. His refusal to commit on CISA staffing, combined with the ongoing shutdown, means the cyber defense workforce gap will persist through the Iran conflict's peak cyber threat period.

Sources:

Prior Reporting - [Senate expected to vote on DHS secretary confirmation for Mullin](https://www.pbs.org/newshour/politics/watch-live-senate-expected-to-vote-on-dhs-secretary-confirmation-for-mullin) (2026-03-23)
Watch Items - Mullin's first operational directives as DHS Secretary expected within 48h; watch for CISA staffing decisions - NCTC directorship remains vacant since Kent resignation; watch for interim appointment - Congressional recess compresses timeline for FISA, DHS funding, and intelligence authorization

Operations & Intelligence Failures

Israel Exploited Iran's Domestic Surveillance Camera Network to Locate and Kill Khamenei

Israel hacked Iran's vast street surveillance camera network, originally deployed to monitor dissent and enforce hijab laws, and repurposed it as a real-time targeting tool to locate and assassinate Supreme Leader Ali Khamenei on February 28. Intelligence sources told the Times of Israel that algorithms processed the camera feeds to extract 'people's addresses, routes they took to work and who protected them,' with at least one strategically positioned camera monitoring parking near Khamenei's compound. The network had been repeatedly compromised since 2021; a senior Iranian politician publicly warned in September that 'all the cameras at our intersections are in the hands of Israel.' The operation demonstrates how authoritarian surveillance infrastructure built to control populations can become the vector through which adversary intelligence services locate and kill leadership targets.

Analyst Note: Prior briefs documented CYBERCOM and SPACECOM as 'first movers' in Operation Epic Fury, blinding Iran's C2 before kinetic strikes. Today's camera network revelation adds a critical HUMINT/SIGINT convergence layer: Israel's Unit 8200 fused compromised surveillance infrastructure with AI-driven pattern-of-life analysis to enable the decapitation strike. Check Point Research separately documented Iranian actors retaliating by targeting IP cameras across Israel and Gulf states for their own BDA, confirming both sides now treat surveillance cameras as military infrastructure.

Sources:

Watch Items - Iran counterintelligence response to camera network compromise; watch for infrastructure hardening or retaliation - Trump's 5-day Iran strike postponement expires ~March 28; monitor for escalation - CENTCOM BDA reporting on Iranian ballistic missile and drone capacity degradation

Congressional Oversight & Policy

Amicus Briefs Overwhelmingly Back Anthropic Ahead of Tuesday Injunction Hearing Against Pentagon

Tech Policy Press analyzed the amicus briefs filed ahead of the March 24 preliminary injunction hearing before Judge Rita Lin. Nearly two dozen former high-ranking military officials argued the supply-chain risk designation 'lacks legal foundation' and 'risks long-term viability of critical public-private partnerships.' Approximately 50 Google and OpenAI employees claimed the Pentagon acted 'recklessly' using the designation to 'punish' rather than simply ending the contract. A free speech coalition including Foundation for Individual Rights and Expression (FIRE), Electronic Frontier Foundation (EFF), and the Cato Institute characterized the action as a 'textbook violation' of First Amendment rights. Microsoft sought a 'pause' on the designation warning of 'broad negative ramifications for the entire technology sector.' Law professor Alan Rozenshtein argued the Pentagon exceeded 'limited statutory authority' and the threat model 'bears no resemblance' to actual circumstances. American Federation of Government Employees (AFGE) also filed a brief supporting Anthropic.

Analyst Note: Four consecutive IC briefs have tracked this case from political rhetoric to legal record. The amicus brief analysis reveals the breadth of industry opposition: competitors (OpenAI, Google, Microsoft), civil liberties groups, labor unions, and retired military leaders all aligned against the Pentagon's position. The DOJ's pre-designation email showing the two sides were 'very close' on the disputed terms directly contradicts the emergency national security rationale. If the injunction holds, DOD faces a 180-day Claude removal timeline against Maven operations processing thousands of targeting actions in the Iran campaign.

Sources:

Prior Reporting - [Anthropic Challenges Pentagon Claims in Ongoing AI National Security Dispute](https://theaiinsider.tech/2026/03/23/anthropic-challenges-pentagon-claims-in-ongoing-ai-national-security-dispute/) (2026-03-23) - [Elizabeth Warren calls Pentagon's decision to bar Anthropic 'retaliation'](https://www.yahoo.com/news/articles/elizabeth-warren-calls-pentagon-decision-152257281.html) (2026-03-23) - [Anthropic challenges Pentagon's national security risk claim in reply to suit](https://startupnews.fyi/2026/03/22/anthropic-challenges-pentagons-national-security-risk-claim-in-reply-to-suit-2/) (2026-03-22)
Watch Items - Anthropic preliminary injunction ruling expected within 48h of today's hearing; could come same day - Section 702 expiration April 20, 27 days away; House vote pushed to week of April 14 - SSCI closed briefing on intelligence matters scheduled today (March 24) at 3:00 PM in Hart 219

Technology & OSINT

Space Force Activates Two Cyber Defense Squadrons for Real-Time Launch Range Protection

Space Systems Command announced two Defensive Cyber Operations Squadrons tasked with real-time cyber defense during launch operations. The 630th Cyberspace Squadron at Vandenberg Space Force Base (SFB) was activated March 10; the 645th Cyberspace Squadron (CYS) at Patrick SFB was reassigned from Delta 6 in September. During countdown and liftoff, operators monitor network traffic across the range for anomalies in command links, telemetry streams, and ground communications, leveraging the tightly scripted launch sequence to spot deviations that could indicate intrusion. Threat scenarios include unauthorized access to ground systems, communications disruption, data manipulation, and satellite interference. The activation comes as Iran conflict heightens concerns about adversary targeting of space infrastructure.

Sources:

Pentagon Designates Palantir Maven AI as Official Program of Record; Mandates Integration Across All Military Branches

Deputy Secretary of Defense Steve Feinberg issued an internal memo designating Palantir's Maven AI as an official program of record, mandating integration across all U.S. armed forces branches by September 2026. Oversight transfers to the Pentagon's Chief Digital and Artificial Intelligence Officer (CDAO) within 30 days. Maven functions as a command-and-control operating system aggregating intelligence from satellites, drones, radars, and ground sensors for real-time threat identification, target classification, and information processing. Originally launched in 2017 as a drone imagery-labeling pilot, Maven has evolved into the 'central nervous system' of military decision-making, reportedly supporting thousands of targeted strikes in recent Middle East operations. The expansion raises concerns about algorithmic bias, supply chain risks, including Maven's prior integration with Anthropic's Claude AI model, and maintaining human-in-the-loop oversight protocols.

Analyst Note: The Maven program-of-record designation and the Anthropic supply-chain risk case are now directly coupled: Maven relied on Claude for targeting analysis, but the Pentagon simultaneously declared Anthropic a national security threat and ordered Claude's removal. The Feinberg memo mandates full branch integration by September while the Anthropic injunction hearing today could reverse the removal timeline. If the court pauses the designation, DOD faces contradictory directives: expand Maven while potentially retaining the vendor it has blacklisted.

Sources:

Watch Items - Anthropic injunction ruling this week determines whether Maven loses its AI backbone - Maven CDAO oversight transfer due within 30 days of Feinberg memo - Space Force Kronos C2 first contracts expected April; watch for vendor announcements

Hiring & Workforce

TSA Callout Rate Hits Record 11.76% as DHS Shutdown Enters Sixth Week

Sunday set a new record with the highest TSA officer callout rate since the DHS partial shutdown began on February 14, reaching 11.76%. Over 400 TSA officers have quit since the shutdown started, with 50,000 remaining officers classified as essential and working without pay. TSA agents missed their first full paychecks last week, triggering accelerating callout rates: over half of Houston TSA staff called out sick, with nearly a third doing so in Atlanta and New Orleans. Philadelphia closed three security checkpoints entirely. The attrition forced DHS to deploy ICE agents to 14 airports for crowd management, an unprecedented use of immigration enforcement personnel in transportation security roles. No resolution pathway is visible as the DHS funding standoff continues.

Analyst Note: The prior IC brief tracked TSA peak wait times at 200 minutes (Houston IAH Terminal E). Today's callout rate data (11.76%) quantifies the workforce hemorrhage driving those waits. The 400+ resignation figure represents a 35% acceleration from the 300+ reported last week. Each departing TSO requires 4-6 months of training to replace, meaning even an immediate funding resolution would leave capacity gaps through summer.

Sources:

Watch Items - TSA callout rate trajectory: 11.76% Sunday could exceed 15% if next paycheck cycle is missed - March 31 deadline for agencies to submit staffing plans under Merit Hiring Plan, signaling which IC agencies begin backfilling - Watch for adversary recruitment targeting DOGE-displaced cleared personnel

COLLECTION GAPS

UNCLASSIFIED // OPEN SOURCE