//
OFFLINE — VIEWING CACHED CONTENT
← Back to Archive

IC BRIEF — 24 March 2026

Current as of 1634 EDT (UTC-4), Tuesday 24 March 2026

Contents

16 stories from 21 sources across 16 organizations

BOTTOM LINE UP FRONT

The Department of Homeland Security (DHS) shutdown may end this week: bipartisan senators reached a framework to fund 94% of the department, including Transportation Security Administration (TSA) and Cybersecurity and Infrastructure Security Agency (CISA), while excluding ICE enforcement operations. A White House official called the deal 'acceptable,' but House passage remains uncertain. If enacted, it would restore pay to 100,000 DHS employees and begin rebuilding CISA's 38% staffing level during the Iran conflict's peak cyber threat period.

The 82nd Airborne Division's headquarters element has been ordered to the Middle East, the strongest signal yet that the administration is preparing ground options in Iran. Combined with 40,000+ troops already in theater and two Marine expeditionary units en route, this moves the force posture from air campaign to potential ground invasion. Kharg Island seizure and uranium stockpile recovery are the two publicly discussed objectives.

Al-Qaeda's Cyber Jihad Movement formally joined Iran's wartime hacktivist ecosystem on March 4, marking the first documented Sunni jihadist and Shia-aligned cyber collaboration. The convergence creates 'attribution pollution' as both sides now share infrastructure and Command and Control (C2) servers, directly complicating IC threat attribution models.

Leadership & Organization

Senators Close In on Deal to Fund 94% of DHS, Excluding ICE Enforcement Operations

Bipartisan senators are racing to finalize a deal that would end the 38-day DHS shutdown by funding 94% of the department, including TSA, CBP, and ICE's Homeland Security Investigations division, while excluding ICE enforcement and removal operations. Sen. Lindsey Graham confirmed the 94% figure after a group of Republican senators met with Trump at the White House Monday night. A White House official said the deal 'seems to be acceptable.' The proposal includes guardrails keeping CBP officers in traditional roles rather than urban immigration roundups, plus mandatory body cameras and identification requirements for enforcement actions. Sen. Susan Collins told reporters she was 'more optimistic that by the end of the week we will fund the Department of Homeland Security.' Any Senate deal must also pass the House, where Trump allies may resist excluding ICE enforcement funding.

Analyst Note: Prior briefs tracked Mullin's DHS confirmation (54-45, March 23) and escalating TSA crisis (200-minute waits at Houston IAH, 11.76% callout record). The 94% funding framework is the first viable resolution pathway since the shutdown began February 14. The ICE enforcement carve-out mirrors the political fault line that caused the shutdown.

Sources:

Iran War Costs Reach $40 Billion as Pentagon Seeks $200 Billion Supplemental with Minimal Transparency

Harvard Kennedy School professor Linda Bilmes told UPI the publicly reported $12 billion Iran war cost (as of March 15) represents 'just the very tip of the huge iceberg,' estimating actual spending at $40 billion when factoring in reset, repair, and resupply costs. Defense Secretary Hegseth's $200 billion supplemental request, equivalent to the GDP of Hungary, would add $1,500 to every US household. Transparency has deteriorated compared to Ukraine aid tracking: the Pentagon has not itemized weapons deliveries or operational costs. The Quincy Institute's Bill Hartung noted the administration has not 'put out even a detailed budget this year the way they normally would.' The $200B request faces GOP resistance; Rep. Eric Burlison said the Pentagon should 'pass an audit' before receiving additional funds. Defense contractors are preparing to quadruple weapons production per Trump's directive.

Analyst Note: Prior briefs documented the $200B supplemental request and Hegseth's statement that it 'takes money to kill bad guys.' Today's $40B actual-cost estimate from Bilmes (vs. the official $12B) and the transparency deficit represent a large gap between public reporting and estimated real expenditure.

Sources:

Watch Items - DHS funding deal: Senate vote possible by end of week; House passage uncertain given ICE enforcement exclusion - Mullin's first operational directives as DHS Secretary expected within 48h; CISA staffing decisions are the key indicator - Pentagon $200B Iran supplemental: White House review timeline and congressional markup schedule

Operations & Intelligence Failures

82nd Airborne Division Leadership Ordered to Middle East as Trump Weighs Iran Ground Operations

Maj. Gen. Brandon Tegtmeier and 82nd Airborne Division headquarters staff have been ordered to the Middle East, with the division's 3,000-soldier Immediate Response Force under consideration for deployment. Stars and Stripes reports no final order has been issued but 'prudent planning' is underway. The deployment signals preparation for possible ground campaigns; Kharg Island, which handles 90% of Iran's oil exports, is the most discussed objective. Retired Adm. James Stavridis warned of Iranian countermeasures including 'massive drone attacks' and 'small boats, some loaded with explosives.' Sen. Lindsey Graham compared a potential operation to Iwo Jima. Over 40,000 US troops are already stationed regionally, with the 31st MEU from Okinawa expected by week's end and a second Marine force from San Diego en route.

Analyst Note: The 0427 IC brief documented Israel's exploitation of Iran's surveillance camera network for the Khamenei assassination and CYBERCOM/SPACECOM as 'first movers' blinding Iran's C2. 82nd Airborne headquarters deployment marks a potential transition from the air/cyber phase to ground operations, a qualitative escalation with major casualty implications.

Sources:

Al-Qaeda's Cyber Jihad Movement Formally Joins Iran's Wartime Hacktivist Ecosystem in First Sunni-Shia Cyber Collaboration

The Global Network on Extremism and Technology documented a historic shift in jihadist cyber operations: al-Qaeda's Cyber Jihad Movement (CJM) declared on March 4 its 'entrance into the Iranian-American war,' explicitly joining pro-Iranian hacker movements. This is the first documented cross-ideological collaboration between Sunni jihadist and Shia-aligned hackers. CJM, which emerged in 2025 and formally pledged allegiance to al-Qaeda in August, is embedding within Iran's structured 'Electronic Operations Room' that coordinates hacktivist operations. Named groups operating in this ecosystem include Keymous+, DieNet, Handala Hack, Cyber Fattah, Fatimiyoun Cyber Team, and the Islamic Cyber Resistance in Iraq 313 Team. The convergence creates 'attribution pollution': Sunni and Shia actors now share infrastructure, malware, and command-and-control servers, severely complicating traditional actor attribution for IC analysts.

Analyst Note: Prior briefs tracked Iranian cyber escalation through the Stryker wiper attack (Handala), CanisterWorm/TeamPCP destructive operations, and the FBI FLASH on Ministry of Intelligence and Security (Iran) (MOIS) Telegram malware. AQ's formal entry into the hacktivist ecosystem represents a new convergence vector that undermines traditional Sunni vs. Shia attribution frameworks the IC relies on.

Sources:

Watch Items - 82nd Airborne deployment: watch for full brigade-level orders or Kharg Island rehearsals indicating imminent ground operations - Trump's 5-day Iran strike postponement (announced ~March 23) expires ~March 28; monitor for escalation - AQ Cyber Jihad Movement operational activity: first concrete attack attributed to the Sunni-Shia convergence

Congressional Oversight & Policy

(Developing) Anthropic Challenges Pentagon Supply Chain Risk Designation in Federal Court Hearing

US District Judge Rita Lin heard arguments Tuesday in San Francisco on Anthropic's request for a preliminary injunction to halt the Pentagon's designation of the company as a national security supply chain risk. Anthropic argued the March 3 designation by Defense Secretary Hegseth was 'unprecedented and unlawful,' constituting retaliation for the company's refusal to remove AI safety guardrails preventing fully autonomous weapons and mass domestic surveillance. The government countered the dispute stems from contract negotiations and national security concerns. Judge Lin questioned discrepancies between Hegseth's official directive and his social media statements. This is the first time a US company has been publicly designated a supply chain risk under the government procurement statute. No ruling timeline was announced.

Analyst Note: Five consecutive IC briefs have tracked this case from the March 3 designation through amicus brief analysis. Today's hearing before Judge Lin is the culmination; the DOJ's own pre-designation email showing the sides were 'very close' continues to undercut the emergency national security rationale. Maven's 8,000+ Iran targeting actions hang on the ruling.

Sources:

Prior Reporting - [Anthropic Challenges Pentagon Claims in Ongoing AI National Security Dispute](https://theaiinsider.tech/2026/03/23/anthropic-challenges-pentagon-claims-in-ongoing-ai-national-security-dispute/) (2026-03-23) - [Elizabeth Warren calls Pentagon's decision to bar Anthropic 'retaliation'](https://www.yahoo.com/news/articles/elizabeth-warren-calls-pentagon-decision-152257281.html) (2026-03-23) - [Anthropic challenges Pentagon's national security risk claim in reply to suit](https://startupnews.fyi/2026/03/22/anthropic-challenges-pentagons-national-security-risk-claim-in-reply-to-suit-2/) (2026-03-22) - [Breaking Down Amicus Briefs in Anthropic's Fight with the Pentagon](https://www.techpolicy.press/breaking-down-amicus-briefs-in-anthropics-fight-with-the-pentagon/) (2026-03-23)

FISA Section 702 Vote Delayed to Mid-April as Cross-Party Opposition Mounts; Progressive Caucus Formally Opposes

House Speaker Johnson delayed the Section 702 reauthorization vote from this week to mid-April, leaving 27 days before the April 20 expiration. The Congressional Progressive Caucus (98 House Democrats) formally voted to oppose the clean reauthorization, the first time the caucus has collectively voted against Section 702. Cato Institute senior fellow Patrick Eddington argued in The Dispatch that Congress should let Section 702 expire entirely, citing Judge DeArcy Hall's ruling in U.S. v. Hasbajrami that found the government's 'foreign intelligence exception' claim for warrantless queries was 'just untrue.' Meanwhile, House Judiciary Chair Jim Jordan reversed his long-held opposition, announcing he would support Trump's request for a clean extension, citing 50 reforms made to the program. The Safeguard American Voter Eligibility (Act) (SAVE) Act attachment threat persists, with Rep. Luna threatening to vote against unless voter eligibility provisions are included.

Analyst Note: Prior briefs tracked 702 at 28-31 days to expiration with three competing vehicles and no clear path. The Congressional Progressive Caucus (CPC)'s formal opposition (first time for the 98-member caucus) and Jordan's reversal to support clean extension create a volatile floor dynamic where the SAVE Act attachment could kill the bill entirely.

Sources:

Emanuel Proposes Banning Federal Employees from Prediction Markets, Citing Iran War Insider Trading Concerns

Former Ambassador Rahm Emanuel proposed banning all federal employees and their families from betting on prediction markets across the executive, legislative, and judicial branches, citing evidence that 'somebody clearly with inside information inside the government was making bets, made money' ahead of military operations in Venezuela and Iran. Emanuel said he would establish a Justice Department division to investigate such betting if elected in 2028. The proposal would be pursued through Congressional action, with executive orders as backup. The IC dimension is direct: cleared personnel with access to operational planning, targeting data, or diplomatic signaling possess material nonpublic information that prediction markets can monetize. No current federal ethics regulation explicitly prohibits prediction market wagering by intelligence community employees.

Sources:

Watch Items - Anthropic injunction ruling from Judge Lin could come at any time; no timeline announced - Section 702 expiration April 20 (27 days); House vote pushed to week of April 14 - SSCI closed briefing on intelligence matters (originally scheduled March 24 at 3:00 PM in Hart 219)

Technology & OSINT

FBI and CISA Warn Russian Intelligence Hijacking Signal and WhatsApp Accounts of High-Value US Targets

FBI and CISA issued a joint advisory warning that Russian Intelligence Services are conducting phishing campaigns to compromise Signal and WhatsApp accounts belonging to current and former US government officials, military personnel, political figures, and journalists. Thousands of accounts have been compromised globally. The attack method does not break end-to-end encryption; instead, operators trick targets into clicking links or sharing verification codes via fake 'Signal Support' accounts. Once access is gained, attackers can view messages and contacts, send messages as the victim, and conduct additional phishing from the trusted identity. The advisory follows heightened Russian intelligence collection against US targets during the Iran conflict.

Sources:

GSA Issues First Federal AI Acquisition Clause; Contractors Warn of Chilling Effect on Government AI Adoption

General Services Administration (GSA) regulation 52.239-7001 establishes the federal government's first acquisition clause specifically addressing artificial intelligence systems. The nine-page clause applies to all AI use in contract performance, not just AI deliverables. Key provisions: government owns all output data, metadata, logs, and custom developments; contractors must disclose all AI systems used regardless of relevance; AI systems cannot refuse outputs based on provider policies. Industry raises three primary objections: government-unique requirements deviate from commercial terms, cascading liability forces prime contractors to monitor all subcontractor AI use, and the 60-day acceptance window with no phase-in creates conflicts with existing vendor agreements. GSA deferred implementation to Refresh 32 following industry feedback.

Analyst Note: The March 23 IC brief documented 'confusion' in the Trump administration's AI-in-government push. This clause, requiring government ownership of all AI output data and prohibiting provider-imposed output restrictions, directly conflicts with the Anthropic dispute where the Pentagon designated the company for maintaining safety guardrails.

Sources:

Army Launches Drone Marketplace Developed in Partnership with Amazon Web Services

The Army launched a Unmanned Aircraft Systems (UAS) Marketplace, a digital storefront enabling users to compare drone system functionalities, provide feedback, and place orders. Amazon Web Services collaborated with the Army Enterprise Cloud Management Agency in developing the platform. The marketplace supports the Pentagon's 'Drone Dominance' initiative and aims to accelerate equipment delivery to warfighters. Brent Ingraham, the Army's acquisition executive, said it 'lowers barriers to entry' for defense contractors. The platform is expected to benefit foreign military sales and international partnerships, strengthening the industrial base during the Iran conflict's elevated UAS demand.

Sources:

NYC Public Hospitals End Palantir Contract After Surveillance Concerns Exposed

NYC Health + Hospitals CEO Mitchell Katz confirmed the city's public hospital system will not renew its $4 million Palantir data analytics contract when it expires in October. The decision follows Intercept reporting in February that exposed the hospital system's use of Palantir's software for automated scanning of patient health notes to improve Medicaid billing. Activists protested the partnership, citing Palantir's role in facilitating lethal airstrike targeting, surveillance of American citizens, and ICE deportation operations. Katz defended the collaboration by asserting an 'absolute firewall' between patient data and government customers like ICE. The contract termination signals growing resistance to dual-use surveillance technology in civilian institutions, even as Palantir's government contracts expand through Maven and other military programs.

Analyst Note: Palantir's Maven program-of-record designation (documented in prior briefs) expands its military footprint while its civilian contracts face growing resistance. The NYC hospital termination signals that Palantir's defense and surveillance associations are becoming commercial liabilities in non-defense markets.

Sources:

Anduril Executive Warns US Legislative Paralysis Giving China Strategic Edge in Defense Technology

Anduril co-founder and executive chairman Trae Stephens delivered sharp criticism at the Hill and Valley Forum in Washington, arguing 'Our federal government is not doing its job' and that US legislative dysfunction is creating strategic advantages for China. Stephens cited specific failures: 40 years without meaningful immigration reform despite 70-80% public support, healthcare spending double peer democracies with worse outcomes, and 'not a single fully built chips fab' despite over $1 trillion allocated for CHIPS Act and green energy. He warned the US was losing a 'high-tech arsenal of autocracy' race with Beijing, partly because Silicon Valley's historical resistance to Pentagon projects enabled China to become 'stronger, richer and more capable.' The remarks directly link defense acquisition reform to intelligence community technology adoption timelines.

Sources:

Kratos Wins $447 Million Space Force Contract for Missile Tracking Ground System

Space Systems Command awarded Kratos Technology and Training Solutions a $446.8 million Ground Management and Integration contract for the Resilient Missile Warning and Tracking program in medium Earth orbit. The system will manage a planned constellation of approximately 30 Medium Earth Orbit (MEO) satellites designed to track ballistic and hypersonic cruise missiles, part of the Trump administration's 'Golden Dome' initiative. Epoch 1 (12 satellites by Millennium Space Systems/Boeing) targets early 2027 launch; Epoch 2 (10 satellites by BAE Systems, $1.2 billion) targets FY29 delivery. The award was structured as an Other Transaction Authority agreement, bypassing traditional acquisition to accelerate deployment.

Analyst Note: Prior briefs documented Space Force Kronos C2 contracts (expected April) and two new defensive cyber operations squadrons for launch range protection. The $447M Kratos award accelerates the MEO missile tracking constellation that Iran conflict lessons are driving.

Sources:

Watch Items - GSA AI clause 52.239-7001 implementation deferred to Refresh 32; watch for revised timeline and industry response - Maven CDAO oversight transfer due within 30 days of Feinberg memo; vendor transition planning underway - Kratos MWT ground system first satellite integration milestones expected Q1 2027

Hiring & Workforce

(Developing) TSA Callout Rate Hits 11% as 458 Officers Quit During DHS Shutdown; ICE Deployed to Airports

Nearly 11% of TSA workers scheduled for duty Monday (over 3,200 personnel) were absent, and at least 458 TSA employees have resigned since the DHS partial shutdown began in mid-February. Over 50,000 remaining officers are classified as essential and working without pay. The attrition forced DHS to deploy ICE agents to 14 airports for crowd management. Travelers in Houston, Atlanta, and Baltimore are being told to arrive hours before flights. Philadelphia closed three security checkpoints entirely. Senate Majority Leader John Thune stated 'The time to end this is now,' as negotiators pursue the 94% DHS funding deal.

Analyst Note: TSA resignations rose from 400+ (prior brief) to 458+, a 15% acceleration in one cycle. Each departing TSO requires 4-6 months of training to replace. Even the 94% DHS funding deal, if enacted this week, would leave a months-long capacity gap through summer peak travel.

Sources:

Prior Reporting - [Senate Votes on Markwayne Mullin for DHS Secretary](https://www.pjmedia.com/sarah-anderson/2026/03/23/breaking-senates-votes-on-markwayne-mullin-for-dhs-secretary-n4950990) (2026-03-23)

VA Defies Court Order on Union Contract; 300,000 Employees Denied Contractual Benefits

Despite a federal court's preliminary injunction ordering restoration of the American Federation of Government Employees (AFGE) collective bargaining agreement, the Department of Veterans Affairs continues denying workplace protections and benefits to more than 300,000 employees. The Department of Veterans Affairs (VA) argued the judge's ruling was unclear regarding implementation while the underlying executive order remained in effect. Specific denials include withholding parental leave and fair disciplinary procedures; one VA employee who recently gave birth was told extended maternity leave could not be provided because 'the union has not been reinstated.' AFGE President Everett Kelley stated 'Secretary Collins cannot tell a federal judge one thing and then pretend he doesn't understand what the ruling means' and announced plans to return to court.

Sources:

DCSA Launches Individual Engagement Platform for Real-Time Security Clearance Tracking

The Defense Counterintelligence and Security Agency launched the Individual Engagement Platform (IEP), a public-facing interface that replaces legacy systems with a single transparent portal for individuals undergoing personnel vetting. Starting March 5, new applicants receive a direct link via eApp when their case is initiated. The platform allows applicants to track vetting status, self-report information, receive updates throughout the vetting lifecycle, and communicate securely with investigators. The platform is part of the Trusted Workforce 2.0 reforms and the broader shift from periodic reinvestigation to continuous vetting, which now covers 3.8 million cleared personnel.

Sources:

Watch Items - VA AFGE: union returning to court to force compliance; ruling could set precedent for other federal labor disputes - TSA callout trajectory: if next paycheck cycle is missed without a deal, attrition could accelerate sharply - March 31 deadline for agencies to submit staffing plans under Merit Hiring Plan

COLLECTION GAPS

UNCLASSIFIED // OPEN SOURCE