GIZINT — The Daily Brief | Issue 001

GIZINT UNCLASSIFIED
Gizmet Dev Ltd — gizmet.dev
DTG: 062100ZMAR26
Issue 001

AT A GLANCE

• Iran / Operation Epic Fury Day 7: Combined force has achieved air dominance and is systematically dismantling Iran's internal security apparatus. Iranian retaliation down 90% from Day 1, but asymmetric strikes on Gulf shipping and energy infrastructure continue. Hormuz remains effectively closed by insurance withdrawal — transits down 94%. No diplomatic off-ramp exists: every mediation channel is damaged or destroyed.

• Central Bank Trap: The -92,000 February NFP report colliding with $90+ oil creates a stagflation scissors constraining every major central bank. BoJ decides 13-14 March (first mover), Fed 18 March, ECB 18-19 March, BoE 19 March. None can cut; none can hike. Qatar's one-month LNG shutdown transforms the energy outlook for European inflation.

• CBP Compliance Crisis: CBP told a federal judge on 6 March it cannot execute the $175 billion IEEPA tariff refund order, proposing 45 days to upgrade its systems. Interest accrues at $700 million per month. The government simultaneously faces a 24-state challenge to its Section 122 replacement tariffs and $352 billion in contingent DFC shipping insurance liability with no clear statutory authority.

I. PRINCIPAL ITEMS

PI 1. Iran Campaign Shifts to Regime Destabilisation as Diplomatic Channels Collapse

The US-Israeli combined force has transitioned from air defence suppression to systematic destruction of Iran's internal security and defence industrial base, while every viable diplomatic channel for conflict termination has been damaged or destroyed.

Seven days into Operation Epic Fury, CENTCOM Commander Adm Brad Cooper confirmed air dominance over Iran (CENTCOM press conference, 5 Mar). The IDF reports approximately 2,500 strikes using over 6,000 munitions since 28 February, destroying an estimated 80% of Iran's air defences and rendering over 300 ballistic missile launchers inoperable (IDF, via CTP-ISW Evening Report, 5 Mar). Iranian ballistic missile attacks are down 90% from Day 1; drone attacks down 83% (CENTCOM, 5 Mar).

The targeting pattern on 5-6 March reveals the campaign's second-phase intent. Combined forces struck police stations in Kurdistan and West Azerbaijan Provinces, two Basij Resistance bases in Tehran, IRGC positions across four western provinces, facilities associated with the supreme leader's compound, and the HESA drone manufacturing facility in Esfahan — confirmed damaged via satellite imagery (CTP-ISW Morning/Evening Reports, 5-6 Mar). This is not force protection or capability denial. It is the deliberate degradation of the regime's capacity to maintain internal control.

Cyber operations preceded and enabled the kinetic campaign. US Cyber Command was designated the "first mover" — compromising Iranian air defences before the first bomb fell, hijacking the BadeSaba prayer app (5 million users) for psychological operations, and seizing state news websites including IRNA (Nextgov/FCW; Breaking Defense, Mar 2026). Iran's internet connectivity has collapsed to approximately 1% of normal (NetBlocks, 6 Mar).

The diplomatic landscape is barren. FM Araghchi rejected negotiations outright — Iran was attacked during two prior negotiation rounds, including hours after Oman announced a breakthrough on nuclear verification (Iran International, 5 Mar). The Oman channel, historically the primary US-Iran back-channel, was damaged when Iran struck Duqm Port and Salalah. Only the Swiss channel remains confirmed functional, limited to message-passing (Al-Monitor, Mar 2026). CENTCOM's request for intelligence officers through September 2026 confirms the Pentagon is planning for at least six more months of operations.

The Kurdish dimension introduces an insoluble NATO contradiction. Trump endorsed armed Kurdish groups inside Iran on 5 March (The Hill, 5 Mar); CNN reported the CIA is arming them (CNN, 3 Mar). This directly threatens Turkey — which Iran has pointedly NOT targeted despite hosting US bases. FDD describes Turkey as "Tehran's quiet ally within NATO" (FDD, 2 Mar). A US-armed Kurdish force coordinating with PKK-linked organisations would force Ankara to choose between alliance solidarity and national security, with the NATO summit scheduled for Ankara in July.

Iran International reported on 4 March that the Assembly of Experts, under IRGC pressure, selected Mojtaba Khamenei as supreme leader successor — but the decision has not been publicly announced. CTP-ISW reports no formal announcement as of 5 March. The process appears incomplete or contested. Trump stated the US "must be involved" in selecting Iran's next leader (Axios, 5 Mar).

CSIS estimates the first 100 hours of operations cost $3.7 billion — $891.4 million per day — with $3.5 billion unbudgeted (CSIS, 6 Mar). At least 1,332 Iranians have been killed according to Iranian authorities (Al Jazeera tracker citing Iranian government figures, 6 Mar). The Minab school strike — an estimated 165 dead according to Iranian authorities, overwhelmingly girls aged 7-12 — is the single incident most likely to shift international opinion and feature in any future ICC proceedings, though the US has simultaneously sanctioned more than 10 ICC officials (UNESCO, 3 Mar; OHCHR).

What changes if this assessment is wrong: If a functional mediation channel reopens within 72 hours — most likely via the Egypt-Turkey-Oman trilateral bid (El-Sisi, 5 Mar) — the campaign's shift to internal-security targeting becomes leverage rather than endgame, and the conditions for a negotiated outcome improve materially.

PI 2. Hormuz Insurance Blockade Creates Two-Tier Global Energy Order

The Strait of Hormuz has been closed not by naval blockade but by insurance withdrawal — and China is building the replacement system in real time.

Iran launched drone strikes near the strait. Lloyd's syndicates and P&I clubs made commercial decisions. Five major P&I clubs cancelled war-risk cover effective 5 March (Insurance Journal, 4 Mar). Strait transits fell from the 79-crossing daily average to 5 crossings on 4 March — a 94% decline (Windward Maritime Intelligence, 5 Mar). No mine-laying. No naval blockade. An insurance withdrawal closed 20% of global seaborne oil.

The closure is selective, not total. Four tankers loaded 8 million barrels of crude at Iran's Kharg Island terminal on 5 March. Two Iranian cargo vessels departed for Malaysia — the first cargo transit through Hormuz since the war began. One bulk carrier transited claiming "Chinese-owner" status (Bloomberg, 5 Mar; Reuters via CTP-ISW). Iran is exporting its own crude through the strait it has effectively closed to others.

China is in direct talks with Iran to formalise this arrangement. Senior Chinese state gas executives confirmed Beijing has urged Iranian counterparts not to target oil and LNG tankers (JPost/Iran International/Bloomberg, 3-5 Mar). Sinokor has acquired 35 of 45 VLCC sale-and-purchase deals in 2026, building a fleet of 120-130 VLCCs — now the world's largest (Argus Media). If the bilateral channel hardens, the result is structural bifurcation: Chinese industry at pre-crisis energy costs, Western importers at $90+ with 8x war-risk premiums.

This is not bilateral negotiation — it is preferential treatment within an illegal blockade. Transit passage through international straits under UNCLOS Part III is non-suspendable and non-discriminatory (Art. 38). Iran cannot legally restrict passage through Hormuz. A bilateral carve-out selectively permitting Chinese vessels violates the treaty regime governing international straits.

The US response — a DFC sovereign guarantee for shipping insurance — remains a statement without mechanism. The BUILD Act (22 U.S.C. ss 9612) authorises political risk insurance for "projects" in "less developed countries," not blanket wartime shipping coverage at $352 billion scale (JPMorgan estimate). No formalising executive order has been issued. The Navy told shipping industry leaders it lacks escort capacity (USNI News, 3 Mar). The Sonangol Namibe attack — an Iranian unmanned surface vessel striking a Bahamas-flagged tanker 30nm southeast of Kuwait, causing a hull breach (UKMTO, 5 Mar) — demonstrates the risk is not theoretical.

Brent crude settled at $92.69/bbl (+8.52%), WTI at $90.90/bbl (+12.21%) — both above $90 for the first time since this crisis began (CNBC, 6 Mar settlement). WTI gained 35.63% for the week — its largest weekly gain in the history of the futures contract dating back to 1983 (CNBC, 6 Mar). Qatar shut down gas liquefaction on 4 March and will not return to normal production "for at least a month" (CTP-ISW Evening Report, 5 Mar) — transforming the European TTF forward curve.

What changes if this assessment is wrong: If the DFC guarantee is formalised via executive order and a commercial vessel transits under DFC cover within the next week, the insurance blockade mechanism breaks, oil drops $15-20/bbl within 48 hours, and the two-tier energy market thesis collapses before it hardens.

PI 3. Stagflation Scissors — Central Banks Trapped Between Oil and Employment

The February NFP report of -92,000 jobs arriving simultaneously with $90+ oil creates a scissors pattern that constrains every major central bank in the 13-19 March decision window.

The Bureau of Labor Statistics reported the US economy lost 92,000 jobs in February — against consensus expectations of +56,000 (BLS, 6 Mar). The unemployment rate rose to 4.4%. Average unemployment duration reached 25.7 weeks, the longest since December 2021 — a signal of labour market scarring, not cyclical softness. Federal government lost 10,000 jobs; construction lost 11,000 after gaining 48,000 in January.

The Fed faces a textbook stagflation dilemma. CME FedWatch shows 94.1% probability of a hold at 3.50-3.75% on 18 March (CME FedWatch, 6 Mar). The real question is June — where cut probability sits at 46.8% and rising. The 10-year Treasury yield touching 4.17% intraday (closing near 4.12%, Trading Economics) while the VIX closed at 28.53 (+20.1%, CBOE, 6 Mar) reveals a critical divergence: bonds pricing inflation, equity options pricing risk. This is not a flight-to-safety pattern. It is a "nowhere-to-hide" pattern.

The Bank of Japan decides first (13-14 Mar) and faces the sharpest bind. The Nikkei rose 0.62% to close Friday at 55,621 in Tokyo — but the JP225 CFD dropped to 53,990 after the US NFP shock (Yahoo Finance/Trading Economics, 6 Mar). Japan imports 95% of its oil from the Middle East and has maintained conspicuous diplomatic silence on the conflict while quietly preparing stockpile drawdown from 254 days of reserves (Japan Times, 6 Mar). The yen at 158/USD creates intervention risk. If a weakened yen and a sinking Nikkei greet the BoJ on Monday morning, a rate hike becomes unlikely — but a hold weakens the yen further, increasing energy import costs.

The ECB (18-19 Mar) had the clearest path to easing — eurozone inflation at 1.7%, below the 2% target. The Qatar LNG shutdown destroys that calculus. Qatar is the world's largest LNG exporter; its output transits Hormuz. A minimum one-month outage drives TTF-linked energy passthrough into European inflation within 2-3 months. The Bank of England (19 Mar) faces the same bind at 3.75%, with UK inflation already at 3.4% pre-oil shock and February's MPC vote a narrow 5-4 hold (Bank of England).

The fiscal dimension compounds the monetary trap (as assessed in PI 2). The administration simultaneously faces $175 billion in IEEPA refund outflows (delayed 45 days but accruing $700M/month interest), capped revenue from a 15% Section 122 tariff with a 24 July hard expiry, $352 billion in contingent DFC liability, and $891 million/day in unbudgeted military spending. Refund flows beginning in late April coincide with the June FOMC window — injecting fiscal stimulus into an oil-inflation environment.

What changes if this assessment is wrong: If Hormuz reopens faster than expected — through DFC insurance, commercial risk appetite, or ceasefire — oil drops below $80, the inflationary leg of the scissors weakens, and the path to central bank cuts clears. The BoJ decision on 13-14 March is the first signal of whether Asian energy importers see the disruption as transient or structural.

II. REGIONAL ASSESSMENTS

Iran / Gulf Theatre

Political: The Leadership Council — president, judiciary chief, and Guardian Council member Ali Reza Arafi — governs constitutionally. The succession question remains open: Iran International reports the Assembly of Experts selected Mojtaba Khamenei under IRGC pressure, but CTP-ISW confirms no formal announcement as of 5 March. Trump's statement that the US "must be involved" in selecting a successor may explain the delay. War powers resolutions failed in both chambers — Senate 47-53 (4 Mar), House 212-219 (5 Mar) — continuing a pattern of unsuccessful War Powers Resolution invocations (CBS News; CNN, 4-5 Mar).

Military: Iranian retaliation continues at reduced levels. Iran launched approximately 100+ drones per day at the UAE over the past four days; total UAE casualties since 28 February are 3 killed, 94 wounded (UAE Defence Ministry, via CTP-ISW Evening Report, 5 Mar). The BAPCO refinery near Ma'ameer, Bahrain was struck by at least two ballistic missiles on 5 March, causing fire. Camp Buehring, Kuwait was struck again — six US service members were killed there on 1 March. The Shahid Bagheri drone carrier (~40,000 tons) was struck in the campaign's opening hours; CENTCOM released strike footage on 5 March (Naval News; Navy Times, 5 Mar). CENTCOM reported 17 Iranian naval vessels sunk or destroyed including Iran's most operational submarine as of Day 4 (CENTCOM, 3 Mar); the toll has likely risen but updated figures have not been confirmed.

Economic: As assessed in PI 2. Oil above $90, Hormuz closed by insurance, Qatar LNG offline for at least a month.

Information: GPS jamming and spoofing affecting 1,100+ ships in the past 24 hours around the Strait of Hormuz — placing vessels at airports and a nuclear power plant. 169 aircraft over the Arabian Peninsula were affected on 2 March (Windward, 6 Mar; SkAI Data Services). Iran's internet at 1%, degrading both the population's ability to document strikes and Iranian state APT coordination capacity — though geographically dispersed operatives retain offensive capability (see Section V).

Watch: Whether the Assembly of Experts announces a supreme leader successor within 72 hours — the longer the vacuum persists, the greater the internal fragmentation risk.

Lebanon

Hezbollah has conducted 116 attack waves since entering the war on 2 March (Alma Research, 6 Mar), with a qualitative escalation on 5 March: direct ground engagements with IDF forces in Markaba, Khiam, and Wadi al Asafir — the first ground combat of this war (CTP-ISW Morning Report, 6 Mar). The Radwan Force (elite special operations, ~2,000 fighters) has been ordered to redeploy to southern Lebanon (Reuters, 5 Mar). IDF has mobilised approximately 20,000 reservists and struck over 320 Hezbollah targets since 28 February (IDF Spokesperson BG Defrin, via CTP-ISW). IDF confirmed killing a Hezbollah fire commander and a Hamas training commander — the latter in the first IDF strike on Tripoli since the war began.

The Lebanese government's simultaneous actions represent an unprecedented fracture. The cabinet ordered a ban on all IRGC activity, security forces to arrest and deport IRGC personnel, and ended visa-free entry for Iranian civilians (CTP-ISW Evening Report, 5 Mar). Dozens of IRGC members have fled Lebanon (Axios, 6 Mar). No previous Lebanese government has taken such direct steps against Hezbollah or the IRGC.

Watch: Whether IDF strikes expand into the Bekaa Valley at scale — evacuation warnings for the area suggest imminent operations.

Ukraine / Russia

The theatre shows tactical stasis across most axes with a notable exception. Ukrainian forces advanced southeast and south of Kostyantynivka — confirmed by geolocated footage (ISW, 5 Mar). Russian forces attacked across a wide front from Kostyantynivka through Druzhkivka and into the Pokrovsk direction but achieved no confirmed advances on any axis (ISW, 5 Mar). A Ukrainian battalion commander reported Russian forces have restored communications to 50-60% of pre-Starlink shutdown levels using Wi-Fi bridges and directional antennas (ISW, 5 Mar).

Ukrainian deep strikes continue to degrade Russian rear capabilities. The Saratov Oil Refinery was struck overnight 4-5 March (Ukrainian Telegram, footage). The Admiral Essen (Project 11356R frigate, Black Sea Fleet) was reportedly rendered unable to launch Kalibr cruise missiles following March 1-2 strikes on Novorossiysk (SBU sources via Suspilne, 5 Mar). Ukrainian SSO destroyed an S-400 air defence system in occupied Crimea (~190km from the frontline). Russia launched 155 drones overnight, of which Ukraine intercepted 136 (87.7% rate); 18 drones hit 8 locations, causing power outages in three oblasts (Ukrainian General Staff, 5 Mar).

Putin signed a decree increasing armed forces authorised strength to 2,391,770 — an increase of only 2,640 from 2024, the smallest annual increase since the full-scale invasion (ISW, 5 Mar). Former Deputy Defence Minister Ruslan Tsalikov was arrested on 5 March — the fourth Shoigu deputy detained.

The most consequential development may be Zelensky's drone diplomacy. Ukraine offered counter-drone expertise and interceptor drones — which account for over 70% of Shaheds destroyed over Kyiv — to the Gulf states in exchange for Patriot air defence systems. The Pentagon and at least one Gulf state are in talks to purchase Ukrainian interceptor drones (Financial Times, 5 Mar). If consummated, this bypasses the stalled US military aid debate.

Abu Dhabi peace talks were cancelled after Iranian strikes on the UAE. No replacement venue is confirmed. The postponement benefits Moscow's operational tempo (Bloomberg, 5 Mar).

Watch: Whether the Pentagon-Gulf Ukrainian drone deal formalises within 7-10 days — the first bilateral arms trade generated by Ukraine's combat experience, independent of Western government aid.

Africa

DRC / Rwanda: The US sanctioned the Rwanda Defence Force and four senior commanders under EO 13413 on 2 March — Gen Muganga (Chief of Defence Staff), Maj Gen Nyakarundi (Army Chief of Staff), Maj Gen Karusisi (5th Infantry Division), Brig Gen Gashugi (Special Operations Force Commander) — for supporting M23 in direct violation of the Washington Accords signed at the White House in December 2025 (Treasury sb0411; Federal Register 2026-04349, 5 Mar). The RDF provided GPS jamming systems, air defence equipment, and drones to eastern DRC. The speed of sanctions — less than three months after Trump personally presided over the Accords — suggests institutional follow-through independent of presidential attention now consumed by Iran. The EU is under pressure to match (EUobserver, 6 Mar).

Horn of Africa: Ethiopia-Eritrea border tensions are escalating, with Ethiopian forces moving troops toward Tigray borders and Eritrean forces visible along sensitive routes (Africa Defense Forum, Mar 2026). Sudan's army accuses Ethiopia of hosting drone strikes and aiding the RSF; a UAE-financed camp in Ethiopia reportedly trained 4,300 RSF fighters (Semafor, 25 Feb). Three escalation pathways — Tigray reignition, Eritrea tensions, and PM Abiy's sea-access demands — could produce overlapping wars.

Nigeria: The Islamic Movement of Nigeria is staging anti-American protests across six states, carrying Khamenei portraits and chanting "Death to America." The US Embassy in Abuja closed through 9 March (US Embassy security alert, 5 Mar). A direct second-order effect of the Iran war, demonstrating Tehran's soft-power reach through West African Shia networks.

Watch: Whether M23 advances beyond Uvira toward Bukavu — further territorial gains after the Washington Accords would test whether sanctions have any deterrent effect or whether Rwanda has concluded the US is too distracted to enforce them.

European Naval Deployments

Italy, France, Netherlands, and Spain agreed to provide naval assets to defend Cyprus after Iranian drones struck the island on 1 March. The French frigate Languedoc arrived off Cyprus on 5 March; Macron ordered the Charles de Gaulle carrier battle group to the Mediterranean on 3 March. UK HMS Dragon is due "within weeks" (CTP-ISW Evening Report, 5 Mar). The E3 statement of 1 March pre-authorised "necessary and proportionate defensive action to destroy Iran's capability to fire missiles and drones at their source" (Elysee, 1 Mar). NATO Secretary General Rutte explicitly ruled out Article 5 — even after an Iranian missile was intercepted over Turkey, 45 miles from Incirlik (CNBC, 5 Mar; FDD, 4 Mar).

Watch: Whether any GCC state makes a formal bilateral defence request to an E3 state — that would be the legal trigger for European offensive action under Article 51 collective self-defence.

III. FINANCIAL & ECONOMIC INTELLIGENCE

Market Table (6 March close)

The key market dynamics are assessed in PIs 2 and 3. Supplementary points:

VLCC freight rates hit an all-time record — a Minerva Marine VLCC was fixed at $436,000/day to GS Caltex, the highest ever spot rate. Baltic Exchange theoretical rate on the Middle East-to-China route reached $481,170/day (Seatrade Maritime, 3 Mar). Container war-risk surcharges: Hapag-Lloyd imposed $1,500/TEU, $3,500/reefer (Hapag-Lloyd, via CTP-ISW).

DJIA discrepancy noted: Trading Economics reports 47,407 (-1.14%); CNBC reports approximately 47,047 (-1.98%). The divergence likely reflects CFD versus cash index differences. Monday verification required.

Asian data warning: Nikkei rose 0.62% to close at 55,621 in Tokyo BEFORE the -92K NFP release (08:30 ET). The JP225 CFD dropped to 53,990 after hours — KOSPI fell 2.56%, continuing post-crash normalisation after the 12% circuit-breaker event on 4 March. Monday's Asian open will price in Friday's US data.

AI semiconductor demand accelerating through the oil shock. Broadcom reported record $19.3B revenue (+29% YoY), AI revenue of $8.4B (+106%), and "line of sight" to $100B AI revenue by 2027 (Broadcom Q1 FY2026, 4 Mar). Marvell Technology surged 16% on Q4 results ($2.22B revenue, +22.1% YoY; Marvell Q4 FY2026, 5-6 Mar). The AI capex cycle is structurally independent of the energy crisis, explaining the Nasdaq's relative outperformance versus DJIA.

Private credit stress. Blue Owl (-6%), BlackRock, Blackstone, Bridgewater (-4%) sold off on signs of cracks in private credit loans (Trading Economics, 6 Mar). A distinct risk vector from the oil shock — opaque valuations and any forced transparency event could trigger broader deleveraging.

IV. LEGAL & REGULATORY

CBP Compliance Crisis (breaking, 6 Mar). CBP told Judge Eaton of the Court of International Trade that its technology cannot process the universal IEEPA tariff refund at scale — 330,000+ importers, 53 million+ entries, $166 billion in collected duties. CBP proposed a 45-day ACE system upgrade, pushing first refunds to late April. Judge Eaton pushed back: "Customs knows how to do this. They do it every day" (CNBC; Axios; Bloomberg Government, 6 Mar). The Federal Circuit already declined the administration's emergency motion to delay refunds (CBS News, 2 Mar). CBP's "cannot" rather than "will not" framing buys time but does not challenge the order's legality. Interest continues accruing at $700 million per month (IBTimes UK). Total liability: $166-175 billion (Penn Wharton Budget Model).

Section 122 Tariffs Under Legal Siege. A coalition of 24 state AGs (led by Oregon and New York) plus the governors of Kentucky and Pennsylvania filed in the CIT on 5 March. Their core argument: Section 122 was designed for Bretton Woods-era monetary imbalances, not general trade policy. The statute has never been invoked in 51 years. The rate was raised from 10% to 15% on 22 February — already at the statutory maximum under 19 U.S.C. ss 2132(a). Hard ceiling (15%) plus hard expiry (24 July) means tariff revenue is doubly constrained. Revenue at stake: approximately $50 billion (CRFB, 4 Mar).

International Law Framework Fracturing. Three parties simultaneously invoke Article 51 self-defence: the US/Israel (anticipatory, weakest under existing doctrine — no imminence), Iran (retaliatory, but extended to uninvolved GCC states), and the GCC (defensive, cleanest claim — actual armed attacks on sovereign territory). The GCC-EU Joint Statement of 5 March explicitly invoked Article 51 "individually and collectively" (Consilium, 5 Mar). The legal chaos mirrors the military chaos — the self-defence framework designed for bilateral conflicts is being stress-tested by a multi-party regional war.

AI Triple Deadline — 11 March. Three deliverables from Trump's December 2025 AI executive order converge: FTC must publish guidance classifying state-mandated AI bias mitigation as deceptive trade practice; Commerce must identify "onerous" state AI laws for DOJ AI Litigation Task Force referral; Commerce must condition BEAD broadband funds ($42 billion) on state AI law compliance. The BEAD condition is the most legally vulnerable — conditioning infrastructure funding on regulatory compliance resembles the coercion the Roberts Court limited in NFIB v. Sebelius (2012). California and Colorado expected to challenge (Paul Hastings; King & Spalding; TechPolicy.Press).

Bondi Ethics NPRM. Published 5 March (91 FR 2026-04390). Authorises DOJ to suspend state bar proceedings against current or former DOJ attorneys — including those who have left government. Published days after the Florida Bar confirmed an investigation into Lindsey Halligan. Comment period closes approximately 6 April. Tenth Amendment challenge likely (Federal Register; Bloomberg Law, 5 Mar).

V. TECHNOLOGY & CYBER

MuddyWater Pre-Positioning — Contingency, Not Reaction. Symantec disclosed on 5 March that the MOIS-linked group maintains persistent access to a US bank, a US airport, and a defence/aerospace supplier since early February — weeks before the 28 February strikes. Two new backdoors deployed: Dindoor (Deno-runtime JavaScript) and Fakeset (Python-based). Data exfiltration via Rclone to Wasabi cloud storage was attempted (Symantec; The Register, 5 Mar). This is contingency pre-positioning, not reactive hacking — the most significant intelligence finding from the cyber domain this week.

CISA Capacity Gap at Worst Possible Moment. Workforce reduced from approximately 3,400 to 2,400 since the start of FY2025 — a 29-33% headcount cut. The concurrent DHS partial shutdown further reduces operational capacity to approximately 38% of optimal staffing levels (Valley TechLogic, 27 Feb). Red team eliminated. Counter-ransomware staff cut. Election Security Programme eliminated ($39.6M, 14 staff). Field advisers reduced from 164 to approximately 97 nationwide. Sean Plankey's nomination as director remains uncertain — he departed his Coast Guard advisory post on 4 March to address Sen. Scott's hold, but CyberScoop reported the nomination "appears to be over" (CyberScoop, 5 Mar; Nextgov/FCW, 6 Mar). The transatlantic asymmetry widens: the NCSC issues targeted advisories, Canada publishes a full threat bulletin, CISA is both understaffed and shutdown-constrained with no confirmed leader — while managing ED 26-03 (Cisco SD-WAN, CVSS 10.0 actively exploited) and facing 60+ hacktivist groups and state APTs pre-positioned in US critical infrastructure.

Submarine Cable Dual Chokepoint. Both the Red Sea (17 cables) and the Strait of Hormuz are now simultaneously in active conflict zones — unprecedented. Gulf AI data centre buildout (AWS, Microsoft, Google) depends on these routes. Specialised cable repair ships cannot safely access either passage. Precedent: one Red Sea cable severed in February 2024 took five months to repair (Rest of World, Mar 2026). If cables are damaged, financial data flows serving DIFC, ADGM, and QFC face degradation — a tail risk with outsized impact.

Active Zero-Day Landscape: Six zero-days actively exploited, two at CVSS 10.0 — Cisco SD-WAN (CVE-2026-20127, UAT-8616) and Dell RecoverPoint (CVE-2026-22769, China-nexus UNC6201). APT28 exploited an MSHTML bypass (CVE-2026-21513, CVSS 8.8) as a zero-day before the February Patch Tuesday (The Hacker News/Akamai; CISA).

VI. PIR / WATCH LIST

PIR 1: Iran Supreme Leader Succession — CRITICAL
Will the Assembly of Experts formally announce Mojtaba Khamenei as successor?
EEI: Official announcement via IRIB or constitutional declaration within 72 hours.

PIR 2: Hormuz Reopening Mechanism — ESCALATING
Which reopening mechanism succeeds first: DFC guarantee, China bilateral channel, commercial risk appetite, or Saudi pipeline rerouting?
EEI: First commercial vessel transit under DFC cover or second Chinese-flagged transit confirming systematic channel.

PIR 3: Central Bank Response to Stagflation — CRITICAL
Does the BoJ (13-14 Mar) signal that Asian energy importers view Hormuz disruption as transient or structural?
EEI: BoJ hold with dovish statement (transient) versus hawkish hold or hike (structural adjustment).

PIR 4: Kurdish Ground Operations — ESCALATING
Do Kurdish groups commit to ground operations inside Iran, and does Turkey respond?
EEI: Confirmed PDKI/PAK/PJAK cross-border operations beyond current defensive positions near Marivan.

PIR 5: Houthi Red Sea Resumption — STABLE
The 8-day gap between Houthi threat (28 Feb) and execution suggests operational constraints or deliberate restraint. Resumption converts the dual-chokepoint scenario from theoretical to operational.
EEI: First confirmed Houthi attack on a commercial vessel in the Red Sea.

PIR 6: CBP Refund Timeline — ESCALATING
Does Judge Eaton accept the 45-day delay, appoint a special master, or impose contempt?
EEI: Court order from Eaton's closed conference on 6 March — response pending.

PIR 7: DRC Territorial Expansion — STABLE
Whether M23 advances beyond Uvira tests whether Rwanda has concluded the US is too distracted to enforce sanctions.
EEI: Confirmed M23 movement toward Bukavu or Bujumbura.

VII. CORRECTIONS

No corrections to previous issues. This is Issue 001.

VIII. SCHEDULE

7 March — SCOTUS private conference. Orders expected 10 March 09:30 ET. Watch for cert grants on executive power or tariff authority.

7 March — Shield of the Americas Summit, Doral. 12 Latin American leaders. Mexico, Brazil, Colombia absent — the three largest economies excluded (State Department).

11 March — AI Triple Deadline. FTC policy statement, Commerce AI review, BEAD funding condition, FCC AI reporting proceeding. First major federal-state confrontation over AI governance (White House EO, 11 Dec 2025).

12 March — ICJ counter-memorial deadline: South Africa v. Israel. Israel's written defence against genocide allegations, filed during an active military campaign (ICJ Case 192).

12 March — NATO Loyal Leda exercise concludes. Article 5 command post exercise across 9 countries, running simultaneously with live-fire Middle East operations (NATO LANDCOM).

13-14 March — BoJ decision. First major central bank to decide post-Hormuz. Current rate 0.75%. Yen at 158/USD. Governor Ueda's comments are the tell (BoJ).

17-18 March — Fed FOMC. Rate 3.50-3.75%. FedWatch 94.1% hold. Updated dot plot and Summary of Economic Projections are the real product (CME FedWatch, 6 Mar).

18-19 March — ECB decision. Deposit rate 2.00%. Staff projections due. GDP forecast below 1.0% signals recession (ECB).

19 March — BoE MPC. Rate 3.75%. February was 5-4 hold. March cut was near-certain; now impossible (Bank of England).
23 March — SCOTUS oral argument: Watson v. RNC. Whether federal election-day statutes preempt state mail-in ballot grace periods. 15 states + D.C. affected. Combined with Bost v. Illinois (7-2, Jan 2026), an adverse ruling reshapes 2026 midterm ballot rules (SCOTUSblog; Brennan Center).

~6 April — Bondi Ethics NPRM comment period closes (Federal Register 91 FR 2026-04390).

24 July — Section 122 tariff expiry. 150-day statutory window. 15% ceiling reached. ~$50B revenue at stake. Extension requires Act of Congress (19 U.S.C. ss 2132(d); CRFB).

Standing: DHS partial shutdown continues (Senate cloture failed 51-45). Houthi Red Sea threat unexecuted. UNSC programme of work blocked by Russia and China.

IX. SOURCE INDEX

Principal Items

• CTP-ISW Morning/Evening Special Reports, 5-6 Mar 2026
• CENTCOM / Hegseth-Cooper press conference, 5 Mar (via Stars and Stripes, CBS News)
• CSIS, "Estimated Cost of Epic Fury's First 100 Hours," 6 Mar 2026
• IDF statements via CTP-ISW, 5-6 Mar 2026
• Iran International, Araghchi rejection / Mojtaba succession, 4-5 Mar 2026
• Al-Monitor, Swiss channel, Mar 2026
• El-Sisi mediation via The National, 5 Mar 2026
• UNESCO statement on Minab, 3 Mar 2026 (UN News)
• OHCHR, ICC sanctions, multiple dates
• Al Jazeera, Iran civilian toll, 6 Mar 2026
• CNN, CIA arming Kurds, 3 Mar 2026
• The Hill, Trump Kurdish endorsement, 5 Mar 2026
• FDD, Turkey "quiet ally," 2 Mar 2026
• Windward Maritime Intelligence, 5 Mar 2026
• Bloomberg, Chinese-owner transit, 5 Mar 2026
• JPost / Iran International / Bloomberg, China-Iran negotiations, 3-5 Mar
• Argus Media, Sinokor VLCC fleet
• Insurance Journal, P&I club cancellations, 4 Mar 2026
• USNI News, Navy escort capacity, 3 Mar 2026
• UKMTO, Sonangol Namibe, 5 Mar 2026
• CNBC, WTI record weekly gain, 6 Mar 2026
• BLS Employment Situation Summary, 6 Mar 2026
• CME FedWatch, 6 Mar 2026
• Japan Times, stockpile preparation, 6 Mar 2026
• Penn Wharton Budget Model, IEEPA estimate

Regional Assessments

• ISW Russian Offensive Campaign Assessment, 5 Mar 2026
• Alma Research, Daily Report, 6 Mar 2026
• Reuters, Radwan Force deployment, 5 Mar 2026
• Axios, IRGC fleeing Lebanon, 6 Mar 2026
• Naval News / Navy Times, Shahid Bagheri footage, 5 Mar 2026
• Financial Times, US/Gulf Ukrainian drone talks, 5 Mar 2026
• DefenseScoop, Pentagon counter-drone task force, 5 Mar 2026
• Suspilne / SBU, Admiral Essen, 5 Mar 2026
• Treasury sb0411 / Federal Register 2026-04349, Rwanda sanctions, 2/5 Mar
• Africa Defense Forum, Ethiopia-Eritrea, Mar 2026
• Semafor, UAE-RSF camp, 25 Feb 2026
• US Embassy Abuja, security alert, 5 Mar 2026
• Premium Times Nigeria, IMN protests, 3 Mar 2026
• Elysee, E3 statement, 1 Mar 2026
• CNBC / FDD, Turkish airspace incident, 4-5 Mar 2026

Financial & Economic

• Trading Economics (all indices, commodities, FX), 6 Mar 2026
• Yahoo Finance / ICE / CBOE, cross-verification, 6 Mar 2026
• Seatrade Maritime, VLCC records, 3 Mar 2026
• IBTimes UK, $700M/month interest
• CRFB, Section 122 estimates, 4 Mar 2026
• Broadcom Q1 FY2026 / Marvell Q4 FY2026, earnings releases, 4-6 Mar

Legal & Regulatory

• CIT / CBP filing, 6 Mar (CNBC, Axios, Bloomberg Government)
• Federal Register 91 FR 2026-04390 (Bondi NPRM), 5 Mar
• CBS News / Reason / PBS, Section 122 litigation, 5-6 Mar
• GCC-EU Joint Statement, Consilium, 5 Mar
• Just Security, Article 51 analysis, 4 Mar
• Paul Hastings / King & Spalding / TechPolicy.Press, AI EO analysis
• SCOTUSblog, Watson v. RNC; Brennan Center, ballot analysis
• UNCLOS Part III, Art. 38
• ICJ Case 192, South Africa v. Israel

Technology & Cyber

• Symantec / The Register, MuddyWater disclosure, 5 Mar 2026
• Nextgov/FCW / Breaking Defense, CYBERCOM first mover, Mar 2026
• CyberScoop, Plankey nomination, 5 Mar 2026
• TechCrunch / Cybersecurity Dive, CISA staffing, Feb-Mar 2026
• Rest of World, submarine cable risk, Mar 2026
• Windward / Inside GNSS / CNN, GNSS jamming, 5-6 Mar 2026
• CISA ED 26-03, Cisco SD-WAN
• The Hacker News / Akamai, APT28 zero-day
• NetBlocks, Iran connectivity, 6 Mar 2026

Diplomatic

• UNSC 10112th Meeting, SC/16307, 28 Feb
• kremlin.ru, Putin-Szijjarto transcript, 4 Mar
• PRC MFA, Wang Yi-Araghchi / Mao Ning briefings, 2-6 Mar
• Bloomberg / Foreign Policy, Ukraine peace talks, 5 Mar
• Chatham House, Russia leverage limits, 3 Mar
• Al Jazeera, BRICS divided, 6 Mar
• Middle East Eye, BRICS missing in action, 6 Mar
• Carnegie, Gulf states, 3 Mar
• State Department, Shield of the Americas, Mar 2026

Maps: Institute for the Study of War / Critical Threats Project, CC BY 4.0

For informational purposes only. No editorial line. No advocacy. Assessment only. AI-assisted collection and drafting; all analytical assessments are human-directed. Errors: corrections@gizmet.dev

Epistemic register: "we assess" = high-confidence analytical judgment. "Available reporting suggests" = single-source or preliminary. "Reporting indicates" = multiple sources converging, not yet confirmed.