GIZINT — The Daily Brief | Issue 002

GIZINT UNCLASSIFIED
Gizmet Dev Ltd — gizmet.dev
DTG: 071200ZMAR26
Issue 002

AT A GLANCE

• Iran / Day 8: US-Israeli campaign shifts to defence industrial base destruction; Russia sharing targeting intelligence on US forces introduces a great-power dimension.

• Stagflation trap: First negative payroll since the pandemic (−92K, BLS) collides with $92.69 Brent and five central bank decisions in eight days.

• Tariff fiscal crisis: CIT universal refund order covers $166B; 24-state challenge to Section 122; 150-day clock expires late July.

I. PRINCIPAL ITEMS

PI 1. Iran Campaign Shifts to Industrial Targets; Russia Shares Intelligence on US Forces

The US-Israeli force has destroyed 43 warships, struck 3,000+ targets, and shifted to systematic destruction of Iran's defence industrial base. Russia's provision of targeting intelligence on US forces introduces a great-power dimension.

Day 8. "Air dominance" declared (Cooper, 5 Mar). Missile launches down 90%, drones down 83% (CENTCOM). Iran retains 100-200 launchers (IDF via Critical Threats Project / Institute for the Study of War [CTP-ISW]). Targets now include sanctioned drone/missile facilities, ammunition depots, three satellite-confirmed missile bases hit 6 March (CTP-ISW Evening Report, 6 Mar), and internal security infrastructure (Basij, Law Enforcement) across Kurdish provinces.

Decapitation: Khamenei, Nasirzadeh, Pakpour, Mousavi, Shamkhani — all killed on/around 28 February. Hejazi targeted 6 March; status unclear. Interim leadership maintaining continuity (CTP-ISW).

Russia sharing locations of US military assets with Iran since 28 February — "pretty comprehensive effort" (WaPo, 6 Mar, three officials). Planet Labs imposed a 96-hour imagery delay on Gulf states; we assess Russian feeds have become Iran's most significant external targeting source. In the same week, OFAC eased Russia sanctions: GL 128B/131C (Lukoil sale) and GL 133 (Russian crude to India). We assess the Ukraine deal takes priority over Iran campaign coherence.

Cost: $3.7B/100 hours, ~$891M/day, mostly unbudgeted (CSIS).

What changes if wrong: If Russia's sharing is tactical not comprehensive, Iran's targeting degrades to pre-war sensors and the conflict remains bilateral rather than great-power.

PI 2. Insurance Mechanism Closes Hormuz — Sovereign Backstop Would Create Unprecedented Exposure

Commercial insurance withdrawal, not a naval blockade, closed the Strait of Hormuz. The proposed US sovereign backstop converts market risk into Treasury exposure at a scale the BUILD Act never envisaged.

The BUILD Act (2018) created DFC for development finance, not wartime shipping insurance. If a vessel transits under sovereign cover and is struck, liability runs from Lloyd's through DFC to Treasury (Washington Examiner). The instrument was never designed for this.

Hormuz — JWC Listed Area — effectively closed. Traffic down ~90% (Argus Media). 2.8M barrels crossed 1 March vs 19.8M daily average (NBC News). Cooper: "not a single Iranian ship underway" in the Gulf (Al-Monitor). IRGCN attacked 10 commercial vessels; 13 UKMTO incidents since 28 February.

Seven of twelve P&I clubs cancelled. War risk premiums quadrupled to 1% of hull value per week (Caixin Global). JWC JWLA-033 expanded listed areas across the entire Gulf region (3 March). For a $100M VLCC: $1M/week insurance. No cover = no transit.

VLCC record $436,000/day. WTI $90.90 (+35.63% weekly — largest since 1983, CNBC). QatarEnergy force majeure at Ras Laffan (~20% global LNG); restart requires conflict to end (Bloomberg). Shipowners considering "dark transits" — AIS off, no insurance (Lloyd's List).

What changes if wrong: If the closure is military not financial — IRGCN mining or physical blockade rather than insurance withdrawal — no backstop or P&I reinstatement reopens Hormuz. Oil goes higher, not lower, and stays there until naval mine clearance.

II. REGIONAL ASSESSMENTS

Iran / Strait of Hormuz

Day 8: campaign in Phase 2, insurance closure holding, Pezeshkian signals command fracture.

Political: Pezeshkian's 7 March conditional halt offer — Iran stops striking neighbours unless US attacks are launched from them — paired with an apology for "miscommunication in the ranks" (Al Jazeera, 7 Mar). War powers resolutions failed both chambers — Senate 47-53 (4 Mar), House 212-219 (5 Mar). H.Res.1099 (state sponsor of terrorism) passed 372-53. WPR 60-day clock expires ~29 April.

Military: Iranian retaliation against Gulf states continues at diminishing intensity. UAE absorbed 112 drones and 9 ballistic missiles in 24 hours to 6 March (CTP-ISW). Saudi Arabia intercepted 4 missiles and 10 drones (Saudi DefMin). Qatar intercepted 9 of 10 drones on 7 March (Al Jazeera). Bahrain: "sinful aggression" (DefMin, 5 Mar). Six US service members killed in Kuwait; 18 wounded (Military Times).

Social: Casualties diverge: 1,332+ killed (Al Jazeera tracker, reliant on Iranian government reporting) vs 2,400+ including 310 civilians (Hengaw, Day 6, with track record of subsequent UN corroboration). 330,000+ displaced (UN). Internet at 1%, Day 7 (NetBlocks). Iran threatens European nations as "legitimate targets" (Al Jazeera, 7 Mar).

Watch: Chinese missile component shipments at Bandar Abbas. European intelligence told CNN 2,000 tons of sodium perchlorate arrived from China in 2025 (CTP-ISW, 6 Mar). If confirmed, extends Iran's fighting capacity beyond its degradation curve.

What changes if wrong: If command fracture is performative and IRGC retains coherent C2, Phase 2 extends with escalatory capacity intact.

Lebanon / Hezbollah

IDF struck 500 targets since 28 February, 70+ Hezbollah killed (IDF). Lebanon banned all IRGC activity — a step without recent precedent — and "several dozen" IRGC officers fled Beirut (Axios/CTP-ISW, 5-6 Mar). Hezbollah deployed Radwan Force; three UNIFIL peacekeepers wounded at Qouzah. 217 killed, 95,000 displaced (Lebanese authorities).

Watch: If Radwan Force is degraded, Hezbollah's ground threat evaporates and the IRGC ban becomes enforceable.

What changes if wrong: If Radwan Force survives degradation, Hezbollah retains ground capability and the IRGC ban is unenforceable.

Ukraine / Russia

Military: 56 Russian attacks on 6 March, concentrated on Pokrovsk (22) and Hulyaipole (Ukrainian General Staff). No confirmed advances. Ukrainian drone swarm (~200) struck Novorossiysk on 1-2 March — Admiral Essen frigate damaged, 6 of 7 oil tankers ablaze (Ukrainska Pravda). Russia launched 480 drones and 29 missiles overnight 6-7 March against energy infrastructure (Ukrainian Air Force).

Economic: Ukraine's counter-drone capability becoming a strategic export. US and Qatar in talks to purchase Ukrainian interceptor drones — few thousand dollars each, 90% interception rate — to counter Shaheds (Reuters, 5 Mar). UK deployed Ukrainian-trained drone operators to British bases (Telegraph, 4 Mar).

Political: Geneva talks: progress on ceasefire monitoring, impasse on territory. Abu Dhabi talks uncertain. US June settlement deadline under pressure — we assess Russia's implicit sanctions relief from the Iran war (see Signal 1) reduces Moscow's urgency.

Watch: Russian ballistic missile tempo against energy infrastructure. If it escalates, it signals strategic frustration approaching culmination.

What changes if wrong: If Russia's urgency is unaffected by Iran-war sanctions relief, Geneva may progress faster than assessed.

Europe / NATO

Political: NATO intercepted an Iranian ballistic missile over Turkey on 4 March — debris near Dortyol, ~45 miles from Incirlik (USNI News). Rutte ruled out Article 5 (Reuters/The Hill, 5 Mar). If state-launched missiles crossing allied airspace do not trigger collective defence, adversaries will recalibrate.

Military: Macron announced what the Bulletin of Atomic Scientists calls the most significant French nuclear deterrence update in 30 years — eight European allies in nuclear exercises, forward basing, Nuclear Steering Group led by Germany (PBS/Euronews). Starmer pledged fighter jets, helicopters, and a destroyer to Saudi Arabia (Al Jazeera, 7 Mar). Exercise Orion: 24 nations, 600+ paratroopers testing Ukraine peacekeeping deployment (Euromaidan Press, 27 Feb).

Watch: A second missile incident involving Turkish airspace forces the choice avoided this week.

What changes if wrong: If Turkey privately activates Article 4 consultations despite public statements, the no-precedent reading reverses.

Africa — Sudan / DRC Convergence

Sudan: Fighting shifted to Kordofan post-Khartoum recapture. RSF drone strike on Singa base killed 27 (ACLED); SAF airstrikes on Al Zorg killed up to 64 civilians (Wikipedia timeline). 13.6M+ displaced — world's largest crisis. Hormuz disruption now affecting humanitarian logistics (OCHA). RSF drone capability (1,003+ strikes since Apr 2023, likely UAE-supplied) changing the battlefield (ACLED/Al Jazeera).

DRC: M23 agreed conditional Uvira withdrawal (Bloomberg, 13 Feb). OFAC designated entire Rwanda Defence Force + four commanders (2 Mar, EO 13413). MONUSCO renewed to Dec 2026 (Res 2808).

Watch: MONUSCO vote: US-France split on Rwanda accountability signals wider fracture. Sudan fragmentation accelerates without ceasefire.

What changes if wrong: If M23 conditional withdrawal collapses, Rwanda sanctions escalate and the MONUSCO mandate proves inadequate.

III. FINANCIAL & ECONOMIC INTELLIGENCE

Market snapshot (6-7 March 2026):

All three US indices negative YTD (S&P -1.54%, Nasdaq -3.68%, DJIA -1.17%). NFP at -92K (BLS, consensus +55-59K) confirms the stagflation setup. KOSPI crashed 12.1% on 4 March, triggering a circuit breaker — South Korea imports ~75% of its crude through Hormuz (Yahoo Finance). Stoxx 600 down ~4.6% on the week — worst since April 2025 (Investing.com).

2Y-10Y spread at +43bps — classic stagflation signature. CME FedWatch: 94-96% hold at 3.50-3.75% on 18 March (cmegroup.com). CDX NA IG at 57.3bps, iTraxx Europe Main at 60.5bps — widest since June 2025. Bloomberg: credit investors "rapidly unwinding long positions worth tens of billions." iTraxx roll on 20 March creates calendar risk. If HY OAS crosses 4%, it triggers mechanical CLO deleveraging.

Gold $5,181.30 (CME/COMEX) — but Tuesday's 4% drop alongside equities signals margin-call liquidation, not safe-haven failure. Silver ~$85-86/oz; copper ~$13,000/t (~$5.90/lb).

Shipping & Freight — JWC Listed Area

VLCC per-barrel rate MEG-China: $15.32/bbl, up 124% from $6.82 on 27 February (Seoul Economic Daily, 3 Mar). 150-200 tankers stranded outside Hormuz (CNBC/Seatrade). Container surcharges $2,000-$4,000 per TEU/FEU. US gasoline $3.32/gallon, up $0.34/week (AAA, 6 Mar) — $4.00 threshold ~two weeks away at this trajectory.

TTF EUR 52.28/MWh (+63% from pre-crisis). Goldman: EUR 74/MWh if month-long halt, EUR 100+ beyond two months. JKM eased to $15.50/MMBtu from $21.18 spike; Goldman raised April forecast to $20 from $11.90 (CME/Goldman, 7 Mar).

Credit & Positioning

CFTC COT releasing today (3:30 PM ET, as of 4 March) — first crisis-week dataset, most important since the Russia-Ukraine invasion week. Key tells: speculative crude long build magnitude, Treasury futures positioning (stagflation trade = short bonds + long oil), gold managed money net (if declining despite price rise = margin-call liquidation). Pre-crisis crude net long at +57,681 contracts (upper quartile). 90th percentile today = elevated reversal risk.

Watch: CFTC COT (today, 3:30 PM ET) is the first crisis-week dataset. Five central bank decisions 13-20 March with VIX 0.51 points from the 30.0 systematic deleveraging threshold.

IV. LEGAL & REGULATORY

DOJ civil forfeiture — Shamkhani network ($15.3M). Two complaints filed 6 March against funds linked to Mohammad Hossein Shamkhani, son of the late Ali Shamkhani. Network: NIOC to IRGC to IRGC-QF via Wellbred Capital (Singapore/Dubai) and Sea Lead Shipping (DOJ OPA, 6 Mar; Cases 1:26-cv-802, 1:26-cv-807, D.D.C.). Legal and kinetic tracks operating in concert — dismantling the financial channel of a regime figure eliminated by military action the same week.

IRGC assassination plot. Federal jury convicted Asif Merchant on 6 March for an IRGC-directed murder-for-hire plot targeting US politicians including then-candidate Trump. Conviction provides courtroom-tested evidence linking Iran's security services to assassination operations on US soil (DOJ OPA/CBS News, 6 Mar).

Tariff cascade. CIT Judge Eaton: "Customs knows how to do this. They do it every day" (CNBC, 6 Mar). Following a closed conference, Eaton paused the immediate refund aspect. The 24-state coalition argues Section 122 was designed for gold-standard-era emergencies (PBS; Fortune, 5 Mar).

DOJ ethics NPRM (FR 2026-04390, 5 March). AG can suspend state bar ethics proceedings against current or former DOJ attorneys pending DOJ review — no fixed deadline. Florida Bar reversed its confirmed Halligan investigation on 7 March, claiming bar counsel "erroneously" stated an investigation was underway (CBS News/The Hill). NYSBA denounced the rule. Comment period ~6 April.

Coalition legal basis. WPR 60-day clock is the binding US constraint — both chambers voted and lost (Senate 47-53, House 212-219), leaving the executive without authorisation or prohibition until ~29 April. Trump: "unconditional surrender," wants to choose Iran's next leader. Rubio: "not regime change." Article 51 requires proportionality; regime change exceeds the test. Starmer: "not joining offensive strikes" (Hansard, 2 Mar). Lammy's refusal to endorse regime change is legal self-preservation (Chatham House; Just Security).

ICJ Gaza counter-memorial due 12 March (South Africa v. Israel, Case 192). Filing approach signals legal strategy during active hostilities.

DHS shutdown Day 21. H.R. 7744 passed House 221-209; Senate cloture failed 51-45. Noem fired; Mullin nominated. Affects TSA, FEMA, Coast Guard, Secret Service during regional war. Coast Guard readiness during a maritime crisis in the Gulf is the operational concern (CBS News; NPR, 5 Mar).

V. TECHNOLOGY & CYBER

Iran cyber-kinetic. MuddyWater compromised a US bank, airport, Canadian non-profits, and Israeli operations of a US defence company — pre-positioned before the strikes (Symantec/Broadcom, 5 Mar). Operation Olalampo deploys four new malware families including Rust-based CHAR backdoor using Telegram C2 (Group-IB). ~60 hacktivist groups active since 2 March, but FDD assessed most claims "likely false or overblown."

APT28 zero-day acceleration. GRU Unit 26165 exploited CVE-2026-21513 (MSHTML, CVSS 8.8) pre-patch, then reverse-engineered CVE-2026-21509 within 48 hours. Targets: 40% defence ministries, 35% transport/logistics, 25% diplomatic across nine countries (Security Affairs; The Hacker News).

CISA degraded. ~3,400 to ~2,400 staff. Election Security eliminated. FY2026 budget proposes further 30% cut. Rising threat tempo meets declining defensive capacity (Cybersecurity Dive).

China $70B semiconductor subsidy (Two Sessions) + rare earth export bans = simultaneous domestic acceleration and Western supply chain constraint.

Cisco. Two CVSS 10.0 flaws in Firewall Management Centre (CVE-2026-20079, CVE-2026-20131) under active exploitation — relevant given MuddyWater's pre-positioning in US infrastructure (Arctic Wolf; ASD/ACSC).

Crypto evasion +694%. $104B through cryptocurrency in 2025; stablecoins 84% of illicit volume. DPRK stole $2B including $1.5B Bybit hack (Chainalysis, 5-6 Mar).

VI. PIR / WATCH LIST

Status key: CRITICAL = threshold breach imminent or active. ESCALATING = conditions worsening, no breach yet. STABLE = no significant change. DE-ESCALATING = conditions improving.

VII. CORRECTIONS

From Issue 001 (6 March 2026):

1. 10Y UST: 4.12% → 4.15% (US Treasury primary source, not Trading Economics intraday).
2. VIX: 28.53 → 29.49 (+24.17%). Material — 0.07 from the 30.0 deleveraging threshold.
3. Iranian naval vessels: 17 (Day 4) → 43 hit, 30+ destroyed (Day 8). Update, not error.
4. Eurozone inflation: 1.7% unverified. Flagged for next issue.
5. Florida Bar / Halligan: Investigation reversed 7 March — see Section V.

VIII. SCHEDULE

IX. SOURCE INDEX

Principal Items & Regional Assessments

• CTP-ISW Evening Report, 6 Mar 2026 (criticalthreats.org) — Iran campaign phase, strike detail, naval, Hezbollah, IRGC, Russia intel sharing, China components, Iraqi militias
• ISW Ukraine Assessment, 6 Mar 2026 (understandingwar.org) — frontline, Pokrovsk, Russia-Iran contradiction
• CENTCOM / Admiral Cooper, 5-6 Mar — 43 ships hit, missile degradation, air dominance
• Washington Post, 6 Mar — Russia-Iran intelligence sharing
• Al Jazeera, 7 Mar — Pezeshkian statement, casualty tracker, Day 8
• Breaking Defense, 6 Mar — 3,000 targets / 43 ships
• Hengaw, Day 6 — alternative casualty figures (2,400+)
• ACLED — Sudan drone data, conflict mapping
• Ukrainska Pravda / Defence Matters, 4-5 Mar — Admiral Essen damage
• Axios, 5 Mar — IRGC fleeing Lebanon
• CSIS, 6 Mar — Operation cost ($3.7B/100 hours)
• UKMTO — 13 maritime incidents since 28 Feb

Financial & Economic

• US Treasury Daily Par Yield Curve, 6 Mar (home.treasury.gov) — PRIMARY
• Bureau of Labor Statistics, 6 Mar (bls.gov) — PRIMARY: NFP -92K, unemployment 4.4%
• CME FedWatch, 6 Mar (cmegroup.com) — 94-96% hold
• CBOE VIX, 6 Mar — 29.49
• CME/COMEX, 7 Mar — gold $5,181.30
• Yahoo Finance, 6-7 Mar — equities, Asian indices
• ICE/NYMEX via CNBC, 6 Mar — Brent $92.69, WTI $90.90
• Trading Economics — FX, DXY
• Bloomberg via Advisor Perspectives, 6 Mar — CDX IG 57.3bps, iTraxx 60.5bps
• Caixin Global, 7 Mar — war risk insurance
• Lloyd's Market Association JWLA-033, 3 Mar
• Maritime-Hub/CNBC — VLCC $436,000/day
• Seoul Economic Daily — VLCC MEG-China $15.32/bbl
• oilpriceapi.com, 7 Mar — TTF EUR 52.28/MWh
• CME JKM Platts, 7 Mar — $15.50/MMBtu
• AAA, 6 Mar — gasoline $3.32/gallon

Legal & Regulatory

• DOJ OPA, 6 Mar — Shamkhani forfeiture, Merchant conviction
• Federal Register 2026-04390, 5 Mar — DOJ ethics NPRM
• Senate.gov Roll Call 46 / House Roll Call 84 — war powers votes
• SCOTUS 24-1287, Learning Resources v. Trump
• CNBC, 6 Mar / Sullivan & Cromwell / PBS / Fortune, 5 Mar — tariff refund
• OFAC Recent Actions (ofac.treasury.gov) — Iran, Russia, DRC designations
• ICJ Case 192 — Gaza counter-memorial
• Hansard, 2 Mar — Starmer Commons statement
• GOV.UK, 1 Mar — UK legal position
• CBS News / The Hill, 7 Mar — Florida Bar reversal
• Chatham House / Just Security — UK legal analysis

Technology & Cyber

• Symantec/Broadcom, 5 Mar — MuddyWater Dindoor
• Group-IB — Operation Olalampo
• Unit 42 — hacktivist estimate
• FDD, 4 Mar — hacktivist claim assessment
• Security Affairs / The Hacker News — APT28 zero-days
• NetBlocks, 7 Mar — Iran 1% connectivity
• TechCrunch, 25 Feb / Cybersecurity Dive — CISA workforce
• Cisco Security Advisories / Arctic Wolf / ASD/ACSC — critical vulnerabilities
• Chainalysis, 5-6 Mar — crypto crime report

For informational purposes only. No editorial line. No advocacy. Assessment only. AI-assisted collection and drafting; all analytical assessments are human-directed. Errors: corrections@gizmet.dev

Epistemic register: "we assess" = high-confidence analytical judgment. "Available reporting suggests" = single-source or preliminary. "Reporting indicates" = multiple sources converging, not yet confirmed.