Defense Briefing

The US conducted the seventh consecutive attack night against Iran, while Iran expands its counterstrikes to Kuwait, Bahrain, Jordan, and Syria. Particularly alarming: Iran struck a Kuwaiti seawater desalination facility and power plant for the first time – an attack on critical infrastructure in the Gulf. The escalation to civilian supply infrastructure marks a qualitatively new dimension of warfare with potentially devastating humanitarian consequences.

At the NATO Summit in Ankara, allies agreed on record spending: Europe and Canada will invest a combined $634 billion in defense in 2026, with five members already meeting the 3.5% guideline. Simultaneously, the US defense budget includes a legal brake against troop reductions in Europe, while Washington strategically pursues handing European conventional defense to the Europeans. The summit illustrates NATO's structural realignment toward European-led burden-sharing.

A joint advisory from 19 allied cybersecurity agencies on July 13, 2026 warns that Russian state hacker groups – including FSB Center 16 – are systematically compromising poorly secured network routers in energy, telecommunications, and defense. Unlike previous warnings, the advisory names specific exploit techniques for the first time (SNMP, default credentials, CVE-2018-0171) and is explicitly directed at military and defense networks. The US military is simultaneously conducting the Cyber Shield 2026 exercise through July 25.

Polymarket shows a collapse in ceasefire probability of 12.5 percentage points this month to just 36% by year-end. In parallel, Russian forces advance on the strategic ridge line between the Bakhmut-Siversk line and the Slovyansk-Kramatorsk hub, establishing tactical control over dominant terrain. Diplomatic talks are considered factually dead, while Russia pursues a deliberate attrition strategy on multiple axes.

The US Department of Defense has surprisingly suspended Phase II of the Cybersecurity Maturity Model Certification (CMMC) – precisely while Russia attacks NATO infrastructure and the Iran war escalates. The decision draws sharp criticism from the cybersecurity community, as defense contractors can now continue operating without certified minimum standards. Analysts see this as a significant attack surface risk for the entire US defense supply chain.