🚀 Iran's Retaliation Reaches U.S. Embassies as the "Big Wave" Looms

💻 Cyber Command Was the First Mover in Epic Fury — Here's What That Actually Means

🔥 The Pentagon Just Handed Defense Startups the Most Open Door in 60 Years

⚡ How CYBERCOM Actually Fights a Sustained Campaign

🏗️ The Army Is Asking Industry to Co-Own Its Own Modernization

📌 Plus 19 more stories across Air, Land, Sea, Space & Cyber

Day four of Operation Epic Fury arrived on Tuesday, with Israel launching simultaneous strikes on Tehran and Beirut, while Iran's retaliation expanded to hit U.S. embassies directly. The U.S. Embassy in Riyadh was struck by suspected Iranian drones, the Embassy in Kuwait was hit and has closed until further notice, and the State Department has ordered the mandatory departure of non-emergency personnel from six countries across the region, including Jordan, Bahrain, Iraq, Qatar, Kuwait, and the UAE. Six U.S. service members have been killed in action to date, with CENTCOM warning that additional losses are expected. Iran's IRGC declared the Strait of Hormuz closed, an Iranian drone boat executed the first confirmed uncrewed surface vessel strike of the war on a Marshall Islands-flagged oil tanker in the Gulf of Oman, and a U.S.-flagged Tanker Security Program vessel in Bahrain was struck by suspected Iranian projectiles. Meanwhile, Trump told CNN the "big wave" of U.S. strikes has not yet arrived, and CENTCOM confirmed more tactical aviation is flowing into theater.

The operational picture is revealing considerably more than the headlines. The first confirmed combat deployment of SpektreWorks' LUCAS one-way attack drones, reverse-engineered from captured Iranian Shaheds, is the clearest real-world validation yet that the Pentagon's "affordable mass" doctrine is functional, not aspirational. Gulf air defense networks are burning through interceptors at a pace, with Kuwait, the UAE, and Qatar each reporting hundreds of successful intercepts, raising serious questions about magazine depth across the theater. The Strait of Hormuz closure attempt is no longer hypothetical; shipping traffic has dropped nearly 85 percent, and Iran has confirmed it will fire on vessels attempting to transit. That turns maritime strike, mine countermeasures, and unmanned surface vessel capabilities from future requirements into present needs. On the European flank, Macron's speech Tuesday in front of a nuclear submarine, announcing expanded numbers for the arsenal, a fifth SSBN, and forward deterrence agreements with Germany, Poland, and six other nations, was not coincidental. The Iran war is accelerating nuclear doctrine debates in Europe that were already moving fast.

The forward-looking questions are, in order: how long does Iranian missile capacity hold under sustained strikes, given Israeli claims of meaningful degradation; how quickly do Gulf states' air defense inventories deplete, and what happens if they do; and can the Strait remain even partially open to commercial shipping? The answers will drive every significant defense acquisition discussion for the next twelve months. Watch CENTCOM's daily damage assessments for both Iranian missile capacity and U.S. casualty figures, which will be the operational metrics that shape the timeline and intensity of what comes next.

Joint Chiefs Chairman Gen. Dan Caine publicly confirmed that U.S. Cyber Command and Space Command were the "first movers" in Operation Epic Fury, executing coordinated non-kinetic effects that disrupted Iranian communications and sensor networks before the first kinetic strike arrived. This is the most senior and explicit public acknowledgment of CYBERCOM's real-time combat integration in a major U.S. military operation, a meaningful shift from the strategic ambiguity that has historically surrounded offensive cyber activity. The acknowledgment arrives against a backdrop of significant workforce attrition across the federal cyber enterprise, raising pointed questions about whether institutional capacity matches the operational ambition now being publicly advertised. Tehran-linked hackers are meanwhile conducting elevated reconnaissance against U.S. targets, with multiple cyber intelligence firms warning of follow-on disruptive activity against domestic infrastructure.

Watch whether Iran attempts retaliatory cyber operations against U.S. critical infrastructure in the coming days, which would be the clearest indicator of how much escalatory reserve Tehran is holding in the digital domain.

Hegseth's November acquisition overhaul, now backed by the 2026 NDAA, has dismantled JCIDS, replaced traditional program executive offices with Portfolio Acquisition Executives, mandated a Modular Open Systems Approach at the component level, and established MEIA as the new front door for industry. The relationship-building advantage heavily favors early movers in the next six to twelve months, when the PAE structure is still forming and initial partnerships define years of downstream positioning. Army Secretary Driscoll's stated ambition, 90 percent commercial and nontraditional vendors and only 10 percent traditional primes, is the clearest directional signal in decades, even accounting for the inevitable implementation friction from a workforce with fifty-plus years of JCIDS muscle memory. For founders and investors, the window is real, but the article is right that it requires acting before the old culture reasserts itself.

The realistic caveat is that practical implementation will take twelve to twenty-four months, and the primes will lobby aggressively to preserve single-source arrangements. The startups that build MEIA relationships now, before contract awards, will hold a structural advantage that latecomers cannot easily replicate.

Breaking Defense's reconstruction of CYBERCOM's sustained campaign posture draws on multiple former senior cyber commanders and military lawyers, and the picture is considerably more nuanced than "we turned off the lights." Pre-positioned access to Iranian networks, developed over months or years, is a finite resource: every offensive effect burns that access, eliminating both the immediate kinetic value and the intelligence collection it supported. Former operators are essentially unanimous that in enduring operations, cyber shifts toward persistent intelligence support rather than warfighting effects, with offensive options reserved for moments where they meaningfully improve on kinetic alternatives. The Russia-Viasat-Ukraine case is explicitly cited as the canonical cautionary tale of burning a valuable intelligence posture for a short-term disruption that ultimately modernized the adversary's communications.

For the cyber industry, this framing matters more than the headline capability claims. The demand signal emerging from Epic Fury is less about offensive tools and more about persistent collection, resilient access maintenance, and rapid re-entry after network closure. It will be interesting to see what CYBERCOM contracting looks like in the next procurement cycle.

The Army published a formal Request for Information on Friday, asking private industry to propose co-investment models for installations modernization, covering energy resilience, supply chain strengthening, advanced manufacturing, and organic industrial base development. The explicit ask is for joint ventures, long-term leases, and service agreements in which investor returns are tied to Army performance outcomes, not construction contracts, and the RFI is structurally tilted toward dual-use commercial players and infrastructure firms with genuine private-market exposure. Responses are due April 2. This reflects Army Secretary Driscoll's consistent messaging that he wants industry with diversified commercial and government revenue, not vendors wholly dependent on Army appropriations, a posture he has signaled repeatedly since calling it a "success" if a legacy prime contractor closes on his watch.

This is an early-stage experiment that will take time to mature into actual capital structures. Watch how many credible responses come in by April 2, and whether Driscoll follows up with serious co-investment pilots before summer.

✈️ Air

🛡️ Land

🌊 Sea

🛰️ Space

🧠 C2 & Cyber

🏭 Industry & Policy

That's the brief. If this landed in the right inbox, forward it on.