Skip to content
Briefings are running a touch slower this week while we rebuild the foundations.See roadmap
European Tech Sovereignty
17MAY

Iran fires on 7 countries in retaliation

1 min read
14:28UTC

Iran fired dozens of ballistic missiles at Israel and at US military installations across seven countries on 28 February 2026 — the widest geographic spread of Iranian offensive missile use in history.

TechnologyDeveloping
Key takeaway

Iran's direct ballistic missile response across seven countries ends proxy-mediated deterrence as Iran's default posture and creates immediate US political obligations to respond.

Iran's decision to retaliate directly — rather than routing its response entirely through proxy forces — marks a change from the posture Tehran maintained through 2024 and early 2025, when Hezbollah, the Houthis, and Iraqi militias were used to maintain plausible deniability. Direct ballistic missile strikes on US military bases across seven countries remove that deniability entirely and signal that Iran has concluded the era of calibrated, deniable escalation is over.

The seven-country targeting demonstrates a pre-positioned strike capability that had been mapped and planned well in advance of 28 February. Iran's ballistic missile arsenal — including Fattah, Kheibar Shekan, and Emad variants — has sufficient range to reach US bases across the Gulf and the Levant. The simultaneous nature of the strikes suggests launch windows were coordinated to prevent interception assets in one country from being redirected to defend another.

Direct Iranian retaliation also forecloses certain de-escalation paths that proxies left open. When Iran uses proxies, it retains the option of claiming non-involvement and negotiating a pause. A direct ballistic missile attack on US military installations in seven countries creates a legal and political obligation on the United States to respond, regardless of damage levels. The strike's geographic breadth makes any US non-response politically untenable.

Deep Analysis

Deep Analysis
Escalation

Seven-country targeting creates simultaneous political and military crises across the Gulf, Levant, and potentially wider region — each host country faces Iranian retaliation risk regardless of whether it sanctioned the original US strikes, generating pressure for US force withdrawal requests that would weaken US regional posture.

What could happen next?
  • Meaning

    Short term · Assessed
  • Meaning

    Short term · Assessed
  • Meaning

    Short term · Assessed
First Reported In

Update #2 · Five cities struck on opening night

European Council· 28 Feb 2026
Read original
Different Perspectives
OpenForum Europe / open-source community
OpenForum Europe / open-source community
The EUR 350m Sovereign Tech Fund has no Commission host, no budget line, and no commissioner's name attached six weeks after the April conference, while Germany is already paying maintainers to staff international standards bodies. The CRA open-source guidance resolves contributor liability but leaves the financial-donations grey area open with the 11 September reporting clock running.
ASML / Christophe Fouquet
ASML / Christophe Fouquet
ASML's Q2 guidance miss of roughly EUR 300m below consensus reflects DUV revenue compression set by US export controls, not European policy. Fouquet said 2026 guidance accommodates potential outcomes of ongoing US-China trade discussions; a bipartisan US bill to tighten DUV sales further would accelerate the cross-subsidy thinning Chips Act II's equity authority is designed to address.
Anne Le Henanff / French G7 Presidency
Anne Le Henanff / French G7 Presidency
Le Henanff chairs the 29 May Bercy ministerial two days after Brussels adopts the Tech Sovereignty Package, making the G7 communique the first international read of the Omnibus enforcement split and CAIDA's scope. France's Cloud au Centre doctrine is already operational via the Scaleway Health Data Hub contract.
German federal government
German federal government
Berlin operationalises sovereignty through procurement mandates (the ODF requirement and the Sovereign Tech Standards programme) rather than waiting for Commission legislation. The Bundeskartellamt has still not received the Cohere-Aleph Alpha merger filing, leaving Germany's flagship AI champion in structural limbo six weeks after the deal resolved.
US Trade Representative
US Trade Representative
The USTR Section 301 investigation into EU digital rules closes with a 24 July 2026 final determination. CAIDA's public-sector cloud restriction sits within the criteria that triggered the 2020 Section 301 action against France's digital services tax, and the US has not signalled whether the Thales-Google S3NS arrangement resolves CLOUD Act jurisdiction concerns.
CISPE / Valentina Mingorance
CISPE / Valentina Mingorance
CISPE shipped its own pass-fail sovereignty badge in April to establish an industry-auditable floor the Commission could adopt. Whether CAIDA inherits the CISPE binary or the multi-tier SEAL approach will determine whether certification is enforceable by public contracting authorities or requires Commission discretion.