All articles tagged with #cyberwarfare
Iran's defense journals show Tehran has studied the Ukraine war to push drone use, AI, and cyber capabilities, modernize training, and address forward-planning vulnerabilities, including discussions of buying advanced aircraft such as Su-35s and integrating AI into targeting; experts say these public articles reveal the regime's evolving priorities and mindset, even as some analyses vary in rigor.
CNN reports that Iran is waging a multifaceted information and cyber campaign during the US-Israel confrontation, using threatening messages, phishing and cyberattacks to destabilize Gulf states and project influence. Fake security alerts, targeted intrusions, and disinformation have prompted Gulf authorities to warn the public and journalists to ignore bogus messages, while experts say Tehran seeks to sow fear and undermine regional stability even as conventional military options wane.
AP reporting shows Iran’s extensive network of street and public cameras—installed to police protests and ethics rules—was hacked and exploited by Israel to locate and strike Iran’s supreme leader, highlighting how modern warfare weaponizes surveillance. The story also notes that AI now speeds analysis of vast feeds, while cybersecurity experts warn that billions of cameras worldwide remain vulnerable and could be exploited in future conflicts.
Handala, an Iran-linked group, claimed a cyberattack on Stryker that allegedly wiped over 200,000 devices across 79 countries, illustrating a widening cyber battlefield in the Iran war. The incident sits within a broader campaign by IRGC-backed groups (CyberAv3ngers, APT33, APT55) targeting US infrastructure, plus a loose hacktivist coalition—Cyber Islamic Resistance—coordinating actions via Telegram. The United States and Israel are reported to be conducting cyber operations as part of Operation Epic Fury, with actors employing AI tools to disrupt energy, telecoms, and government networks.
Iran's Revolutionary Guard Corps says US- and Israel-linked tech and financial firms, including Google, Microsoft, Palantir, IBM, Nvidia, and Oracle, are now targets as part of an "infrastructure war" following strikes that damaged AWS facilities in the UAE and Bahrain, signaling that commercial tech infrastructure is increasingly treated as part of the battlefield.
Iran says major U.S. tech firms—including Amazon and Microsoft—are targets as it expands drone and cyberattacks in the Middle East in retaliation for U.S. and Israeli strikes, with Tasnim naming additional firms and citing damage to AWS data centers in the UAE and near Bahrain; Washington says it’s prepared for the escalation, while Iranian-linked cyber activity including a Handala-linked Stryker attack signals a broader campaign across regional targets.
Intel 471 notes a surge in hacktivist campaigns after US–Israel strikes on Iran, with pro-Iranian and pro-Russian groups claiming DDoS, defacements and data breaches against governments, military and critical sectors in the U.S., Israel and neighboring countries; Israel, Kuwait and Jordan were among the most affected regions, and national government, aerospace/defense, and technology were top-targeted industries. The activity is high in volume but often low in actual impact, and experts say cyber operations are now integrated with military strategy, underscoring resilience needs and infrastructure risk.
The IDF said it carried out a wide-scale strike on sites on Tehran’s eastern edge that housed Iran’s IRGC cyber and electronic headquarters and its Intelligence Directorate, but it remains unclear how much damage was done or whether Iran’s cyberattack capabilities are crippled. Iran’s internet blackout and ongoing regional conflict complicate assessments, while experts note that proxies and other actors could continue cyber operations despite the strike.
Iran published a detailed concept for war with the United States, detailing missile barrages, proxy escalation, cyber operations, and threats to global oil flows. The plan envisions US strikes followed by Iranian counter-barrages, relies on hardened underground networks, and a saturation strategy that taxes defenses while expanding attacks via proxies like Hezbollah and the Houthis. It also leverages cyber missions targeting transport, energy, finance, and military communications, and uses the Strait of Hormuz to pressure markets, aiming for a costly, prolonged conflict rather than a quick defeat of the US. The concept surfaced amid ongoing US-Iran talks in Muscat and reactive rhetoric from Iranian leaders.
A CBS News briefing outlines potential U.S. responses to Iran's crackdown on anti-government protesters, including conventional military strikes on Iran's security forces or leadership targets, cyber and psychological operations to disrupt communications and influence loyalty, and other pressure tactics, while warnings and precautions—such as a State Department alert urging Americans to leave Iran and a precautionary drawdown at Al-Udeid Air Base—signal the White House is weighing options but has yet to commit to a course of action.
The Trump administration is weighing a major shift to involve private companies in offensive cyberattacks, potentially expanding the private sector’s role in cyberwarfare and requiring new Congressional authorization; supporters argue it would greatly boost capacity and speed, while critics warn about legal questions, oversight, and the risk of escalation as a national cybersecurity strategy is fleshed out.
Iran-backed hackers have targeted US financial and defense sectors following US strikes on Iranian nuclear sites, raising concerns about escalating cyber conflicts. While no major disruptions have occurred yet, experts warn that ongoing tensions could lead to increased cyberattacks from Iran and allied groups, especially if the Iran-Israel ceasefire collapses. The US faces vulnerabilities in its digital infrastructure amid reduced cybersecurity funding and staffing, highlighting the need for increased investment in cyber defense.
Iran is temporarily throttling and planning to disconnect from the global internet amid escalating tensions and cyberattacks linked to the conflict with Israel, with reports of widespread outages and government urging citizens to delete WhatsApp, while Israel faces a surge in cyberattacks.
The FBI, in collaboration with other countries, disrupted a Russian hacking operation that had infiltrated over 1,000 home and small-business internet routers in the US and globally, aiming to spy on military, security organizations, and private corporations. This action is part of a broader effort to counter Russia's cybercampaigns against the US and its allies, including Ukraine. FBI Director Christopher A. Wray revealed details of the operation at a security conference in Munich, also highlighting concerns about China's growing cyberwarfare capabilities and recent disruptions of similar campaigns from China targeting critical infrastructure.
Mykhailo Fedorov, Ukraine's Minister of Digital Transformation, is leading the country's fight against Russia in the cyber sphere, overseeing projects securing drones, rolling out public service apps, and organizing a volunteer IT army of about 200,000 engaged in cyberwarfare with Russia. Fedorov has also helped shape Ukraine's online campaign to shame Russia and call out its alleged abuses on social media platforms. He is also managing the crucial link between the federal government and the Ukrainian people across several digital platforms, including the web portal and phone app called Diia, which around 19 million Ukrainian citizens use to quickly and easily access public services.