Iran Cyberwar 2026
Coverage of Iranian state-linked cyber operations during the 2026 revolution and kinetic escalation window
-
Handala Rebounds After FBI Seizure, Exposing Iran Cyberwar Resilience
After the FBI and DOJ seized Handala-linked domains on March 20, 2026, the Iran-linked group restored its web presence within about a day. The case shows why domain takedowns disrupt visibility faster than capability.
-
Iran Cyberwar: Identity Systems Become the Target
After the March 11, 2026 Stryker cyberattack, evidence shows a shift in the Iran cyberwar: attackers are targeting identity systems and endpoint management platforms to disrupt global operations.
-
Iran Cyberwar Shifts to Spillover, Retaliation, and Control
The cyber dimension of the Iran war is no longer limited to isolated attacks. From internal repression and internet shutdowns to suspected Iran-linked retaliation abroad, a multi-layered cyber conflict is emerging with direct implications for healthcare, shipping, and critical infrastructure.