One-sentence headline summary

Iran is increasingly utilizing sophisticated cyberattacks, spyware, and artificial intelligence to conduct psychological warfare and target critical infrastructure in the United States and Israel during the ongoing conflict.

Key points

• DigiCert researchers have tracked nearly 5,800 cyberattacks launched by approximately 50 groups linked to Iran since the conflict began.
• Hackers are increasingly targeting the medical sector, including Michigan-based Stryker, using destructive ransomware rather than traditional financial extortion.
• Pro-Iranian groups recently deployed spyware disguised as bomb shelter information to compromise the devices of Israeli citizens during missile strikes.
• Artificial intelligence is being used to accelerate attack speeds and spread large-scale disinformation, such as deepfake images of military engagements.
• U.S. government agencies, including the State Department and the NSA, have established specialized bureaus to counter emerging digital threats and AI-driven propaganda.

These operations demonstrate a shift in modern warfare where digital intimidation and infrastructure disruption serve as cost-effective alternatives to conventional military engagement. The focus on critical sectors like healthcare and supply chains forces organizations to prioritize cybersecurity, as these attacks aim to erode public trust and destabilize national security.