Loading story…
Israel’s National Cyber Authority said 50 Israeli companies were “digitally erased” in destructive cyberattacks, underscoring the severity of the current threat environment facing regional organizations. The reported incidents point to attacks designed not just to disrupt operations but to wipe out digital assets, adding to concerns about cyber activity linked to broader geopolitical conflict.
In Washington, senior U.S. military cyber officials said the operational environment—including missions tied to the war with Iran—has intensified pressure to strengthen the armed forces’ cyber workforce. At the Cyber Workforce Summit, leaders described Cybercom 2.0 as a force-generation and talent-management effort aimed at faster hiring, improved training, better retention, and more specialized career paths, while warning that outdated personnel processes and private-sector competition are undermining readiness at a time when cyber operators are in daily contact with adversaries.
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
Israel National News reported that the National Cyber Authority said 50 Israeli companies had been 'digitally erased.' The provided reference does not include additional detail on timing, cause, or affected sectors.
Senior officials described Cybercom 2.0 as a force-generation and talent-management effort aimed at improving recruitment, training, promotion, retention, and operational specialization for military cyber personnel. They also highlighted faster hiring approaches such as 'surgical hiring' to address slow legacy processes.
At the Cyber Workforce Summit in Washington, U.S. military cyber leaders said the current conflict environment, including operations tied to the war with Iran, has heightened the urgency of building and retaining a capable cyber workforce.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
israelnationalnews.com
Open sourcedefensescoop.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Iranian officials and affiliated voices signaled a sharper turn toward cyber retaliation during the U.S.-Israeli conflict, with the Islamic Revolutionary Guard Corps threatening major U.S. technology companies including **Apple, Google, and Meta** if more Iranian leaders were killed. North Carolina and other U.S. defenders were urged to stay on heightened alert as state officials cited increased nation-state activity and MS-ISAC warned that Iran is more likely to conduct disruptive or destructive operations such as **wiper attacks**, website defacements, and DDoS activity than conventional ransomware. Reporting tied the threat environment to a claimed Handala wiper attack on medical device maker **Stryker** and to broader concern that election-related websites and other civilian targets could face low-level disruption. Multiple assessments said Iran’s immediate cyber response appeared limited because military strikes, leadership losses, and internet disruptions had temporarily degraded its operations, but argued that the conflict is likely to push Tehran to invest more heavily in cyber capabilities over time. Analysts described cyber operations as a cheap, resilient, and globally deployable tool that can survive bombing and compensate if Iran’s other means of projecting power are weakened. The debate unfolded alongside criticism that Washington’s cyber strategy is too offense-heavy and institutionally underpowered, with gaps in leadership, pressure on U.S. Cyber Command, and reduced civilian cyber capacity leaving U.S. networks and critical infrastructure more exposed as Iranian retaliation risks grow.
Jun 29, 2026
US and Israeli military action against Iran under **“Operation Epic Fury”** has been accompanied by heightened cyber activity and public acknowledgment of offensive cyber operations. Reporting indicated a surge of pro-Iranian activity including **DDoS attacks**, attempted compromises, and targeting of **critical infrastructure**, with researchers warning that Iranian state-linked actors tied to the **IRGC** and **MOIS**, as well as aligned hacktivists, are likely to sustain retaliatory operations aimed at economic, reputational, and potentially physical disruption. Separately, reporting alleged Israeli intelligence conducted long-running surveillance by compromising **Tehran traffic cameras**, exfiltrating encrypted video and telemetry to servers outside Iran to build “pattern of life” intelligence on senior leadership movements. The Pentagon also elevated the visibility of cyber as a warfighting domain, with the Chairman of the Joint Chiefs describing coordinated **space and cyber** effects used to “disrupt, degrade, and blind” Iranian communications and sensor networks, though without operational detail. In parallel but unrelated to the Iran conflict, Russia’s internet regulator **Roskomnadzor** and the Russian Defense Ministry reported a “complex multi-vector” **DDoS** incident that temporarily disrupted multiple government sites, with traffic attributed to botnets and servers across several countries and continued user-reported instability after initial containment.
Jun 29, 2026
Military strikes by the United States and Israel against Iranian targets on **February 28, 2026** were followed within hours by a sharp escalation in cyber activity across the Middle East. Reporting describes widespread **DDoS attacks, website compromises, defacements, and breach claims**, with more than 150 hacktivist incidents reportedly claimed in the first two days of the crisis. Iranian connectivity was heavily disrupted, including outages affecting **IRNA**, while **Tasnim News** was reportedly compromised and displayed anti-regime messaging. The most affected sectors were identified as **government, aerospace and defense, and technology**, and regional states including **Israel, Kuwait, Jordan, Bahrain, Qatar, and the UAE** saw elevated cyber pressure. The surge also expanded beyond immediate regional targets, with security reporting warning that the conflict was driving attacks against global commercial sectors such as **travel, hospitality, and energy**. One cited example was a **March 11** claim by **Handala**, a hacktivist group alleged to have ties to Iranian intelligence, that it had conducted a large-scale **data-wiping attack** against medical technology company **Stryker**, allegedly destroying several terabytes of data. Additional reporting noted unconfirmed concerns that Iranian-linked actors could target the physical and digital infrastructure of major U.S. technology firms. The activity reflects a broader pattern of **geopolitically motivated cyber operations** acting as a force multiplier alongside kinetic conflict, rather than a standalone marketing or advisory narrative.
Jun 30, 2026