The Iran-Israel cyberwar, which has disrupted critical infrastructure and civilian life in both countries, has grown increasingly public in the past two years
Three things to know about the not-so-covert cyber-operations between these two adversaries — Listen — Gift Article Tweets: @jimgoldgeier and @pstasiatech Tweets: Jim Goldgeier / @jimgoldgeier : Fascinating new @monkeycageblog piece by my @StanfordCISAC colleague @Gil_Baram on how cyber conflict between Israel and Iran has grown increasingly public in recent years https://www.washingtonpost.com/ ... Paul Triolo / @pstasiatech : Cyber attacks by Iran, Israel now target critical infrastructure Israel traditionally sticks to ambiguous responses, latest examples and others suggest that may be changing. Iran also broke silence and chose to publicly discuss some of these incidents. https://www.washingtonpost.com/ ...
Context & Ripple Effects
The Washington Post piece lands midway through an arc that began with Iran's tightening of domestic internet controls under US sanctions pressure, then escalated when [[a:973384|attacks on Iran's fuel distribution system and an Israeli LGBTQ dating site showed the conflict hitting civilians at scale]]. What Jim Goldgeier and Paul Triolo flag is the shift in signaling: Israel traditionally kept responses ambiguous, but both sides now claim and publicize operations.
That publicization has since compounded. The US State Department put a $10M bounty on Iran-linked CyberAv3ngers as the hacking groups' sparring became a tracked, named campaign, and after the June ceasefire the attacks continued with Israel landing the most telling blows — evidence the cyber channel outlives formal de-escalation.
First-order effects
- Civilians are the immediate target set: Iranian drivers face fuel-distribution outages and Israeli users of a dating site had their data exposed, meaning neither population is collateral — they are the message.
- Israel's doctrine of ambiguous attribution erodes as it publicly claims operations, forcing Iran to respond in kind rather than through proxies alone.
Second-order effects
- Third countries get pulled in: sources report suspected Iranian-linked attacks on water and wastewater utilities across at least 12 US states, and the US State Department's CyberAv3ngers bounty turns American law enforcement into an active participant in the conflict.
- Iran responds internally as well as externally — the same escalation pressure that drove its 2019 internet-control crackdown now underpins wartime measures like the 70-plus-day national blackout NetBlocks called the longest recorded shutdown in a connected society.
Third-order effects
- The pattern points toward cyber conflict as a standing, public tier of interstate war that persists through ceasefires and drags civilian infrastructure — fuel, water, dating platforms — into the battlespace as a matter of doctrine, not accident.
- Intelligence fusion is becoming the differentiator: Israel's reported use of AI on Iranian traffic-camera footage to locate Ayatollah Khamenei, and Iran's hacker mobilization to find targets, suggest the next phase is algorithmic target acquisition rather than disruption for its own sake — a trajectory ex-CISA Director Chris Krebs describes as Iran 'throwing everything they have at this'.
The trend: State cyber conflict is shifting from covert disruption to public, civilian-facing operations that outlive ceasefires, pull third countries into defense, and fuse AI-driven surveillance with offensive targeting.