POLITICS & POLICY MAKING
Cyberspace Has No Ceasefire: Iranian Cyberattacks on Israel Triple to 4,800 Monthly Incidents, Says Cyber Chief
Detailed Report
-
The Digital Surge: Hostile cyber incidents attributed to Iranian hacking networks against Israel have tripled over the past year. In an interview with the German newspaper Die Welt, Brig. Gen. (res.) Yossi Karadi, Director General of Israel's National Cyber Directorate, revealed that authorities logged roughly 4,800 hostile cyber incidents in June 2026 alone. This marks a dramatic spike from the 1,600 incidents recorded during the same month in 2025. The spike directly correlates with the expansion of the US-Israeli military campaign targeting Iranian assets earlier this year.
-
A Multi-Layered Threat Landscape: Karadi described Iran's cyber warfare architecture as a sophisticated, multi-tiered ecosystem. At the state-directed core are dedicated cyber divisions within the Iranian military and the Islamic Revolutionary Guard Corps (IRGC). These are supplemented by a decentralized network of civilian operators and ideological activists who are either paid or hack out of pure conviction. "Some groups are very skilled," Karadi stated, noting that these separate cells are pooling resources and coordinating far more effectively than they did a year ago.
-
Targeting the Soft Underbelly: While Israel has successfully fended off catastrophic breaches on its highly secured critical national infrastructure—such as power grids and water networks—hackers are aggressively penetrating softer targets. The directorate noted significant waves of attacks hitting central organizations, ordinary citizens, and small-to-medium enterprises (SMEs). Law practices and accounting firms have been disproportionately targeted due to the highly sensitive client data they hold coupled with relatively limited cybersecurity budgets.
-
System Wipes and Psychological Warfare: For entities with vulnerable or easily penetrable digital defenses, the consequences have been severe, often resulting in their computer networks being completely wiped by destructive malware. Karadi also highlighted that the digital onslaught is paired with intense online propaganda and influence operations—including AI-generated content and highly publicized animation pieces—designed to disrupt public confidence and supplement direct network intrusions.