Iranian cyberattacks fail to materialize but threat remains acute

"Iran will very likely use its cyber program to respond to the joint US and Israel combat operations against Iran. The agency urged organizations to look beyond the background noise of opportunistic DDoS attacks and other low-level cyber-activity for more sinister threats such as ransomware and destructive wiper attacks."

"There is almost certainly a heightened risk of indirect cyber threat for those organizations and entities who have a presence, or supply chains, in the Middle East. The general nature of the warnings underlines the problem of alert fatigue: If attacks are an ever-present threat, what should organizations pay attention to?"

"The consensus is that Iranian cyber-retaliation has so far been surprisingly mild. This might simply be a period of adjustment caused by disruption to Iran's energy and Internet infrastructure, they caution. Iran has built one of the world's most active cyber operations, which means this is likely a temporary reprieve."

Following US and Israeli military operations against Iran, cybersecurity agencies have warned of heightened cyber threats despite a current lull in Iranian cyberattacks. The UK NCSC and Canadian CCCS issued warnings about potential Iranian cyber-retaliation, with Canada specifically cautioning organizations to prepare for ransomware and destructive wiper attacks beyond routine DDoS activity. Experts note that Iran maintains one of the world's most active cyber operations, suggesting the current reprieve is temporary. The mild response so far may result from disruption to Iran's infrastructure rather than strategic restraint. Organizations face alert fatigue as cybersecurity warnings become routine, complicating threat assessment and response prioritization.

Read at Computerworld