Iranian cyberattacks on Israel have surged since war, Israeli cyber chief says

Since the commencement of the U.S.-Israeli military operations against Iran earlier this year, Israeli officials have reported a significant increase in cyberattacks attributed to Iran. According to Yossi Karadi, the Director General of Israel's National Cyber Directorate (INCD), the number of hostile cyber incidents rose sharply between June 2025 and June 2026. In June 2025, during the initial phase of the military actions, approximately 1,600 such incidents were recorded. However, by June 2026, this figure had more than tripled to about 4,800 incidents.

Karadi emphasized that these attacks have targeted a wide range of entities within Israel, including critical infrastructure, central organizations, small to medium-sized businesses, and the general public. He specifically mentioned that law practices and accounting firms were among the smaller targets affected. Despite the surge in attacks, Karadi noted that so far, efforts have successfully prevented breaches targeting essential infrastructure. Nevertheless, he warned that companies deemed easier to infiltrate frequently experienced complete system wipes, though no specific names were disclosed.

The nature of these cyber threats underscores the evolving landscape of modern warfare, where digital confrontations occur alongside traditional kinetic engagements. Karadi highlighted the skill level of the attackers, stating that while Israel is capable of managing these challenges, vigilance remains crucial. He pointed out that unlike conventional conflicts, there is no concept of a ceasefire in the digital domain, implying continuous threat exposure.

Background information reveals that Israel has been actively enhancing its cyber capabilities, aiming to build robust defenses and offenses. This initiative includes collaboration with international allies, particularly the United States. Earlier in the year, the INCD and the Shin Bet, Israel's internal security agency, issued warnings regarding a series of sophisticated cyber attacks targeting Israeli government officials, security personnel, academics, and media professionals since mid-2025. These attacks have prompted increased coordination and intelligence sharing among global partners.

Iran, on the other hand, generally denies involvement in cyber operations against other nations, despite acknowledging attacks on its own systems. This stance complicates attribution efforts and adds layers of uncertainty to the geopolitical dynamics surrounding these cyber conflicts.

Reactions from various stakeholders indicate growing concerns over the implications of these cyberattacks. While Israeli officials remain focused on defensive measures and international partnerships, the broader implications for regional stability and cybersecurity norms are under scrutiny. The situation highlights the need for continued investment in cyber resilience and the importance of maintaining strong diplomatic ties to address emerging threats effectively.

Looking ahead, experts anticipate further escalation in cyber activities as both sides continue to adapt their strategies. The ongoing conflict between Israel and Iran is likely to influence the frequency and sophistication of future cyber operations. As such, maintaining preparedness and fostering international cooperation will be vital in mitigating potential risks and ensuring national security in an increasingly interconnected world.