ConflictClarifier

מעקב משבר איראן-המפרץ 2026
CC
Events Archive
strikeMar 19, 2026

Feds keep eyes peeled for Iran cyberattacks, respond to Stryker breach

Summary

Feds keep eyes peeled for Iran cyberattacks, respond to Stryker breach Federal cyber officials aren’t seeing a significant change in attacks tied to Iran since the conflict there began, at least not yet, but they are on the lookout for any uptick and are focusing on the Stryker attack in particular. Terry Kalka — director of the Defense Industrial Base Collaborative Information Sharing Environment at The Defense Department’s Cyber Crime Center — said Thursday that “there’s some basic indicators, there’s some known” tactics, techniques and procedures, but “we’re not seeing a tremendous amount of impact yet.” That sentiment aligns with what the acting director of the Cybersecurity and Infrastructure Security Agency, Nick Andersen, told reporters on Tuesday: “We still are seeing a steady state. We have not seen an increase or any rise of threat actor activity.” But both men said they’re monitoring to see if that changes. “We are very much on the alert for, if not Iran, Iran-influenced actors,” Kalka told CyberScoop at the Elastic Public Sector Summit. On Thursday, CISA issued recommendations tied to this month’s cyberattack on medical device maker Stryker, the most eye-catching cyber activity with Iran links after an Iranian hacking group known as Handala claimed credit for the attack. CISA urged organizations to improve their defenses of endpoint management systems after the attack caused global disruptions to Stryker’s Microsoft environment. CISA made several recommendations , including to set up safeguards in Microsoft’s Intune endpoint management tool. Stryker has contracts with the Defense Department. “We’re all paying attention to the Stryker incident that broke last week, because there are implications there for communications technology and private information or corporate information that, even if it’s not defense Information, getting access to someone’s email and understanding the infrastructure of the company is very, very useful,” Kalka said. Andersen said CISA has been in touch with Stryker, as has the FBI. On Thursday, it was reported that the FBI and the Justice Department took down two websites linked to Handala. Andersen said the agency’s approach doesn’t change much because of the conflict, however. “We just can’t take our eyes off of the fact that other adversaries continue to make maneuvers in this space,” he said at an event hosted by Auburn University’s McCrary Institute. “Cybercriminal groups continue to make moves within this space. It was not just about one nation-state at one particular point in time. We see persistent motivation across the board for people to be able to take advantage of cyber weaknesses across critical infrastructure and our traditional IT environments.” CISA has furloughed hundreds of employees as Congress continues a standoff over funding for the Department of Homeland Security over the Trump administration’s immigration enforcement approach.

Actors involved

Iran

Sources

  • Tim StarksBy Tim Starks

    Feds keep eyes peeled for Iran cyberattacks, respond to Stryker breach Federal cyber officials aren’t seeing a significant change in attacks tied to Iran since the conflict there began, at least not yet, but they are on the lookout for any uptick and are focusing on the Stryker a

See this event through different lenses

Compare how Western, Iranian, Israeli, Global South, and Pro-Peace perspectives frame this event.

Compare Perspectives

Community Notes

Community Notes

Loading notes...

Related events

strikeUnverifiedIranProxy
1 source

DUBAI: Clashes between Yemen's Houthis and Saudi-backed government forces have killed 81, military and medical sources said on Friday (Sep 4), as the Iran-backed rebels push towards territory bordering a chokepoint in the strategic Red Sea. Fighting erupted on Thursday, after the Houthis launched a ground assault along with rocket and drone attacks near coastal areas, vying for control of the narrow Bab el-Mandeb strait at the Red Sea's southern entrance.

The Houthis have repeatedly attacked Saudi ships in recent weeks in the Red Sea, which has emerged as an alternative route for oil exports after Iran all but halted shipments from the Gulf by blockading the Strait of Hormuz. The rebels are now trying to cement their hold over one of the world's busiest shipping lanes, which they have disrupted with attacks on passing vessels since the Gaza war broke out in 2023.

The Houthi offensive aims to cut off the government-held port city of Mokha, under fire for weeks, and advance towards areas bordering the Bab el-Mandeb, military sources told AFP. The rebels have seized elevated sites overlooking government positions near the Red Sea, the coastal town of Khokha and Taiz city further inland, a military source and a Taiz official told AFP, requesting anonymity.

The Houthis could target ships from these elevated positions, they said. A military official on the coast said 24 of his men had been killed, while another in the Taiz area said 15 had died there. At least 42 Houthi militants were also killed, according to medical sources in areas under their control.

REINFORCEMENTS SENT The Houthis want to control the hills overlooking Bab el-Mandeb and Mokha before attacking the coast, a Yemeni official in Aden, the government's base since it was ousted from the rebel-held capital, Sanaa, in 2014. The government has sent reinforcements to Taiz from Aden on Saudi orders, the official said.

With Iran's closure of Hormuz, the Bab el-Mandeb chokepoint has gained increased importance as a transit route for oil from Saudi Arabia, the world's biggest exporter of crude. The narrow waterway connects the Red Sea - and, via the Suez Canal, the Mediterranean - to the Indian Ocean.

Although the Houthis do not control areas bordering Bab el-Mandeb, they hold the key port city of Hodeida north of Mokha. In July, a fragile truce between the Houthis and the government fell apart after the rebels welcomed an Iranian plane to Sanaa, setting off a spate of attacks.

They later announced a maritime blockade of Saudi Arabia and began hitting its ships and territory as Yemen, following more than a decade of civil conflict, became the latest country drawn into the Middle East war.

strikeUnverifiedUSIran
1 source

Vice President JD Vance downplayed the scope of the conflict in Iran, saying he would not describe it as “a war” given that major combat operations ended several weeks ago — even though military strikes recently intensified in the region. Bloomberg's Abeer Abu Omar has the latest.

strikeUnverifiedUSIran
1 source

Sep 4th, 2026 US VP Vance on Iran Conflict: “I Wouldn’t Call it a War” | Daybreak Europe 9/4/2026 Bloomberg Daybreak Europe is your essential morning viewing to stay ahead. Live from London, we set the agenda for your day, catching you up with overnight markets news from the US and Asia.

And we'll tell you what matters for investors in Europe, giving you insight before trading begins. Vice President JD Vance downplayed the scope of the conflict in Iran, saying he would not describe it as “a war” given that major combat operations ended several weeks ago — even though military strikes recently intensified in the region.

Global stocks extended their advance as easing bets on a Federal Reserve interest-rate hike this month lifted sentiment. And Volkswagen’s supervisory board backed a sweeping restructuring that calls for 50,000 additional job cuts, far fewer models and a smaller industrial footprint, giving Chief Executive Officer Oliver Blume his clearest mandate yet to overhaul Europe’s biggest carmaker.

Location: Iran
strikeUnverifiedUSIsraelIranProxyRussiaUkraine
1 source

Jordan, a U.S. ally hosting American military forces, has faced repeated drone and missile attacks, which reports suggest are linked to Iranian operations, alongside broader economic challenges and regional instability. Despite these security risks, Jordanian officials have affirmed their commitment to the alliance, while King Abdullah II warned that current global and regional disruptions pose a broad threat to international stability.

Location: Jordan