2026伊朗-海湾危机追踪
CC
Events Archive
strikeApr 30, 2026

War Without Endpoints: Why Cyber Attacks Will Outlast the Iran Ceasefire

Summary

A sustained ceasefire isn’t likely to translate onto the digital battlefield. In 2026, conflict doesn’t pause just because the shooting does. It shifts. It burrows deeper into the systems most people never see but rely on constantly: the networks, infrastructure, and industrial controls that keep modern life functioning. If anything, a pause in open hostilities between the United States, Israel, and Iran could mark a transition into a more ambiguous and sustained phase of confrontation. The pace may feel slower. The visibility may drop, but the underlying activity rarely does. Cyber operations set the tone early in this conflict. Before missiles flew, networks were already under pressure. Iranian command and control systems were disrupted, communications were degraded, and situational awareness was narrowed at critical moments. The effect was immediate, but the longer-term consequence is more revealing. Systems can be rebuilt. Access, once established, is much harder to root out. Iran has long operated with that reality in mind. Its cyber posture is not built around a single centralized command structure. It functions more like an ecosystem: a mix of formal military units, established Iranian advanced persistent threat groups, and a rotating cast of loosely aligned actors who share tools, tactics, and occasionally objectives. That structure is resilient by design. It does not hinge on formal declarations or diplomatic timelines. Recent reports regarding the CyberAv3ngers group illustrate how far that model has evolved. What began as surface level disruption has developed into something far more capable. Targeting industrial control systems requires patience and technical familiarity with the machinery that runs water facilities, energy distribution, and municipal services. Gaining access to programmable logic controllers is not about spectacle. It is about positioning — the kind of positioning that can be used later, when timing matters more than visibility. The spread of those techniques adds another layer of complexity. Capabilities are no longer confined to a single group. They circulate. They get reused, modified, and redeployed. Disrupting one actor does not remove the underlying method. It simply forces it to reappear somewhere else, often with fewer fingerprints. That dynamic aligns closely with how advanced persistent threats operate. These groups do not move quickly unless they have to. They take their time, mapping environments, collecting credentials, and blending into normal activity. Access can sit dormant for months — in some cases, for years. By the time anything noticeable happens, the groundwork is already complete. Iran-affiliated groups have shown a consistent preference for that kind of approach. Their targets tend to be strategic rather than opportunistic: energy companies, logistics providers, telecom networks, defense contractors — the kinds of organizations that form the backbone of economic and operational continuity. A ceasefire does not interrupt that process. It simply changes the backdrop. The visible conflict cools, but whatever access has been established remains in place. Monitoring continues. Data collection continues. Decisions about when to act can be deferred without losing advantage. Alongside these more structured operations sits a different kind of activity that is harder to predict and even harder to contain. The surge in general hacktivism groups over the past several years eventually introduced a level of noise to this conflict that complicates everything. Some of these groups operate with limited sophistication. Others show signs of coordination and shared tooling. All of them benefit from a degree of separation that makes attribution difficult. Their motivations vary. Some are ideological. Some are opportunistic. Some blur the line between the two. What they have in common is a lack of constraint. Diplomatic agreements do not apply to them. A ceasefire does not carry much weight in a decentralized network of actors communicating across encrypted channels and operating from multiple jurisdictions. That creates a persistent layer of low-level disruption: website outages, denial of service attacks, phishing campaigns, probing attempts against exposed systems. None of it necessarily decisive on its own, but collectively it forces constant attention and response. It stretches defensive resources and introduces uncertainty into already complex environments. The broader geopolitical context only adds to that pressure. The patterns playing out in this conflict have echoes in the Ukrainian-Russia War, where cyber operations have been used alongside conventional military actions by both countries to target infrastructure and erode resilience over time. There, repeated attacks on energy systems and communications networks demonstrated how sustained pressure can wear down capacity without relying on a single major event. China’s approach operates on a different cadence but intersects in important ways. Its focus has been on longterm access, embedding within telecommunications networks through backdoors, cloud environments, and supply chains. That access does not need to be activated immediately to be valuable. In a period of heightened global tension, the opportunity to expand that footprint without drawing attention becomes more attractive. For organizations trying to defend against these overlapping threats, the environment becomes crowded quickly: different actors, different objectives, shared techniques, and limited clarity about who is responsible for endpoint security. The technical challenges are matched by the strategic ones. Most breaches still begin with familiar entry points: a well-crafted email that fits neatly into an existing workflow, a login page that looks just close enough to the real thing, or a piece of software that appears harmless during installation. These methods persist because they continue to work. In a geopolitical context, their impact extends beyond the initial compromise. A single set of credentials can open the door to something much larger. Access to one system can provide visibility into others. Over time, those small footholds can connect. The result is rarely immediate disruption. More often, it is a gradual accumulation of access and influence across systems that were never designed with this level of persistent threat in mind. So when the conversation turns to ceasefires and deescalation, it is worth paying attention to what is not changing. The underlying activity continues. The incentives remain. The infrastructure being targeted does not become less critical. The surface may look calmer. Underneath, very little stands still. Editor's Note: President Trump is leading America into the "Golden Age" as Democrats try desperately to stop it. Help us continue to report on President Trump's successes. Join PJ Media VIP and use promo code FIGHT to receive 60% off your membership.

Actors involved

USIsraelIranRussiaChina

Sources

  • Julio RiveraBy Julio Rivera

    A sustained ceasefire isn’t likely to translate onto the digital battlefield. In 2026, conflict doesn’t pause just because the shooting does. It shifts. It burrows deeper into the systems most people never see but rely on constantly: the networks, infrastructure, and industrial c

See this event through different lenses

Compare how Western, Iranian, Israeli, Global South, and Pro-Peace perspectives frame this event.

Compare Perspectives

Community Notes

Community Notes

Loading notes...

Related events

strikeUnverifiedUSIsraelIranProxy
1 source

DUBAI, United Arab Emirates (AP) — Iran attacked a tanker in the Strait of Hormuz early Tuesday, forcing its crew to abandon the ship, while the United States conducted yet another round of airstrikes targeting the Islamic Republic as they struggle over control of the key waterway.

The 10 consecutive nights of U.S. airstrikes haven’t compelled Tehran to loosen its grip on the strait, through which about a fifth of all crude oil and natural gas traded once passed in peacetime. Even as the U.S. and Iran inch closer to all-out war again, Iran’s interior minister traveled to Pakistan, a key mediator in the conflict, for talks.

However, it remains unclear just what new deal could be reached to end the fighting. The interim deal signed last month that was meant to end the fighting has crumbled. Shipping through the Strait of Hormuz has largely stalled. And as fighting intensifies, both sides have targeted civilian infrastructure relied on by millions of people.

“Iran and groups supportive of Iran may target other U.S. interests overseas or at locations associated with the United States and Americans throughout the world,” the U.S. State Department said in a new warning to Americans. The escalation has pushed oil prices higher in recent weeks.

Benchmark Brent crude traded Tuesday above $88 a barrel and regular gasoline in the U.S. climbed to an average of $4 a gallon, keeping pressure on Americans’ wallets ahead of midterm elections this fall. Meanwhile, the U.S. military identified two soldiers who were killed in Jordan in attacks that left a third person missing.

Separately, the military confirmed another death in Iraq on Saturday during the “controlled detonation” of a downed Iranian drone. President Donald Trump took to social media on Monday to warn that “Every time Iran kills an American Soldier they will pay for that killing many times over!

” Trump was planning to attend a ceremony on Tuesday evening at Dover Air Force Base, where at least one service member’s remains were due to arrive. US strikes come as ships attacked The U.S. military’s Central Command said Tuesday it targeted “Iranian military command centers, maritime capabilities, missile and drone launch sites and air defense systems.

” It released more footage of bombings that targeted sites in Iran. “American forces remain postured and prepared to hold Iran accountable for unwarranted aggression toward civilian mariners seeking to freely and openly transit the strait,” the command said.

Iranian state media reported that explosions were heard in Fars, Hormozgan, Ilam, Kerman and Sistan and Baluchistan provinces. However, traffic through the strait has slowed to a crawl during the latest violence. Lloyd's List Intelligence said only three ships transited the strait on Sunday.

The British military’s United Kingdom Maritime Trade Operations center said a tanker came under attack early Tuesday in the strait off Oman, forcing the crew to abandon the vessel. Iran’s paramilitary Revolutionary Guard claimed the attack, as well as two other attacks on ships Monday in the waterway.

The route around Oman has been the one the U.S. military has encouraged ships to travel to avoid Iran’s control. The UKMTO separately reported Tuesday that another previously unknown attack on a ship took place early the previous day. Tehran also hit U.

S.-allied countries throughout the Middle East. Jordan military's said Tuesday that Iran targeted it with five drones and three missiles, all of which were shot down. Bahrain sounded its missile alert sirens Tuesday afternoon as another Iranian barrage targeted the island kingdom, which is home to the U.

S. Navy's 5th Fleet. Nearly 100 US injuries since early July The Pentagon’s chief spokesperson said nearly 100 U.S. service members have been injured since the U.S. restarted strikes on July 7, and 96% of them have returned to duty.

“The vast majority of injuries experienced were minor concussions,” Sean Parnell posted Monday on X in response to a New York Times report that the Pentagon has withheld information about troop injuries from Iranian strikes. He denied that the Pentagon was hiding data about injuries.

However, the Defense Casualty Analysis System, the military’s clearinghouse for reporting deaths and injuries in conflict, has not been updated as of Monday night with the latest attacks. Yemen rebels threaten attacks on other Mideast waterway Yemen’s Houthi rebels announced a maritime embargo against Saudi Arabia on Monday.

The Houthis, who are backed by Iran, said they would block shipping between the Red Sea and the Gulf of Aden by targeting the Bab el-Mandeb, a maritime chokepoint like the Strait of Hormuz, in response to an attack on Sanaa International Airport last week that they blamed on Saudi Arabia.

With the Strait of Hormuz blocked, Saudi Arabia has been relying on a pipeline to the Red Sea to get millions of barrels of oil out to market. The Houthis earlier demonstrated their ability to disrupt shipping there when they targeted ships for months over the Israel-Hamas war in Gaza, with over 100 vessels attacked.

Saudi Arabia’s military said it would keep the waterway open. “All Houthi threats against transiting vessels will be dealt with swiftly and firmly, as such threats are a blatant violation of international law and fall under acts of maritime piracy,” said Maj.

Gen, Turki al-Malki, a Saudi military spokesman. A glimmer of hope for diplomacy Pakistan has intensified diplomatic efforts in recent days to resuscitate the interim deal. Iranian Interior Minister Eskandar Momeni arrived in Islamabad on Monday for two days of talks with Prime Minister Shehbaz Sharif and others.

On Sunday, U.S. Secretary of State Marco Rubio told reporters that the U.S. is still open to negotiating with Iran but that “it has to be real.” “If the door opens to diplomacy — if the guys that want to do something productive for Iran win and take control of that system, or take control of the negotiations — that’ll be a very positive development,” Rubio said.

“That’s not where we are tonight, unfortunately.” Iranian authorities on Sunday said at least 50 people have been killed and 517 wounded in the latest rounds of U.S. strikes. Since the war began on Feb. 28, 17 U.S. service members have been killed.

strikeUnverifiedUSIranRussiaChina
1 source

US Secretary of War Pete Hegseth posted social media images showing damage to a maritime control tower at Iran’s Chabahar port following reported US military strikes, accompanied by the caption “Iran does not control the Strait of Hormuz.” India’s Ministry of External Affairs stated that the Shahid Beheshti terminal operated by India at the port sustained no damage.

The ministry reiterated its position that civilian infrastructure should not be targeted during conflicts.

Location: Iran
strikeUnverifiedUSIranProxy
1 source

The U.S. Central Command reported conducting strikes on Iranian military command centers, missile and drone sites, and air defense systems on Monday evening. Iran attacked a tanker in the Strait of Hormuz early Tuesday, and Houthi forces declared a maritime embargo against Saudi Arabia.

Reports indicate that mediators have proposed a 10-day ceasefire, while Rystad Energy noted risks of higher oil prices.

Location: Iran
strikeUnverifiedIsraelIranProxy
1 source

Yemen's Iran-aligned Houthis announced Monday they would impose a maritime blockade on Saudi Arabia, further throttling a global energy market already greatly restricted by Iran's closure of the Strait of Hormuz. This is why it matters and what it means for the Iran war and the global energy crisis.

It is not clear how the Houthis would carry out a maritime blockade of Saudi Arabia, its northern neighbor along the Red Sea coast, or whether it would include a return to attacks on shipping. Yemen sits on the Bab el-Mandeb strait – the southern gateway to the Red Sea – and closing that would open up a new front in the energy crisis and Iran's overarching conflict with the U.

S. With the Strait of Hormuz already disrupted, the Red Sea has become a critical alternative outlet for Gulf oil and other products. A serious disruption would mean both of the Middle East's major oil export routes are shut simultaneously. Iran's partial blockade of the Strait of Hormuz after Israel and the U.

S. attacked it on Feb. 28 disrupted most oil and other exports from the Gulf, raising prices and delivering a global energy shock. Saudi Arabia responded by diverting more than 70% of its normal daily crude exports to the Red Sea port of Yanbu. Ships from Yanbu bound for Europe go north through the Suez Canal.

Those heading to Asia go south through Bab el-Mandeb. Shipments from Yanbu averaged 4 million barrels per day in recent weeks according to data from Kpler and Signal Ocean, up from around 973,000 bpd a year earlier. Total petroleum volumes transiting Bab el-Mandeb amounted to 7.

4 million bpd in June, or about 7% of global oil output, according to Kpler data, up from 4.2 million bpd last year. That has provided a lifeline for the energy market, helping to keep down global oil prices. Saudi Arabia is considering an expansion of its crude oil pipeline to the Red Sea coast, Reuters reported last week.

When the Houthis launched attacks on Red Sea shipping in November 2023, Gulf oil exports were flowing freely. The Houthis have been in a civil war against the Saudi-backed, internationally recognized government for more than a decade and have attacked Gulf neighbors with missiles and drones.

However, a 2022 truce between the country's warring sides largely held until last week, when Yemen's internationally recognized government said it had struck Sanaa airport to stop an Iranian plane landing. The Houthis said Saudi Arabia was responsible and, in response, fired missiles at Abha airport in the kingdom's mountainous southwest.

A senior Houthi official, politburo member Mohammad al-Farah, then warned in an interview on Iran's Press TV website that if the situation kept escalating, Bab el-Mandeb would be closed. The U.S. says Iran has armed, funded and trained the Houthis with help from Hezbollah.

The Houthis deny being an Iranian proxy and say they develop their own weapons. It is not clear how far the group's stance on Bab el-Mandeb and the Red Sea stems from its own strategic priorities or is being made on Iran's behalf. After Israel's genocidal campaign in Gaza, the Houthis began firing at Israel and on shipping in the Red Sea, saying they were doing so in support of Palestinians.

The attacks severely disrupted global shipping, prompting Maersk, Hapag-Lloyd and other major companies to divert around Africa – a far longer, more expensive route. Red Sea traffic has not recovered since, with traffic through the Suez Canal down 52% in 2025 versus 2023 levels and at its lowest in at least 50 years, Suez Canal Authority data shows.

A U.S.-led mission to restore free navigation in the Red Sea involved repeated strikes on Houthi targets and a campaign that shot down hundreds of drones and missiles. But some Houthi attacks continued until last summer, only ending completely with the Gaza cease-fire in October.

Last month, the Houthis said they would ban ships linked to Israel from the Red Sea after Israel renewed military attacks on Iran. However, that threat was never acted on and shipping groups Maersk and Hapag-Lloyd are resuming some Red Sea routes that they had abandoned during the Houthi attacks last year, Maersk said this month.

While Hezbollah and the Iraqi groups joined the war early with rocket and drone fire after the first U.S. and Israeli strikes on Iran, the Houthis had been comparatively quiet. The group's leader Abdul Malik al-Houthi said on March 5: "Our fingers are on the trigger at any moment should developments warrant it.

" Iranian commanders have repeatedly warned that the Houthis could join the war. The Houthis launched a few missile and drone attacks on Israel in late March and early April. Revolutionary Guards Quds Force commander Esmaeil Qaani said on June 1 they could choke off the Red Sea.

That may now have changed with their announcement of the blockade on Monday against Saudi Arabia in retaliation for what they called the kingdom's siege of its ports and airports, including last week's strike.