As the United States and Israel wage their most visible military campaign against Iran through conventional strikes and public exhibitions of military hardware, a simultaneous and considerably more classified battle is unfolding in cyberspace. Whilst American and Israeli officials have been forthcoming about their use of planes, ships and weaponry, they have remained notably silent about digital operations. Yet evidence suggests digital warfare has been instrumental in the conflict, with US Central Command recently confirming strikes extending “from seabed to space and cyber-space”. Iranian hackers have already claimed their first major digital attack on a US company, targeting healthcare technology company Stryker. Behind the scenes, cyber operations have reportedly been instrumental in preparing the ground for military action, with US and Israeli operatives acting as what Pentagon officials describe as the “first movers” in disrupting Iran’s ability to respond.
Preparing the Operational Environment: Pre-Strike Cyber Operations
Cyber-espionage and hacking have long served as critical prerequisites to armed warfare, enabling what defence analysts term “pre-positioning” for war. According to Department of Defence representatives, months and sometimes years of careful preparation came before the real operations, with cyber operatives working to create what is referred to as the “target set” — identifying and preparing critical systems for attack. US and Israeli hackers are believed to have infiltrated essential digital systems across Iran well before any strikes were conducted, focusing particularly on systems controlling air defences and military communications. This preparation proved essential in ensuring the success of later physical operations.
General Dan Caine, head of the Joint Chiefs of Staff, detailed how this initial stage was critical for the conflict’s progression. Cyber operations during this period were not intended as immediately destructive; rather, they served to collect information, establish vulnerabilities and develop routes for future action. The sophistication of these pre-strike operations underscores a significant change in contemporary conflict, where cyber penetration and intelligence gathering now precede traditional military engagement. By the time standard military units were deployed, the cyber battlefield had already been extensively mapped and compromised.
- Cyber operatives compromised Iranian military and air defence communication networks several months prior to strikes
- Pre-positioning involved establishing vulnerabilities and gathering intelligence on critical infrastructure targets
- Digital intelligence gathering complemented traditional human intelligence gathering and espionage activities
- Cyber operations established tactical superiority enabling subsequent conventional military operations
Monitoring Through Internet-Connected Technology
One especially noteworthy aspect of digital warfare involved the hacking of networked camera systems, including CCTV and traffic systems. According to reports from the Financial Times, Israeli operatives reportedly compromised these devices across Iranian cities to establish an extensive surveillance network. The objective was to develop comprehensive behavioural profiles for high-ranking Iranian defence and government officials, including Ayatollah Ali Khamenei and his top military leadership. Such real-time visual intelligence proved invaluable for operational planning, as these cameras offered what cyber-security experts describe as affordable operational visibility of streets, facilities and personnel movements.
Sergey Shykevich, a threat intelligence expert at cybersecurity firm Check Point, noted that networked camera systems have become prime targets in contemporary digital conflict precisely because they offer affordable, real-time intelligence gathering capabilities. This approach constitutes a significant evolution in espionage methodology, replacing or supplementing conventional monitoring methods with digitally-compromised infrastructure. When combined with intelligence from human sources and signals intelligence, such cyber-gathered information produces a complete assessment of targets and their operational patterns, significantly enhancing the accuracy and impact of military operations.
Disabling and Muting: Disruption During Active Conflict
As traditional military operations began, cyber operations transitioned from information collection to direct interference. General Dan Caine, chairman of the joint chiefs of staff at the Pentagon, characterized US Cyber Command and US Space Command operatives as the “first movers” in the conflict, tasked with progressively undermining Iran’s defensive capabilities. These cyber activities were intended to compromise Iran’s capacity to identify inbound attacks, coordinate responses and maintain command and control systems during the critical opening phases of military action. By compromising networks that Iran depended on for situational awareness and defensive synchronisation, cyber warfare created a tactical opening for exploitation that conventional forces could leverage.
Admiral Brad Cooper, commander of US Central Command, publicly acknowledged this multi-domain approach during a press briefing, noting that operations continued “from seabed to space and cyber-space”. This declaration, though intentionally unclear regarding specifics, confirmed that cyber disruption formed an integral component of the broader defence strategy rather than a marginal consideration. The coordination between cyber operations and conventional strikes demonstrated a sophisticated integration of modern warfare capabilities, with cyber strikes deliberately sequenced to enhance the impact of subsequent kinetic operations. Such alignment underscores how contemporary military planners view cyber warfare not as an independent tool but as a force multiplier amplifying traditional combat operations.
| Reported Cyber Action | Suspected Impact |
|---|---|
| Disruption of air defence networks | Reduced Iran’s ability to detect and intercept incoming aircraft and missiles |
| Compromise of military communications systems | Prevented effective coordination between Iranian command centres and field units |
| Degradation of radar and early warning systems | Blinded Iranian forces to incoming threats in real-time |
| Infiltration of command-and-control infrastructure | Disrupted decision-making processes during critical operational phases |
Communication Failure
The compromise of operational communications infrastructure formed a critical component of digital warfare throughout the conflict. By compromising and disabling the systems through which Iranian command officials directed tactical responses, cyber warfare specialists successfully disconnected military units from unified command hierarchies. This communications failure obliged Iranian military forces to operate without current intelligence data or centralised strategic coordination, considerably undermining their defensive capability. The disconnection of command centres from operational units created cascading vulnerabilities throughout Iran’s military infrastructure, preventing coherent responses to incoming attacks and rendering defensive systems operating in fragmented and uncoordinated manner.
Such communication disruption demonstrates how cyber operations functions as a force multiplier in contemporary warfare. Rather than serving as the primary weapon system, cyber operations enabled conventional forces to function with substantially reduced resistance. By disrupting Iranian military communications, cyber attacks guaranteed that incoming missiles and aircraft faced degraded defences and disorganised reactions. This integration of digital and kinetic warfare reveals the evolving nature of strategic doctrine, where concurrent operations across multiple domains—cyber, air, naval and space—create compounding effects that exceed what any single domain could achieve independently.
Iran’s Limited Digital Reaction: Competence or Incapacity?
Whilst American and Israeli cyber operations have been carried out with apparent sophistication and coordination, Iran’s cyber response has remained notably restrained throughout the conflict. Iranian hackers claimed responsibility for a major cyber assault against US medical technology firm Stryker, marking their initial major offensive operation in the digital domain. However, this fairly constrained action raises critical questions about whether Iran’s apparent caution reflects deliberate strategic restraint or reveals core constraints in its cyber warfare capabilities. The contrast between the scale of conventional military operations and cyber activity suggests Tehran may be approaching the digital battleground with considerably more circumspection than its Western adversaries.
Analysts attribute Iran’s measured cyber posture to multiple interrelated factors. The nation’s cyber infrastructure remains substantially less advanced than that of the United States or Israel, possibly limiting offensive capabilities. Additionally, Iran could be assessing that aggressive cyber operations could provoke exceptionally harsh international responses or provide justification for further escalation. The regime’s historical reliance on state-sponsored hacking groups rather than centralised military cyber units also creates coordination challenges during active conflict. Furthermore, Iran’s vulnerability to counter-cyber operations—given its dependence on critical infrastructure that could be targeted by superior Western cyber forces—may promote careful restraint and defensive prioritisation over extensive offensive operations.
- Iranian cyber operations continue to be largely reactive rather than tactically aligned with kinetic warfare efforts
- Limited offensive cyber capability indicates structural disadvantages relative to US and Israeli digital capabilities
- Risk of escalation through forceful digital strikes may discourage Iranian action from pursuing more ambitious digital operations
The Stryker Medical Technology Attack
The cyber-attack against Stryker Corporation constituted Iran’s most publicly evident offensive cyber action during the conflict. Iranian hackers successfully compromised the American healthcare technology company’s systems, proving capacity to penetrate civilian infrastructure targets. This attack represented a shift from solely military-directed cyber operations, suggesting Iran’s willingness to target non-military industries. The targeting of medical technology raises notable alarm given the potential implications for patient safety and healthcare system disruption, though specific details regarding the attack’s scope and impact remained limited.
The Stryker attack underscores the asymmetric nature of digital conflict in the Iran conflict. Whilst American and Israeli operatives carried out advanced pre-placed incursions of Iranian military networks well ahead of time, Iran’s response proved reactive and restricted in scale. The attack on a civilian firm rather than military infrastructure indicates either deliberate strategic choice or operational constraints. Regardless of intent, the disparity between the scale and sophistication of Western cyber operations and Iran’s demonstrated cyber response illustrates the considerable technical and structural disparities separating the belligerents in the digital domain.
The Secrecy Paradox: Why Nations Keep Information Guarded
The stark contrast between Western military transparency and cyber-warfare secrecy reveals a core strategic rationale. Whilst the United States and Israel have displayed their traditional armed forces strength through glossy videos and press releases—detailing every aircraft carrier and missile strike—cyber operations remain cloaked in intentional secrecy. Admiral Brad Cooper’s oblique reference to strikes “spanning undersea through space into digital domains” represents among the rare official acknowledgements of digital warfare’s role in the conflict. This reticence is not accidental; it reflects the highly classified nature of cyber operations and the classified information that underpin them.
The secrecy surrounding cyber warfare originates largely from operational necessity. Revealing particular digital capabilities, techniques, or infiltration methods could jeopardise current intelligence gathering and expose vulnerabilities in adversary defences. Unlike traditional military weapons, which function openly once deployed, cyber operations often demand continuous entry to networks for maximum effectiveness. Publicising successes risks warning targets to breaches and spurring security improvements. Additionally, the identification of cyber-attacks remains genuinely difficult, making public claims potentially contentious. Governments must weigh the strategic benefit of demonstrating strength with the strategic necessity of maintaining hidden benefits in the digital domain.
Balancing Transparency and Business Benefits
Military leaders navigate competing pressures when considering cyber-warfare revelation. Public oversight and democratic transparency call for some explanation of military operations, yet revealing cyber capacities could compromise their impact. The Pentagon’s standard practice has been to confirm cyber activities exist without detailing their extent, approaches, or particular objectives. This middle ground permits governments to take credit for cyber contributions to military victory whilst maintaining operational confidentiality. However, this strategy risks leaving the public with incomplete understanding of contemporary warfare’s true nature and the extent to which digital operations shape current conflicts.
The intelligence community’s inclination towards secrecy also demonstrates legitimate worries about conflict intensification and global standards. Cyber-warfare exists in a diplomatic and legal grey area, with no universally accepted rules governing cyber attacks on civilian or military infrastructure. By staying unclear about digital operations, nations avoid setting clear precedents that could provoke global criticism or escalatory retaliation. This calculated ambiguity allows powerful cyber-capable nations to maintain strategic flexibility whilst steering clear of the diplomatic consequences that would accompany transparent acknowledgement of their digital warfare capabilities and intentions.
Modern Combat’s New Territory: What This War Exposes
The Iran dispute demonstrates how extensively cyber operations have become integrated into contemporary military strategy. Unlike conventional combat, where superiority in jets, missiles and naval vessels can be openly displayed, cyber-warfare operates in the shadows. Yet its impact proves equally consequential. The extended preparation period that preceded kinetic strikes relied substantially on cyber infiltration, surveillance network establishment, and interference with Iranian communications and air defence systems. This hidden dimension of present-day military operations represents a significant change in how nations wage war, where success often depends on actions invisible to the naked eye and difficult for the public to comprehend or verify.
What emerges from this confrontation is a clear picture of cyber operations as a force multiplier rather than a isolated tool. Intelligence obtained from hacked cameras and infiltrated networks provided crucial operational insight that complemented traditional espionage and informed targeting decisions. The coordination between cyber specialists and conventional military forces suggests that forthcoming warfare will increasingly dissolve boundaries between digital and physical domains. As Admiral Brad Cooper’s reference to strikes “spanning seabed, space, and cyber-space” indicates, military planners now view cyber capabilities as integral to comprehensive operational success, fundamentally reshaping expectations about what modern warfare entails.
- Cyber-espionage enables extended periods of pre-positioning before any physical military operations begin
- Intercepted camera cameras create real-time intelligence systems with minimal operational cost
- Cyber operations blind enemy communications and air defense systems simultaneously
- Cyber capabilities enhance conventional intelligence collection rather than substituting it entirely