As the United States and Israel wage their most publicly visible military campaign against Iran through standard strikes and public demonstrations of military hardware, a simultaneous and considerably more classified battle is developing in cyberspace. Whilst American and Israeli officials have been forthcoming about their use of aircraft, vessels and missiles, they have remained notably reluctant about cyber operations. Yet evidence suggests digital combat has proven pivotal in the conflict, with US Central Command recently confirming strikes extending “from seabed to space and cyber-space”. Iranian hackers have already claimed their first significant digital attack on a US company, targeting healthcare technology company Stryker. Behind the scenes, cyber operations have reportedly played a key role in preparing the ground for military action, with US and Israeli operatives acting as what Pentagon officials describe as the “first movers” in compromising Iran’s ability to respond.
Preparing the Battlefield: Preliminary Cyber Operations
Cyber-espionage and intrusion activities have long served as critical prerequisites to armed warfare, enabling what military strategists term “pre-positioning” for war. According to Pentagon officials, months and sometimes years of careful preparation preceded the real operations, with digital specialists working to establish what is referred to as the “target set” — locating and readying critical systems for attack. US and Israeli hackers are thought to have breached essential digital systems across Iran well before any missiles were launched, concentrating especially on systems managing air defences and defence communications. This groundwork proved essential in ensuring the success of later physical operations.
General Dan Caine, chairman of the Joint Chiefs of Staff, detailed how this initial stage was fundamental to the conflict’s trajectory. Cyber operations during this period were not designed to be immediately destructive; rather, they functioned to gather intelligence, establish vulnerabilities and develop routes for future action. The sophistication of these preliminary operations demonstrates a fundamental shift in modern warfare, where digital infiltration and intelligence gathering now precede traditional military engagement. By the time conventional forces were committed, the cyber battlefield had already been thoroughly charted and compromised.
- Cyber operatives infiltrated Iranian military and air defence communication networks several months prior to strikes
- Pre-positioning involved establishing vulnerabilities and collecting information on key infrastructure objectives
- Digital intelligence gathering enhanced traditional human intelligence gathering and espionage activities
- Cyber operations created strategic advantages enabling subsequent traditional military action
Monitoring Via Connected Devices
One especially noteworthy aspect of cyber operations involved the hacking of internet-connected cameras, including CCTV and traffic systems. According to sources cited by the Financial Times, Israeli operatives allegedly gained access to these devices across Iranian cities to construct an extensive surveillance network. The objective was to develop comprehensive behavioural profiles for high-ranking Iranian defence and government officials, including Ayatollah Ali Khamenei and his top military leadership. Such live video surveillance data proved invaluable for targeting purposes, as these cameras offered what digital security specialists describe as affordable operational visibility of streets, facilities and staff activity.
Sergey Shykevich, a threat intelligence expert at cyber-security firm Check Point, explained that internet-connected cameras have become prime targets in contemporary digital conflict precisely because they offer affordable, real-time intelligence gathering capabilities. This strategy represents a substantial shift in espionage methodology, replacing or supplementing traditional surveillance methods with digitally-compromised infrastructure. When combined with intelligence from human sources and communications intelligence, such digitally-obtained information creates a comprehensive picture of targets and their operational patterns, substantially improving the precision and effectiveness of military operations.
Blinding and Silencing: Disruption During Active Conflict
As traditional military operations commenced, cyber operations transitioned from information collection to active disruption. General Dan Caine, head of the joint chiefs of staff at the Pentagon, characterized US Cyber Command and US Space Command operatives as the “first movers” in the conflict, tasked with progressively undermining Iran’s defensive capabilities. These cyber activities were designed to compromise Iran’s capacity to identify incoming threats, coordinate responses and maintain command and control systems during the critical opening phases of armed conflict. By infiltrating systems that Iran relied upon for situational awareness and defensive synchronisation, digital combat created a tactical opening for exploitation that traditional military units could exploit.
Admiral Brad Cooper, head of US Central Command, publicly acknowledged this multi-layered strategy at a press conference, stating that operations continued “from seabed to space and cyber-space”. This statement, though intentionally unclear regarding specifics, confirmed that digital interference constituted a core element of the overall military strategy rather than a peripheral element. The integration of cyber operations and conventional strikes represented a sophisticated integration of modern warfare capabilities, with digital attacks strategically timed to enhance the impact of following physical operations. Such alignment highlights how modern defence strategists view cyber warfare not as an standalone instrument but as a capability enhancer enhancing traditional military operations.
| Reported Cyber Action | Suspected Impact |
|---|---|
| Disruption of air defence networks | Reduced Iran’s ability to detect and intercept incoming aircraft and missiles |
| Compromise of military communications systems | Prevented effective coordination between Iranian command centres and field units |
| Degradation of radar and early warning systems | Blinded Iranian forces to incoming threats in real-time |
| Infiltration of command-and-control infrastructure | Disrupted decision-making processes during critical operational phases |
Communication Breakdown
The disruption of command and control systems formed a key aspect of cyber warfare in active conflict zones. By penetrating and destabilising the networks via which Iranian military leadership coordinated responses, cyber warfare specialists successfully separated military units from unified command hierarchies. This communications failure obliged Iranian combat forces to operate without current intelligence data or centralised strategic coordination, significantly hampering their defensive capacity. The disconnection of command centres from operational units generated cascading vulnerabilities throughout Iran’s military apparatus, impeding unified responses to inbound strikes and leaving defensive systems working in fragmented and uncoordinated manner.
Such communication disruption exemplifies how cyber warfare functions as a force multiplier in contemporary warfare. Rather than acting as the primary weapon system, digital attacks enabled conventional forces to operate with substantially reduced resistance. By disrupting Iranian military communications, digital strikes ensured that incoming missiles and aircraft faced weakened defensive systems and confused responses. This integration of digital and kinetic warfare reveals the evolving nature of strategic doctrine, where simultaneous attacks across multiple domains—cyber, air, naval and space—create compounding effects that surpass what any one operational area could accomplish independently.
Iran’s Subdued Digital Reaction: Competence or Incapacity?
Whilst American and Israeli cyber operations have been conducted with apparent sophistication and coordination, Iran’s cyber response has remained markedly cautious throughout the conflict. Iranian hackers took credit for a major cyber assault against US medical technology firm Stryker, marking their first prominent offensive action in the digital domain. However, this fairly constrained action raises critical questions about whether Iran’s apparent caution reflects deliberate strategic restraint or reveals fundamental limitations in its cyber warfare capabilities. The gap between the scale of conventional military operations and cyber activity suggests Tehran may be approaching the digital battleground with significantly more restraint than its Western adversaries.
Analysts attribute Iran’s measured cyber posture to several interconnected factors. The nation’s cyber infrastructure remains substantially less advanced than that of the United States or Israel, possibly limiting offensive capabilities. Additionally, Iran could be assessing that intensive cyber attacks could provoke exceptionally harsh international responses or provide justification for further escalation. The regime’s longstanding dependence on state-sponsored hacking groups rather than centralised military cyber units also generates operational difficulties during active conflict. Furthermore, Iran’s exposure to defensive cyber strikes—given its dependence on critical infrastructure that could be targeted by superior Western cyber forces—may promote careful restraint and defensive prioritisation over ambitious offensive campaigns.
- Iranian digital activities remain predominantly defensive rather than tactically aligned with conventional military operations
- Limited offensive cyber capability suggests systemic weaknesses compared to US and Israeli digital capabilities
- Potential for intensification through forceful digital strikes may discourage Iranian action from pursuing increasingly sophisticated cyber initiatives
The Stryker Medical Technology Incident
The cyber-attack against Stryker Corporation signified Iran’s most prominent aggressive cyber activity during the conflict. Iranian hackers effectively infiltrated the American medical device manufacturer’s systems, proving capacity to penetrate civilian infrastructure targets. This attack marked a departure from exclusively military-oriented cyber operations, suggesting Iran’s readiness to attack civilian infrastructure. The targeting of healthcare systems raises specific worries given the potential implications for patient safety and hospital system interruption, though comprehensive data regarding the attack’s scope and impact remained limited.
The Stryker attack demonstrates the asymmetric nature of digital conflict in the Iran conflict. Whilst American and Israeli operatives carried out advanced pre-placed incursions of Iranian military networks well ahead of time, Iran’s response seemed reactive and restricted in scale. The attack on a civilian firm rather than military infrastructure indicates either deliberate strategic choice or operational constraints. Regardless of intent, the disparity between the scale and sophistication of Western digital operations and Iran’s demonstrated cyber response illustrates the significant technological and organisational gaps separating the belligerents in the digital domain.
The Confidentiality Dilemma: Why Nations Keep Information Guarded
The pronounced contrast between Western military transparency and digital conflict concealment reveals a fundamental strategic calculation. Whilst the United States and Israel have demonstrated their conventional military capabilities through polished promotional materials—detailing every warship and aerial bombardment—cyber operations remain shrouded in deliberate obscurity. Admiral Brad Cooper’s indirect allusion to strikes “from seabed to space and cyber-space” represents one of the few public admissions of digital warfare’s role in the conflict. This reticence is not accidental; it reflects the strictly confidential status of cyber operations and the classified information that support them.
The secrecy encircling cyber warfare arises in part due to operational necessity. Revealing distinct cyber techniques, techniques, or breach procedures could compromise ongoing intelligence gathering and expose vulnerabilities in adversary defences. Unlike traditional military weapons, which work visibly once deployed, cyber operations often require sustained access to networks for greatest effect. Publicising successes risks warning targets to breaches and encouraging protective improvements. Additionally, the identification of cyber-attacks remains operationally challenging, making public claims arguably disputed. Governments must balance the propaganda value of demonstrating strength with the strategic necessity of maintaining hidden benefits in the digital domain.
Striking a balance between Transparency and Strategic Advantage
Military leaders navigate competing pressures when assessing cyber-warfare transparency. Democratic accountability and public openness call for some explanation of military activities, yet disclosing cyber systems could undermine their operational effectiveness. The Pentagon’s general approach has been to acknowledge cyber initiatives exist without specifying their scale, methods, or designated targets. This middle ground permits governments to claim credit for technological contributions to military achievement whilst preserving operational security. However, this method risks leaving the public with partial knowledge of modern conflict’s true nature and the measure to which digital operations influence contemporary conflicts.
The security establishment’s inclination towards secrecy also demonstrates genuine concerns about conflict intensification and international norms. Cyber-warfare exists in a diplomatic and legal grey area, with no widely agreed rules regulating digital attacks on military or civilian infrastructure. By staying unclear about digital operations, nations refrain from establishing explicit precedents that could provoke international condemnation or retaliatory escalation. This calculated ambiguity allows powerful cyber-capable nations to maintain strategic flexibility whilst avoiding the diplomatic repercussions that would accompany transparent acknowledgement of their digital warfare capabilities and intentions.
Modern Warfare’s Emerging Landscape: What This War Demonstrates
The Iran dispute demonstrates how extensively cyber operations have become woven into contemporary military strategy. Unlike conventional combat, where superiority in jets, missiles and naval vessels can be publicly showcased, cyber-warfare operates in the shadows. Yet its impact proves comparably important. The extended preparation period that preceded kinetic strikes relied substantially on digital intrusion, surveillance network establishment, and interference with Iranian communications and air defence systems. This hidden dimension of modern conflict represents a significant change in how nations wage war, where success often depends on activities imperceptible to direct observation and difficult for the public to grasp or authenticate.
What comes from this confrontation is a clear picture of cyber operations as a force multiplier rather than a standalone weapon. Intelligence gathered through hacked cameras and compromised systems provided crucial situational awareness that complemented traditional espionage and informed targeting decisions. The coordination between cyber specialists and conventional military forces suggests that future conflicts will increasingly blur the lines between digital and physical domains. As Admiral Brad Cooper’s reference to strikes “spanning seabed, space, and cyber-space” indicates, military planners now view cyber capabilities as essential for comprehensive operational success, substantially altering expectations about what modern warfare entails.
- Cyber-espionage enables extended periods of advance positioning prior to any conventional military operations begin
- Intercepted camera cameras generate live intelligence systems at minimal operational cost
- Digital operations disrupt adversary communications and air defense systems at once
- Cyber capabilities enhance conventional intelligence collection instead of replacing it completely