War in Iran: Cyber Playbook in Wartime

Alex Holden | March 24, 2026 | 59 min
War in Iran: Cyber Playbook in Wartime

As the war in Iran escalates, cyber activity follows patterns that are often visible if you know where to look. Based on our research and direct observations, Iranian threat actors have effectively been operating in a war-like state for years. They are not changing how they operate as much as they are adjusting how they use existing access and capabilities with fewer limitations.

 

This session will examine known Iranian APT groups, how their historical tradecraft translates into wartime behavior, and what changes when cyber moves from espionage to active conflict. The focus will remain on observed patterns and practical defensive considerations that organizations can apply immediately.

Watch on BrightTALK

Logo
Solutions Threat Intelligence Services Credential Integrity Service Domain Integrity Service Information Security Assessment Services Incident Response and Investigation
Our offices
Copyright © 2026 Hold Security