Iran’s cyber threat may be less ‘shock and awe’ than ‘low and slow,’ officials say

The article describes U.S. concerns about Iranian-linked cyber actors favoring low-and-slow, opportunistic intrusions—often using social engineering and valid credentials—to cause targeted disruptions and then amplify effects via information operations; it cites a Stryker incident as an example and urges basic defenses like MFA and identity security.