Ex-IDF cyber chief on Iran, Scattered Spider, and why social engineering worries him more than 0-days

This report compares Iranian state-backed APTs and the financially motivated Scattered Spider gang, highlighting their shared reliance on social engineering and credential theft rather than advanced zero-day exploits; it cites the Shirbit data leak and ongoing campaigns against Israeli and Western organizations, warns that generative AI amplifies reconnaissance and phishing capabilities, and notes potential identity resale and collaboration between criminal and state-linked actors.