What we’re seeing from Iran (and what it means for you)

TL;DR: Expel assesses that cyber activity related to the recent US–Israel–Iran events has been limited since a ceasefire; state actors (MOIS and IRGC) are expected to continue routine operations while unaffiliated sympathizers remain an unpredictable wild card. The report recommends maintaining a robust security posture—patching systems, keeping monitoring and incident response plans ready—and states that Expel is actively monitoring geopolitical motivations and will update as the situation evolves.