Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure

*Executive summary*: Iranian-linked hacktivist groups (notably Handala and Ababil of Minab) have conducted opportunistic but impactful attacks—wiping systems at Stryker and disrupting Vyncs—by exploiting exposed internet-facing assets, stolen credentials and known vulnerabilities (e.g., CVE-2021-22681); organizations should prioritize external attack-surface discovery, phishing-resistant MFA, timely patching, and continuous monitoring to reduce exposure and prevent these initial access pathways from enabling more damaging intrusions.