Intelligence firms watch for uptick in Iran cyber activity after US, Israel strikes

**Executive summary:** Tehran-linked and Iran-aligned hacktivist groups have increased digital reconnaissance and public claims of disruptive cyber activity (DDoS, defacements, alleged ICS intrusions) following recent U.S./Israeli strikes on Iran; industry firms report mostly claim-driven activity with no confirmed large-scale state-sponsored campaigns against U.S. critical infrastructure to date, but warn of the potential for escalation while U.S. defensive capacity (notably CISA staffing) is constrained.