Back to News Feed
de-escalatory·3d ago·Friday, March 20, 2026
CSIS: Iranian cyber ops show 'incremental, not decisive' capability — restraint signal
de-escalatory·82% confidence
Summary
CSIS assesses Iranian cyber operations have been more restrained than expected — focusing on espionage and signaling rather than destructive attacks on US critical infrastructure. Physical infrastructure degradation from airstrikes, resource constraints, and leadership disruption are limiting Iran's offensive cyber capacity.
Risk Impacts (2)
Expert assessment downgrades Iranian cyber threat from decisive to incremental
Current probability:72%High
Degraded Iranian cyber infrastructure reduces coordinated attack likelihood
Current probability:65%High