Israel has reported a significant surge in Iranian-linked cyber warfare, with the National Cyber Directorate recording approximately 4,800 hostile cyber incidents in June 2026, up from 1,600 during the same period in 2025. Yossi Karadi, the director general of the National Cyber Directorate, has characterized the threat as a multi-layered system involving military units, state-sponsored actors, and independent activists.
The Escalation of Digital Hostilities
The volume of cyberattacks targeting Israeli systems has grown alongside regional geopolitical tensions. According to data provided by the Israel National Cyber Directorate, the country faced more than 26,000 cyberattacks throughout 2025, marking a 55% increase compared to 2024.
Microsoft’s latest data positions Israel as the third-most-attacked nation globally, with the country accounting for 3.5% of all global cyberattacks over the past year. Officials note that these campaigns target a broad spectrum of entities, ranging from critical national infrastructure to small businesses, including law firms and accounting practices.
Anatomy of the Iranian Cyber Apparatus
The cyber warfare strategy attributed to Iran operates through a tiered structure. According to the National Cyber Directorate, the Iranian military and the Islamic Revolutionary Guard Corps (IRGC) maintain dedicated cyber divisions that spearhead sophisticated operations.
Beyond official military channels, the landscape includes:
- Civilian and Proxy Actors: Individuals who conduct hacking operations either motivated by political conviction or financial incentives.
- Digital Propaganda Campaigns: The use of AI-generated content—such as animated videos—to influence public perception and disseminate wartime narratives.
While Israel has successfully defended its critical infrastructure from major breaches to date, the directorate warns that smaller, less-secured organizations often suffer catastrophic data loss, including the complete wiping of computer systems.
Strategic Defense and Future Preparedness
To counter the evolving threat, the Israel National Cyber Directorate is implementing a multi-year plan scheduled for completion by 2030. This initiative focuses on three primary pillars of defense:
- Cloud Security: Strengthening the resilience of cloud-based environments.
- Cyber and AI Integration: Utilizing artificial intelligence to detect and mitigate incoming threats in real-time.
- Quantum Computing: Preparing for the next generation of cryptographic challenges.
Comparison of Annual Cyber Incident Data
| Period | Reported Incidents (June) | Annual Total (Approx.) |
|---|---|---|
| 2025 | 1,600 | 26,000 |
| 2026 | 4,800 | N/A |
How Israel Monitors the Digital Battlefield
The National Cyber Directorate emphasizes that the conflict in cyberspace differs from traditional kinetic warfare because it lacks the formal constraints of a ceasefire. Authorities continue to monitor traffic across government, public, and private sectors to preemptively block unauthorized access. Despite these efforts, the Iranian government consistently denies involvement in state-sponsored hacking campaigns, even while reporting that it is frequently the target of similar digital operations.