The Decision Advantage Iran, Russia, and the Future of Cyber Warfare
Apr 28, 2026
Hayley Benedict, a RANE cyber intelligence analyst focused on geopolitical cyber threats, digs into Iranian and Russian cyber behavior. She breaks down why Iranian responses have been muted. She explains Russian cyber tools used in Ukraine and how state-linked hacktivism blurs lines. She explores risks to GCC infrastructure and how information operations shape perceptions.
AI Snips
Chapters
Transcript
Episode notes
Iranian Cyber Response Has Been Underwhelming
- Iranian cyber response to the conflict has been more muted than expected with limited high-intensity campaigns.
- Factors include internet blackouts, reported strikes on Iranian cyber facilities, possible loss of leadership, and strengthened defenses in U.S./Israeli targets.
Stryker Incident Showed Low-Tech Access Can Be Devastating
- Handala-linked actors used credential harvesting and a created admin account to issue a destructive wipe at Stryker.
- The attack was low sophistication but caused operational disruption and financial damage by abusing privileged access.
Russia Treats Cyber As Kinetic Support Tool
- Russia uses cyber as a force multiplier for kinetic operations, favoring data wipers and ICS attacks to inflict lasting infrastructure damage.
- Data wipers are favored because they permanently corrupt files and are costly and slow to remediate.