Thread by @juliettekayyem

Thread: How real is the cyber fear when it comes to Iran? No definitive answer, but there is a lot of activity on the defensive/homeland front that's worth noting? 1/

https://twitter.com/KannoYoungs/status/1215018094827122688

Background: It never seemed a high priority for Iran to actually, physically strike the homeland (I'm discounting those inspired by the tensions and only focused on Iranian directed attacks). Iran had even TOLD US that they would focus on military assets. 2/

And a physical attack here would require not only a serious response by us but would make our allies have to side with us and why would Iran help move them to our side (since they aren't exactly there now, #JCPOA). 3/

Nonetheless, we go through the same drill every time -- more cops, more physical presence, more bag checks -- as if the threat hasn't changed. Here, quickly:
theatlantic.com/ideas/archive/… 4/

So, here's what's happened 1: @dhsgov revises the National Terrorism Advisory System (NTAS) Saturday. It gives lip service to Hezbollah attacks here but spends bulk focusing the private sector -- our critical infrastructure owners -- on cyberdefenses.
dhs.gov/sites/default/… 5/

Next up on Monday, @DHSgov cyber division, @CISAgov, releases a new advisory to its partners -- more specific to industry, generally Chief Information Officers -- on the increased Iranian threat. Nothing mindboggling in it, but helpful. cisa.gov/insights 6/

Today, DHS and FBI send advisory out to local and state law enforcement partners. Again, a nod to Iranian physical attacks, but mostly about cyber awareness. These advisories are not uncommon, and urges private sector to notify gov. if intrusions.

https://twitter.com/donie/status/1214999313283190784

7/

An aside: a national security issue can arise by a cyber attack outside of critical infrastructure. Think Sony. This would include the Trump family properties, a target that Iranians have publicly discussed, or major media outlets. 8/
nypost.com/2020/01/06/ira…

For the record, I do not think they would actually physically attack the Trump facilities but the threat surely would have gotten into Trump's head and a cyber attack would be humiliating for them. 9/

Then today, an active outreach to the biggies of tech after cybersecurity experts warn of increased malicious activity they are seeing from Iran. One of the big issues is if there was a cyber attack in homeland, could we immediately attribute to Iran?
nytimes.com/2020/01/08/us/…
10/

So, lot's of activity and pretty good government: provide info, work with partners, educate public. Positioning for a cyberattack isn't mere speculation. Whether there is something specific, we don't know. But a lot of defensive measures ongoing, more than I've ever seen. 11/11