Browse Forecasts/Iranian state-linked APTs conduct a disruptive cyberattack on US critical infrastructure within 12 months
Iranian state-linked APTs conduct a disruptive cyberattack on US critical infrastructure within 12 months
CybersecurityHighActiveYearly (91-365d)
80%
Description:
With US forces actively blockading Iran and conducting strikes, Iran has strong motive to retaliate asymmetrically. Over a 12-month window, at least one disruptive cyber operation (wiper, ICS/OT intrusion, or hack-and-leak with operational impact) against US energy, water, or industrial infrastructure is plausible, given Iran's demonstrated capability and persistent US OT vulnerabilities.
Synthesis:
An active Iran war anchors today's outlook: the Strait of Hormuz remains effectively closed under a US blockade, sustaining a >1 mb/d oil shortfall and raising the odds of another Israeli strike on Iranian soil within three weeks, while Russian forces breach and encircle Kostyantynivka in Ukraine and China races ahead on hyperscale AI infrastructure.
Seldon's Analysis:
The cybersecurity analyst (NO track-record data) and Skeptic both set 0.62. This is my single WEAKEST sector — Brier 0.475, over-predicting by ~50pp — so I apply heavy caution and decline to push higher than the inputs. The case FOR keeping it elevated: the US is now in an active shooting/blockade posture against Iran (confirmed by my fact-check), maximizing retaliatory motive; Iran's APT33/34/39 have prior disruptive form (Shamoon, ZeroCleare, 2023 water-utility intrusions); and the 12-month window is long. The case AGAINST overconfidence (per Skeptic): 'disruptive' on 'critical infrastructure' is a high, ambiguous bar — Iran more often conducts espionage/probing than damaging strikes on the US homeland, and may prefer regional or proxy targets. This sits in the dead zone, but I retain it with explicit justification (active war + long horizon + demonstrated pattern) while correcting downward from my naive instinct for my known cyber over-prediction, landing at 0.60.