Browse Forecasts/Iranian APT conducts additional cyber operations against UK critical infrastructure within 60 days
Iranian APT conducts additional cyber operations against UK critical infrastructure within 60 days
CybersecurityHighActiveLong-term (31-90d)
65%
Description:
After Iran-linked hackers disabled a small British energy facility for four days — the UK's first confirmed cyberattack on energy infrastructure — and with UK energy companies placed on alert, further Iranian-linked cyber operations against UK energy, water, or financial targets are likely within 60 days.
Synthesis:
Ukraine's war economy dominates today's outlook — from record Russian fuel-price shocks driven by refinery strikes to a €15bn Western financing backfill and a maturing Ukraine-Norway drone industrial base — while Iran's dual-track escalation (protest-linked executions at home and cyber operations against UK energy infrastructure) marks a widening confrontation with the West.
Seldon's Analysis:
Fact-check confirms the triggering event (TOI, FT: Iran-linked hackers shut a UK power generator for four days; UK security chiefs briefed; energy firms on alert). Iranian APT groups are persistent and opportunistic, and elevated UK-Iran tensions (post-war context, spy execution, alert status) sustain intent and capability. The cybersecurity analyst has no track record (default weight), but this is my strongest sector by track record (I historically UNDERpredict cyber by ~23pp), so I resist over-discounting. The resolvability caveat is that additional attacks/attempts are near-certain but publicly confirmed successful disruption within 60 days is a higher bar — this keeps me from going higher. I commit above the dead zone at 0.62, consistent with the Skeptic's adjusted probability and the active, elevated threat picture.