department of homeland security flag

DHS Warns of Iran’s Potential To Retaliate With Cyber Attacks, Terrorist Acts After Soleimani Killing

The department warned in an alert that Iran has a “robust cyber program” and can carry out attacks to temporarily disrupt critical infrastructure.

In the days after Iran’s top military leader, Qassim Suleimani, was killed in an American drone strike, the country’s leadership has promised revenge on the U.S. Now, top government officials anticipate that Iran’s retaliation may take the form of a cyber attack on major computer systems.

Christopher Krebs, the head of the Cybersecurity and Infrastructure Security Agency (CISA) within the Department of Homeland Security, warned on Jan. 2 that the threats to the public go beyond attacks on the federal government.

“Pay close attention to your critical systems,” Krebs wrote on Twitter. “Make sure you’re also watching third party accesses!”

While the department’s acting secretary, Chad Wolf, said in the days after the drone attack that there are no “specific, credible threats” to the U.S., it’s clear that cybersecurity leaders are concerned about the possibility of an Iranian attack. DHS went on to issue an alert of a terrorism threat to the U.S. on Jan. 4, detailing specific aspects of Iran’s capabilities.

As of Monday afternoon, no official cyber attack had been reported as coming from an established Iranian government-based hacking group. But the attack “may come with little or no warning,” the DHS warned, particularly after Suleimani’s funeral on Monday.

ZDNet reported that there have been some low-level cyber attacks over the weekend that involved the defacement of about 20 websites, including that of a government site for the Federal Depository Library Program. The attacks did not appear to originate from government-backed hacking groups.

The DHS alert referenced Iran’s efforts in the past to scope out terrorist acts against the U.S., including “scouting and planning against infrastructure targets and cyber enabled attacks against a range of U.S.-based targets.”

Some critics of the Trump administration fear that DHS is not well prepared to handle a widespread security threat thanks to its increased focus on immigration, a priority of President Trump.

John Cohen, a former acting under security in the DHS who led efforts to counter Iran, said a comprehensive plan must be developed to address the growing threat. He is doubtful that the plan will be developed in concert with local governments.

“There has been real concern that the focus on immigration enforcement and the border wall have degraded our capabilities to address not only the threat posed by domestic terrorists but sophisticated threats like this,” Cohen told The New York Times. “Time will only tell.”

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • The Future of Access Control: Cloud-Based Solutions for Safer Workplaces

    Access controls have revolutionized the way we protect our people, assets and operations. Gone are the days of cumbersome keychains and the security liabilities they introduced, but it’s a mistake to think that their evolution has reached its peak. Read Now

  • A Look at AI

    Large language models (LLMs) have taken the world by storm. Within months of OpenAI launching its AI chatbot, ChatGPT, it amassed more than 100 million users, making it the fastest-growing consumer application in history. Read Now

  • First, Do No Harm: Responsibly Applying Artificial Intelligence

    It was 2022 when early LLMs (Large Language Models) brought the term “AI” into mainstream public consciousness and since then, we’ve seen security corporations and integrators attempt to develop their solutions and sales pitches around the biggest tech boom of the 21st century. However, not all “artificial intelligence” is equally suitable for security applications, and it’s essential for end users to remain vigilant in understanding how their solutions are utilizing AI. Read Now

  • Improve Incident Response With Intelligent Cloud Video Surveillance

    Video surveillance is a vital part of business security, helping institutions protect against everyday threats for increased employee, customer, and student safety. However, many outdated surveillance solutions lack the ability to offer immediate insights into critical incidents. This slows down investigations and limits how effectively teams can respond to situations, creating greater risks for the organization. Read Now

  • Security Today Announces 2025 CyberSecured Award Winners

    Security Today is pleased to announce the 2025 CyberSecured Awards winners. Sixteen companies are being recognized this year for their network products and other cybersecurity initiatives that secure our world today. Read Now

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.