On February 28, 2026, a significant military and cyber offensive unfolded against Iran, marking a new chapter in modern warfare where traditional airstrikes were complemented by extensive digital attacks. Operation Roar of the Lion, a coordinated effort primarily involving the United States and Israel, targeted Iranian Revolutionary Guard Corps (IRGC) command centers with fighter jets and cruise missiles. However, the physical strikes were only part of the story. Simultaneously, Iran experienced a severe digital blackout as key online platforms, government services, and communication networks across major cities such as Tehran, Isfahan, and Shiraz went offline, creating a near-total internet shutdown.
According to NetBlocks, an organization specializing in monitoring internet connectivity worldwide, Iran’s internet traffic plummeted to just 4 percent of its normal level during the attack. Such a drastic collapse suggested either a deliberate government-ordered shutdown to protect sensitive information or a massive cyberattack designed to disrupt the country’s critical infrastructure. Western intelligence sources later revealed that the digital offensive aimed to disable IRGC command and control capabilities, thereby limiting Iran’s ability to coordinate counterattacks following the physical strikes.
This incident highlights the evolving nature of modern conflicts where kinetic military actions are paired with cyber warfare tactics. Unlike traditional combat that relies heavily on physical destruction, cyberattacks can disrupt, disable, and sow confusion without immediate loss of life. They allow nations to send powerful signals, increase pressure, and assert strength without necessarily escalating to full-scale war. In volatile regions like the Middle East, where tensions can rapidly spiral out of control, this blend of missile strikes and digital offensives represents a new form of strategic engagement.
The impact of the cyber blackout was widespread and systemic. Iran’s official state news agency, IRNA, vanished from the internet, and Tasnim News, a semi-official outlet closely linked to the IRGC, displayed subversive messages targeting Supreme Leader Ali Khamenei. Beyond news sites, local applications and government digital services failed, and electronic warfare reportedly disrupted navigation and communication systems, including those crucial for energy and aviation sectors. Distributed Denial of Service (DDoS) attacks overwhelmed networks with artificial traffic, rendering them unusable, while deeper cyber intrusions targeted essential infrastructure.
For Iran’s tightly controlled regime, which depends heavily on information control and digital command, such a disruption posed major operational and political risks. Cyberattacks, unlike missiles, can cause significant damage without immediate casualties, making them attractive tools for exerting pressure while maintaining plausible deniability. Historically, Iran has demonstrated adeptness in cyber warfare. Between 2012 and 2014, Iranian actors launched Operation Ababil, targeting U.S. financial institutions, and Saudi Aramco suffered a massive cyberattack attributed to Iranian-linked groups. Following Israeli strikes in 2025, cyberattacks against Israel surged dramatically, underscoring the increasing role of digital retaliation in regional conflicts.
Cyber retaliation offers Iran a flexible range of options, from broad disruptive attacks and propaganda campaigns to targeted intrusions aimed at critical services. Experts warn that as cyber defenses evolve, the private sector and U.S. infrastructure could face persistent tests. Iran has also employed drones and electronic interference to signal its capabilities without escalating to direct military confrontation. Recent reports include IRGC radio warnings to ships about passage restrictions through the strategic Strait of Hormuz and increased electronic interference affecting navigation systems in the region. These developments have led insurers to reassess risk levels, with war-risk policies becoming more expensive or canceled outright.
Beyond cyber and electronic warfare, Iran’s network of allied militias and proxy groups in the Middle East remains a wildcard. These groups could escalate attacks on U.S. interests or allied nations in response to the strikes, potentially broadening the conflict without direct state-to-state warfare. Missile strikes remain a potent option for Tehran, especially as a signaling tool when the regime feels threatened, but they carry higher risks of rapid escalation and wider war.
Despite the escalating military and cyber tensions, neither Washington nor Tehran appears eager for a full-scale regional war. Military actions often coexist with diplomatic efforts to apply pressure while leaving room for negotiations. However, escalation has its own momentum. Each missile fired and each casualty incurred complicates the path to de-escalation. Domestic pressures, fear, and pride compel leaders to respond forcefully, increasing the risk that limited strikes could spiral into broader conflict.
This episode reveals a broader truth about modern conflict: nation-states now combine kinetic strikes with sophisticated cyber offens