Iran-linked threat actors, including IRGC-affiliated groups, are conducting sustained cyber operations against U.S. and Israeli critical infrastructure sectors, including healthcare, industrial control systems, and supply chains, in parallel with active kinetic conflict. Targeted organizations face operational disruption, resource drain from continuous incident response, and risk of service degradation even when individual attacks lack immediate high-severity impact. Organizations in healthcare, energy, water, and government sectors face elevated risk of being drawn into a prolonged, low-to-medium-intensity harassment campaign designed to exhaust defender capacity.