Situation Report: Heightened Threat Environment – Potential Retaliation by Iranian Threat Actors Following U.S. Strikes on Iran (Updated April 23, 2026)

(TLP:AMBER+STRICT) The war with Iran has entered a new phase, with the U.S. seizing Iran-linked vessels and Iran retaliating by attacking commercial shipping close to its coastline. Supply chain issues from the slowdown in global shipping continue. Given the ongoing elevated tensions and possibility of renewed hostilities, critical infrastructure organizations continue to face increased physical and cybersecurity risks. This update includes additional Iranian-linked indicators of compromise (IOCs)…