Iran’s top cyberspace official claims authorities can disconnect Starlink terminals. Public evidence shows disruption to some connections, but does not establish the ability to impose a sustained nationwide shutdown.

A dispute between the government, parliament and the Supreme Council of Cyberspace exposes the fragmented authority behind Iran’s internet governance—and gives new meaning to Ali Khamenei’s complaint that cyberspace is “truly left unchecked.”

Requirements to register the identities of online advertisers, alongside Divar’s links between user accounts and identity and financial records, make digital activity easier to attribute to individuals. Combined with access to data and pressure on businesses, these connections can become instruments of control.

Parliament has tasked the Interior Ministry with building a registry of foreign activities and partnerships. The system will give security agencies access to records of academic, media, and professional relationships and make some activities subject to approval.

Goorkan collects information on people who oppose the Islamic Republic and publishes dossiers about them, while threatening them with “punishment.” At the same time, the website’s address appeared on a digital sign along Los Angeles’s Interstate 405. It remains unclear who posted the message or how they accessed the sign’s system.

A new Iran-Russia agreement suggests the normalization of Internet fragmentation and state sovereignty in cyberspace through international institutions.

A new warning from the UK, the US, and the Netherlands details, one that begins by gaining a target’s trust and can end with stolen communications, audio surveillance, and the publication of personal information for further harassment.

Alaj is recruiting people to report Iranian Instagram users living abroad. Its promise—“You identify them. We take action”—raises urgent questions about who receives that information and what happens next.

Iran’s proposed “anti-infiltration” law would place ordinary contact with foreign universities, media outlets, civil-society groups and professional organisations under security scrutiny—even though Iran’s own Constitution says lawful freedoms cannot be taken away in the name of protecting national independence.

Leaked documents linked to Charming Kitten describe Saqeb as a modular Windows surveillance platform built for persistent access, remote commands, keylogging, Telegram session theft, Firefox credential harvesting, and file destruction.

Two defensive simulations of MuddyWater operations show that the power of the Islamic Republic’s hackers does not lie in any single mysterious technology. It comes from combining close knowledge of the target, the exploitation of trust, and a handful of relatively simple technical tools.

Chabokran, or the malicious “Kar” app, uses the promise of employment to steal SMS messages and one-time passwords.