Iran's Cyber-Kinetic War Doctrine Takes Shape

Check Point Research has documented how Iranian threat actors are systematically hacking IP cameras (Hikvision and Dahua devices) to support missile strike targeting and battle damage assessment, exploiting known CVEs. The activity correlates directly with kinetic missile operations across Israel, Qatar, Bahrain, Kuwait, UAE, and Cyprus. Analysts from Check Point, CrowdStrike, Flashpoint, and Recorded Future assess this represents a formalized Iranian cyber-kinetic war doctrine — integrating cyber operations, psychological ops, ICS attacks, and logistics sabotage into a unified campaign. Experts warn this hybrid approach, blending low-cost cyber effects with physical strikes, is becoming the blueprint for modern warfare.