Iranian cyber attackers are poised to launch a wave of global attacks, with a particular focus on the US and its Gulf allies, according to Google's head of threat intelligence. These attacks are expected to be characterized by their aggressive nature and use of plausibly deniable tactics, including ransomware attacks and hacktivist campaigns. The threat actor is likely to employ these methods to obscure their involvement and avoid direct attribution, making it challenging for defenders to respond effectively. The use of ransomware, in particular, is a concern, as it can have significant operational implications for targeted organizations. Google's warning suggests that the Iranian attackers will be highly motivated and well-resourced, with a range of tools and techniques at their disposal. The fact that Google itself has been targeted by ransomware attacks highlights the sector-specific risk posed by these threats1. As a result, organizations must prioritize operational resilience planning to mitigate the potential impact of such attacks. The potential consequences of these attacks underscore the need for proactive measures to enhance defenses and respond quickly in the event of a breach. So what matters most to practitioners is that they must develop and implement robust operational resilience plans to counter the emerging threat of Iranian cyber attacks.