Will CISA issue an advisory on Iran-linked infrastructure intrusions by 31 Dec 2026?
Posted 2026-08-24 — 129 days before the deadline, stated before the outcome.
The Cybersecurity and Infrastructure Security Agency (CISA) is a US federal agency responsible for protecting critical infrastructure. It regularly publishes public advisories to alert organizations about active cyber threats targeting sectors such as water, energy, and transportation.
The claim
Between 2026-09-01 and 2026-12-31, CISA or a US federal agency will issue at least one public advisory attributing an active intrusion campaign against US water, energy, or transportation infrastructure to Iran-linked (IRGC/APT) actors.
Reasoning trace
- US toughest-ever Iran sanctions announced; Iran vows devastating response
- Iran-linked cyber operators already demonstrated 4-day UK power plant shutdown
- Cyber is Iran's lowest-cost, deniable retaliation channel vs. kinetic Hormuz
- US CNI sectors receive Iranian probing consistent with historic pre-attack patterns
- CISA issues attribution advisory following incident or intelligence disclosure
Evidence so far
95 confirming · 0 denying signals · 14 verified · 2 broken assumptions. The evidence itself is part of the full dossier.
Probability history
Updated 59 times since mint (last on 2026-11-06) — 73% at mint → 76% today.
What to watch
- precondition A US water, energy, or transportation facility reports a confirmed operational disruption or data exfiltration event to the CISA ICS-CERT or equivalent federal incident response channel observed
- leading indicator The Department of Justice (DOJ) unseals or files an indictment against specific Iranian state-sponsored hackers or issues a public warning linking them to the infrastructure targets observed
- leading indicator The US Treasury Department (OFAC) or the Executive Branch announces new, specific sanctions targeting Iranian entities or individuals linked to cyber operations against US critical infrastructure observed
The full dossier behind this prediction — the evidence trail, the risk analysis, the monetization scenarios — is available on request: [email protected].
Probabilities are calibrated against the system's own resolved history; after the deadline the outcome is resolved and audited — including the calls we get wrong. Nothing on this page is investment advice.