Open-Supply Intel Makes U.S. Troops an Simpler Goal for Iran – The Cipher Transient

Iran is studying American service members’ social media feeds to lethal impact. The actual fact is that not all intelligence have to be gleaned from secret, closed sources for it to be efficient, and Tehran has made use of public and open-source knowledge to focus on U.S. forces with psychological and kinetic assaults. Till the Pentagon updates and enforces its insurance policies on social media posting and private gadget safety, American servicemembers might be sitting geese.

Admiral Brad Cooper, the commander of CENTCOM, warned in a letter final month to U.S. forces that Iran is utilizing social media posts from personnel, equivalent to footage of U.S. bases, to enhance its lethality. For instance, a video of troopers working for shelter throughout Iranian strikes helped Iran carry out a battle harm evaluation of their strikes, together with their precision, and perceive base structure for future assaults.

Iran has lengthy exploited open-source knowledge to focus on U.S. forces and allies. Two years in the past, Iran doxxed 2,200 Israel Protection Forces personnel relying solely on open-source knowledge. In April 2026, the Division of the Navy warned service members that unnamed cyber adversaries (clearly referring to Iran) are reaching out on social media and conducting phishing assaults, urging sailors to activate privateness settings and chorus from posting on social media. The identical month, Iranian hacker group Handala despatched threatening WhatsApp messages to U.S. troops and revealed the supposed private info of two,300 U.S. service members stationed within the Persian Gulf.

Open-source knowledge is broader than simply Instagram and Fb. Iran exploits knowledge breaches to gather info and establish and ship textual content messages to former Israeli protection personnel to threaten them and to aim to recruit them for espionage functions.

Iran is exploiting Signaling System 7 (SS7), an older telecom protocol for roaming, to establish units with U.S. SIM playing cards, in accordance with menace intelligence platform Cell Surveillance Monitor. Utilizing SS7, Iran was reportedly capable of pinpoint motels that housed U.S. personnel and contractors.

Iran may also merely purchase knowledge for its malicious campaigns. CENTCOM said in a letter to Sen. Ron Wyden (D-OR) that it has been warned that Iran might have used commercially obtainable location knowledge utilized by digital advertisers to “goal and surveil” U.S. personnel. Whereas the cellphone numbers behind promoting IDs are anonymized, Iran might use them to trace units in particular areas equivalent to army bases. The Pentagon conceded that these IDs should not but disabled by default on government-issued telephones.

None of those vulnerabilities needs to be a shock to protection officers. A U.S. Authorities Accountability Workplace report from October 2025 discovered that social media posts from service members and their households or associates present adversaries with names, ranks, and places that may be pieced collectively to disclose details about U.S. power formations and operations. Wyden and his Democratic and Republican colleagues within the Home and Senate despatched a letter to the Pentagon’s chief info officer in Could 2026 urging safer private knowledge practices and blaming present vulnerabilities on the division’s “failure to prioritize this menace and implement frequent sense cyber defenses really helpful by federal cybersecurity specialists.” The Home model of the annual protection invoice, in the meantime, calls for the division to raised perceive and practice personnel about how adversaries can exploit business applied sciences to establish and monitor U.S. personnel.

To curb adversarial intelligence assortment alternatives, the Division of Protection (DoD) ought to increase operational safety necessities throughout the power.

First, the DoD ought to harden authorities and private units by requiring removing of all Cell Promoting IDs (MAIDs) on private and DoD-distributed units for personnel in delicate areas. With out IDs, the places and metadata can’t be tracked or related to particular person customers and offered to adversaries posing as business patrons.

Subsequent, the DoD ought to create and implement stringent insurance policies for social media posting. Personnel needs to be prohibited from importing unofficial photographs and movies of army amenities or that in any other case relate to their roles and will restrict the quantity of data they submit about their roles on platforms like LinkedIn. Authorities units ought to have their cameras disabled or eliminated until required for particular functions, and GPS needs to be disabled by default. DoD also needs to take into account offering troops with various units for private use with GPS disabled and the cameras eliminated.

Moreover, the DoD ought to monitor breached knowledge to know what’s publicly obtainable about all its personnel. Figuring out when knowledge is uncovered will enable the DoD to establish potential threats earlier than Iran acts and start fixing the problem as quickly because it happens. The division may also use this info to allow obligatory password and credential rotation when info is uncovered. The Pentagon also needs to take into account encouraging or requiring extra strategies of authentication, equivalent to passkeys and biometrics, for all units and accounts

Lastly, Congress ought to move regulatory reforms to transition from SS7 to new signaling know-how. SS7 is an outdated system and can’t assure safe communications, even when new updates had been to be accomplished. Altering the system will enable service members overseas to speak with family members with out main adversaries to their location.

These measures will restrict the open-source knowledge that, at current, is available to Iran and different adversaries. If the DoD continues to allow unrestricted use of private units overseas, Iran and different adversaries will proceed exploiting their vulnerabilities to find, research, and threaten American forces.

The Cipher Transient is dedicated to publishing a spread of views on nationwide safety points submitted by deeply skilled nationwide safety professionals. Opinions expressed are these of the writer and don’t symbolize the views or opinions of The Cipher Transient.

Have a perspective to share based mostly in your expertise within the nationwide safety subject? Ship it to Editor@thecipherbrief.com for publication consideration.

Learn extra expert-driven nationwide safety insights, perspective and evaluation in The Cipher Transient