A cyber-war dashboard whose data stops in March resurfaced this week as current intelligence

The dashboard, published by the threat-intelligence vendor SoCRadar under the title “Iran–Israel/US Cyber War 2026,” presents a live map and an incident feed. Two lines in the page’s own text undercut the framing: one says the map and incident data were “last updated: March 2026,” another says the page “was last updated on April 6.” The incidents it foregrounds are months old and none of them is a confirmed event. The first is a claim by the group Handala to have breached the Hebrew University of Jerusalem on Quds Day, compromising all servers and wiping more than 40TB of research, financial and communications records — evidenced publicly only by screenshots appearing to show vCenter access. The second is a claim by the Z-PENTEST Alliance of access to a PureWater 100 ultrapure water treatment system built by MSTEC, published with video purporting to show real-time control of inlet and outlet sensors, drain valves, pH calibration and solenoid valves. To the vendor’s credit, SoCRadar labels that second item itself: “Claim is unverified but technically detailed.”

This desk could not verify a single significant cyber or information-warfare development with a primary or wire dateline inside 20–23 August. That is a statement about our reach, not about the world. In this window we did not get to NetBlocks, Access Now, Citizen Lab, Amnesty International’s Security Lab index, the adversarial-threat reporting from Meta, Google’s Threat Analysis Group or OpenAI, the Gulf CERTs and regulators — the UAE Cyber Security Council, Saudi Arabia’s NCA, Qatar’s NCSA — or any Arabic-, Hebrew- or Persian-language outlet. Sahel shutdown and platform-blocking monitoring across Mali, Burkina Faso and Niger went unchecked, as did current Handala activity as distinct from the spring claims sitting in the SoCRadar cache. Readers should take the absence of items below as an absence of verification, and nothing more.

Assessment: The mechanism here is worth more than the incidents. A dashboard is a format that promises currency; a crawler reads the wrapper, not the timestamp buried in the body. Old unconfirmed claims re-enter circulation carrying a freshness signal they did not earn, and get a second cycle of coverage they never survived the first time. The commercial incentive runs one way: a tracker that shows an active war is a better marketing asset than one that shows a lull. Note also what the recycled claims are — a hacktivist video of valve controls at a water treatment plant. That is the same genre as the material now unattributed in the American water sector, and the resemblance is precisely why attribution language should be read carefully.