A series of Iranian cyberattacks has exposed significant vulnerabilities in Israel’s cybersecurity framework, which, despite its reputation as a cyber superpower, has been criticized for inadequate protections for non-critical infrastructure such as hospitals and educational institutions. Reports indicate that these attacks have increasingly focused on leaking sensitive information rather than disruptive sabotage, with breaches revealing internal communications from the Israel National Defense College and sensitive personal data of officials, including former Prime Minister Naftali Bennett. Analysts argue that Israel’s heavy reliance on offensive cyber capabilities has not been matched by robust regulatory measures, leaving many civilian entities unprotected and susceptible to exploitation. The rising frequency of these attacks, which utilize relatively simple techniques like phishing, underscores the need for comprehensive cyber legislation in Israel to address regulatory gaps and enhance overall national cybersecurity resilience, particularly in the face of persistent threats from adversarial cyber actors like Iran.