Companies need to be on high alert for cyber threats amid Iran conflict: TrustedSec's David Kennedy
Summary
- Iranian state-sponsored hackers are actively targeting US critical infrastructure, shifting from traditional espionage to inflicting maximum operational damage and outages.
- Prime target sectors include hospitals, energy grids, water treatment facilities, and financial institutions, many of which rely on vulnerable 40-to-60-year-old legacy technology.
- Medical device manufacturer Stryker recently suffered an attack by an Iranian-aligned group, forcing the company to order employees to take devices offline.
- The escalating cyber warfare environment creates a structural, urgent mandate for both private enterprises (which own 80% of critical infrastructure) and local governments to increase cybersecurity spending.
Trade Ideas
"What Iran is trying to do here now is really focus on our critical infrastructure... everybody is on high, high alert right now... we have been upping cybersecurity over the past several years. Enterprise has really been focusing on that." The shift in nation-state cyber tactics from quiet data theft to destructive operational outages forces companies to treat cybersecurity as a non-negotiable, mission-critical expense. As enterprises and infrastructure operators scramble to secure legacy systems and prevent lateral network movement, top-tier cybersecurity vendors providing endpoint protection, zero-trust architecture, and network firewalls will capture massive, accelerated contract growth. LONG. Geopolitical cyber warfare acts as a permanent structural tailwind, insulating cybersecurity budgets from broader macroeconomic tightening. Cybersecurity budgets may already be heavily saturated; a high-profile breach at one of the security vendors themselves could severely damage their stock and reputation.
"In the case of Stryker, my understanding is they went and disrupted an internal login page and that the company told employees to immediately stop using and turn off all of their devices." Cyber attacks that force a company to abruptly halt internal operations and take devices offline can lead to short-term productivity losses, remediation costs, and potential delays in manufacturing or sales cycles. However, if the breach is contained to an internal login page without compromising core IP or patient data, the financial impact may be negligible. WATCH. Monitor Stryker's upcoming disclosures regarding the financial and operational impact of the breach. It presents either a short-term short opportunity if the breach spread laterally, or a buy-the-dip opportunity if the market overreacts to a contained IT incident. The market may completely ignore the news if the company quickly restores systems, resulting in no actionable price movement.
Up Next
This CNBC video, published March 12, 2026, features David Kennedy, Kelly Evans discussing CRWD, PANW, FTNT, SYK. 2 trade ideas extracted by AI with direction and confidence scoring.
Speakers: David Kennedy, Kelly Evans · Tickers: CRWD, PANW, FTNT, SYK