National Security Law Today · National Security Law Today

Iran’s Cyber Front: Where Digital and Physical War Converge with Matt Suiche

April 1, 2026·33 min·2 clips

Matt Suiche argues Shahid drones at $20,000 each did more damage to cloud infrastructure than any advanced malware ever deployed.

1. National Security Law Today presents a discussion with cybersecurity researcher and founder Matt Suiche on how AI and cyber capabilities are performing in the Iran conflict. 2. Host Elisa Poteet is the writer, host, and producer of the podcast, always speaking in her individual capacity; Matt Suiche is the founder of OnDB and a former penetration-testing researcher. 3. The episode asks how AI is actually functioning in the current conflict — where it has failed, what it can and cannot replace, and what the cascade consequences of the physical fighting will be for digital infrastructure globally. 4. Suiche describes how an AI volunteer system generated a military target list on the first day of the war that humans failed to validate, resulting in the bombing of a school in Minab in Iran with significant casualties. 5. He frames the failure as structural: compressing the kill chain compresses the space for judgment, and AI is only as good as the data pipeline feeding it — 'if you feed it garbage, you get garbage out.' 6. Suiche makes the central claim that 'physical beats digital': once kinetic warfare begins, cyber becomes largely irrelevant, and Shahid drones costing between $7,000 and $20,000 did more damage to cloud infrastructure than any advanced malware ever deployed. 7. He notes that the adversary has been targeting critical infrastructure with pragmatic effectiveness — the Ras Laffan gas complex in Qatar is cited as a particularly consequential strike — without apparent reliance on AI. 8. Suiche connects Stuxnet (2010) to the current moment: the U.S.-Israeli joint operation against centrifuges at Natanz was the first cyber weapon to cause physical destruction, and in his view it 'opened the Pandora box' that taught adversaries the physical damage potential of cyber tools. 9. He observes that each subsequent cyber incident was treated as isolated rather than as part of an escalating pattern, and that the current conflict is the predictable result of that failure to recognize escalation trajectories. 10. The episode discusses semiconductor supply chain fragility: approximately one-third of global helium — required for cooling chip fabrication facilities — comes from Qatar, and Taiwan holds only 10-11 days of LNG reserves. 11. South Korea, home to Samsung and SK Hynix, imports 60-70% of its helium from Qatar; Suiche argues that sustained conflict could cascade from energy disruption to chip shortages to constrained AI development globally. 12. Suiche states that if the Strait of Hormuz stays blocked for another 60-90 days, the economic and supply-chain consequences would make COVID and the 2022 supply-chain disruptions 'look like nothing.' 13. He notes that GPS jamming has already affected civilian drivers in the GCC, though he ranks this as manageable compared to the energy and semiconductor crisis now building. 14. Suiche argues undersea cable disruption would be more localized, with Djibouti in the Horn of Africa as the most relevant intersection point; he suggests physical attacks on local data centers and telecom companies would be more efficient than targeting seabed cables. 15. He introduces the information-silo dimension: AI recommendation algorithms have accelerated political polarization, and inflation — not disinformation — is the variable most likely to radicalize populations across political lines. 16. Suiche draws an analogy between how AI is fed propaganda and how humans are fed biased data: both produce outputs shaped by the quality and intent of their inputs, and both require a second-judgment layer. 17. Poteet raises a court ruling in a California or Arizona federal district that found Meta and Google liable for algorithmically engineering addiction, connecting it to how tech billionaires may respond politically as their infrastructure comes under physical threat. 18. The conversation is wide-ranging and exploratory — two subject-matter specialists connecting technology, conflict, economics, and political theory — with Poteet providing historical context and Suiche providing technical depth. 19. Professionals in cybersecurity, national security, semiconductor supply chains, or AI policy who want a practitioner-level analysis of the Iran conflict's digital-physical dimensions will find this substantive. 20. Listeners expecting a focused technical briefing or a structured policy debate may find the conversational, associative format less useful.

As heard by us

A sober look at how cyber, energy, and supply chains now move together in war.

The episode treats Iran's cyber activity as part of the machinery of war, linking intelligence gathering, hacking, drone direction, AI products, and attacks on data centers in a single arc.

Read the full review in PlayNext →

Why you'd press play

You want the war map where cyber reaches AI, drones, data centers, and energy costs.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from National Security Law Today