Why Iran’s threat to subsea cables matters for internet security

Ars Technica reports that Iran has threatened to attack subsea cables if the United States escalates military strikes again. The threat matters because.

Ars Technica reports that Iran has threatened to attack subsea cables if the United States escalates military strikes again. The threat matters because these cables carry most international data, are hard to protect and are slow to repair.

Key takeaways

  • Ars Technica reports that Iran has warned it could target subsea communications cables if the United States escalates military strikes again.
  • Ars Technica’s report links the warning to ships loitering near subsea cable routes, though public detail on those vessels is limited.
  • Subsea cables carry most international internet and financial traffic, and satellites cannot replace their capacity.
  • Cables are physically fragile and hard to monitor along their full length, and repairs depend on a small number of specialised ships.
  • Organisations that rely on cross-border connectivity can reduce their exposure by checking how diverse their network routes are and by testing their continuity plans.

What is happening around the subsea cables?

Ars Technica reports that Iran has threatened to attack subsea cables if the United States escalates military strikes again. The publication frames its coverage around ships loitering near subsea cables at the same time as these warnings. The public reporting does not make clear which vessels are involved, exactly where they are, or whether any of them are linked to a state. It is also not known whether any cable has been damaged as a result of this situation.

In military and security language, ships “loitering” near infrastructure means vessels staying in an area, or moving slowly through it, longer than normal commercial traffic would explain. That can be innocent. Fishing boats, ships waiting for a port berth and survey vessels all behave this way. Near critical infrastructure, though, the same pattern can also be read as surveillance or preparation for sabotage. Telling the two apart usually needs tracking data, intelligence and time, and very little of that is public.

Why is this in the news now?

The story is current because a state has openly threatened civilian communications infrastructure as part of a military stand-off. According to Ars Technica, the warning depends on what the United States does next, in particular whether it carries out more strikes. Usually, threats to subsea cables are discussed by analysts as possible “grey-zone” tactics, meaning hostile acts that stay below the level of open war. Here the threat has been stated openly.

Two things together raise the level of concern: a stated willingness to hit cables and reports of ships behaving unusually near them. Neither proves that an attack is planned. Still, governments, network operators and insurers notice when a threat comes with physical activity that could make it real.

How do subsea cables work and why are they vulnerable?

Subsea cables are bundles of optical fibre with protective layers, laid along the seabed between coastal landing stations. They carry most data travelling between continents, including web traffic, cloud services, voice calls and financial transactions. Satellites matter for remote areas and as a backup, but they carry far less capacity than the main cable systems.

There are three main weaknesses. The first is physical. In deep water, cables are often little thicker than a garden hose. Closer to shore they have more armour and may be buried, yet they can still be cut by anchors, fishing gear or deliberate action. The second is monitoring. A cable can run for thousands of kilometres, and nobody can watch all of it continuously. The third is repair. Fixing a cable needs a specialised ship to find the fault, lift the cable and splice it. Only a small number of these ships exist worldwide, so a repair can take days or weeks, and longer in waters where crews face security risks.

Damage is often accidental. Ship anchors and fishing activity cause many cable faults every year in normal conditions. As a result, even when a cut happens in a tense region, it can be hard to show that it was deliberate. That uncertainty is part of why cables appeal to anyone who wants to cause disruption without clear attribution.

Who would be affected by cable damage?

The impact of a cut depends on how many other routes exist. A country or region served by many independent cables may see little more than slower connections while traffic moves to other paths. A place that relies on a few cables, especially cables that share a narrow corridor, can suffer serious outages.

Those affected would include ordinary internet users, businesses that use cloud services hosted abroad, banks and payment networks, and governments. Cloud providers and telecoms carriers usually spread traffic across several routes, but extra load on the remaining cables can still cause congestion and delays. Ships, ports and offshore energy operators that depend on maritime communications could also be affected.

It is not publicly known which cable systems, if any, are most at risk in the current situation. Because the warning is general, the effects of any action would depend heavily on where it took place.

Where do experts disagree about the threat?

Security analysts tend to agree that subsea cables are vulnerable. They disagree about how likely deliberate attacks are and how much damage they would do. One view is that cables are an obvious target because cutting them is cheap, can be denied, and causes economic and political disruption well beyond the immediate conflict. On this view, open threats should be taken seriously, particularly when vessels are seen behaving unusually.

The other view stresses limits and deterrents. Many cables carry traffic for numerous countries, possibly including the attacker’s own partners or the attacker itself, so cutting them could damage relations with neutral states. The global network also has a good deal of redundancy, and some analysts argue that losing a single cable rarely causes a lasting outage. A further argument is that public threats often aim to apply pressure, not to signal fixed intent.

There is also debate about how to respond. Some argue for naval patrols, more sensors on the seabed and more repair ships. Others point out that guarding entire cable routes is not practical, and say that building more varied routes and speeding up repairs is a better long-term answer.

What are the practical implications for organisations?

For most organisations, the useful response is resilience planning, not alarm. Network and security teams can check which cable routes and landing stations their main connections use, and whether their supposedly separate links actually share the same physical path. Providers can often supply this route information if asked.

Business continuity plans should cover a scenario where international links become slow or unreliable for a long period, not only a full outage. Critical services that depend on data centres in other regions may need local fallbacks or failover to regions reached by different routes. Organisations that use satellite links as a backup should know the capacity limits of those links in advance.

From a cybersecurity point of view, disruption to physical infrastructure often comes with other hostile activity, such as disinformation, phishing campaigns that exploit the confusion, or digital attacks on related systems. Security teams may decide to raise monitoring levels during periods of geopolitical tension, even if their own infrastructure seems far from any risk area.

What should observers watch next?

The main factor, according to the threat as Ars Technica reports it, is whether the United States escalates military strikes again. Observers will also watch for official statements from cable operators, maritime authorities or governments about the vessels reported near cable routes, and for any confirmed faults on cables in the region.

Other signs include changes to naval deployments meant to protect infrastructure, insurers changing how they assess maritime and telecoms risk, and carriers announcing traffic rerouting. Over the longer term, the episode may add to wider policy discussions about protecting subsea infrastructure, funding repair capacity and building cable routes that avoid contested waters.

Frequently asked questions

What did Iran threaten regarding subsea cables?

Ars Technica reports that Iran threatened to attack subsea communications cables if the United States escalates military strikes again. The threat was presented as conditional on further US military action. Public reporting does not say which cables might be targeted or what method would be used, and there is no confirmed report that the threat has been carried out.

Why are ships loitering near subsea cables a concern?

Ships that linger near cable routes can raise concern because that behaviour could mean surveillance or preparation for sabotage. However, loitering often has innocent explanations, such as fishing, waiting for a port berth or carrying out survey work. In the current case, public reporting does not identify the vessels or confirm what they intend, so their purpose is not known.

How much internet traffic goes through subsea cables?

Subsea cables carry most data travelling between continents, including web browsing, cloud services, voice calls and financial transactions. Satellites provide useful coverage for remote areas and serve as a backup, but their capacity is far smaller than that of the main cable networks. Disrupting important cable routes can therefore slow or interrupt international communications across whole regions.

Can a damaged subsea cable be repaired quickly?

Repairs require specialised cable ships that find the fault, lift the damaged section from the seabed and splice in new cable. Only a limited number of these ships operate worldwide. Depending on the location, the weather and the security situation, a repair can take days or weeks, and work in conflict zones may be delayed further.

Would cutting one cable shut down the internet in a country?

Usually not, if the country is served by several independent cables, because traffic can be rerouted, though connections may slow down. Countries or regions that depend on a few cables, or whose cables share a single corridor, are much more exposed. The effect of any cut depends on how much redundancy the network in that area has.

How can businesses protect themselves from cable disruptions?

Businesses can ask their providers which physical routes their connections use and check that backup links really follow different paths. Continuity plans should cover long periods of slow international connectivity as well as full outages. Spreading critical services across regions reached by different routes, and knowing the limits of satellite backups, can also reduce the impact.

Sources and further reading

  • Ars Technica: reporting on Iran’s threat to subsea cables and ships loitering near cable routes.
  • International Cable Protection Committee: industry body publishing general guidance on cable protection and the causes of faults.
  • International Telecommunication Union: United Nations agency covering global telecommunications infrastructure and resilience.
  • National cybersecurity and critical infrastructure agencies: general guidance on network resilience and continuity planning.

Surfaced from the rss:arstechnica signal “subsea cable threat warning”. AI-assisted draft, editorially reviewed.

Visited 1 times, 1 visit(s) today
share this recipe:
Facebook
X
WhatsApp
Telegram
Email
Reddit