The lead U.S. cyber agency is stretched thin as Iran's hacking threat escalates, posing a critical risk to the nation's infrastructure and businesses. With the ongoing conflict in the Middle East, cybersecurity experts warn of imminent online attacks from Iran on U.S. targets. The danger is heightened by Iran's potential stored capabilities, waiting for a high-risk moment to strike. The situation is further complicated by the Cybersecurity and Infrastructure Security Agency (CISA) facing a partial government shutdown, furloughs, and management reshuffles, which could hinder its ability to counteract an attack. The agency has already lost a third of its employees since Trump's presidency, and its temporary director was reassigned last week, causing internal turmoil. Lawmakers express concerns about the U.S. preparedness as the shutdown continues, highlighting CISA's already stretched resources. Even during Iran's internet shutdown, cybersecurity experts predict that Iran-linked groups will operate through proxies and VPNs, targeting financial sectors and critical infrastructure. The threat is further emphasized by Iran's history of successful cyberattacks, including a massive denial of service attack on major banks in 2012-2013 and hacking emails related to President Trump's campaign in 2024. With the potential for rising cyber or terrorist attacks globally, banks like JPMorgan Chase are preparing for the worst, considering cyber as one of their highest risks.