Starlink in Iran Exposes New Asymmetry: Connectivity as a Dual-Use Weapon
January 2026 clarified the new map of digital power: a national internet blackout in Iran alongside a low-orbit private network maintaining connectivity for tens of thousands. According to Forbes, SpaceX activated free access to Starlink in Iran during that blackout, waiving fees for those who already had receivers, something confirmed by Ahmad Ahmadian, CEO of the U.S.-based organization Holistic Resilience, which focuses on secure communications for Iranians. This same "lifeline" was reportedly utilized by Handala, a group of Iranian hackers, to sustain operations and publish retaliation threats on X after missile attacks by the United States and Israel on February 28.
This is not an article about gadgets or a brand; it is about structural change: when connectivity ceases to be a service and becomes a layer of operational sovereignty. The same pipeline that allows citizens to document protests can also sustain offensive activities. And that fact—not the intention of those deploying the network—is what compels companies, regulators, and boards to update their mental models.
Resilient Connectivity is No Longer a "Channel," It’s Critical Infrastructure
Check Point, an Israeli cybersecurity firm, analyzed Handala's activity and attributed the use of Starlink connections from mid-January 2026, precisely when the Iranian government imposed the national blackout. The same investigation tracked activity until February 28, 2026, the day of the missile attacks, suggesting subsequent continuity. Gil Messing, chief of staff at Check Point, stated to Forbes that their data verifies this access.
The technical point matters because it explains the strategic leap. Starlink operates with thousands of low-orbit satellites at about 540–570 kilometers above the Earth, typically offering 50–150 Mbps download speeds with 20–40 milliseconds of latency through user-connected antennas to ground stations. In a country where ground infrastructure can be shut down, inspected, or filtered, satellite access introduces a new property: persistence.
This persistence shifts the center of gravity of risk. Previously, a blackout was a state lever to "freeze" narratives and coordination. With satellite connectivity, the blackout becomes an incomplete measure: it penalizes those dependent on the national network but not necessarily those who can achieve terminals, coverage, and operation. In the described case, Iranian authorities attempted to interfere with the signal and conduct raids to locate receivers, while determined actors could remain connected.
For corporate leaders, the lesson is not abstract. Resilient connectivity turns local events—protests, cuts, sanctions, conflicts—into scenarios where operational continuity no longer depends solely on agreements with operators and governments, but on access to alternative networks. And that alternative, being private and global, pushes towards a new reality: critical infrastructure managed as a commercial product but operating as a national security factor.
The Dual-Use Dilemma: The Same Access Empowers and Escalates Conflict
Forbes describes an uncomfortable contrast: the free activation of Starlink in Iran allowed people to bypass censorship and blackouts, but it also enabled Handala to remain online to coordinate and amplify threats of cyberattacks against the United States and its allies. SpaceX, according to the same source, did not publicly comment on its use by the group.
This is the crux of the dual-use dilemma in the age of satellite networks: the neutrality of the infrastructure does not neutralize the consequences. As the marginal cost of connecting drops and availability increases, access to capabilities that previously required intermediaries or local infrastructure becomes democratized. This is beneficial for civil society, journalists, family communications, and small business continuity. It also reduces friction for malicious actors.
The typical error of the corporate world is to address this dilemma as a matter of reputation or public relations. In reality, it is a risk architecture. If a service becomes indispensable in crisis contexts, its operator is exposed to tensions that exceed the market: sanctions, licenses, diplomatic pressures, electronic interference measures, and demands for control. Here a pattern emerges: the more resilient the connectivity, the more it resembles strategic infrastructure; the more strategic, the more attempts there will be to govern it.
And this governance is today partial. Starlink may be illegal under Iranian law, but it still functions for "tens of thousands" of users according to the briefing. This mismatch between local norms and technical capability creates an operational void where two things proliferate simultaneously: abundance of communication and abundance of uncertainty.
In terms of power, satellite connectivity shifts advantage from centralized institutions to more agile networks: activists, communities, decentralized groups, and, yes, also offensive actors. The outcome is an asymmetry: shutting down the country no longer shuts everyone down equally.
Private Enterprises as the "Nervous System" in Conflicts: Financial and Regulatory Implications
The briefing provides a key piece of information: SpaceX began offering free access in Iran in January 2026 during protests and a severe blackout, and this fee waiver was confirmed by Ahmad Ahmadian. From a financial viewpoint, this implies forgoing revenue in a context where Starlink supports historical annual investments in the billions of dollars (figures prior to 2026 mentioned in the briefing). However, the return is not just direct income: it’s positioning, expanding the installed base, and proving resilience under extreme conditions.
But the risk multiplies. If a network is used to sustain operations of hostile actors, the operator becomes caught in a triangle of pressures: regulators from the home country, international partners, and expectations of neutrality or alignment. The briefing mentions that Iranian activists pressure the FCC for approvals and U.S. Treasury waivers to enable functionalities like Direct to Cell (direct connectivity to phones) in Iran, and that a cited expert—Nariman Gharib—believes that delays are bureaucratic and political.
This discussion anticipates the next battlefield: the connectivity that today requires visible antennas may tomorrow migrate toward less detectable modalities. Direct to Cell, described as "cell towers in space," reduces the need for dedicated terminals, although the briefing itself captures the evaluation by Professor Mohammad Samizadeh Niko: useful for emergency links in sparsely populated areas, limited in crowds, and vulnerable to interference in cities.
For a C-Level executive, this means that connectivity ceases to be a commodity and becomes a line of risk balance. Three practical implications:
1. Continuity and security: if alternative connectivity sustains operations in a crisis, it can also sustain exfiltration or adversarial coordination. Cybersecurity must assume that the "blackout" is no longer a reliable control of the environment.
2. Compliance and sanctions: operating or enabling services in sanctioned territories introduces legal friction; even humanitarian measures can tension licenses and permits.
3. Interference and quality: attempts at jamming and software countermeasures become part of the product. In unstable markets, reliability no longer depends solely on engineering but on geopolitics.
Here the strategic decision is not about "being or not being," but designing governance: usage policies, cooperation with legitimate actors, and clarity on what can be controlled and what cannot in a global network.
The Exponential Pattern: From Imposed Scarcity to Connectivity Abundance
What I see in this case is the typical progression of a technology crossing the threshold of mass utility. First, internet access from space is digitized; then, for a time, its impact seems smaller compared to terrestrial networks. In crisis, there appears the phase of "disappointment" for traditional observers: they assume that a blackout will continue to function as before. And then the real disruption arrives: a constellation in low orbit turns the blockade into a porous measure.
The most significant economic consequence is the partial de-monetization of control. Not because everything is free—indeed, it requires terminals—but because the state loses exclusivity over the bottleneck. Control is no longer monopolized by national infrastructure. As hardware miniaturizes and access becomes widespread, the cost of coordinating, communicating, and publishing tends to decrease. In parallel, the cost of imposing silence tends to increase.
This does not "resolve" conflict nor guarantee beneficial uses. What it does is redistribute capacity. And that is an irreversible change for industries that depended on technical borders: telecommunications, media, cybersecurity, defense, logistics, and even insurance. Country risk and actuarial models, historically based on assumptions of state control over infrastructure, become outdated.
From my lens of impact, the central criterion is to avoid the trap of blind efficiency: automate connectivity without designing accountability. In networks that traverse sanctions, protests, and offensive operations, engineering must be accompanied by robust security practices, traceability where appropriate, and prudent collaboration with regulatory frameworks. Resilient connectivity is a multiplier of human capacities; without governance, it also multiplies harm.
Executive Direction is Governing Abundance, Not Pretending Scarcity
The Handala case does not prove that satellite connectivity is “good” or “bad.” It proves that it is already structural: a private network can sustain communication when a state attempts to interrupt it, and that reconfigures incentives for all actors.
For companies, the sober path consists in assuming that this type of infrastructure is moving from the edge to the center. Board directors who understand early the dual use will design continuity, compliance, and cyber resilience policies without relying on assumptions from the last century. Those treating it as an isolated incident will be caught between regulations, reputation, and control failures.
The market here is entering the phase of democratization: resilient connectivity reduces the monopoly of access and shifts power towards individuals and decentralized networks, and it must be managed to empower the human element with operational responsibility and security rigor.
