Date saved: 2026-10-24 03:01 (PDT)
Sources: The Guardian, +972 Magazine, Local Call, Portside, Genocide Watch, Powerbase, AP News, Middle East Council on Global Affairs
Key findings
Unit 8200 and Microsoft Azure cloud surveillance
- The Guardian / +972 Magazine / Local Call (2025): A joint investigation reported that Unit 8200 had used a customized area of Microsoft's Azure cloud platform to store audio files of millions of phone calls made by Palestinians in Gaza and the West Bank. The system became operational in 2022. Based on leaked Microsoft documents and 11 sources, the reporting said the trove had been used to plan air strikes in Gaza and as a basis for arrests in the West Bank. Microsoft said it was unaware its products had been used for surveillance of civilians. Microsoft opened a review on August 15, 2025. On September 25, 2025, Microsoft President Brad Smith announced that it had found evidence supporting elements of the reporting, including Azure storage consumption in the Netherlands and use of AI services, and had ceased and disabled specified subscriptions and services of a unit within the Israel Ministry of Defense. The Guardian reported that Microsoft had told Israeli officials that Unit 8200 had violated its terms of service. (Source)
AI targeting systems: Lavender, the Gospel, and new tools
- Portside (2026): The head of data science and AI for Unit 8200 presented on the force's embrace of artificial intelligence for the purposes of finding new terrorists. During Israel's May 2021 assault on Gaza, his unit had used AI to generate two hundred targets, a process that in the past would have taken almost a year. The journalist Yuval Abraham identified two separate machine-learning algorithms that were churning out lists of people or places to bomb. The first, called the Gospel, offered up locations supposedly linked to militant groups or their members, though sources told Abraham that the majority of its suggestions were private residences. The second, called Lavender, made kill lists of individual people, assigning scores that approximated how likely they were to belong to a militant group. The use of these systems contributed to the bombing's astronomical toll. (Source)
- Genocide Watch (2026): Lavender, an AI program created by the Israeli military as part of Unit 8200 specifically to automate kill lists, generated at least 37,000 recommendations for human targets in the first two months after October 2023. Officers reportedly spent as little as 20 seconds reviewing each target before approving strikes, with human oversight often serving as little more than a rubber stamp. With a reported error rate of around 10 percent, the system misidentified thousands of civilians. Between October 7 and October 15, 2023, because of AI-facilitated systems used to target homes and people, 47 Palestinian families were completely eliminated from the civil registry. By April 2025, more than 90 percent of the infrastructure destroyed in Gaza had been targeted using AI. Other AI systems include Where's Daddy? which uses lists generated by Lavender to geographically track Palestinians, and Wolf Pack, a biometric intelligence database that includes Blue Wolf, a mobile application allowing soldiers to upload photographs of Palestinians into the database. Meta collaborated with Project Lavender by providing data from WhatsApp groups. Palantir co-founder Alex Karp wrote that the company was extensively supporting various ground attacks in Gaza and Lebanon, including the 2024 exploding pager attacks in Lebanon. (Source)
Israel's ongoing operations in Gaza and the West Bank
- AP News (2026): Israeli strikes in Gaza killed three people on Friday in southern Gaza and Gaza City, according to local health officials. The first strike in southern Gaza killed one person. Israel's military said it targeted a Hamas militant. The second strike killed two people in Gaza City, but Israel's military did not immediately comment. An attack in the West Bank killed two Israeli soldiers. The army said it has started demolishing infrastructure that poses a threat and that its soldiers continue operating across the West Bank. (Source)
- Middle East Council on Global Affairs (2026): Approximately 761 attacks were recorded during the first four months of 2026 in the West Bank, an average of 190 per month. This puts the West Bank on track to experience more than 2,000 attacks this year, compared to 1,835 in 2025. Israel's announcement in early September that it had achieved full operational control over the Ali al-Tahir heights in southern Lebanon (though the extent of this control remains disputed) offers an example of how it leverages actions on the ground to strengthen its negotiating position. (Source)
Unit 8200 cyber operations against Iran
- The Brain Switch Global (2026): An investigative documentary uncovered the hidden digital conflict between Israel and Iran, a shadow war fought with wiper malware, social media honeytraps, and satellite-level infrastructure blackouts. Elite Israeli cyber intelligence groups, specifically Unit 8200, began flooding Instagram and WhatsApp with highly targeted advertisements promising lucrative positions for simple data collection and photography, masked under the guise of legitimate international logistics companies. During the 12-day war, a massive electronic cyber strike was deployed just moments before Israeli Air Force fighter jets left the runway. The tactical objective was total electronic suppression. The cyber strike targeted Iranian air defense radars, temporarily blinding the early warning systems and systematically severing the communication lines linking the central military command centers. (Source)
- Vantage with Palki Sharma (2024): Unit 8200 is Israel's secretive cyberwarfare unit. On September 17-18, 2024, thousands of pagers and walkie-talkies used by Hezbollah members exploded across Lebanon, killing at least 12 people including children and injuring thousands. Walkie-talkies started detonating the next day, killing at least 20 and leaving 450 injured. All fingers pointed to Israel's secretive cyberwarfare unit, Unit 8200. (Source)
Israel's military and intelligence apparatus in 2026 is operating at the intersection of three overlapping spheres: conventional military operations in Gaza and Lebanon, an expanding surveillance and cyber infrastructure directed at Palestinians in the West Bank and Gaza, and a deepening set of cyber operations against Iran and Hezbollah that has moved from the shadows into open documentation. The throughline is the institutionalization of AI-assisted targeting and mass surveillance as standard operating procedure, not experimental technology.
The most consequential reporting this period concerns Unit 8200, Israel's signals intelligence unit comparable in function to the NSA. A joint investigation by The Guardian, +972 Magazine, and Local Call found that Unit 8200 had used a customized area of Microsoft's Azure cloud platform to store audio files of millions of phone calls made by Palestinians in Gaza and the West Bank. The system became operational in 2022, and Microsoft (after opening a review) announced it had found evidence supporting elements of the reporting and had ceased and disabled specified subscriptions and services of a unit within the Israel Ministry of Defense. Microsoft told Israeli officials that Unit 8200 had violated its terms of service.
On the targeting side, the AI systems first reported in 2024 (Lavender, which generated kill lists, and the Gospel, which accelerated target location generation) have remained in use and have been supplemented by new systems. One system called Where's Daddy? uses lists generated by Lavender to geographically track Palestinians and alert intelligence officers when they return to their family homes at night. Another, Wolf Pack, is a biometric intelligence database used to profile and store biometric data belonging to Palestinians, with a mobile application called Blue Wolf that allows soldiers to upload photographs of Palestinians into the database. Meta collaborated with Project Lavender by providing data from WhatsApp groups containing the names of Palestinians or activists wanted by Israel.
The cyber dimension against Iran has become more visible. Reporting documented how Unit 8200 conducted covert digital recruitment campaigns on Instagram and WhatsApp, flooding the platforms with targeted advertisements promising lucrative positions for simple data collection and photography, masked under the guise of legitimate international logistics companies. During the 12-day war, a massive electronic cyber strike was deployed just before Israeli Air Force fighter jets left the runway, targeting Iranian air defense radars and temporarily blinding early warning systems.
Source links
- The Guardian / +972 Magazine / Local Call: Investigation into Unit 8200 use of Microsoft Azure for Palestinian surveillance
- Portside: Target Practice: Israel's AI-assisted targeting
- Genocide Watch: Israel Used AI-Assisted Technology to Destroy Infrastructure in Gaza
- AP News: Attack in the West Bank kills 2 Israeli soldiers, and other Mideast news
- Middle East Council on Global Affairs: Israel Between Elections and Open Fronts
- The Brain Switch Global: The Invisible War: How Israel and Iran Are Hacking the Real World
- Vantage with Palki Sharma: Unit 8200: Israel's Secret Cyberwarfare Unit