CISA warns against the possibility of cyber hits, improvised explosive devices — “a staple tactic of the Islamic Revolutionary Guard Corps” — and drone attacks against well-defended or soft targets.