Cloud · 225 days ago
Attackers abused endpoint-management administrative features to disrupt Stryker's Microsoft environment on March 11. Reports say roughly 200,000 devices were wiped and about 50 TB of data were exfiltrated.
5 sources covering this story
CISA urges IT to harden endpoint management systems after cyberattack by pro-Iranian group
While the US has, at least temporarily, curtailed some of this group’s activities, the risk to misconfigured endpoint management systems remains high.
Secure endpoint management systems immediately, CISA urges - Help Net Security
CISA issues warning after Stryker cyberattack, urging organizations to harden endpoint management systems against similar threats.
CISA urges organizations to harden endpoint security following Stryker attack
The agency is coordinating with the FBI and other agencies amid concerns about additional threat activity involving Microsoft Intune.
CISA urges US orgs to secure Microsoft Intune systems after Stryker breach
organizations to follow Microsoft guidance to strengthen the Intune endpoint management tool after a cyberattack exploited it to wipe medical technology giant Stryker's systems.
CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization | CISA
CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization CISA is aware of malicious cyber activity targeting endpoint management systems of U.S.
Part of the PlainSec briefing for 2026-03-20