Top stories.
- Pro-Iranian hackers claim cyberattack against Stryker.
- Wisconsin ambulance provider discloses data breach.
- CISA shortens the patch deadline for a critical SolarWinds flaw.
Pro-Iranian hackers claim cyberattack against Stryker.
Pro-Iranian hackers have claimed responsibility for a major data-wiping attack against US medical manufacturing company Stryker, the Wall Street Journal reports. The company yesterday told its 56,000 employees to disconnect from all networks and avoid turning on company devices. The hacktivist group Handala claimed responsibility, saying the attack was retaliation for US-Israeli strikes on Iran. Palo Alto Networks has linked Handala to Iran's Ministry of Intelligence and Security (MOIS).
NBC News says the hackers likely gained access to the company's Microsoft Intune account, which is used for managing corporate devices. Rafe Pilling, director of threat intelligence at Sophos, told NBC, "One of [Intune's] features is the ability to remotely wipe a device if it’s lost/stolen etc. Looks like they triggered that for some or all of the enrolled devices." Stryker hasn't confirmed these details, but said ransomware was not involved and that its own systems were not hacked directly.
KrebsOnSecurity notes that the attack has the potential to cause supply-chain disruptions, since most hospitals in the US use Stryker's devices.