18 ms·

Iran-backed hackers claim wiper attack on medtech firm Stryker

• bingogo 7mo ago
  Medtech firms consistently underinvest in corporate network cybersecurity because almost all their security and compliance spending goes to device safety requirements, not IT hardening. This is exactly the kind of gap wiper attacks target.
  • FreakLegion 7mo ago
    This was more likely an Intune admin getting phished. Intune has a built-in wipe action: https://learn.microsoft.com/en-us/intune/intune-service/remote-actions/device-wipe https://learn.microsoft.com/en-us/intune/intune-service/remo....
    • thyristan 7mo ago
      Which in itself wouldn't be too bad, if mobile platforms had proper backup facilities that allowed individuals and enterprises to easily get all their devices to the exact backed up state they were before being wiped. But that seems to be unwanted by Apple and Google...
• s5300 7mo ago
  [dead]
• cobbzilla 7mo ago
  My only knowledge of this company is as a manufacturer of gurneys for ambulances. I guess they have some sensitive data on our emergency services organizations and their headquarters addresses and accounts payable people, maybe PII on signatories (officers, board members & “important people”) and whatnot. Anyone know if it would be worse?
  • serf 7mo ago
    >My only knowledge this company is as a manufacturer of gurneys for ambulances. they have a tremendous catalog[0]. spend time in a hospital, dental office, rehab, etc and you'll see the logo plastered across everything. [0]: https://www.stryker.com/us/en/portfolios/medical-surgical-equipment.html https://www.stryker.com/us/en/portfolios/medical-surgical-eq...
    • cobbzilla 7mo ago
      yeah that is a lot of tech, but it’s all B2B- no consumer breach, right?
      • pastescreenshot 7mo ago
        Probably worse in the boring B2B way, not the consumer-breach way. Stryker is deep in hospital operations, so the immediate risk is supply chain and support disruption rather than leaked patient data. The Krebs post says one hospital system already could not order surgical supplies, and if the Intune remote wipe detail is true, recovering internal devices and admin workflows could take a while even without any medical devices themselves being compromised.
        • cobbzilla 7mo ago
          so maybe more hospitals shutdown from ransomware attacks coming?
      • samrus 7mo ago
        That second B has alot of customers. Sick and dying customers that arent very flexible on demand
      • red-iron-pine 7mo ago
        sure no consumer data breach... but this is still going to shutdown or impact lots of medical facilities. heart rate monitors that go down and no one can get support for, cannot get replacement CAT scan equipment, etc.
• marijan_div 7mo ago
  Stryker is far more than ambulance gurneys. They’re one of the largest med-tech suppliers, with equipment in operating rooms, ICUs, and surgical departments everywhere. If a wiper actually hit internal systems, the bigger concern isn’t consumer data but disruption to manufacturing, logistics, and hospital support. That kind of outage could ripple through a lot of hospitals pretty quickly.
  • Dowry9092 7mo ago
    Go and switch your suppliers my friends, talk to purchasing now.
    • levinb 7mo ago
      Stryker holds monopoly supplier positions for a number of medical products, esp including surgical implants and associated OR tools. If Stryker stays down, supplies of some things will run out soon and many people will find themselves without medical procedures available.
      • klipt 7mo ago
        Yet another reason monopolies are bad.
  • thisislife2 7mo ago
    Does it serve the US military?
• camillomiller 7mo ago
  Seems dire but hardly a supply chain disrupting attack. Stryker is a huge supplier but it not as if this will debilitate the medical supply chain completely. Seems like the hackers found a door they could kick open easily and then justified the action ex-post.
  • selcuka 7mo ago
    My understanding is that the aim was not to disrupt the supply chain but to harm the company itself.
  • duskdozer 7mo ago
    If they're a primary regional supplier, it could have a huge impact. It doesn't have to break the entire country to matter.
• JonChesterfield 7mo ago
  So gain access to a machine that can ask microsoft intune to eviscerate the company, ask it to do so, done. Bit of a shame all the machines had that installed really. Reminds me of crowdstrike.
  • shiroiuma 7mo ago
    The company should have known better than to trust their IT infrastructure to Microslop. This is their own fault.
    • Xylakant 7mo ago
      My 95% bet is that the attacker just gained access to an account with suitable privileges and then went on to use existing automation. The fact that it’s intune is largely irrelevant - I’m not aware of any safeguards that any provider would implemen. So the options here are MDM or no MDM and that’s a hard choice. No MDM means that you have to trust all people to get things as basic as FDE or a sane password policy right. No option to wipe or lock lost devices. No option to unlock devices where people forgot their password. Using an MDM means having a privileged attack vector into all machines.
      • neo_doom 7mo ago
        No MDM just isn’t an option for most enterprises but ideally the keys to the kingdom are properly secured.
        • mulmen 7mo ago
          How does that look exactly? Someone has to be able to use MDM to manage devices or there’s no point in having it. This scenario is firmly in rubber hose/crescent wrench cryptanalysis territory. Can updates have delays with approval gates built in? Does MDM need a break glass capability?
          • heraldgeezer 7mo ago
• Banditoz 7mo ago
  Does InTune have some sort of check that goes "if over 1% of devices are wiped within a certain timeframe, stop all new device wipe requests"? Seems like it should be a feature, especially if these kinda attacks pick up.
  • heraldgeezer 7mo ago
    Everything is obvious in hindsight And to be clear, SCCM and Intune is a gun. MS will not stop you from blowing your foot off with the gun. Remember https://www.itprotoday.com/windows-7/aggressive-configmgr-based-windows-7-deployment-takes-down-emory-university https://www.itprotoday.com/windows-7/aggressive-configmgr-ba... ? >During TechEd 2014, Emory University's IT department prepared and deployed Windows 7 upgrades to the campuses computers. If you've worked with ConfigMgr at all, you know that there are checks-and-balances that can be employed to ensure that only specifically targeted systems will receive an OS upgrade. In Emory University's case, the check-and-balance method failed and instead of delivering the upgrade to applicable computers, delivered Windows 7 to ALL computers including laptops, desktops, and even servers.
    • spwa4 7mo ago
      That ANY kind of config change should be rate-limited has been pretty obvious and hammered on in SRE manuals for at least 10 years.
      • heraldgeezer 7mo ago
        And who sets the limits? MS? What if a company WANTS to wipe their entire fleet?
        • mmsc 7mo ago
          Require dual sign off
        • jiggawatts 7mo ago
          "Call support so they can turn off the safeties for an hour."
• geobuk-dosa 7mo ago
  [flagged]
• bitwize 7mo ago
  The "Fucking for Virginity" approach to infosec strikes again!
  • LPisGood 7mo ago
    Can you elaborate what you mean? Are you referring to a paradigm where people make their systems less secure in the effort to make them more secure?
    • jojobas 7mo ago
      I think this refers to "bombing for peace". Sure the West should have just let Iran nuke whoever it wanted.
      • RobotToaster 7mo ago
        Iran wasn't going to nuke anyone. They want Islam to dominate the world, that can't happen if there isn't a world left to dominate.
        • LtWorf 7mo ago
          I agree with the first part of what you said. Mostly because they didn't have nukes to begin with.
          • iwontberude 7mo ago
            I think it’s possible they already have nukes and want to wait for Israel to over extend themselves so that they can use them for a first strike with maximum efficacy. They’ve done a lot for Russia. The idea that they don’t have nuclear armament is somewhat hard for me to believe.
            • LtWorf 7mo ago
              The whole point of having nukes is letting everyone know you have them.
• jamesmishra 7mo ago
  Some people on Twitter have jokingly suggested that the Iranians were looking for the maker of the Stryker military vehicle. https://en.wikipedia.org/wiki/Stryker https://en.wikipedia.org/wiki/Stryker
  • Drupon 7mo ago
    Yeah dumbasses regularly post nonsense on Elon's X™
    • fartfeatures 7mo ago
      I'm pretty sure that is not exclusive to X.
• ChrisArchitect 7mo ago
  Related: Iran warns U.S. tech firms could become targets as war expands https://news.ycombinator.com/item?id=47341007 https://news.ycombinator.com/item?id=47341007
  • trhway 7mo ago
    Well, time to dust off anti-drone defense systems. Today on NPR they talked that Iran plans to launch drones from ships into California. https://www.10news.com/news/local-news/authorities-warn-of-potential-iranian-drone-attack-on-california-raising-concerns-for-military-communities https://www.10news.com/news/local-news/authorities-warn-of-p... Fox News drone expert: https://nypost.com/2026/03/11/us-news/iran-could-use-drones-to-make-a-deadly-strike-on-california-at-any-time-says-a-top-u-s-army-expert-and-were-nowhere-near-ready-for-what-could-happen/ https://nypost.com/2026/03/11/us-news/iran-could-use-drones-...
    • notenlish 7mo ago
      I feel like that's not realistic, why would they launch drones to California rather than some place like DC or NY. It's a long distance. I don't even think they'd launch drones to DC either, they seem to be all in on attacking oil infrastructure as well as us bases & defense systems in the Middle East, rather than America.
      • shiroiuma 7mo ago
        >why would they launch drones to California rather than some place like DC or NY. It's a long distance. Because they allegedly have a ship already in the Pacific loaded with drones. DC and NY are way too far from Iran to launch any kind of attack; the only attack they can possibly do is from a ship, and ships can be anyplace where there's deep enough water.
    • riffraff 7mo ago
      > Iran plans to launch drones from ships into California That does not make any sense to me. Does Iran have a bunch of ships in the Pacific? Why? How would they even got close enough to the US coast without being noticed at this point? I'm not saying it's not true, I just don't understand.
• assaddayinh 7mo ago
  [dead]
• 0x53 7mo ago
  Never add your personal device to a companies MDM…
  • mk89 7mo ago
    Never use your personal device for work, you wanted to say, probably.
    • heraldgeezer 7mo ago
      The only maybe grey area is to only us it as authenticator. But yes even then the company needs to provide this, a cheap phone works.
      • kelvinjps10 7mo ago
        USB keys? Isn't that what most companies do?
        • heraldgeezer 7mo ago
          No, most companies use MS authenticator now for Office 365... https://support.microsoft.com/en-us/account-billing/download-microsoft-authenticator-351498fc-850a-45da-b7b6-27e523b8702a https://support.microsoft.com/en-us/account-billing/download...
          • kelvinjps10 7mo ago
            In the company I used to work they shipped you a chromium os computer and a yubikey
            • heraldgeezer 7mo ago
              Most companies are definitely NOT using Yubikeys. Did you work for Google? Nice man :) MFA in general had to be forced on companies, and then it is most often in software on a phone. Here are some rough numbers. google_workspace: total_active_users: "3 billion (includes free/consumer Gmail)" paid_business_customers: "11 million companies (2024)" paid_customer_growth: "+1 million companies in under 1 year (2023-2024)" global_business_market_share: "~50%" fortune_500_presence: "minority share, weaker than Microsoft in enterprise" mfa_with_yubikeys: internal_google_employees: "100% use hardware keys (Yubikey/Titan) — since 2017" fido_u2f_origin: "Google co-created U2F standard with Yubico post-Operation Aurora" estimated_user_adoption_pct: "~1-3% of all Workspace users (inference, not published)" concentration: "Highest in finance, government, tech/security-conscious orgs" typical_majority_mfa_method: "TOTP apps (Google Authenticator) or SMS" enterprise_passkey_deployment_2025: "87% of US/UK enterprises deploying or have deployed passkeys (FIDO Alliance — includes all hardware key types, not Yubikey-specific)" microsoft_365: total_active_users: "~270 million (commercial)" paid_business_customers_us: "~1 million active US business customers" us_company_penetration: "~3% of all US companies" global_business_market_share: "~45%" fortune_500_presence: "~75% of Fortune 500" mfa_with_yubikeys: exact_stat_available: false note: "Same data gap as Workspace — no published breakdown" caveats: - "Google's 3B user figure conflates consumer and business — not comparable to Microsoft's 270M commercial figure" - "Market share figures vary by methodology (seats vs revenue vs orgs)" - "Yubikey adoption % is an industry inference; treat as directional only" - "Passkey != Yubikey — FIDO Alliance 87% figure covers all FIDO2/passkey methods"
• sgc 7mo ago
  They are trying to hurt innocents in retaliation for the US murdering their children. I understand the sentiment, but strongly disagree with acting on it. Ukraine has done a much better (of course not perfect) job of retaliating against military targets in response to russian war crimes.
  • vkou 7mo ago
    I'm sure that if Iran had the backing of the Western world, and had their surplus of armaments funneled it's way, it would be bombing army bases and refineries and airfields and factories and port facilities in the US. Unlike Ukraine, it does not, so it seems to be focusing on cyber vandalism and blowing up oil infrastructure in US vassal states, and other low-cost, high-ROI activities.
    • sgc 7mo ago
      Relatively speaking, I don't care about oil facilities or cyber-vandalism, I care about school children and hospitals and sick people.
  • Teever 7mo ago
    That’s not the motivation for these attacks at all. They’re waging asymmetric warfare against a much larger and more exposed opponent. Their goal is to make it too troublesome for the US/Israel to continue attacking them, like a swarm of bees attacking a bear to keep it away from their honey. Iran is in it to win it and the US is so very obviously not. The question is if the pressure that Israel can put on the current administration greater than the pressure that Iran can put on America as a whole. Time will tell.
    • dominicrose 7mo ago
      Trump and republicans are now all-in in this war and this administration can tolerate a huge amount of chaos if it allows them to keep winning. It doesn't matter wether Israel pressures the administration or not. I'm not confident that the regime will fall but I am confident that it will be put in its place internationally even if it means closing the iranian borders from the outside indefinitely. BTW the US and Israel are not alone in this war.
• fnord77 7mo ago
  That's a shame, they make impressive products
  • 4gotunameagain 7mo ago
    [flagged]
    • burnermore 7mo ago
      See, here is what I've observed. I don't expect to change your POVs. Nevertheless... The issue started when Israel was ready to have recognition from Saudi Arabia on their statehood. This would make Hamas irrelevant. And puts Sunnis (Iran) lesser recognised. Meanwhile Shia's (Saudi) will become the defacto in the Muslim world and half of Muslim world would either tolerate or be OK with Israel. Hamas attack on Israel at Oct 7 stopped that. Hamas has been supported by Iran for a long time. So in the whole Gaza - Israel thing, Iran was backing Hamas. Then they proxied with them by providing assistance. Then they eventually directly got involved. You need to understand, there was good period of peace between Israel & Palestine until Oct 7. While I reject US toppling govts around the world, Iran's hand is not clean in this one. But also, US thought this would be as easy as Venezuela and killing Iran's leader will stop this. Interfering in other countries biz have consequences. And in this case, it's true for Iran & US.
      • dns_snek 7mo ago
        > You need to understand, there was good period of peace between Israel & Palestine until Oct 7. What a disgusting and patronizing rewriting of history. This "peace" was enforced by ongoing occupation of Palestine and abuse of the people living there.
        • yard2010 7mo ago
          [flagged]
      • ribosometronome 7mo ago
• bawolff 7mo ago
  So... did they have backups? Wipe all data kind of seems like the best kind of cyberattack if you have backups. No data falling into wrong hands, no left behind rootkits, no ransome threats etc
  • sofixa 7mo ago
    > No data falling into wrong hands, no left behind rootkits, no ransome threats etc You won't necessarily be able to know that the data hasn't already been exfiltrated and that the backups aren't post-compromise. Or that by restoring the backup you won't get back to the state that allowed them to get in in the first place.
• renewiltord 7mo ago
  They’ve been around for a while. Threat actors are something that I want our governments to be working on stopping. If they were capable, I would say we should run a government Project Zero but I doubt anyone would do long term service for $70k/yr when they could be making 10x-100x that. Anyway, the bombings will have to continue till we rubble our enemies.
  • jonstewart 7mo ago
    We had a government agency working on stopping threat actors, the Cybersecurity & Infrastructure Security Agency, but then DOGE ruined it. Now it’s a shell.
    • renewiltord 7mo ago
      So the role they were fulfilling is gone entirely? What was it?
      • mapotofu 7mo ago
        The providing guidance and standards across disparate critical infrastructure settings and also provided training, hands on keyboard support, and a lot of other services. Most of that has been significantly reduced. CISA was NOT another agency doing nothing.
• shevy-java 7mo ago
  So their own faulty security is now blamed on others. That's not new.
• fay_ 7mo ago
  [dead]
• jacquesm 7mo ago
  I'm trying to imagine the kind of response the USA would inflict on a country that wiped a girls school stateside.
  • haritha-j 7mo ago
    They'd probably go all in, kill the leader of the nation, kill some of the successors in line, bomb the daylights out of a bunch of civillian sites, wipe out a girls school, sink a few ships... oh wait.
  • myth_drannon 7mo ago
    [flagged]
    • inglor_cz 7mo ago
      And some of the perps of the terror attack on Munich Olympic Games escaped retribution completely.
      • thyristan 7mo ago
        Yes, but Germany isn't the US. We do believe in the "rules-based international order", meaning that there will be a strongly worded letter, some discussion in the UN security council, ending in a veto by China or Russia. Followed by years of nothing at all, a memorial and yearly speeches at some day of rememberance. I'm not sure if this is any better.
        • myth_drannon 7mo ago
          West Germany's response to Palestinian terrorism was horrendous. But again, it's all about power. When Arabs have the most important resource in the world, you have little choice and have to submit. Lately Germany improved by much and grew some spine.
        • heraldgeezer 7mo ago
          [flagged]
• mbix77 7mo ago
  Killing 175 children would illicit such a response also from USA hackers.
  • deleted 7mo ago
    [deleted]
  • fakedang 7mo ago
    Killing 175 children in the US would be called another Tuesday school shooting or something. Also elicit.
• RcouF1uZ4gsC 7mo ago
  I wonder if there was some confusion between Stryker the Army infantry vehicle and Stryker the medtech company. It seems a really weird target for Iran otherwise.
  • samrus 7mo ago
    Medtech company males complete sense. Iran's strategy seems to be to tighten the screws on US citizens so they put pressure on the government to stop the war. They seem to be doing that with things like higher gas prices, and now delays at hospitals with this stryker hit Makes sense given that US citizens tend not to be too supportive of american wars, but tolerate them because it doesnt really affect them. So iran can get this to affect them then people might come out to the streets. Which would be especially effective in a midterms year like now. Man itll be ironic as fuck if iran manages to enact regime change in the us before the us does in iran
    • LEDThereBeLight 7mo ago
      It it was the case, Iran underestimates how vindictive Americans are.
      • samrus 7mo ago
        Meh. Americans showed in vietnam and iraq that they dont just go along with wars they think are bullshit This could make americans hate iran and demand retribution, but i think its more likely to make americans made at israel and their own governmnet for dragging them into it for no reason
  • FarmerPotato 7mo ago
    Yeah, I had to lookup the names! Stryker the armored vehicle is made by General Dynamics. Striker the fire truck is made by Oshkosh Corporation.
• globemaster99 7mo ago
  [flagged]
  • elbasti 7mo ago
    If by "survival" you mean surviving against a bloodthirsty regime that killed 10,000 people in January alone, then yes: the people of Iran are fighting for survival.
    • gravisultra 7mo ago
      That's pure Israeli propaganda, and as you see there is absolutely no "up rising" from Iranian citizens. They are however, uniformly against Israel and the US given that we started this illegal war by bombing a girls school and murdering over 170 children. Much like Israel has been doing since its creation in 1948.
      • UltraSane 7mo ago
        "there is absolutely no "up rising" from Iranian citizens" This is an extremely bold lie. There have been many uprisings by Iranians against their horrible government that are extremely brutally suppressed by said government. https://www.rnz.co.nz/news/world/589307/iran-police-chief-says-anti-government-protesters-treated-as-enemies https://www.rnz.co.nz/news/world/589307/iran-police-chief-sa... Iranian protesters will be treated as enemies if they support Tehran's foes, the country's top police officer warned, as the Middle East war sparked fears mass anti-government rallies could reignite. "If anyone comes forward in line with the wishes of the enemy, we will no longer see them as merely a protester, we will see them as an enemy," said national police chief Ahmad-Reza Radan in comments aired by state broadcaster IRIB late on Tuesday. "And we will do to them what we do to an enemy. We will deal with them in the same way we deal with enemies," he added. "All our forces are also ready, with their hands on the trigger, prepared to defend their revolution." His warning comes after the government cracked down on anti-government protests in January, sparked a month before over economic grievances in the sanctions-hit country. The authorities deemed the protests to be "riots" and Radan at one point issued an ultimatum to protesters to hand themselves in or face the full force of the law. Iranian authorities acknowledge more than 3000 deaths in the unrest, including members of the security forces and bystanders, but say the violence was caused by "terrorist acts" fuelled by Iran's enemies. The US-based Human Rights Activists News Agency (HRANA), however, has recorded more than 7,000 killings in the crackdown, the vast majority protesters, though the toll may be far higher. More than 50,000 have been arrested, it says. US President Donald Trump had initially cheered on the protesters, threatening to intervene on their behalf as authorities launched a deadly crackdown, but his threats soon shifted to Iran's nuclear programme. Washington launched strikes with Israel on Iran on February 28, sparking retaliatory strikes by Tehran against Israel and US bases across the Gulf region.
• srean 7mo ago
  Patriot of Persia https://www.goodreads.com/book/show/12202123-patriot-of-persia https://www.goodreads.com/book/show/12202123-patriot-of-pers... An important book to read. So many people think this started with the islamic revolution of the 70s. The meddling goes further in time.
  • gravisultra 7mo ago
    Zionists have been meddling in the Middle East since their ideology was created in the late 1800s.
    • margalabargala 7mo ago
      The current Middle East situation dates back to at least the second millenium BCE.
      • JasonADrury 7mo ago
        Including the significant amount of recent European immigrants?
        • margalabargala 7mo ago
          Obviously the recent immigrants are recent. Anything that is recent is recent. Was there a time in the last several thousand years when there was not a "significant amount of recent X immigrants"? No there was not. The whole region is layers upon layers upon layers of waves of immigration of different groups.
      • gravisultra 7mo ago
        No it dates to the late 1800s with the creation of Zionism. It's important that we stay rooted in history and not religious mythology.
        • margalabargala 7mo ago
          The Middle East had plenty of wars, religious violence, etc long before the late 1800s. The Crusades are not religious mythology. The Mongols are not religious mythology. The Rashidun Caliphate was not religious mythology. These are just three entries in a very long list of non-peaceful power shifts in the Levant.
• DeathArrow 7mo ago
  So US and Israel wipe out a school filled with children and Iranian hackers delete some data as retaliation?
  • pjc50 7mo ago
    There's an awful lot more involved on both sides of this. I don't think Iran gets enough criticism from the "non-rightwing" faction for its role in both supplying Russia with weapons against Ukraine and for escalating the conflict around Israel resulting in reprisals against Palenstinian and Lebanese civilians. It would take some unpleasant searching but I'm sure one can find the most recent incident of Hezbollah (not Hamas, Hezbollah are explicitly backed by Iran) either carrying out a missile or suicide bombing attach with the loss of Israeli civilian lives. (disclaimer: the war of aggression against Iran by Israel and its decapitation attacks are also wrong)
• iJohnDoe 7mo ago
  One irony here is that Stryker makes their partners and suppliers jump through so many cybersecurity hoops. I’m talking months and ridiculous demands. Then they get hacked themselves. They should have gotten their own shit together as well.
• b112 7mo ago
  I absolutely think there should be ramifications for such acts. What I find bizarre, is that China and Russia do this daily, and "oh well". If such states sent over people to, you know, do damage using a bomb instead of a hack, there'd be trouble. As in, two towers were damaged, and it set off 20 years of war ... mostly against the wrong states. Yet if you cause death via subtle means, such as reducing hospital infra, or attack and destroy infra via hacking, meh. Oh well! This sort of falls inline with all other compute issues that appear before all elected bodies on the planet. An immense lack of understanding and comprehension, coupled with an inability to act.
  • s5300 7mo ago
    [dead]
  • WD-42 7mo ago
    Well their country is currently being bombed, curious what additional ramifications you’d like to see?
    • pavel_lishin 7mo ago
      I think he's pointing out that we're not bombing China or Russia or North Korea, or any other states, over similar attacks.
      • gzread 7mo ago
        Well they're not... um... what was it that Iran was doing to make us bomb them again?
        • RankingMember 7mo ago
          plainly: they're being punished for not having nuclear weapons already
      • kelipso 7mo ago
        Because they have nukes unlike Iran.
• s5300 7mo ago
  [dead]
• strict9 7mo ago
  It appears personal devices were also impacted by this via Microsoft Intune. That app is presented to employees as a way to get their email/slack on their personal device without giving IT systems access to it. IT systems around the country say that they have no access to your personal data and there they can only block access to Intune apps. But the linked reddit thread[1] in this article notes personal devices getting wiped and locked out. [1]: https://www.reddit.com/r/cybersecurity/comments/1rqopq0/stryker_hit_by_handala_intune_managed_devices/ https://www.reddit.com/r/cybersecurity/comments/1rqopq0/stry...
  • DANmode 7mo ago
    MDM enrollment has colloquially meant your device could be wiped for the security|incompetency of your firm for quite some time.
    • deleted 7mo ago
      [deleted]
    • deleted 7mo ago
      [deleted]
  • stackskipton 7mo ago
    Knowing InTune MDM setup, it has two modes, control a few apps or control entire phone. iOS will tell you during setup what's happening and I've been at plenty of companies where employees are told "It's just for our apps" but it's really full Device Control. $TwoCompaniesAgo tried that "It's just for our applications" but when I went to install it, iOS went "This is 100% full device control" and I rejected it.
    • bfrog 7mo ago
      Exactly this. I love Apple tells you it’s a big Trojan in effect that can do anything. Yeah no thanks.
  • mjlee 7mo ago
    Bring Your Own Device (BYOD) MDM profiles typically don't allow personal data access outside of their sandbox, but they almost always include remote wipe capabilities. iOS at least displays a very clear warning when you import the profile telling you exactly what it can do. Not that this isn't awful, but it's good to be clear on what this can do when used within normal expectations.
• behnamoh 7mo ago
  [flagged]
  • alistairSH 7mo ago
    I'm glad there's finally a coalition But the coalition (is two nations really a coalition?) hasn't state regime change is the purpose of the war. Well, they did, and then changed their minds. Several times. And, as I'm sure you're aware, knocking off the head of state in Iran doesn't necessarily move the needle on regime change. Dismantling the IRGC and removing the hardliners will be a long, dangerous operation and I doubt the US has the stomach for that. And Israel has already moved on to bombing Lebanon again.
    • SV_BubbleTime 7mo ago
      [flagged]
      • lnsru 7mo ago
        I am asking Iranians what’s next. It’s always the most important question. There will be some other guys with weapons taking over. Or should we expect peaceful elections coming like it was in Germany after defeating Nazis? But wait, Germany was conquered and divided by Allies to make it happen.
      • deleted 7mo ago
        [deleted]
      • Pxtl 7mo ago
        They were explaining US politics, not Middle East politics. Whether or not you see a first-world project to liberate Iran as legitimate, fundamentally the Trump government is too mercurial to see it through. While the Bush-era invasion of Iraq was indefensible (if it was defensible they wouldn't have needed to push the WMD lie to justify it) and their initial projections were as ridiculously optimistic as the Trump government's, the Bush crew were clearly ideologically committed to the project and willing to see it through to the end. Trump's people are not. This is "move fast and break things" and "strong opinions weakly held" in geopolitical form.
• jmyeet 7mo ago
  Isn't it a weird coincidence that soon after the US and Israel started an unprovoked and unnecessary war (that billionaires will profit handsomely from, as an aside) that we get stories like this to manufacture consent? I belive that US tech firms have increasingly become valid military targets. There was a post about this yesterday [1]. BUT I don't think that extends to hospitals and medical supplies, regardless of who owns them or if they treat soldiers or not. But, as best as I can tell, the company has been inconvenienced, possibly massively. Let's put this in context. The US launched a Tomahawk missile at a school and killed 160 school girls. And I bet that if you look into pretty much any company hit by a hack, you'll find cost-cutting on IT to increase executive pay and bonuses. Between the Iran-Iraq war, which the US was responsible for, and decades of sanctions, the US has by this point killed millions of Iranians. The real problem here is the general ignorance of the average American of America's 70+ years of war crimes against Iran [2]. I mean this as analysis, not justification. But at some point the incredulity at blowback rings hollow. [1]: https://news.ycombinator.com/item?id=47341007 https://news.ycombinator.com/item?id=47341007 [2]: https://news.ycombinator.com/item?id=47342791 https://news.ycombinator.com/item?id=47342791
  • behnamoh 7mo ago
    [flagged]
    • RobotToaster 7mo ago
      Why stop there? The 1953 coup backed by the USA and UK overthrew the last democratically elected leader of Iran, because he was nationalising the oil.
    • orwin 7mo ago
      Please stop with the '35k', you have no idea where that number comes from, it's not even good propaganda anymore. OSINT groups say 15k, human rights activists said they confirmed 7000 death (6400 protesters) and have 11k more to investigate so at most it's 18k. Iran executed 1500 people in 2025, and usually execute between 50 and 500 every year. They arrested 50 000 protesters, a huge part of which will be put to death. You can say a lot against the Mollahs, and you'd be right , they're horrible but please don't lie, it makes the argument weaker, and seems like slopaganda. Still, Saddam Hussein chemical bombs donated by the US killed way more Iranians than the regime killed over 50 years, so I think the 'just war' propaganda need to stop. Saudis killed at least 53k slaves over the past 10 years, and ordered some of those executed by their police, I don't see anybody in the US taking down the regime.
• gatreddi 7mo ago
  If Intune wiped personal devices that’s a serious failure. BYOD setups are supposed to wipe only the work container, not the whole phone. Either those devices were fully enrolled in MDM without people realizing or someone pushed the wrong wipe policy during incident response. Would be good to see confirmation from affected employees.
  • mjlee 7mo ago
    This isn't true for iOS at least. You can include device erase capabilities in the MDM profile without enrolling as a managed device.
    • p2detar 7mo ago
      Apple introduced User Enrollment from iOS 13 onwards, which is the preferred way to do BYOD enrollments. This enrollment type does not support the erase capability. What you mean is the device enrollment on non-supervised devices, however and to my knowledge, enterprises do not use this, or if they do, it is very rare. (edit: And if they do, it's apparently a grave mistake.)
• oytis 7mo ago
  Hacktivists? Looks more like state actors.
  • GenerWork 7mo ago
    That was my thought. This is 100% a state actor.
  • expedition32 7mo ago
    State actors can be activists. The inability for Americans to understand that has cost them wars.
• dakolli 7mo ago
  [flagged]
  • Helloworldboy 7mo ago
    [dead]
  • jazz9k 7mo ago
    What happens when you murder 30,000 protestors?
    • dakolli 7mo ago
      Idk, this didn't happen in Iran. Literally not a single bit of evidence to prove these claims of violence of the state of Iran against its citizens.. Your consent has been completely manufactured. You people are trying to wash the sins of the genocide you just committed on the people of Gaza by creating a fake one in Iran, to justify your thirst for blood. While I'm sure that it did happen, it certainly wasn't 30k people. There's tons of videos of provocateurs shooting shotguns at police... What happens anywhere in the world when you start shooting at police? But in the case of Israel, land of the religious ethno-state that has been literally committing acts of terror for 3 years straight in 4k, on video.. they were allowed continue governing themselves after killing or wounding 30k innocent children... So you tell me what happens?
      • orwin 7mo ago
        So, if you want your argument stronger: 7k deaths confirmed, 6400 protesters, 200 regime officers, and 400 bystanders. Plus 11k unconfirmed dead, according to HRANA, so at most 18k dead during the Iranian protests. They also jailed 50k people, and before the war, it seemed a third of those were destined to be executed if the trend continued. Iran also execute between 50 and 500 people a year, every year, and in the last 5, it was closer to 500, culminating in 2025 where 1500 person got the death penalty. A regime that has to kill that much is weak, and would probably have fallen on itself if the US hadn't launched any strikes.
• akramachamarei 7mo ago
  Astounding amount of censorship in these comments.
• sieep 7mo ago
  So frustrating that news from my area one here is ever positive. West Michigan has a booming tech scene right now and clearly companies like Stryker need talent. Its LCOL here and the jobs are there for tech.
• ajewhere 7mo ago
  Judging by the target of the attack, looks like a false flag (it can be a false flag also if done by members of the organization paid by you know who, there were precedents). Iran specifically takes care to underline that it is not "an enemy of the american people".
• StacyRawls 7mo ago
  [dead]