11–20 of 342 posts
Seems dire but hardly a supply chain disrupting attack. Stryker is a huge supplier but it not as if this will debilitate the medical supply chain completely. Seems like the hackers found a door they could kick open easily and then justified the action ex-post.
Medtech firms consistently underinvest in corporate network cybersecurity because almost all their security and compliance spending goes to device safety requirements, not IT hardening. This is exactly the kind of gap wiper attacks target.
Seems dire but hardly a supply chain disrupting attack. Stryker is a huge supplier but it not as if this will debilitate the medical supply chain completely. Seems like the hackers found a door they could kick open easily and then justified the action ex-post.
Earlier quoted context omitted.
yeah that is a lot of tech, but it’s all B2B- no consumer breach, right?
Probably worse in the boring B2B way, not the consumer-breach way. Stryker is deep in hospital operations, so the immediate risk is supply chain and support disruption rather than leaked patient data. The Krebs post says one hospital system already could not order surgical supplies, and if the Intune remote wipe detail is true, recovering internal devices and admin workflows could take a while even without any medica…
Some people on Twitter have jokingly suggested that the Iranians were looking for the maker of the Stryker military vehicle. https://en.wikipedia.org/wiki/Stryker
The "Fucking for Virginity" approach to infosec strikes again!
Are you referring to a paradigm where people make their systems less secure in the effort to make them more secure?