Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Iran-backed hackers claim wiper attack on medtech firm Stryker

krebsonsecurity.com

Post reply on HN
Print view View original

41–50 of 342 posts

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#41

Post by botanical »

trhway wrote: post #24
ChrisArchitect wrote: post #22

Related: Iran warns U.S. tech firms could become targets as war expands https://news.ycombinator.com/item?id=47341007

Well, time to dust off anti-drone defense systems. Today on NPR they talked that Iran plans to launch drones from ships into California. https://www.10news.com/news/local-news/authorities-warn-of-p... Fox News drone expert: https://nypost.com/2026/03/11/us-news/iran-could-use-drones-...

Sounds like justification for a false flag operation by the US government. How would they transport these massive things and launch them on a different continent? That, or the US is trying to justify that this illegal war is on their doorstep and need to expand their terror.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#43

Post by Xylakant »

shiroiuma wrote: post #39
JonChesterfield wrote: post #9

So gain access to a machine that can ask microsoft intune to eviscerate the company, ask it to do so, done. Bit of a shame all the machines had that installed really. Reminds me of crowdstrike.

The company should have known better than to trust their IT infrastructure to Microslop. This is their own fault.

My 95% bet is that the attacker just gained access to an account with suitable privileges and then went on to use existing automation. The fact that it’s intune is largely irrelevant - I’m not aware of any safeguards that any provider would implemen.

So the options here are MDM or no MDM and that’s a hard choice. No MDM means that you have to trust all people to get things as basic as FDE or a sane password policy right. No option to wipe or lock lost devices. No option to unlock devices where people forgot their password. Using an MDM means having a privileged attack vector into all machines.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#44

Post by vkou »

jojobas wrote: post #29
LPisGood wrote: post #20

Earlier quoted context omitted.

Can you elaborate what you mean? Are you referring to a paradigm where people make their systems less secure in the effort to make them more secure?

I think this refers to "bombing for peace". Sure the West should have just let Iran nuke whoever it wanted.

Nuclear weapons are a MAD red line that will result in total annihilation of the attacker. They are only useful in a defensive capacity.

This kind of aggression, however, does seem to make their value as a deterrent clear.

Observe how nobody is fucking with North Korea like they did with Iraq or Venezuela.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#46

Post by RobotToaster »

jojobas wrote: post #29
LPisGood wrote: post #20

Earlier quoted context omitted.

Can you elaborate what you mean? Are you referring to a paradigm where people make their systems less secure in the effort to make them more secure?

I think this refers to "bombing for peace". Sure the West should have just let Iran nuke whoever it wanted.

Iran wasn't going to nuke anyone.

They want Islam to dominate the world, that can't happen if there isn't a world left to dominate.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#47

Post by pazimzadeh »

riffraff wrote: post #26
trhway wrote: post #24

Earlier quoted context omitted.

Well, time to dust off anti-drone defense systems. Today on NPR they talked that Iran plans to launch drones from ships into California. https://www.10news.com/news/local-news/authorities-warn-of-p... Fox News drone expert: https://nypost.com/2026/03/11/us-news/iran-could-use-drones-...

> Iran plans to launch drones from ships into California That does not make any sense to me. Does Iran have a bunch of ships in the Pacific? Why? How would they even got close enough to the US coast without being noticed at this point? I'm not saying it's not true, I just don't understand.

Yeah that makes no sense. only thing I've heard is they have connections to some cartels in south america. venezuela is gone but I suppose they could hire some local talent and get close enough?

Seems like a really dumb idea right now, unless maybe as a last resort if Trump decides to drop tactical nukes or something

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#48

Post by jonstewart »

renewiltord wrote: post #37

They’ve been around for a while. Threat actors are something that I want our governments to be working on stopping. If they were capable, I would say we should run a government Project Zero but I doubt anyone would do long term service for $70k/yr when they could be making 10x-100x that. Anyway, the bombings will have to continue till we rubble our enemies.

We had a government agency working on stopping threat actors, the Cybersecurity & Infrastructure Security Agency, but then DOGE ruined it. Now it’s a shell.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#49

Post by bitwize »

LPisGood wrote: post #20
bitwize wrote: post #17

The "Fucking for Virginity" approach to infosec strikes again!

Can you elaborate what you mean? Are you referring to a paradigm where people make their systems less secure in the effort to make them more secure?

Yes, exactly. In the realpolitik of organizational IT security, there's less of an emphasis on making systems more resilient to attack, much more of an emphasis on having an audit trail, so that in case the company is sued over a data breach they can claim "we did the very best that could be reasonably expected of us with the knowledge we had at the time" and provide receipts to back up that claim. Implicit in that claim is also "we used the same tools that everyone else is using so you can't blame us specially for unwittingly choosing something vulnerable to compromise". Hence the proliferation of shitty single-point-of-failure "endpoint security" software that leads to events like the 2024 Clownstrike incident.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#50

Post by burnermore »

4gotunameagain wrote: post #42
fnord77 wrote: post #30

That's a shame, they make impressive products

[flagged]

See, here is what I've observed. I don't expect to change your POVs. Nevertheless...

The issue started when Israel was ready to have recognition from Saudi Arabia on their statehood. This would make Hamas irrelevant. And puts Sunnis (Iran) lesser recognised. Meanwhile Shia's (Saudi) will become the defacto in the Muslim world and half of Muslim world would either tolerate or be OK with Israel. Hamas attack on Israel at Oct 7 stopped that. Hamas has been supported by Iran for a long time. So in the whole Gaza - Israel thing, Iran was backing Hamas. Then they proxied with them by providing assistance. Then they eventually directly got involved.

You need to understand, there was good period of peace between Israel & Palestine until Oct 7.

While I reject US toppling govts around the world, Iran's hand is not clean in this one. But also, US thought this would be as easy as Venezuela and killing Iran's leader will stop this. Interfering in other countries biz have consequences. And in this case, it's true for Iran & US.

Post reply on HN