Lock down Microsoft Intune, feds warn after Stryker attack

**Executive summary:** The report describes a targeted intrusion attributed to Handala (linked to Iran) that abused Microsoft Intune to wipe employee devices and knock parts of Stryker's networks offline, disrupting shipping and ordering systems; CISA has issued an alert advising organizations to harden Intune, follow Microsoft's guidance, and apply least-privilege role-based controls to prevent similar account creation and wipe actions.