CISA urges US orgs to secure Microsoft Intune systems after Stryker breach

CISA warned U.S. organizations to harden Microsoft Intune after an Iranian-linked hacktivist group, Handala, claimed responsibility for breaching Stryker—allegedly stealing ~50 TB of data and using a newly created Global Administrator account to issue Intune's built-in wipe, affecting nearly 80,000 devices; Microsoft and CISA recommend RBAC, MFA, privileged-access hygiene, and multi-admin approval for sensitive actions to mitigate such attacks.