CISA Urges Endpoint Management Hardening After Stryker Cyberattack

On March 11, 2026 Stryker experienced a contained cyberattack affecting its internal Microsoft corporate environment; CISA warns this is part of a broader campaign exploiting endpoint management platforms (notably Microsoft Intune) and issued hardening guidance—apply least privilege, strengthen RBAC, enforce phishing‑resistant MFA, leverage Microsoft Entra ID risk controls, and require multi‑admin approval for sensitive actions.