John Z Black

After Stryker: Why Incident Response Now Starts in the Management Plane

John Z Black Mar 20, 2026

Security Operations & Resilience #incident-response #intune #control-plane-security #extortion #law-enforcement-coordination #iran-linked-threats

The Stryker fallout, Intune warnings, and leak-site disruption show a hard truth: incident response now lives or dies on control-plane integrity and coordinated external action.

Read More

Iran Didn't Need Malware to Cripple Stryker. They Just Used Microsoft Intune.

John Z Black Mar 17, 2026

Threat Intelligence #iran #stryker #handala #intune #mdm #wiper #healthcare #nation-state #critical-infrastructure

The Handala group wiped tens of thousands of Stryker devices using the company's own MDM platform. No malware. No exploit. Just admin access and the willingness to press the button.

Read More