Why the Stryker Attack is a Critical Case Study for CISOs | TechTarget

ConnectSecure  |   Mar 31, 2026

In a recent TechTarget article, Brian Blakley, CISO at ConnectSecure, shared critical insights on how enterprise cyber risk models must evolve in the face of geopolitically motivated attacks.

The Stryker incident was not about data theft or ransom. An Iran-linked hacktivist group leveraged legitimate administrative capabilities within Microsoft Intune to issue mass remote wipe commands, causing widespread global disruption. As Blakley notes in the article, many organizations continue to assess cyber risk through an outdated lens that assumes attackers want money, data, or persistent access.

Blakley emphasizes that enterprises must move from event-based risk models to outcome-based risk models. That shift requires scenario planning that accounts for operational shutdowns, revenue impact, and mission-critical disruption, even when no vulnerability is exploited in the traditional sense.

The TechTarget piece reinforces a reality ConnectSecure sees across industries: geopolitics and cybersecurity are now inseparable, and CISOs and CIOs must plan for cyber activity as an extension of modern conflict, not just criminal behavior.

Check out the full article here: CIOs must now model war as an enterprise risk