Ransomware Attacks Disrupt Global Manufacturing and Healthcare Sectors
Article Content
- •Iranian-linked hackers breached Stryker, affecting 200,000 devices globally.
- •Nitrogen ransomware group stole 8 terabytes of data from Foxconn's North American factories.
- •AV-Comparatives found Kaspersky, Bitdefender, and Elastic had the highest protection rates in recent tests.
In March 2026, Iranian-linked hackers breached Stryker, a medical device manufacturer, causing factory resets on over 200,000 devices in 79 countries. This incident was followed by the Nitrogen ransomware group's attack on Foxconn, which resulted in the theft of 8 terabytes of data from North American factories. These attacks are part of a broader trend in the first half of 2026, where various sectors, including manufacturing, healthcare, and finance, have faced significant disruptions due to compromised endpoints or trusted third parties. The recent AV-Comparatives Business Security Test evaluated 16 endpoint security products, revealing that Kaspersky, Bitdefender, and Elastic achieved a 99.8% protection rate against real-world malware attacks. The test also highlighted that all products recorded zero false alarms on common business software, an important factor for IT administrators. ESET and Kaspersky demonstrated the least impact on system performance during everyday tasks. The ongoing threat landscape emphasizes the need for robust cybersecurity measures.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Nitrogen and Foxconn in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…