ClearSignal — Mar 12, 2026
Federal cybersecurity leadership and policy direction face critical uncertainty as a new CYBERCOM/NSA chief takes office amid criticism that the national cyber strategy lacks implementation specifics. Iranian-backed cyber operations are escalating beyond government targets to include destructive attacks on U.S. critical infrastructure, exemplified by wiper malware hitting medical device manufacturer Stryker and forcing thousands offline. Meanwhile, lessons from Ukraine's drone warfare are driving a Pentagon pivot toward cost-effective procurement solutions, with Defense seeking $1,000 interceptor drones after expending billions in missiles within days.
Top 3
- Senate confirms new leader of CYBERCOM and NSA — Senate confirmation of new CYBERCOM/NSA leadership ends a critical vacancy dating to April, providing needed continuity at a moment when national cyber strategy is under fire for lacking specificity. This leadership transition occurs as federal agencies face mounting threats from state-sponsored actors and an uncertain policy implementation roadmap. — federal-news-network
- Medical device giant Stryker confirms cyberattack as employees say devices were wiped — Iranian-linked hackers conducted a destructive wiper attack against Stryker, disrupting a major medical technology manufacturer and demonstrating that geopolitically-motivated cyber operations are now targeting U.S. critical healthcare infrastructure with operational impact. This represents an escalation from espionage to destructive attacks aimed at civilian-sector companies in retaliation for military actions. — the-record
- These are Ukraine’s $1,000 interceptor drones the Pentagon wants to buy — The Pentagon’s pursuit of Ukraine’s low-cost interceptor drones signals a fundamental shift in counter-UAS procurement strategy after burning through billions in missiles in three days of operations. This represents real-time operational lessons driving acquisition decisions and highlights the urgent need for asymmetric, cost-effective defensive capabilities. — defense-news
Procurement & Opportunities
- These are Ukraine’s $1,000 interceptor drones the Pentagon wants to buy — The Pentagon is pursuing procurement of Ukraine’s $1,000 interceptor drones after the U.S. burned through billions in missiles in three days, seeking cost-effective counter-drone solutions. — defense-news
Policy & Regulatory
- Ukraine’s top drone units to bring frontline lessons to Washington this month — Ukraine’s top military drone commanders and experts will visit Washington this month to brief policymakers and defense leaders on frontline drone warfare lessons learned. — defense-news
- Amid US military actions, White House struggles to explain how Iran war will end — Defense Secretary Pete Hegseth stated that President Trump will determine the trajectory of ongoing military actions against Iran, as the White House faces challenges articulating an endgame strategy. — defense-news
- EOs likely to drive cyber strategy actions — The new national cyber strategy lacks detail and specificity, prompting uncertainty about future cyber policy implementation and direction. — federal-news-network
Agency & Mission Activity
- CISA orders feds to patch n8n RCE flaw exploited in attacks — CISA issued a binding operational directive ordering federal agencies to patch an actively exploited remote code execution vulnerability in the n8n workflow automation platform. — bleeping-computer
- NATO sends Patriot system to protect key air-defense radar in Turkey — NATO deployed a second Patriot air defense system from its Allied Air Command in Ramstein, Germany to protect a critical air-defense radar installation in Turkey. — defense-news
- Ukrainian advisors to teach German army how to win a modern war by 2029 — Ukrainian military advisors will train the German army on modern warfare tactics through 2029, marking a significant reversal from years of Western forces training Ukrainian troops. — defense-news
- France’s Mediterranean armada signals clout as Middle East may rethink alliances — France deployed a massive Mediterranean naval force to demonstrate military capability as Middle Eastern nations are expected to reassess their alliances following potential post-Iran war geopolitical shifts. — defense-news
- Norwegian F-35s intercept Russian spy aircraft during NATO drill — Norwegian F-35s intercepted Russian spy aircraft during NATO’s Cold Response 2026 exercise in Evenes, demonstrating alliance readiness and interoperability in the European theater. — defense-news
- Senate confirms new leader of CYBERCOM and NSA — Senate confirms new leader for CYBERCOM and NSA, filling a vacancy that existed since April when President Trump fired Gen. Timothy Haugh. — federal-news-network
Technology Trends
- US charges another ransomware negotiator linked to BlackCat attacks — The U.S. Department of Justice charged a former DigitalMint employee for participating in an insider scheme where ransomware negotiators secretly colluded with the BlackCat (ALPHV) ransomware operation. — bleeping-computer
- SQLi flaw in Elementor Ally plugin impacts 250k+ WordPress sites — An unauthenticated SQL injection vulnerability in Elementor’s Ally WordPress plugin threatens over 250,000 websites, allowing attackers to steal sensitive data without authentication. — bleeping-computer
- Medtech giant Stryker offline after Iran-linked wiper malware attack — Medical technology company Stryker suffered a wiper malware attack claimed by Handala, an Iranian-linked pro-Palestinian hacktivist group, causing systems to go offline. — bleeping-computer
- New PhantomRaven NPM attack wave steals dev data via 88 packages — The PhantomRaven supply-chain campaign launched new attack waves deploying 88 malicious npm packages designed to exfiltrate sensitive data from JavaScript developers. — bleeping-computer
- Meta adds new WhatsApp, Facebook, and Messenger anti-scam tools — Meta is deploying new anti-scam protection systems and user warnings across WhatsApp, Facebook, and Messenger to defend users against scammers. — bleeping-computer
- Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker — Iran-backed hacktivist group conducted data-wiping cyberattack against Stryker, a Michigan-based medical technology company, forcing the company to send home over 5,000 workers in Ireland and declare a building emergency at its U.S. headquarters. — krebs-on-security
- Pentagon seeks system to ensure AI models work as planned — The Pentagon is seeking a system to validate and verify that AI models are functioning as intended as the Department of Defense increases its reliance on artificial intelligence technologies. — defense-news
- Salesforce issues new security alert tied to third customer attack spree in six months — Salesforce issued a security alert after threat actors linked to ShinyHunters targeted customer instances for the third time in six months, stealing data for extortion purposes. The campaign specifically targeted Salesforce Experience Cloud customers. — cyberscoop
- Medical device giant Stryker confirms cyberattack as employees say devices were wiped — Medical device manufacturer Stryker confirmed a cyberattack that disrupted operations and wiped employee devices, with a hacker group claiming the attack was retaliation for U.S. and Israeli strikes on Iran. This represents a geopolitically-motivated attack on critical healthcare infrastructure. — the-record
- Iran-linked hackers claim cyberattack on Albania’s parliament email systems — Iran-linked hackers claimed a cyberattack on Albania’s parliament email systems, temporarily suspending internal email services while main systems and the official website remained operational. This continues a pattern of Iranian cyber operations against Albanian targets. — the-record
- 235,000 affected by cyberattack on largest ambulance provider in Wisconsin — Wisconsin’s largest ambulance provider suffered a cyberattack affecting 235,000 individuals, resulting in theft of Social Security numbers, driver’s license numbers, financial accounts, medical information, and health insurance data. This represents a significant breach of sensitive healthcare and personal information. — the-record
- Protecting major events in a converged world — Federal News Network article discusses the need for public officials to understand the complexities and potential attack vectors for disrupting major public events in an increasingly converged technology environment. The piece emphasizes event security planning and threat awareness. — federal-news-network
- INC Ransomware Group Holds Healthcare Hostage in Oceania — INC ransomware group targets healthcare sector in Oceania, impacting government agencies, emergency clinics, and other organizations in Australia, New Zealand, and Tonga. — dark-reading