CISO Talk by James Azar

CISO Talk by James Azar

When Destruction Becomes the Objective

The Stryker attack may mark the moment destructive cyber operations moved from the battlefield into the economic bloodstream.

James Azar's avatar
James Azar
Mar 15, 2026
∙ Paid

Last week’s cyberattack against Stryker should have captured the attention of every boardroom and every security leader responsible for keeping a modern enterprise operational. The disruption did not follow the familiar patterns of cybercrime. There was no ransomware demand, no negotiation channel, and no clear financial incentive driving the attack. Instead, the event carried the characteristics of something more concerning: deliberate operational destruction. Systems were wiped, operations halted, and recovery timelines became uncertain.

Whether the Stryker incident proves to be a singular escalation or an early signal of a broader trend, it reflects a reality cybersecurity practitioners have been warning about for years. Destructive cyber operations are beginning to move beyond the battlefield and into the civilian economy.

The Shift From Profit to Destruction

For more than a decade, the majority of cyber incidents affecting the private sector were financially motivated. Ransomware groups developed a predictable business model: gain access, encrypt systems, threaten exposure, and demand payment. Even disruptive attacks often maintained a financial objective.

A destructive cyberattack fundamentally changes that equation.

User's avatar

Continue reading this post for free, courtesy of James Azar.

Or purchase a paid subscription.
© 2026 James Azar · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture