Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
CISA has added a local privilege escalation vulnerability in Microsoft Defender to its Known Exploited Vulnerabilities catalog, noting its use in ransomware campaigns. Healthcare organizations should evaluate their exposure to…
Read the analysis →
A vulnerability in Cisco Catalyst SD-WAN Manager could allow remote attackers to view sensitive information, potentially impacting the integrity of healthcare networks transporting ePHI.
Read the analysis →
A critical authentication bypass vulnerability (CVE-2023-27351) in PaperCut NG/MF software has been identified as a vector for ransomware campaigns, posing risks to healthcare print environments and ePHI confidentiality.
Read the analysis →
A vulnerability in Cisco Catalyst SD-WAN Manager allows local attackers to escalate privileges via recoverable passwords, posing a risk to healthcare network management and ePHI confidentiality.
Read the analysis →
A vulnerability in Microsoft SharePoint Server allows unauthorized network-based spoofing, posing a risk to the integrity of ePHI documentation and collaboration environments.
Read the analysis →
A link following vulnerability in Microsoft Windows (CVE-2025-60710) has been identified as a tool in known ransomware campaigns, posing a risk to the integrity of ePHI and healthcare operational continuity.
Read the analysis →
Analysis of a deserialization vulnerability in Microsoft Exchange Server linked to ransomware campaigns and its implications for healthcare ePHI protection.
Read the analysis →
CISA has added CVE-2023-36424 to its Known Exploited Vulnerabilities catalog. This out-of-bounds read vulnerability in the Windows Common Log File System Driver could allow for privilege escalation, posing a risk…
Read the analysis →
A critical vulnerability in FortiClient EMS could allow unauthenticated remote code execution via SQL injection, posing a risk to healthcare networks and ePHI security.
Read the analysis →
A prototype pollution vulnerability (CVE-2026-34621) in Adobe Acrobat and Reader could allow arbitrary code execution, posing a risk to endpoints handling ePHI.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.