Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A deserialization vulnerability in Microsoft SharePoint could allow unauthorized network-based code execution, posing a risk to the confidentiality and availability of ePHI stored within collaboration environments.
Read the analysis →
A memory buffer vulnerability in the Chromium V8 engine could allow remote code execution via crafted HTML pages, impacting common browsers used to access ePHI.
Read the analysis →
An unauthenticated SSRF vulnerability in Omnissa Workspace ONE UEM could allow unauthorized access to sensitive information, impacting healthcare organizations managing endpoints and ePHI.
Read the analysis →
A critical deserialization vulnerability in SolarWinds Web Help Desk (CVE-2025-26399) has been linked to ransomware campaigns, posing a risk to healthcare IT infrastructure and ePHI availability.
Read the analysis →
A critical authentication bypass in Ivanti Endpoint Manager (EPM) could allow remote attackers to leak stored credentials, posing a risk to healthcare networks and ePHI security.
Read the analysis →
An improper authentication vulnerability (CVE-2017-7921) affecting multiple Hikvision products could allow unauthorized privilege escalation, potentially compromising physical security controls used to protect ePHI.
Read the analysis →
A use-after-free vulnerability (CVE-2023-43000) affecting several Apple operating systems and Safari 16.6 could lead to memory corruption via crafted web content, posing a risk to ePHI on mobile clinical devices.
Read the analysis →
CISA has added CVE-2021-30952 to its Known Exploited Vulnerabilities catalog, highlighting a risk where maliciously crafted web content could lead to arbitrary code execution on several Apple platforms used in…
Read the analysis →
A use-after-free vulnerability (CVE-2023-41974) affecting Apple iOS and iPadOS could allow an application to execute arbitrary code with kernel privileges, posing a risk to mobile devices used for ePHI access.
Read the analysis →
A command injection vulnerability (CVE-2026-22719) in VMware Aria Operations could allow unauthenticated remote code execution during support-assisted migrations, posing a risk to the virtualization layers hosting ePHI.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.