Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A vulnerability in Microsoft Windows Remote Desktop Services (CVE-2026-21533) may allow authorized users to elevate local privileges, posing a risk to ePHI confidentiality and system integrity.
Read the analysis →
A type confusion vulnerability in the Microsoft Desktop Window Manager could allow authorized attackers to elevate privileges locally on affected Windows systems.
Read the analysis →
A vulnerability in Microsoft Office Word could allow an authorized attacker to elevate privileges locally, posing a risk to the integrity of workstations handling ePHI.
Read the analysis →
A vulnerability in Sangoma FreePBX (CVE-2025-64328) could allow authenticated users to gain remote system access, potentially impacting the confidentiality of healthcare telephony systems.
Read the analysis →
An improper authentication vulnerability (CVE-2019-19006) in Sangoma FreePBX could allow unauthorized administrative access, posing a risk to healthcare communication infrastructure and patient care coordination.
Read the analysis →
A critical code injection vulnerability in Ivanti Endpoint Manager Mobile (EPMM) could allow unauthenticated remote code execution, posing a risk to healthcare organizations managing mobile endpoints that access ePHI.
Read the analysis →
A vulnerability in several Fortinet products could allow unauthorized access to network devices if FortiCloud SSO is enabled, posing a risk to the confidentiality of ePHI and healthcare operational stability.
Read the analysis →
A critical vulnerability in SmarterTools SmarterMail allows unauthenticated remote code execution and has been linked to ransomware campaigns, posing a risk to healthcare mail infrastructure.
Read the analysis →
A critical authentication bypass in SmarterMail allows unauthenticated attackers to reset administrator passwords, providing a path for full system compromise and ransomware deployment.
Read the analysis →
CISA has added a security feature bypass vulnerability in Microsoft Office to its Known Exploited Vulnerabilities catalog, impacting several versions used across healthcare administrative and clinical workflows.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.