Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A vulnerability in the Chromium ANGLE component could allow remote attackers to perform out-of-bounds memory access via crafted HTML pages, impacting browsers used across healthcare endpoints.
Read the analysis →
A Use After Free vulnerability (CVE-2025-62221) in the Microsoft Windows Cloud Files Mini Filter Driver could allow an authorized attacker to elevate privileges locally, posing a risk to ePHI confidentiality…
Read the analysis →
A vulnerability in OpenPLC ScadaBR allows authenticated users to upload and execute arbitrary JSP files, posing a risk to healthcare facility infrastructure and operational resilience.
Read the analysis →
CISA has added an Android Framework information disclosure vulnerability to its Known Exploited Vulnerabilities catalog, highlighting risks for healthcare organizations utilizing mobile endpoints for ePHI access.
Read the analysis →
CISA has added a privilege escalation vulnerability in the Android Framework to its Known Exploited Vulnerabilities catalog, impacting mobile devices and interfaces used for ePHI access.
Read the analysis →
CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities catalog. This cross-site scripting vulnerability in OpenPLC ScadaBR may impact healthcare facility management systems and operational resilience.
Read the analysis →
An authenticated OS command injection vulnerability in Fortinet FortiWeb could allow unauthorized code execution on systems protecting patient portals and ePHI gateways.
Read the analysis →
A relative path traversal vulnerability in Fortinet FortiWeb could allow unauthenticated administrative command execution, posing a risk to healthcare patient portals and ePHI gateways.
Read the analysis →
A federal sentencing reveals how stolen credentials allowed an attacker to exfiltrate medical information and PII for millions of individuals from a cloud storage provider, highlighting the critical risk of…
Read the analysis →
A race condition vulnerability in the Microsoft Windows Kernel could allow local attackers to escalate privileges to SYSTEM level, posing a risk to ePHI confidentiality and system integrity.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.