Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A critical out-of-bounds write vulnerability (CVE-2025-9242) in WatchGuard Firebox devices could allow unauthenticated remote attackers to execute arbitrary code, posing a risk to healthcare network perimeters.
Read the analysis →
A critical out-of-bounds write vulnerability (CVE-2025-21042) affecting Samsung mobile devices could allow remote attackers to execute arbitrary code, posing a risk to ePHI accessed via mobile endpoints.
Read the analysis →
A local privilege escalation vulnerability (CVE-2025-41244) affects virtualized environments using VMware Aria Operations with SDMP enabled, potentially allowing non-administrative users to gain root access on affected VMs.
Read the analysis →
A critical deserialization vulnerability in Microsoft Windows Server Update Service (WSUS) could allow remote code execution, posing a risk to healthcare infrastructure management.
Read the analysis →
CISA has added a Microsoft Windows SMB Client improper access control vulnerability to its Known Exploited Vulnerabilities catalog, highlighting risks of privilege escalation in environments managing ePHI.
Read the analysis →
A critical unauthenticated Server-Side Request Forgery (SSRF) vulnerability in Oracle E-Business Suite is being leveraged in ransomware campaigns, posing a risk to healthcare operational resilience.
Read the analysis →
CISA has added CVE-2025-59230 to its Known Exploited Vulnerabilities catalog, highlighting a flaw in Microsoft Windows that could allow authorized users to elevate privileges locally.
Read the analysis →
A cross-site scripting vulnerability in the Zimbra Collaboration Suite (ZCS) Classic Web Client could allow attackers to execute arbitrary JavaScript via malicious ICS files, potentially leading to ePHI exfiltration through…
Read the analysis →
CISA has added CVE-2021-43226 to its Known Exploited Vulnerabilities catalog, noting its use in ransomware campaigns. This privilege escalation vulnerability in the Windows Common Log File System Driver poses a…
Read the analysis →
A vulnerability in the BI Publisher Integration component of Oracle E-Business Suite allows unauthenticated attackers to compromise Oracle Concurrent Processing, a flaw currently linked to ransomware campaigns.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.