Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
CISA has added a vulnerability in Apple's Image I/O framework to its Known Exploited Vulnerabilities catalog, affecting iOS, iPadOS, and macOS devices used across healthcare environments.
Read the analysis →
A pre-authenticated remote OS command injection vulnerability in the Trend Micro Apex One on-premise management console could allow attackers to execute malicious code, impacting healthcare organizations relying on this endpoint…
Read the analysis →
A command injection vulnerability in the N-able N-Central RMM tool could allow unauthorized system access, posing a risk to healthcare environments that utilize these tools for administrative management of ePHI-bearing…
Read the analysis →
A vulnerability in the N-able N-Central RMM tool could allow unauthorized command execution via insecure deserialization, posing a risk to healthcare organizations relying on managed service providers for infrastructure oversight.
Read the analysis →
CISA has added CVE-2025-8088 to its Known Exploited Vulnerabilities catalog, noting the vulnerability's use in ransomware campaigns. Healthcare organizations should evaluate WinRAR deployments to protect ePHI from arbitrary code execution.
Read the analysis →
A vulnerability in the D-Link DNR-322L Network Video Recorder allows authenticated attackers to execute OS-level commands, posing a risk to healthcare physical security infrastructure and network segmentation.
Read the analysis →
A $9.8 million settlement involving genomic sequencing systems highlights the critical need for healthcare organizations to verify vendor adherence to cybersecurity standards when handling sensitive genetic data.
Read the analysis →
A critical injection vulnerability in Cisco Identity Services Engine (ISE) could allow remote code execution with root privileges, potentially compromising network segmentation for ePHI.
Read the analysis →
An injection vulnerability in Cisco ISE (CVE-2025-20281) could allow attackers to gain root privileges, potentially compromising network segmentation and access controls for medical devices and ePHI.
Read the analysis →
A vulnerability in SysAid On-Prem's checkin processing could allow administrator account takeover and unauthorized file access, posing a risk to healthcare infrastructure management.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.