Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A vulnerability in SysAid On-Prem (CVE-2025-2776) allows for administrator account takeover and file read primitives, posing a risk to healthcare IT service management and ePHI confidentiality.
Read the analysis →
A vulnerability in CrushFTP (CVE-2025-54309) may allow remote attackers to gain administrative access via HTTPS when certain proxy configurations are absent, posing a risk to ePHI stored in file transfer…
Read the analysis →
A critical code injection vulnerability in Microsoft SharePoint (CVE-2025-49704) has been linked to ransomware campaigns, posing a risk to healthcare organizations managing ePHI on legacy or unpatched servers.
Read the analysis →
An improper authentication flaw in Microsoft SharePoint allows for spoofing and unauthorized data access. Given its use in ransomware campaigns and the potential for ePHI exposure, healthcare organizations using on-premises…
Read the analysis →
A critical deserialization vulnerability in on-premises Microsoft SharePoint Server (CVE-2025-53770) is being leveraged in ransomware campaigns, posing a risk to healthcare organizations managing ePHI via local server environments.
Read the analysis →
A critical SQL injection vulnerability in Fortinet FortiWeb could allow unauthenticated attackers to execute unauthorized commands, posing a risk to healthcare patient portals and ePHI gateways.
Read the analysis →
A critical vulnerability in Citrix NetScaler infrastructure, frequently used for healthcare remote access, has been linked to ransomware campaigns. This analysis examines the risk to ePHI and provides remediation priorities.
Read the analysis →
A type confusion vulnerability in the Chromium V8 engine could allow remote attackers to perform arbitrary read/write operations via crafted HTML pages, impacting browsers used across healthcare workstations.
Read the analysis →
A buffer overflow vulnerability in Citrix NetScaler ADC and Gateway could lead to Denial of Service or unintended control flow, potentially impacting remote access for healthcare providers.
Read the analysis →
An analysis of CVE-2019-6693, a vulnerability in Fortinet FortiOS involving hard-coded credentials that could allow the decryption of configuration backups, noted for use in ransomware campaigns.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.