AMI MegaRAC SPx Authentication Bypass Vulnerability
A critical authentication bypass vulnerability in AMI MegaRAC SPx BMC firmware could allow unauthorized access to server hardware hosting ePHI and clinical systems.
Read the analysis →Healthcare cyber intelligence
Know what can affect care.
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
Clinical contextSource-grounded factsDefensive actionVerified recommendations
Apple iCloud Link Media Processing Vulnerability (CVE-2025-43200)
A vulnerability affecting multiple Apple operating systems could allow risks to ePHI when processing maliciously crafted media via iCloud Links; healthcare organizations should evaluate their mobile device fleet for necessary…
Read the analysis →
Windows WebDAV Remote Code Execution Vulnerability (CVE-2025-33053)
A vulnerability in Microsoft Windows allows for remote code execution via Internet Shortcut files and WebDAV locations, posing a risk to healthcare workstations handling ePHI.
Read the analysis →
Wazuh Server Remote Code Execution Vulnerability CVE-2025-24016
A deserialization vulnerability in Wazuh Server could allow remote code execution, potentially compromising the security monitoring layer used to protect ePHI and healthcare infrastructure.
Read the analysis →
Chromium V8 Heap Corruption Vulnerability CVE-2025-5419
CISA has added a Chromium V8 out-of-bounds read and write vulnerability to its Known Exploited Vulnerabilities catalog, impacting browsers used for accessing ePHI.
Read the analysis →
Qualcomm Chipset Authorization Vulnerability in Mobile Health Infrastructure
A vulnerability in multiple Qualcomm chipsets (CVE-2025-21480) could allow memory corruption via unauthorized GPU micronode commands, impacting mobile devices used for ePHI access.
Read the analysis →
ConnectWise ScreenConnect Improper Authentication Vulnerability (CVE-2025-3935)
A vulnerability in ConnectWise ScreenConnect could allow remote code execution via ViewState code injection if machine keys are compromised, posing a risk to healthcare IT environments and ePHI security.
Read the analysis →
Samsung MagicINFO 9 Server Path Traversal Vulnerability
A path traversal vulnerability in Samsung MagicINFO 9 Server could allow unauthorized arbitrary file writes with system authority, posing a risk to healthcare facility signage and network integrity.
Read the analysis →
Ivanti EPMM Code Injection Vulnerability CVE-2025-4428
A code injection vulnerability in Ivanti Endpoint Manager Mobile (EPMM) could allow authenticated attackers to execute arbitrary code, potentially impacting the security of mobile devices used to access ePHI.
Read the analysis →
Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM)
A vulnerability in the API component of Ivanti EPMM could allow unauthorized access to protected resources, impacting healthcare organizations managing mobile devices used for ePHI access.
Read the analysis →