Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A stack-based buffer overflow vulnerability (CVE-2025-32756) affecting FortiMail, FortiVoice, and other Fortinet products could allow unauthenticated remote attackers to execute arbitrary code via crafted HTTP requests.
Read the analysis →
A Use-After-Free vulnerability in the Microsoft Windows Ancillary Function Driver for WinSock could allow authorized users to gain administrator privileges, posing a risk to ePHI access controls.
Read the analysis →
CISA has added a type confusion vulnerability in the Microsoft Windows Scripting Engine to its Known Exploited Vulnerabilities catalog, highlighting the risk of unauthorized remote code execution via crafted URLs.
Read the analysis →
A heap-based buffer overflow vulnerability in the Microsoft Windows Common Log File System (CLFS) driver could allow authorized users to elevate privileges locally, posing a risk to ePHI confidentiality and…
Read the analysis →
A use-after-free vulnerability in the Microsoft Windows Common Log File System (CLFS) driver allows authorized attackers to elevate privileges locally, posing a risk to ePHI integrity on affected healthcare systems.
Read the analysis →
Analysis of CVE-2025-30400, a use-after-free vulnerability in the Windows DWM Core Library that could allow authorized attackers to elevate privileges locally within healthcare environments.
Read the analysis →
A vulnerability in the TeleMessage TM SGNL archiving backend may expose messages in cleartext, posing a significant risk to the confidentiality of ePHI transmitted via the platform.
Read the analysis →
A path traversal vulnerability in Commvault Command Center could allow unauthenticated remote code execution, posing a risk to the integrity of healthcare backup systems and ePHI availability.
Read the analysis →
A vulnerability in the Apache HTTP Server's mod_rewrite module could allow unauthorized source code disclosure or remote code execution, posing a risk to healthcare patient portals and internal web services.
Read the analysis →
A vulnerability in the SSL-VPN management interface of SonicWall SMA100 appliances could allow authenticated administrative users to execute arbitrary commands, posing a risk to healthcare network perimeters.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.