Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A federal court has sentenced an individual to probation and restitution following the unauthorized acquisition and disclosure of identifiable health information used in an attempt to obtain funds.
Read the analysis →
CISA has added CVE-2024-48248 to its Known Exploited Vulnerabilities catalog, highlighting a path traversal flaw in NAKIVO Backup and Replication that could allow unauthorized reading of arbitrary files.
Read the analysis →
CISA has added a critical OS command injection vulnerability in the Edimax IC-7100 IP camera to its Known Exploited Vulnerabilities catalog, highlighting risks for healthcare facilities using these devices for…
Read the analysis →
CISA has added a critical authentication bypass vulnerability in Fortinet's FortiOS and FortiProxy to the Known Exploited Vulnerabilities catalog, noting its use in ransomware campaigns.
Read the analysis →
A vulnerability in Juniper Junos OS allows local attackers with high privileges to inject arbitrary code, posing a risk to the network segmentation and operational resilience of healthcare environments.
Read the analysis →
An out-of-bounds write vulnerability (CVE-2025-24201) affecting WebKit across iOS, iPadOS, and macOS could allow malicious web content to bypass sandbox restrictions, posing a risk to ePHI accessed via mobile and…
Read the analysis →
A heap-based buffer overflow vulnerability in the Windows New Technology File System (NTFS) could allow local unauthorized code execution, impacting systems used to store and manage ePHI.
Read the analysis →
An out-of-bounds read vulnerability in Microsoft Windows NTFS could allow authorized attackers to disclose local information, impacting systems used for ePHI storage and clinical operations.
Read the analysis →
A vulnerability in the Microsoft Windows Fast FAT File System Driver (CVE-2025-24985) could allow local attackers to execute code, posing a risk to healthcare workstations and medical device controllers.
Read the analysis →
A vulnerability in the Microsoft Windows NTFS file system could allow an attacker with physical access to disclose sensitive information from heap memory.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.