Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
CISA has added CVE-2025-24983 to its Known Exploited Vulnerabilities catalog. This Win32k use-after-free vulnerability allows authorized attackers to elevate privileges locally, posing a risk to the integrity of ePHI on…
Read the analysis →
CISA has added a local security feature bypass vulnerability in the Microsoft Windows Management Console to its Known Exploited Vulnerabilities catalog, noting its use in ransomware campaigns.
Read the analysis →
CISA has added CVE-2024-13161 to its Known Exploited Vulnerabilities catalog, highlighting a path traversal flaw in Ivanti EPM that could allow unauthenticated remote attackers to leak sensitive information.
Read the analysis →
CISA has added CVE-2024-13160 to its Known Exploited Vulnerabilities catalog, highlighting a path traversal flaw in Ivanti EPM that could allow unauthenticated remote attackers to leak sensitive information.
Read the analysis →
CISA has added CVE-2025-22226 to its Known Exploited Vulnerabilities catalog, highlighting a risk where administrative access to a virtual machine could allow memory leakage from the vmx process.
Read the analysis →
A critical arbitrary write vulnerability in VMware ESXi allows attackers with VMX process privileges to escape the sandbox, a technique linked to ransomware campaigns targeting virtualized infrastructure.
Read the analysis →
A TOCTOU race condition in VMware ESXi and Workstation could allow an attacker with local administrative privileges on a guest VM to execute code on the host VMX process, potentially…
Read the analysis →
A path traversal vulnerability (CVE-2024-4885) in Progress WhatsUp Gold could allow unauthenticated remote code execution, posing a risk to healthcare network monitoring and operational resilience.
Read the analysis →
CISA has added CVE-2018-8639 to its Known Exploited Vulnerabilities catalog, noting its use in ransomware campaigns. This vulnerability allows local privilege escalation in Microsoft Windows, posing a risk to healthcare…
Read the analysis →
A command injection vulnerability (CVE-2023-20118) in the web-based management interface of Cisco Small Business RV Series routers could allow authenticated attackers to gain root privileges, posing a risk to ePHI…
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.