Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A critical vulnerability (CVE-2026-85102) allows unauthenticated remote attackers to execute arbitrary code on affected Check Point Security Gateways, potentially leading to full device compromise.
Read the analysis →
Two critical vulnerabilities (CVE-2026-85102 and CVE-2026-85103) affecting Check Point Security Gateways and Management Servers could allow unauthenticated remote code execution, posing a risk to healthcare organizations relying on these for…
Read the analysis →
A vulnerability in ConnectWise ScreenConnect may allow unauthorized file transfer and execution via active remote sessions, posing a risk to healthcare environments relying on RMM tools for ePHI system management.
Read the analysis →
A critical authentication bypass vulnerability (CVE-2026-19490) affecting Citrix NetScaler appliances could allow unauthorized remote access to clinical environments. Healthcare organizations using these as Gateways or AAA virtual servers should prioritize…
Read the analysis →
A heap-based buffer overflow vulnerability (CVE-2025-25249) affecting FortiOS, FortiSASE, and FortiSwitchManager could allow unauthorized code execution via crafted packets, impacting healthcare perimeter security.
Read the analysis →
A critical authentication bypass vulnerability (CVE-2026-20079) affecting Cisco FMC and SCC could allow remote attackers to obtain root access, posing a significant risk to the integrity of healthcare network security…
Read the analysis →
The FTC has rescinded its 2021 policy statement regarding health apps and connected devices, as the 2024 updates to the Health Breach Notification Rule now explicitly cover these technologies.
Read the analysis →
A static code injection vulnerability in N-able N-central could allow unauthorized remote code execution. Healthcare providers and MSPs managing ePHI environments should evaluate their exposure and apply vendor mitigations.
Read the analysis →
A heap-based buffer overflow vulnerability in the Windows Advanced Local Procedure Call (ALPC) could allow local attackers to elevate privileges, posing a risk to systems managing ePHI.
Read the analysis →
A link following vulnerability (CVE-2026-81963) in the Microsoft Windows Update Stack could allow local attackers to gain SYSTEM privileges, posing a risk to ePHI confidentiality and system integrity.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.