Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
A critical SQL injection vulnerability in Sangoma Switchvox could allow unauthenticated remote attackers to execute arbitrary commands and access backend databases, posing a risk to healthcare communication infrastructure.
Read the analysis →
A vulnerability in SonicWall SMA1000 appliances could allow an authenticated administrator to execute arbitrary OS commands, impacting secure remote access paths to ePHI.
Read the analysis →
Two vulnerabilities in Rockwell Automation Historian ME could allow remote code execution or cause system crashes, potentially impacting healthcare operational resilience and clinical data availability.
Read the analysis →
A critical authentication bypass in the N-able N-central RMM tool could allow unauthorized account takeover, posing a risk to healthcare organizations relying on managed service providers for infrastructure oversight.
Read the analysis →
A heap inspection vulnerability in Cisco ASA and FTD devices could allow unauthenticated remote attackers to cause unexpected device reloads, potentially disrupting healthcare network availability and patient care continuity.
Read the analysis →
A path traversal vulnerability in Broadcom VMware vCenter could allow network-based attackers to execute arbitrary code, posing a risk to healthcare virtualization environments and ePHI availability.
Read the analysis →
A vulnerability in the Simplex Incident Manager allows local attackers to extract unencrypted user credentials from system memory, posing a risk to healthcare facility operational security.
Read the analysis →
NIST has issued a call for comments on the revision of SP 800-213A, aiming to update the IoT Device Cybersecurity Requirement Catalog to align with CSF 2.0 and evolving threat…
Read the analysis →
The FTC and state authorities have sued telehealth provider Hims & Hers, alleging the company shared sensitive health information with third-party advertising platforms despite privacy claims.
Read the analysis →
A vulnerability in the Cisco Secure Firewall Management Center (FMC) could allow unauthenticated remote attackers to access sensitive data via a low-privileged account.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.