Healthcare cyber intelligence
Evidence-grounded reporting on vulnerabilities, threats, enforcement, guidance, and incidents with a concrete connection to healthcare operations.
NIST has released a finalized guide for Cybersecurity Supply Chain Risk Management (C-SCRM) due diligence, providing healthcare organizations with a framework to assess supplier risks before executing procurement agreements.
Read the analysis →
A deserialization vulnerability in Microsoft SharePoint Server allows authorized attackers to execute code over a network and has been linked to ransomware campaigns, posing a risk to healthcare document management…
Read the analysis →
NIST has released SP 800-18r2, introducing a unified approach to security, privacy, and supply chain risk management plans. This guidance provides healthcare organizations a framework for documenting ePHI protections and…
Read the analysis →
The NIST National Cybersecurity Center of Excellence (NCCoE) has announced a project to demonstrate practical approaches for Operational Technology (OT) asset management, providing a foundation for risk assessment and vulnerability…
Read the analysis →
A critical Server-Side Request Forgery (SSRF) vulnerability in Cisco Unified CM could allow unauthenticated remote attackers to write files and elevate privileges to root, potentially impacting clinical communication resilience.
Read the analysis →
A vulnerability in Splunk Enterprise allows unauthenticated users to create or truncate arbitrary files via a PostgreSQL sidecar service, posing risks to the integrity of healthcare security audit logs.
Read the analysis →
An analysis of NIST SP 1339 and its implications for healthcare organizations managing medical devices and clinical OT systems to ensure patient care continuity.
Read the analysis →
A directory traversal vulnerability in Cisco Catalyst SD-WAN Manager could allow authenticated attackers to overwrite system files, potentially impacting the secure transmission of ePHI and clinical network stability.
Read the analysis →
A critical vulnerability (CVE-2026-35273) in Oracle PeopleSoft Enterprise PeopleTools allows unauthenticated system takeover and is currently utilized by ransomware campaigns, posing a risk to healthcare administrative operations.
Read the analysis →
A critical OS command injection vulnerability (CVE-2026-10520) in Ivanti Sentry could allow unauthenticated remote code execution, posing a risk to healthcare organizations managing clinical mobile endpoints.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.