Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-89208: Siemens Capital Embedded AR Classic Out-of-Bounds Read — Detection and Remediation Guide
Introduction On October 22, 2025, CISA published ICS Advisory ICSA-26-295-04, disclosing a new out-of-bounds read vulnerability in Siemens C...
HHS Confirms No HIPAA Penalty Inflation Adjustment for 2026: What Covered Entities Must Do Now
Introduction The Department of Health and Human Services (HHS) has confirmed via the Federal Register that it will not adjust HIPAA civil mo...
CVE-2026-111594: InterSystems IRIS for Health Ships With TLS Disabled by Default — Detection and Hardening Guide
Introduction CISA has published ICS Medical Advisory ICSMA-26-295-01 covering a significant weakness in InterSystems IRIS for Health, one of...
Massachusetts AG HIPAA Settlement with Transformative Healthcare: Phishing, Email Compromise, and MassHealth Fraud — A Defender's Playbook
What Happened The Massachusetts Attorney General's office has reached a settlement with Transformative Healthcare LLC — one of the Commonwea...
SafePay Ransomware: CISA/FBI/USSS Joint Advisory — Detection, Hardening, and Response Guide for Defenders
SafePay Ransomware: Federal Advisory Signals an Escalating Threat to Healthcare and Critical Infrastructure The U.S. Cybersecurity and Infra...
HHS ONC Letters of Nonconformity Target Suspected Information Blockers — Compliance Defense Guide for Healthcare Organizations
HHS Escalates Information Blocking Enforcement: What Defenders and Compliance Teams Need to Do Now The U.S. Department of Health and Human S...
Jefferson County Health Department $2.25M Data Breach Settlement: Detection and HIPAA Hardening Guide for Healthcare Defenders
Introduction The Jefferson County Health Department — the public health agency serving Jefferson County, Missouri, from Hillsboro — has agre...
Vasilek Backdoor Hidden in VMware Tools: Defending Healthcare VMs After the Partisan Zmiy Intrusion
Why this matters to defenders Russian cybersecurity firm Solar attributes a nearly two-year intrusion inside a Russian healthcare organizati...
23andMe Breach Settlement: Defending Against Credential Stuffing on Sensitive-Data Platforms
The Settlement That Puts a Price Tag on Credential Stuffing Negligence California has agreed to a $6 million settlement with 23andMe over th...