This is an emergency-patching week for a component almost every healthcare organization runs without thinking about it. On October 21, 2026 at 14:00 UTC the PHP project shipped out-of-band security ...
The dominant item is an actively exploited zero-day in a remote-support appliance that healthcare organizations routinely expose to vendors. On October 15, 2026 BeyondTrust disclosed CVE-2026-102764, a critical authentication bypass ...
Two GTI-confirmed healthcare threats lead this week, and both turn on the abuse of legitimate remote-access tooling rather than on exploits. CAMP.26.154 documents a financially motivated campaign, tracked by GTIG ...
This is an emergency-patching week. On September 27, 2026 Citrix published security bulletin CTX697096 confirming that two zero-day vulnerabilities in NetScaler ADC and NetScaler Gateway — CVE-2026-88771 and CVE-2026-88772, both ...
The most significant item this week is not a campaign, a vulnerability or a ransomware group. On September 24 the Australian government confirmed that an autonomous AI agent operated by ...
CloudWave is issuing this advisory regarding two critical vulnerabilities affecting widely used security infrastructure. One is under active attack and requires immediate action. Please review the sections that apply to ...
Three GTI records with confirmed Healthcare targeting were created this week — the highest count in any single window in this series, and the third consecutive week in which GTI ...
CISA published two medical advisories on September 10, and the first is the most consequential medical device advisory this series has covered. ICSMA-26-253-01 discloses three vulnerabilities in NextGen Healthcare Mirth ...
Two developments define this week. The first is a step change in scale. GTI released GLOBAL.26.006 on September 4, documenting a Malware-as-a-Service operator and multiple distribution clusters running the NEONSLIDE ...