Industry Vertical7 stories tracked

Healthcare & Pharma

Hospitals, healthtech, medical devices, pharmaceuticals and patient data.

3D conceptual illustration of CISA medical ICS advisory showing healthcare data integration engine undergoing remote code execution threat with clinical telemetry shield

Breaking

ThreatsHealthcare & Pharma

CISA Warns of Critical RCE Flaws in NextGen Mirth Connect Threatening Hospital HL7 Pipelines

CISA published an urgent medical ICS advisory detailing critical RCE vulnerabilities in NextGen Mirth Connect integration engines routing hospital clinical records.

14 Sept 20268 min read

Priya Raman

IndustryGovernment & DefenceHigh
CISA Finalizes CIRCIA Mandate: 72-Hour Incident and 24-Hour Ransomware Reporting Enforced
CISA issued its landmark final rule under CIRCIA, legally mandating critical infrastructure operators report major cyber incidents within 72 hours and ransom payments within 24 hours.
Tom Verhoeven14 Sept 20268 min read
NewsTechnology, Cloud & SaaSMedium
Microsoft September 2026 cumulative updates trigger Remote Desktop Services deadlock across Windows Server
Enterprise sysadmins face operational paralysis as September 2026 security updates trigger Remote Desktop Services freezes across Windows Server 2019, 2022, and 2025.
Aisha Noor14 Sept 20265 min read
NewsHealthcare & PharmaBreaking
IDScan.net says customer information in cloud accounts may have been accessed
IDScan.net says an unauthorized party may have accessed or copied cloud-account customer information, including names and government ID numbers.
Priya Raman12 Sept 20265 min read
GuidesTechnology, Cloud & SaaS
Playbook: surviving a 900-CVE Patch Tuesday without breaking your change process
A repeatable triage model for very large monthly releases — what to expedite, what to schedule, and how to prove coverage afterwards.
Priya Raman9 Sept 20268 min read
ThreatsGovernment & DefenceHigh
Gunra ransomware: what AA26-222A actually gives your detection engineers
Six agencies detailed Gunra's Fortinet entry, its forticloud-sync backdoor and an MFA bypass planted in a VDI server. Here is how to turn that into detection coverage.
Daniel Okafor8 Sept 20266 min read
NewsHealthcare & PharmaCritical
Healthcare ransomware wave: OVP Health and ProHealth Medical hit within weeks
Emerging crews Storm and Krybit claimed attacks on two healthcare providers, with a combined 244 GB of patient and employee data alleged stolen.
CST Newsroom6 Sept 20265 min read

CISA Warns of Critical RCE Flaws in NextGen Mirth Connect Threatening Hospital HL7 Pipelines

CISA Finalizes CIRCIA Mandate: 72-Hour Incident and 24-Hour Ransomware Reporting Enforced

Microsoft September 2026 cumulative updates trigger Remote Desktop Services deadlock across Windows Server

IDScan.net says customer information in cloud accounts may have been accessed

Playbook: surviving a 900-CVE Patch Tuesday without breaking your change process

Gunra ransomware: what AA26-222A actually gives your detection engineers

Healthcare ransomware wave: OVP Health and ProHealth Medical hit within weeks