HEAL Security - Cybersecurity Intelligence & News for Healthcare

In this episode, Edd Hall discusses the recent wave of cybersecurity events, starting with the Red Hat breach that exposed internal project data, the surge in CVEs and how insurers are reacting, and the Kodex outage caused by social engineering. He also covers the emergence of the Klopatra Android trojan, new CISA advisories and additions to the KEV catalog, along with major data breaches impactin...

Stay up to date with today’s top cybersecurity stories. From Google’s new F‑Droid restrictions and emerging Android malware like Klopatra and MatrixPDF, to DNS-based attacks, VMware exploits, and North American data breaches exposing millions of users, we cover the latest threats and vulnerabilities affecting individuals and organizations. Tune in for a concise, journalist-style briefing on the ke...

In this episode, Edd Hall discusses the latest wave of global cyber threats — from Chinese espionage operations using NET-STAR malware to critical vulnerabilities in Palo Alto’s GlobalProtect, Google Gemini AI, and Linux sudo. He also covers CISA’s funding shift for MS-ISAC, the major cyberattack on Asahi Group, hijackings of Microsoft SQL Servers with XiebroC2, and the Harrods data breach impacti...

Today’s episode covers the latest cybersecurity news, including the Postmark MCP server code hijack, AI-generated copyright scams targeting social media, and Nimbus Manticore’s expanding cyber-espionage operations in Europe. We also discuss recent data breaches at Gaylord Specialty Healthcare and Harrods, as well as hackers spreading fake apps and weaponized Microsoft Teams installers. Stay inform...

In this episode Mark and Diana discuss the latest cybersecurity developments, including the push for simplicity in SecOps, Microsoft’s warning about the XCSSET macOS malware, and GitLab’s high-severity vulnerabilities. They also cover major healthcare breaches affecting nearly 150,000 patient records, the Ascension class action lawsuit, and a UK nursery hack that exposed sensitive children’s data....

A wave of new cyber incidents is making headlines worldwide. From hackers abusing GitHub notifications and fake copyright takedowns to ransomware leaking children’s data, DNS-based malvertising, and multimillion-dollar corporate losses, these stories reveal the growing sophistication of today’s cybercriminals. We also cover fresh AI vulnerabilities and stealthy long-term breaches, highlighting the...

In this episode, we discuss the latest cybersecurity incidents and vulnerabilities affecting organizations worldwide. Topics include Chinese state-backed supply chain attacks, a UK arrest linked to airport disruptions, critical flaws in Salesforce CLI and enterprise software, and GitHub’s efforts to secure the npm ecosystem. We also cover the ShadowV botnet-for-hire and recent breaches of U.S. fed...

This episode delivers a sharp roundup of the week’s top cybersecurity stories, including hackers weaponizing oversized SVG files to spread AsyncRAT, malware spoofing trusted tools like ChatGPT and Microsoft Office, a critical bug in Libraesva Email Security Gateway exploited by state actors, IIS server hijacking through malicious modules, new Supermicro firmware flaws that allow malicious updates,...

Microsoft patched a major Entra ID flaw that could have allowed large-scale account impersonation, while Collins Aerospace faced a ransomware attack that disrupted European airports. The healthcare cybersecurity market is set for rapid growth as attacks intensify, and criminals are impersonating the FBI’s IC3 to steal sensitive data. Malware infections are rising on Windows, with ransomware and in...

Today’s cybersecurity roundup covers a critical Nokia vulnerability, research showing how ChatGPT agents can be tricked into solving CAPTCHAs, and a new exploit called ShadowLeak targeting Gmail integrations. We also look at major data breaches impacting healthcare and luxury brands, a maximum-severity flaw in Fortra’s GoAnywhere MFT, and the rise of AI-powered phishing campaigns. Stay informed on...

In this episode, Edd Hall discusses Google’s urgent patch for a Chrome zero-day, a Russian disinformation network spreading fake news with AI, and a new zero-click exploit targeting ChatGPT’s Research Agent to steal Gmail secrets. He also covers the alarming rise in healthcare cyberattack losses revealed by Netwrix, CISA’s latest advisories on industrial control system vulnerabilities, and the gro...

In today’s cybersecurity roundup, we cover 224 malicious Android apps removed from Google Play, a new BiDi Swap vulnerability, and a supply chain attack targeting npm packages. We also look at SonicWall’s cloud portal breach, the FileFix phishing campaign, Microsoft’s takedown of the RaccoonO365 phishing service, and TA558’s use of AI-generated scripts in hotel attacks. Stay informed on the latest...

In this episode, Edd Hall discusses the latest cybersecurity developments, including Microsoft’s September updates breaking SMBv1 shares, the KillSec ransomware attack on a Brazilian healthcare software provider, and an insider breach at FinWise Bank affecting nearly 700,000 customers. He also explores the clash between U.S. senators and the FBI’s cyber chief over staffing issues, the risks of thr...

This episode covers the latest in cybersecurity, from hackers using AI-powered phishing schemes to a new Phoenix Rowhammer attack targeting DDR5 memory. We dive into insider and financial data breaches, Microsoft’s Windows 10 end-of-support warning, and a surge of malicious WhiteCobra extensions in developer tools. Plus, we look at how AI is reshaping clinical trial site selection with major impli...

In this episode, Mark and Diana discuss the latest wave of cybersecurity developments, from the emergence of HybridPetya ransomware that bypasses Secure Boot to Akira’s exploitation of a SonicWall flaw. They cover the critical Cursor editor vulnerability, CISA’s warning about active attacks on Dassault’s manufacturing software, and new patches from Cisco and Samsung. The conversation also explores...

In today’s cybersecurity briefing: a critical Apple CarPlay flaw leaves vehicles exposed, Microsoft battles a major Exchange outage, and a new phishing-as-a-service platform emerges. Oracle unveils AI-powered patient tools, researchers warn of the VMScape CPU attack, and Apple alerts users to state-sponsored spyware threats. Plus, ransomware surges across the Middle East, putting banking and oil s...

In this episode, Edd Hall discusses the latest cybersecurity developments, including Microsoft’s streaming fixes, SAP and Patch Tuesday updates, delayed hospital breach disclosures, federal cyber priorities, the rise of CyberVolk ransomware, cryptojacking campaigns targeting Docker APIs, GitLab security patches, and data breaches affecting UK police forces. He breaks down the risks, impacts, and k...

Today’s cybersecurity roundup covers a major npm supply chain attack, warnings from Czech authorities about Chinese espionage risks, and the indictment of a ransomware operator tied to LockerGoga, MegaCortex, and Nefilim. We also highlight a Plex data breach, a Microsoft anti-spam bug disrupting safe links, a FortiDDoS vulnerability, and a new Linux botnet combining cryptomining with DDoS attacks.

This episode covers the latest in cybersecurity, from the GPU-based “GPUGate” malware campaign and SVG image phishing kits to a major GitHub breach and hijacked npm packages with billions of downloads. We also look at new spyware enabling sextortion, phishing abuse of Amazon’s email service, and a data breach at Canadian fintech firm Wealthsimple. Stay updated on the threats shaping today’s digita...

In this episode, Mark and Diana discuss the U.S. government’s $10 million bounty on Russian FSB hackers, the discovery of undetected SVG phishing files, and new warnings from the Czech Republic about technology that transmits data to China. They explore how AI could be misused for autonomous ransomware, the evolution of CastleRAT malware, and the growing abuse of X’s Grok AI to spread malicious li...

In today’s episode, we cover Cloudflare’s defense against a record-breaking DDoS attack, a Sitecore zero-day exploited by hackers, and GhostRedirector’s growing server compromises. We also look at Chess.com’s recent data breach, npm malware hidden through Ethereum smart contracts, and the evolving Tycoon phishing kit. Finally, we highlight DarkPulse’s new partnership with BX3 to expand across the...

In this episode, Edd Hall discusses the latest developments in cybersecurity, from government initiatives to strengthen supply chain transparency with updated SBOM guidance, to major cyber incidents impacting technology, healthcare, and finance. He covers Cloudflare’s defense against the largest-ever DDoS attack, Google’s critical Android security updates addressing zero-day vulnerabilities, breac...

Today’s cybersecurity roundup covers North Korea’s Lazarus Group expanding its malware arsenal, Cloudflare blocking a record 115 Tbps DDoS attack, and Jaguar Land Rover facing major IT outages. We also look at Ukraine’s networks hit by massive brute-force attempts, a critical ESPHome vulnerability, a Salesloft breach impacting top cybersecurity firms, and the discovery of the MystroDX backdoor.

In this episode, Mark and Diana discuss the latest developments in cybersecurity, including Microsoft’s SSD update clarification, the Salt Typhoon espionage campaign, zero-day vulnerabilities in WhatsApp, and the rise of ransomware attacks by groups like Sinobi. They also cover major data breaches affecting TransUnion and Farmers Insurance, and explain why malware can never be completely stopped,...

In this episode, Edd Hall discusses the latest developments in global cybersecurity, including North Korea-linked cyber operations, AI-driven ransomware campaigns, and the misuse of trusted tools like Velociraptor. He highlights major data breaches affecting hundreds of thousands of individuals, vulnerabilities in enterprise software and industrial systems, and emerging threats across critical inf...