HEAL Security - Cybersecurity Intelligence & News for Healthcare

In this special global edition of the HEAL Security Dispatch Daily Digest, we turn our attention to the Middle East. From rising cyber threats and regional security initiatives to groundbreaking partnerships and technological advancements, this episode explores the latest developments shaping the region’s cybersecurity landscape.

In this episode, Edd Hall discusses the latest developments across cybersecurity, technology, and industry. From the evolution of the Hook Android Trojan into a ransomware-style threat and critical Citrix NetScaler vulnerabilities already under active exploitation, to a massive cyberattack that forced Nevada state offices to close, organizations face increasing digital risks. He also covers malici...

Stay updated with today’s top cybersecurity stories. From novel Linux malware techniques and a critical Docker vulnerability to a major Microsoft SharePoint attack, cybercriminals are finding new ways to exploit systems worldwide. We also cover AI-driven ClickFix threats, hackers abusing Google Classroom, the Farmers Insurance data breach affecting 1.1 million people, and a cyber incident disrupti...

In this episode, Mark and Diana discuss the latest wave of global cybersecurity developments, including how APT36 is abusing Linux .desktop files to target Indian government and defense, Apple’s urgent zero-day patch for iOS, iPadOS, and macOS, and China-linked Murky Panda’s ongoing espionage campaigns. They also examine how cybercriminals are abusing VPS services and trusted websites through TDS,...

This episode covers the latest in cybersecurity, from the CORNFLAKE.V3 backdoor and QR code phishing scams to hackers abusing the Internet Archive and cheap VPS services. We also look at Apple’s seventh zero-day patch of the year, new DripDropper malware tactics, and how AI crawler traffic is overwhelming websites.

In this episode, Edd Hall discusses the latest developments in cybersecurity and technology. From critical Microsoft update issues and AI zero-click exploits to major data breaches affecting Allianz Life, New York Business Council, and TPG/iiNet, we cover the risks facing individuals and organizations today. Edd also explores ransomware attacks in the pharmaceutical sector and vulnerabilities disc...

Today’s cybersecurity roundup covers major developments worldwide — from the UK backing down on Apple encryption demands to new exploits in Apache ActiveMQ. We dive into exposed flaws at McDonald’s, North Korean hackers leveraging GitHub, and a ClickFix attack using a fake BBC News page. Updates from Google Cloud’s 2025 Security Summit highlight stronger protections, while a cyberattack in the Net...

In this episode, we discuss a series of major cybersecurity events from mid-August 2025, including significant healthcare breaches in the U.S. and India, the arrest of a key ransomware operator linked to the Zeppelin group, and critical vulnerabilities in PostgreSQL and N-able’s N-central platform. We also cover emerging supply-chain threats from malicious Python and npm packages, as well as a ran...

A roundup of this week’s top cybersecurity stories, including Microsoft’s Windows 10 retirement warning, a major breach at Colt Technology Services, a critical Zoom vulnerability, the rise of AI-powered ransomware HexStrike, a massive UnitedHealth data leak affecting 192.7 million people, and a Pakistan-based malware campaign infecting millions worldwide.

This episode covers Microsoft’s latest Patch Tuesday tackling a critical Kerberos zero-day, a Booking.com phishing scam using a sneaky Unicode trick, and the Crypto24 ransomware group’s advanced EDR evasion tools. We also look at Google’s Android pKVM earning top security certification, a surge in personalized phishing emails, and two new mobile threats — the LunaSpy spyware and PhantomCard NFC-ba...

In this episode, Edd Hall discusses the latest cybersecurity developments, including an actively exploited FortiSIEM remote code execution flaw, a KernelSU vulnerability granting root access on Android devices, and a Russian-linked APT campaign targeting government and energy sectors. He also covers supply chain risks from backdoored Docker Hub images, GitHub-based SmartLoader malware, and the gro...

In today’s cybersecurity roundup, we cover a surge in global brute-force attacks on Fortinet SSL VPNs, a massive scam using over 10,000 fake TikTok and Facebook shops to spread malware and steal cryptocurrency, and newly discovered vulnerabilities in Ivanti VPN gateways. We also report on a cyber incident disrupting the Pennsylvania Attorney General’s office, a suspected collaboration between the...

In this episode, Edd Hall discusses a wave of major cybersecurity incidents, including the exposure of over 16 billion login credentials from top platforms, a massive cancer screening data breach in the Netherlands, and Columbia University’s 460 GB data theft. He examines critical software flaws in 7-Zip and WinRAR, the “BadCam” exploit targeting Linux webcams, and the rise of native phishing with...

From AI-powered phishing scams in Brazil to a major breach at Allianz Life, today’s cybersecurity roundup covers the latest threats and revelations. Learn how attackers are using generative AI tools—and how defenders are fighting back using AI-powered forensics. We dive into a privilege escalation flaw in Amazon ECS, a new malware analysis platform from CISA, and cyberattacks targeting Air France,...

In this episode, Edd Hall discusses the latest cybersecurity developments, including CISA’s malware analysis report on exploited SharePoint vulnerabilities, Microsoft’s urgent warning about CVE-2025-53786 in hybrid Exchange environments, and new additions to the KEV catalog. He also covers critical flaws found in Dell laptops, a clever evasion technique used by Akira ransomware, and recent data br...

From major ransomware attacks in the healthcare sector to PBS confirming a data breach, today’s roundup dives into the latest cybersecurity headlines. We cover how phishers are abusing Microsoft 365, a massive scam account takedown on WhatsApp, and new malware tactics using fake CAPTCHA. Plus, a deep dive into Mustang Panda’s evolving threats and the staggering updated numbers from the Change Heal...

In this episode, Edd Hall discusses the latest wave of cybersecurity incidents, including the emergence of the PSA Stealer malware targeting Linux users, a $40 million settlement by Cencora over a major data breach, and a stealthy Linux malware campaign stealing sensitive credentials. He also covers the NHS misconfiguration exposing hundreds of thousands of patient records, Chanel's employee data...

Stay ahead with today’s top healthcare cybersecurity headlines. From stealthy Linux backdoors and widespread data theft by Vietnamese hackers, to critical printer vulnerabilities and phishing attacks targeting developers — we cover the latest threats that matter. Get quick, clear updates on malware, cyber risks, and innovations reshaping healthcare security. Perfect for professionals who need the...

In this episode, Mark and Diana discuss the alarming discovery of Shade, a stealthy BIOS-level malware that evades traditional security measures. They dive into reports of Chinese state-sponsored hackers breaching U.S. intelligence networks, and examine why social engineering remains the leading cause of cyber incidents. The duo also covers major data breaches affecting UnitedHealth, Microsoft 365...

In today’s episode, we cover a critical zero-day vulnerability in a popular WordPress theme that’s under active attack. Android malware is targeting over 60 banking apps with stealthy phishing overlays. A new redirect campaign is hijacking user traffic using advanced evasion tactics. Clearwater launches a cyber risk platform tailored for healthcare organizations. Lenovo users face firmware threats...

In this episode, Edd Hall discusses recent major cybersecurity incidents affecting healthcare, retail, and software development sectors. Topics include Premier Health and Apria Healthcare data breaches, supply chain vulnerabilities highlighted by the Dollar Tree hack, and the CrowdStrike update failure. Edd also covers warnings from the FBI and CISA about the Scattered Spider threat group, phishin...

In today’s episode, we cover a wide range of cybersecurity threats making headlines — from exposed user chats in a popular messaging app to phishing campaigns targeting developers on PyPI. We also examine new malware tactics disguised as government apps, critical vulnerabilities in platforms like SAP NetWeaver and CodeIgniter, and the weaponization of a widely used npm package. Stay tuned as we un...

In this episode, Edd Hall discusses the latest cybersecurity developments making headlines on July 28, 2025. Topics include the Scattered Spider ransomware group’s attack on VMware ESXi, Microsoft’s licensing controversy with national security implications, the reemergence of BlackSuit as Chaos, and major breaches affecting Allianz Life, WordPress sites, and even a CIA intelligence portal. Tune in...

Today’s episode dives into a wave of emerging cyber threats shaking the digital landscape — from AI-generated Linux malware and malicious Copilot commands to steganography-based attacks hiding in innocent-looking images. We examine how fake error pages are delivering platform-specific payloads, how healthcare AI tools may be exposing sensitive data, and why open-source repositories are facing a su...

In this episode, Edd Hall discusses the latest cybersecurity developments, including Brave’s move to block Windows Recall for user privacy, Europol’s arrest of the XSS forum admin, and the exploitation of a critical SharePoint vulnerability. He also covers major breaches at Toptal, AMEOS Group, and U.S. federal agencies, the data leak penalty faced by Haesung DS, and SonicWall’s urgent patch for a...