China-linked campaign targets healthcare; Green Clinic rebuilds after ransomware
A multinational advisory maps a China-linked campaign targeting healthcare, while Green Clinic details its ransomware recovery and six CVEs enter the weekly tracker.
Senate Passes Healthcare Cybersecurity Bill; iRhythm Begins Patient Notifications
S. 3315 clears the Senate with proposed minimum cybersecurity requirements, while iRhythm begins notifying patients following data theft from third-party business applications.
Exploited NetScaler flaws demand upgrades; Astrana Health details a spoofing-led intrusion
Citrix disclosed two exploited NetScaler flaws with fixed builds and compromise checks, while Astrana Health described an impersonation campaign that spoofed its main phone number.
Actively Exploited Cisco Flaws and McKesson’s Data-Theft Investigation
This week: exploited Cisco email and identity flaws, three healthcare cyber developments, new Class I device actions, and practical AI-agent oversight signals.
Boston Scientific Restores Operations; Mirth Connect Update Addresses Three Interface Flaws
Boston Scientific says manufacturing and shipping are restored; meanwhile, three Mirth Connect flaws and five urgent KEV additions sharpen this week’s healthcare security priorities.