Skip to content
Threat Feed

Tag

Healthcare

5 briefs RSS
high threat

Anubis Ransomware: Santiam Hospital & Clinics Data Breach

The Anubis ransomware-as-a-service group has claimed a new victim, Santiam Hospital & Clinics, following their established pattern of double-extortion attacks against the healthcare sector.

Santiam Hospital & Clinics Anubis ransomware healthcare data-exfiltration
2t 29i
medium advisory

Multiple Vulnerabilities in J4Care dcm4chee-arc-light

Multiple critical vulnerabilities in J4Care dcm4chee-arc-light 5.35.1 enable remote, unauthenticated attackers to manipulate medical records, exfiltrate sensitive patient data, and induce denial-of-service conditions.

dcm4chee-arc-light healthcare medical-device vulnerability remote-execution
2t
high threat

Medusa Ransomware Operations and Tactics

Medusa ransomware affiliates target critical infrastructure and healthcare entities using rapid exploitation of newly disclosed vulnerabilities and abuse of legitimate RMM software for persistence and exfiltration.

Medusa ransomware initial-access exfiltration rmm critical-infrastructure healthcare
3t
high advisory

Remote Code Execution in OpenEMR Document Category Tree

OpenEMR versions 8.2.0 and earlier are vulnerable to authenticated remote code execution via SQL injection and unsafe eval() calls in the document category tree component.

OpenEMR +1 web-application-vulnerability remote-code-execution healthcare cve-2026-39931 sql-injection web-application vulnerability authentication-bypass +1
8t 1c
high advisory

OpenEMR SQL Injection Vulnerability (CVE-2026-33910)

OpenEMR versions up to 8.0.0.2 are vulnerable to SQL injection in the patient selection feature, which can be exploited by authenticated attackers due to insufficient input validation, potentially leading to unauthorized data access and modification.

OpenEMR sqli cve-2026-33910 healthcare
2r 3t 1c updated