Right To Know - February 7, 2023, Vol. 3 | News & Events - HEAL Security Inc. - Cyber Threat Intelligence for the Healthcare Sector

Network level risk management key to medical device security

In today’s healthcare, medical devices are crucial but vulnerable, as noted by the European Commission’s NIS2 directive. To combat cybersecurity threats, Palo Alto Networks has

UDP Vulnerability in Windows Deployment Services Allows 0-Click System Crashes

A newly discovered vulnerability in Microsoft’s Windows Deployment Services (WDS) allows attackers to remotely crash servers with zero user interaction. By exploiting the UDP-based TFTP

Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware

Researchers have discovered a new attack method called “Bring Your Own Installer” that disables SentinelOne’s endpoint security during upgrades, allowing ransomware like Babuk to be

New T1555.003 Technique Let Attackers Steal Passwords From Web Browsers

The T1555.003 technique, highlighted in the MITRE ATT&CK framework, allows attackers to extract saved usernames and passwords from web browsers, leading to unauthorized access and

News and Analysis