Contec Health’s CMS8000 Patient Monitor has been found to contain critical vulnerabilities that could allow for remote exploitation, including unauthorized file uploads and exposure of sensitive patient data. The Cybersecurity and Infrastructure Security Agency (CISA) and the Food and Drug Administration (FDA) have addressed these risks and advised the temporary removal of the affected devices from networks. They also recommended strict access controls, using firewalls, and sourcing equipment from trusted manufacturers.
IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,
%20CISO%E2%80%99s%20Core%20Focus.webp?w=0&resize=0,0&ssl=1 "Identity and Access Management (IAM)")