Log In
Get Started Free

cognitive cybersecurity intelligence

News and Analysis

Search

Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles – The Hacker News

April 22, 2026

Lazarus Unleashes ‘Mach-O Man’ macOS Malware on Crypto and Fintech – BanklessTimes

April 22, 2026

Venezuela energy sector targeted by highly destructive Lotus wiper – Security Affairs

April 22, 2026

DinDoor Backdoor Exploits Deno and MSI Installers to Slip Past Detection

April 22, 2026

Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape

April 22, 2026

Microsoft-Signed Binary Used to Sneak LOTUSLITE Into India-Focused Espionage Campaign

April 22, 2026

1 - Report Month 2026 February Q1 V1

Latest Pulse Report

HEAL SECURITY CYBER PULSE REPORT: FEBRUARY 2026

March 12, 2026

In February 2026, healthcare cybersecurity faced growing threats from large-scale breaches, ransomware, and actively exploited vulnerabilities. Major incidents – including Conduent, ApolloMD, Vikor Scientific, and TriZetto – exposed millions of patient records, often via third-party vendors. Critical flaws in Dell RecoverPoint, BeyondTrust remote access tools, and SmarterMail highlight ongoing exploitation risks. Regulatory developments, including CISA’s cyber incident reporting rule under CIRCIA and OCR’s expanded enforcement of 42 CFR Part 2, reinforce the need for rapid patching, proactive threat detection, and robust vendor and incident response management across healthcare organizations.

Go to Latest pulse report 

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

 NEW!  - Daily Podcasts

Report 2025

Annual checkup

HEAL Security Annual Checkup 2025

February 4, 2026

In 2025, healthcare cybersecurity was defined by systemic, high-impact threats. Federal breach data understated reality; including state reports, over 175 million individuals were affected, showing that large-scale data compromise is now routine. Vulnerabilities surged, with 48,000+ CVEs disclosed, while attackers shifted to data theft, AI-driven phishing, and blended nation-state and criminal tactics. Healthcare remained a prime target, with third-party and identity-based attacks driving the most damaging incidents. Cybersecurity has firmly become a business resilience and governance priority, with growing regulatory pressure, insurance demands, and board-level oversight.

Go to Annual checkup

1 - basics are still broken

Special edition report

THE BASICS ARE STILL BROKEN: Why Cyber Security Keeps Failing Despite Best Practices

June 12, 2025

This report explores why, despite massive investments in cybersecurity tools, frameworks, and talent, preventable breaches continue to affect organizations across every sector. The root cause isn’t a lack of technology—it’s a failure to consistently execute the fundamentals: patching, configuration, access control, and architectural hygiene. Until these fundamentals are treated as sacred, the cycle of costly, repeat breaches will persist.

Go to special report

1 - basics are still broken

Special edition report

THE BASICS ARE STILL BROKEN: Why Cyber Security Keeps Failing Despite Best Practices

June 12, 2025

This report explores why, despite massive investments in cybersecurity tools, frameworks, and talent, preventable breaches continue to affect organizations across every sector. The root cause isn’t a lack of technology—it’s a failure to consistently execute the fundamentals: patching, configuration, access control, and architectural hygiene. Until these fundamentals are treated as sacred, the cycle of costly, repeat breaches will persist.

Go to special report

title Cybersecurity Incident responce

Special edition report

Cybersecurity Incident Response Playbook

June 12, 2025

This slide deck outlines a rapid response to cyberattacks: isolate systems, avoid email, preserve evidence, and activate a secure command center. Maintain clinical operations, investigate the source, and track the incident with a SitRep. A clear playbook ensures better readiness and coordination.

Go to special report

1 - THE INTERNET IS BROKEN

Special edition report

THE INTERNET IS BROKEN: Held Together by NAT and HOPE. The IPV4 Crisis. How IPV6 Can Fix it

June 30, 2025

This whitepaper makes the case for an urgent global shift from IPv4 to IPv6, highlighting IPv4’s critical limitations, such as address exhaustion and lack of native security. IPv6 is presented as a necessary infrastructure reform, not just a protocol upgrade. The paper examines technical, economic, and geopolitical drivers, calling for coordinated, cross-sectoral adoption. Continued reliance on IPv4 risks undermining the scalability, security, and future resilience of the global internet.

Go to special report

Latest headlines

Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles – The Hacker News --- Lazarus Unleashes ‘Mach-O Man’ macOS Malware on Crypto and Fintech – BanklessTimes --- Venezuela energy sector targeted by highly destructive Lotus wiper – Security Affairs --- DinDoor Backdoor Exploits Deno and MSI Installers to Slip Past Detection --- Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape --- Microsoft-Signed Binary Used to Sneak LOTUSLITE Into India-Focused Espionage Campaign --- Attackers Use Microsoft-Signed Binary To Deploy LOTUSLITE In India-Focused Cyber Campaign – cyberpress.org --- SAML vs OIDC vs OAuth 2.0: 12 Differences Every B2B Engineering Team Should Know --- Alignment Health Plan CEO: Sometimes When MA Plan is Pulling Out, the Provider is to Blame --- From Governance to Enablement: How Healthcare CIOs Can Stop Killing AI Innovation

Most read articles

Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles – The Hacker News
Malware
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles - The Hacker News
April 22, 2026
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles  The...
Lazarus Unleashes ‘Mach-O Man’ macOS Malware on Crypto and Fintech – BanklessTimes
Malware
Lazarus Unleashes ‘Mach-O Man’ macOS Malware on Crypto and Fintech - BanklessTimes
April 22, 2026
Lazarus Unleashes ‘Mach-O Man’ macOS Malware on Crypto and Fintech  BanklessTimes
Venezuela energy sector targeted by highly destructive Lotus wiper – Security Affairs
Malware
Venezuela energy sector targeted by highly destructive Lotus wiper - Security Affairs
April 22, 2026
Venezuela energy sector targeted by highly destructive Lotus wiper  Security Affairs
DinDoor Backdoor Exploits Deno and MSI Installers to Slip Past Detection
Healthcare Security
DinDoor Backdoor Exploits Deno and MSI Installers to Slip Past Detection
April 22, 2026
DinDoor is a newly documented backdoor that abuses the Deno JavaScript runtime and MSI installer files...
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
Attacks
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
April 22, 2026
A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium that...
Microsoft-Signed Binary Used to Sneak LOTUSLITE Into India-Focused Espionage Campaign
Global News
Microsoft-Signed Binary Used to Sneak LOTUSLITE Into India-Focused Espionage Campaign
April 22, 2026
A state-linked threat group has been caught running a quiet but carefully planned espionage operation...
View More

HEAL Security in press and news

This section highlights the latest media mentions, news articles, and press coverage featuring HEAL Security. Stay updated on how industry leaders and news outlets are recognizing our contributions to healthcare cybersecurity. From innovative solutions to expert insights, explore how HEAL is shaping the future of healthcare security. Check back often for the most recent updates and features.

Securing the Future of Healthcare: A Strategic Response to Cyber Threats

September 4, 2024

HEAL Security secures $4.6 million in funding for healthcare cybersecurity

January 26, 2024

Heal Security: $4.6m boost, fortifying healthcare cybersecurity.

January 25, 2024

Heal Security: $4.6m Boost to Fortify Healthcare Cybersecurity

January 25, 2024

Heal Security Raises $4.6M in Funding

January 25, 2024

HEAL Security Raises $4.6 Million in Pre-Seed Funding

January 25, 2024

Heal Security secures $4.6m boost to strengthen healthcare cybersecurity

January 25, 2024

Health2047-Backed HEAL Security Emerges from Stealth with $4.6M

January 25, 2024

Exclusive: HEAL Security gets $4.6M for health care cybersecurity

January 24, 2024

Heal Security Raises $4.6M in Funding

January 24, 2024

HEAL Security Insights

Discover articles, blog posts and videos created by our team of global healthcare cybersecurity experts.

View More
Articles

Securing the Future of Healthcare: A Strategic Response to Cyber Threats

Healthcare faces a critical cybersecurity crisis as digital innovations increase attack risks. Data breaches cost $9.77 million on average, highlighting the urgent need for stronger, proactive cybersecurity strategies to protect patient safety.
Picture of Charles Aunger

Charles Aunger

Cybersecurity, Data, Healthcare
Articles

Confronting the chronic healthcare cybersecurity crisis

The healthcare industry faces chronic cybersecurity issues, marked by frequent breaches, extortion, and data exposure, HEAL CEO Charles Aunger writes. A culture shift, emphasizing cybersecurity basics and accountability, is crucial for improvement.
Picture of Charles Aunger

Charles Aunger

Cybersecurity, Data, Healthcare

Receive cybersecurity intelligence in your inbox

Subscribe to HEAL Security Dispatch, a trusted source for healthcare cybersecurity news, perspectives and analysis.