cognitive cybersecurity intelligence

News and Analysis

What is weaponised JPEG file? Here's how hackers use fake images to deploy malware – Geo News

May 12, 2026

AAVs in Focus: Practical Approaches to Capsid Analytics and Plasmid DNA Control

May 12, 2026

Employers say they prefer rebate-free PBM models

May 12, 2026

Missouri regulators say Conduent is not cooperating in breach investigation – TechTarget

May 12, 2026

Google warns hackers now using AI to create new software exploits – Interesting Engineering

May 12, 2026

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days

May 12, 2026

Latest Pulse Report

HEAL SECURITY CYBER PULSE REPORT: FEBRUARY 2026

March 12, 2026

In February 2026, healthcare cybersecurity faced growing threats from large-scale breaches, ransomware, and actively exploited vulnerabilities. Major incidents – including Conduent, ApolloMD, Vikor Scientific, and TriZetto – exposed millions of patient records, often via third-party vendors. Critical flaws in Dell RecoverPoint, BeyondTrust remote access tools, and SmarterMail highlight ongoing exploitation risks. Regulatory developments, including CISA’s cyber incident reporting rule under CIRCIA and OCR’s expanded enforcement of 42 CFR Part 2, reinforce the need for rapid patching, proactive threat detection, and robust vendor and incident response management across healthcare organizations.

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

NEW! - Daily Podcasts

Annual checkup

HEAL Security Annual Checkup 2025

February 4, 2026

In 2025, healthcare cybersecurity was defined by systemic, high-impact threats. Federal breach data understated reality; including state reports, over 175 million individuals were affected, showing that large-scale data compromise is now routine. Vulnerabilities surged, with 48,000+ CVEs disclosed, while attackers shifted to data theft, AI-driven phishing, and blended nation-state and criminal tactics. Healthcare remained a prime target, with third-party and identity-based attacks driving the most damaging incidents. Cybersecurity has firmly become a business resilience and governance priority, with growing regulatory pressure, insurance demands, and board-level oversight.

Special edition report

THE BASICS ARE STILL BROKEN: Why Cyber Security Keeps Failing Despite Best Practices

June 12, 2025

This report explores why, despite massive investments in cybersecurity tools, frameworks, and talent, preventable breaches continue to affect organizations across every sector. The root cause isn’t a lack of technology—it’s a failure to consistently execute the fundamentals: patching, configuration, access control, and architectural hygiene. Until these fundamentals are treated as sacred, the cycle of costly, repeat breaches will persist.

Special edition report

THE BASICS ARE STILL BROKEN: Why Cyber Security Keeps Failing Despite Best Practices

June 12, 2025

Special edition report

Cybersecurity Incident Response Playbook

June 12, 2025

This slide deck outlines a rapid response to cyberattacks: isolate systems, avoid email, preserve evidence, and activate a secure command center. Maintain clinical operations, investigate the source, and track the incident with a SitRep. A clear playbook ensures better readiness and coordination.

Special edition report

THE INTERNET IS BROKEN: Held Together by NAT and HOPE. The IPV4 Crisis. How IPV6 Can Fix it

June 30, 2025

This whitepaper makes the case for an urgent global shift from IPv4 to IPv6, highlighting IPv4’s critical limitations, such as address exhaustion and lack of native security. IPv6 is presented as a necessary infrastructure reform, not just a protocol upgrade. The paper examines technical, economic, and geopolitical drivers, calling for coordinated, cross-sectoral adoption. Continued reliance on IPv4 risks undermining the scalability, security, and future resilience of the global internet.

Go to special report

Latest headlines

What is weaponised JPEG file? Here's how hackers use fake images to deploy malware – Geo News --- AAVs in Focus: Practical Approaches to Capsid Analytics and Plasmid DNA Control --- Employers say they prefer rebate-free PBM models --- Missouri regulators say Conduent is not cooperating in breach investigation – TechTarget --- Google warns hackers now using AI to create new software exploits – Interesting Engineering --- Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days --- Bristol Myers, Hengrui Pharma Team Up in Global Drug Research Pact That Could Top $15B --- This devious Android malware has returned disguised as TikTok or streaming apps – TechRadar --- Lawmakers introduce bill to strengthen energy sector cybersecurity and threat analysis, boost resilience – Industrial Cyber --- Boyne City responds to cybersecurity incident affecting parts of city network – WPBN

Most read articles

Malware

What is weaponised JPEG file? Here's how hackers use fake images to deploy malware - Geo News

May 12, 2026

What is weaponised JPEG file? Here’s how hackers use fake images to deploy malware Geo...

Healthcare Security

AAVs in Focus: Practical Approaches to Capsid Analytics and Plasmid DNA Control

May 12, 2026

Healthcare Security

Employers say they prefer rebate-free PBM models

May 12, 2026

More than 90% of employers agreed a rebate-free approach is easier to understand and would improve drug...

Missouri regulators say Conduent is not cooperating in breach investigation – TechTarget

HEAL Security in press and news

This section highlights the latest media mentions, news articles, and press coverage featuring HEAL Security. Stay updated on how industry leaders and news outlets are recognizing our contributions to healthcare cybersecurity. From innovative solutions to expert insights, explore how HEAL is shaping the future of healthcare security. Check back often for the most recent updates and features.