cognitive cybersecurity intelligence

News and Analysis

LifePoint Health; Southwest Behavioral & Health Services; Nottingham Village Report Data Breaches – The HIPAA Journal

June 23, 2026

DUA Act 2025 Complaints Framework: briefing note – Kennedys Law LLP

June 23, 2026

Two Scattered Spider hackers plead guilty over Transport for London cyberattack

June 23, 2026

Researcher Earns $148,337 for Google Cloud Production RCE Vulnerability

June 23, 2026

Duo accused of role in TfL cyber attack plead guilty after ‘lengthy, highly complex, and painstaking investigation’

June 23, 2026

Scattered Spider Teens Convicted of TfL Cyber-Attack – Infosecurity Magazine

June 23, 2026

Latest Pulse Report

HEAL SECURITY CYBER PULSE REPORT: FEBRUARY 2026

March 12, 2026

In February 2026, healthcare cybersecurity faced growing threats from large-scale breaches, ransomware, and actively exploited vulnerabilities. Major incidents – including Conduent, ApolloMD, Vikor Scientific, and TriZetto – exposed millions of patient records, often via third-party vendors. Critical flaws in Dell RecoverPoint, BeyondTrust remote access tools, and SmarterMail highlight ongoing exploitation risks. Regulatory developments, including CISA’s cyber incident reporting rule under CIRCIA and OCR’s expanded enforcement of 42 CFR Part 2, reinforce the need for rapid patching, proactive threat detection, and robust vendor and incident response management across healthcare organizations.

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

NEW! - Daily Podcasts

Annual checkup

HEAL Security Annual Checkup 2025

February 4, 2026

In 2025, healthcare cybersecurity was defined by systemic, high-impact threats. Federal breach data understated reality; including state reports, over 175 million individuals were affected, showing that large-scale data compromise is now routine. Vulnerabilities surged, with 48,000+ CVEs disclosed, while attackers shifted to data theft, AI-driven phishing, and blended nation-state and criminal tactics. Healthcare remained a prime target, with third-party and identity-based attacks driving the most damaging incidents. Cybersecurity has firmly become a business resilience and governance priority, with growing regulatory pressure, insurance demands, and board-level oversight.

Special edition report

THE BASICS ARE STILL BROKEN: Why Cyber Security Keeps Failing Despite Best Practices

June 12, 2025

This report explores why, despite massive investments in cybersecurity tools, frameworks, and talent, preventable breaches continue to affect organizations across every sector. The root cause isn’t a lack of technology—it’s a failure to consistently execute the fundamentals: patching, configuration, access control, and architectural hygiene. Until these fundamentals are treated as sacred, the cycle of costly, repeat breaches will persist.

Special edition report

THE BASICS ARE STILL BROKEN: Why Cyber Security Keeps Failing Despite Best Practices

June 12, 2025

Special edition report

Cybersecurity Incident Response Playbook

June 12, 2025

This slide deck outlines a rapid response to cyberattacks: isolate systems, avoid email, preserve evidence, and activate a secure command center. Maintain clinical operations, investigate the source, and track the incident with a SitRep. A clear playbook ensures better readiness and coordination.

Special edition report

THE INTERNET IS BROKEN: Held Together by NAT and HOPE. The IPV4 Crisis. How IPV6 Can Fix it

June 30, 2025

This whitepaper makes the case for an urgent global shift from IPv4 to IPv6, highlighting IPv4’s critical limitations, such as address exhaustion and lack of native security. IPv6 is presented as a necessary infrastructure reform, not just a protocol upgrade. The paper examines technical, economic, and geopolitical drivers, calling for coordinated, cross-sectoral adoption. Continued reliance on IPv4 risks undermining the scalability, security, and future resilience of the global internet.

Go to special report

Latest headlines

LifePoint Health; Southwest Behavioral & Health Services; Nottingham Village Report Data Breaches – The HIPAA Journal --- DUA Act 2025 Complaints Framework: briefing note – Kennedys Law LLP --- Two Scattered Spider hackers plead guilty over Transport for London cyberattack --- Researcher Earns $148,337 for Google Cloud Production RCE Vulnerability --- Duo accused of role in TfL cyber attack plead guilty after ‘lengthy, highly complex, and painstaking investigation’ --- Scattered Spider Teens Convicted of TfL Cyber-Attack – Infosecurity Magazine --- Xsolis Data Breach Hits 1.4 Million People As Healthcare Vendor Reports Patient Data Exposure – NCHStats --- Tata Electronics Data Breach Exposes Confidential Apple and Tesla Documents --- ShapedPlugin Supply Chain Attack Backdoors Pro Plugin Updates – Security Affairs --- Xsolis Data Breach Affects 1.4M Individuals

Most read articles

HEAL Security in press and news

This section highlights the latest media mentions, news articles, and press coverage featuring HEAL Security. Stay updated on how industry leaders and news outlets are recognizing our contributions to healthcare cybersecurity. From innovative solutions to expert insights, explore how HEAL is shaping the future of healthcare security. Check back often for the most recent updates and features.