US healthcare organizations are being warned of cyber-attack risks linked to older flaws in Apache Tomcat, which hosts electronic health records and many other systems. The vulnerabilities are regularly exploited but often overlooked, creating ongoing risk. Known issues include remote code execution, denial of service, and insecure deserialization. The healthcare sector is heavily dependent on Apache Tomcat which means it has become a prime target for cybercriminals.

Healthcare sector braces for rising cybersecurity threats in 2025
A global survey by Health-ISAC shows increasing cybersecurity challenges for healthcare organizations, with ransomware as the prevailing threat. Other concerns include third-party and data breaches,