Curated security research, vulnerabilities, advisories and tools for practitioners.

#healthcare

Security coverage tagged healthcare.

1.

Dumpster Diving for Data

incident | 2026-01-06 14:00 | projectblack.io | original ↗ | #data-exposure | #privacy | #disk-encryption

2.

Orthanc 1.12.9 User Impersonation

research | 2025-12-09 00:53 | CVE-2025-15581 | projectblack.io | original ↗ | #appsec | #vulnerability-research | #vulnerability

3.

A CISO’s guide to red teaming part 5: Red teaming for healthcare and pharmaceuticals

blog | 2025-09-25 12:00 | bugcrowd.com | original ↗ | #red-teaming | #ransomware | #ciso

4.

Conquer HIPAA Controls With Wiz

blog | 2025-04-25 12:00 | wiz.io | original ↗ | #cloud | #cloud-security | #compliance

5.

AI Bias: Consequences and Mitigation

blog | 2025-04-18 17:23 | hackerone.com | original ↗ | #ai-security | #ai-safety | #machine-learning

6.

Hospital Cyberattacks Highlight Importance of Active Directory Security

blog | 2025-03-24 17:53 | semperis.com | original ↗ | #active-directory | #ransomware | #critical-infrastructure

7.

HIPAA and Pentesting: What You Need to Know

blog | 2024-07-24 21:27 | hackerone.com | original ↗ | #pentesting | #compliance | #regulation

8.

Identity Attack Watch: AD Security News, June 2024

blog | 2024-06-28 15:59 | semperis.com | original ↗ | #active-directory | #mfa | #snowflake

9.

‘An efficient way to uncover vulnerabilities’: Doctolib's five years in Bug Bounty

blog | 2024-04-30 07:46 | yeswehack.com | original ↗ | #bug-bounty | #triage | #customer-story

10.

Identity Attack Watch: AD Security News, December 2023

blog | 2023-12-31 23:54 | semperis.com | original ↗ | #active-directory | #ransomware | #healthcare

11.

Identity Attack Watch: AD Security News, November 2023

incident | 2023-11-30 22:37 | semperis.com | original ↗ | #active-directory | #ransomware | #healthcare

12.

‘YesWeHack adapted to our needs’: The Bug Bounty story so far for connected health pioneer Withings

blog | 2023-10-26 07:08 | yeswehack.com | original ↗ | #bug-bounty | #iot | #privacy

13.

FDA's New Cybersecurity Requirements: Are You Prepared as a Medical Device Manufacturer?

blog | 2023-05-12 22:00 | hackerone.com | original ↗ | #compliance | #regulation | #healthcare

14.

160K COVID-19 Records: Vulnerability in Avicena Medical Laboratory

vulnerability | 2022-12-09 00:00 | bishopfox.com | original ↗ | #vulnerability-research | #access-control | #data-exposure

15.

Protecting Healthcare Organizations from Ransomware Attacks

incident | 2022-09-21 16:27 | semperis.com | original ↗ | #active-directory | #ransomware | #mfa

16.

Identity Attack Watch: November 2021

vulnerability | 2021-11-30 16:16 | semperis.com | original ↗ | #zero-day | #active-directory | #ransomware

17.

The Stakes Are Higher in Healthcare: Fighting Cybercrime During a Pandemic

incident | 2020-11-18 22:08 | semperis.com | original ↗ | #ransomware | #nist | #zero-trust

18.

LibreHealth Version 2.0.0

vulnerability | 2020-07-14 00:00 | bishopfox.com | original ↗ | #sql-injection | #vulnerability | #advisory

19.

Solismed Version 3.3SP1

blog | 2019-12-09 00:00 | bishopfox.com | original ↗ | #rce | #advisory | #healthcare

20.

OpenEMR 5.0.1(6) - Technical Advisory Release

blog | 2019-09-11 00:00 | CVE-2019-8371 | bishopfox.com | original ↗ | #rce | #xss | #advisory

21.

State of Healthcare Security in 2019

blog | 2019-07-10 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #crowdsourced-security

22.

Grand Rounds VP InfoSec: Achieving SOC 2 Type II Compliance with Hacker-Powered Security

blog | 2019-05-28 16:00 | hackerone.com | original ↗ | #compliance | #pentest | #hackerone

23.

OpenMRS - Insecure Object Deserialization

vulnerability | 2019-02-04 00:00 | CVE-2018-19276 | bishopfox.com | original ↗ | #rce | #open-source | #deserialization

24.

CISO Q&A: Kim Green

blog | 2017-02-03 00:00 | bugcrowd.com | original ↗ | #appsec | #bugcrowd | #interview