Clearance Incident Response. Free through May 1, 2027, so you have time to patch.Estimate your Blast Radius in 60 secondsEstimate

aviatrix logoAviatrix
Under Active Attack
Industry Category

Health Care / Life Sciences

Breach intelligence, attack campaigns, and threat reports targeting the Health Care / Life Sciences sector.

3490 threat reports
Page 14 of 291
Explore Other Sectors
AccountingAerospaceAerospace/AviationAgricultureAirlines/AviationAnimationApparel/FashionArchitecture/PlanningArtificial IntelligenceArtificial Intelligence/Machine LearningArts/CraftsAutomotiveAviation/AerospaceBanking/MortgageBiotechnology/GreentechBlockchain/CryptocurrencyBroadcast MediaBroadcasting MediaBroadcasting/MediaBuilding MaterialsBusiness Supplies/EquipmentCapital Markets/Hedge Fund/Private EquityChemicalChemicalsCivic/Social OrganizationCivil EngineeringCloud ComputingCloud Computing/SaaSCloud Native Security Fabric (CNSF)Cloud ServicesCommercial FacilitiesCommercial Real EstateComputer GamesComputer HardwareComputer NetworkingComputer Software/EngineeringComputer/Network SecurityConstructionConsultingConsumer ElectronicsConsumer GoodsConsumer ServicesCosmeticsCosmeticsCritical ManufacturingCryptocurrenciesCryptocurrencyCustomer ServicesCybersecurityDairyDating/Personal ServicesDating/Social PlatformsDefense/SpaceDesignE-LearningEducation ManagementElectrical/Electronic ManufacturingEmergency ServicesEnergyEnergy/Oil/Solar/GreentechEntertainment/Movie ProductionEnvironmental ServicesEvents ServicesExecutive OfficeFacilities ServicesFarmingFashion/ApparelFinancial ServicesFine ArtFisheryFood ProductionFood/BeveragesFortune 500 companiesFranchisingFundraisingGambling/CasinosGamingGaming/CasinosGovernment AdministrationGovernment FacilitiesGovernment RelationsGraphic Design/Web DesignHealth Care / Life SciencesHealthcareHigher Education/AcadamiaHospitalityHospitalsHuman Resources/HRImport/ExportIndividual/Family ServicesIndustrial AutomationInformation ServicesInformation Technology/ITInsuranceInternational AffairsInternational Trade/DevelopmentInternetInvestment Banking/VentureInvestment Management/Hedge Fund/Private EquityJudicialJudiciaryLaw EnforcementLaw Practice/Law FirmsLegal ServicesLegislative OfficeLeisure/TravelLogistics/ProcurementLuxury Goods/JewelryMachineryManagement ConsultingManufacturingMaritimeMarket ResearchMarketing/Advertising/SalesMechanical or Industrial EngineeringMedia ProductionMedical EquipmentMedical PracticeMilitary IndustryMining/MetalsMobileMuseums/InstitutionsMusicNewspapers/JournalismNon-Profit/VolunteeringOil/Energy/Solar/GreentechOnline PublishingOther IndustryOutsourcing/OffshoringPackage/Freight DeliveryParkingPharmaceuticalsPhilanthropyPhotographyPlasticsPolitical OrganizationPrimary/Secondary EducationProfessional ServicesProfessional TrainingPublic Relations/PRPublic SafetyPublishing IndustryRailroad ManufactureReal Estate/MortgageRecreational Facilities/ServicesReligious InstitutionsRenewables/EnvironmentResearch IndustryRestaurantsRetail IndustryRoboticsRural HealthcareSecurity/InvestigationsSemiconductorsShipbuildingSocial Media/InternetSporting GoodsSportsStaffing/RecruitingSupermarketsTechnologyTechnology/ITTelecommunicationsThink TanksToys and GamesTransportationTravel/TourismTrucking/FreightUtilitiesVenture Capital/VCWarehousingWater and Waste ManagementWater and WastewaterWater and Wastewater SystemsWater and Wastewater TreatmentWater TreatmentWater, Waste, Steam, and Air Conditioning ServicesWater/Waste ManagementWater/WastewaterWater/Wastewater ManagementWater/Wastewater/UtilitiesWholesaleWine/SpiritsWirelessWriting/Editing

Health Care / Life Sciences Threat Reports

Showing 157–168 / 3490 reports
CVE-2026-106173: Public PoC Exploit Drops for Critical FortiSIEM Unauthenticated RCE
CVE-2026-106173: Public PoC Exploit Drops for Critical FortiSIEM Unauthenticated RCE
Information Technology/IT2 weeks ago

CVE-2026-106173: Public PoC Exploit Drops for Critical FortiSIEM Unauthenticated RCE

In October 2026, Fortinet disclosed CVE-2026-106173, a critical path traversal vulnerability in FortiSIEM (CVSS 9.4) affecting versions up to 7.5.0. Unauthenticated attackers can connect to the gRPC service on TCP port 27918, exploit unsafe path construction in the SendQueryResult() function, and chain a null-byte injection technique to overwrite arbitrary files—including a Redis health-check shell script executed every 60 seconds by a cron job—achieving full unauthenticated remote code execution. Horizon3.ai published a public proof-of-concept exploit within days of patching, dramatically lowering the bar for exploitation across all unpatched FortiSIEM deployments. The public release of a working PoC transforms this from a theoretical risk into an active, weaponizable threat. Security operations platforms like FortiSIEM are high-value targets because compromising them can blind defenders, disrupt incident response, and provide attackers with privileged visibility into an organization's entire security telemetry—amplifying blast radius far beyond a typical application breach.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
AI-Powered Espionage: How CL-UNK-1211 Used LLMs to Target Government Linux Servers
AI-Powered Espionage: How CL-UNK-1211 Used LLMs to Target Government Linux Servers
Government Administration2 weeks ago

AI-Powered Espionage: How CL-UNK-1211 Used LLMs to Target Government Linux Servers

Between October 2025 and April 2026, Unit 42 tracked a threat cluster designated CL-UNK-1211 conducting an AI-accelerated espionage campaign against government entities and state-affiliated Linux infrastructure. Attackers gained initial access through widespread web shell deployments, hijacked global PHP configurations for persistence, harvested credentials via .bashrc manipulation and PHP injection, deployed a custom Go-based cross-platform RAT named SysGoRAT over WebSocket C2, and exfiltrated government mailboxes and entire database contents. Defense evasion included log deletion, timestomping, endpoint-protection termination, and planting fake red-team markers. AI-generated payloads with conversational inline comments accelerated the operation's pace across PHP, Python, Bash, and JavaScript. This campaign marks a tangible inflection point in state-level or state-adjacent espionage: AI is no longer theoretical in offensive operations. Attackers used LLM-generated code to compress development timelines, seamlessly pivot across technology stacks, and scale payload generation—signaling that AI-assisted intrusions will become the baseline expectation for advanced threat actors targeting critical government infrastructure.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
The $0 AI Backdoor: How Open-Weight Models Became a Supply Chain Threat
The $0 AI Backdoor: How Open-Weight Models Became a Supply Chain Threat
Information Technology/IT2 weeks ago

The $0 AI Backdoor: How Open-Weight Models Became a Supply Chain Threat

Researchers demonstrated in 2026 that open-weight AI models—particularly those distributed via platforms such as Hugging Face—can be covertly backdoored at negligible cost using a rented GPU and a public dataset. The attack embeds a dormant trigger inside model weights, allowing the model to pass all standard evaluations and operate normally until a predetermined phrase activates exfiltration behavior. A proof-of-concept on a 1.5B and 7B parameter model showed that, when triggered inside OpenAI's Codex CLI, the model silently exfiltrated project credentials to an attacker-controlled URL—with no intermediate detection layer raising an alert. This threat is accelerating as enterprises rapidly integrate open-weight LLMs into agentic pipelines, coding assistants, and automated workflows. The near-zero cost of poisoning a model, combined with the popularity of abliterated builds on public repositories, means the AI supply chain now carries a class of risk that traditional software composition analysis tools are not equipped to detect.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
PwnEscape (CVE-2026-99999): When a Guest VM Reads Your Host's Memory
PwnEscape (CVE-2026-99999): When a Guest VM Reads Your Host's Memory
Information Technology/IT2 weeks ago

PwnEscape (CVE-2026-99999): When a Guest VM Reads Your Host's Memory

In October 2026, security researcher Paulos Yibelo of pwn.ai disclosed CVE-2026-99999, dubbed PwnEscape, a critical Linux kernel networking vulnerability rated 9.3/10 CVSS. The flaw allows malicious code executing inside a guest virtual machine to read host memory, crash the host, and potentially achieve code execution on it. Demonstrated live against Vercel's production Firecracker microVM sandboxes during a $1 million bug-bounty challenge, each crafted packet exfiltrated approximately 32 bytes of host memory. Two packets sufficed to crash a host and terminate all co-resident sandboxes. Red Hat's Michael S. Tsirkin authored the upstream fix, now backported across all supported stable kernel branches. PwnEscape exposes a structural risk in multi-tenant cloud infrastructure: because nearly every major cloud provider isolates workloads at the Linux kernel networking layer, a single kernel flaw undermines the trust boundary between all co-resident tenants simultaneously. As AI-assisted exploit research matures—this flaw was found in three days for under $700 in API costs—the window between discovery and weaponization is collapsing, demanding accelerated patch cycles and defense-in-depth network controls.

Critical impact

Kill Chain

ICInitial Compromise(medium)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(low)
EExfiltration(high)
IImpact(medium)
Read report
Critical NGINX Flaws Put Cloud-Native Infrastructure at Risk: What Security Teams Must Do Now
Critical NGINX Flaws Put Cloud-Native Infrastructure at Risk: What Security Teams Must Do Now
Information Technology/IT2 weeks ago

Critical NGINX Flaws Put Cloud-Native Infrastructure at Risk: What Security Teams Must Do Now

In October 2026, F5 released out-of-band emergency patches addressing three critical vulnerabilities in NGINX—CVE-2026-15176 and CVE-2026-97205 in the ngx_http_v3_module, and CVE-2026-93479 in the NGINX map directive. These flaws expose NGINX Plus, NGINX Open Source, NGINX Ingress Controller, NGINX Gateway Fabric, and NGINX Instance Manager to remote code execution and denial-of-service attacks via heap-based buffer overflow and use-after-free conditions. Exploitation requires no credentials and can succeed on systems with ASLR disabled or bypassable, affecting enterprises across cloud-native and hybrid environments. F5 has not confirmed active in-the-wild exploitation, but interim mitigations are available for organizations unable to patch immediately. This disclosure follows a pattern of sustained targeting of F5 infrastructure by cybercriminal and nation-state actors, including a 2025 breach of F5's own systems in which source code and undisclosed BIG-IP vulnerability data were stolen. With NGINX powering a significant share of global web infrastructure and Kubernetes ingress layers, the blast radius of unpatched deployments is substantial, making rapid patch adoption a board-level concern.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(high)
Read report
Inside the ShinyHunters Betrayal: When Your Ransomware Negotiator Works for the Attacker
Inside the ShinyHunters Betrayal: When Your Ransomware Negotiator Works for the Attacker
Computer/Network Security2 weeks ago

Inside the ShinyHunters Betrayal: When Your Ransomware Negotiator Works for the Attacker

In October 2026, U.S. federal investigators revealed that executives at two ransomware negotiation firms maintained covert operational ties to ShinyHunters, a prolific extortion group responsible for over $70 million in victim payments that year. One U.S.-based consultant allegedly helped operate Shinywire, the group's victim-shaming extortion portal, while Canadian executive Edward Dubrovsky was arrested for threatening to disclose stolen data and interfering with commerce through extortion. Signal messages recovered during the Dutch arrest of ShinyHunters suspect Pepijn van der Stap exposed that negotiators knew of breaches—including the FBI jobs site hack—before victims were notified, revealing a systemic corruption of the incident response supply chain. This case exposes a structural flaw at the heart of the cyber extortion ecosystem: ransomware negotiators incentivized by percentage-based fees on ransom payments have a financial interest in ensuring victims pay—and pay more. As regulators and insurers scrutinize negotiator conflicts of interest, organizations must question whether their incident response partners are working for them or against them.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
BYOVD and EDR Killers: Four Kill-Chain Variants, Four Hunts—Before Ransomware Encrypts Your Files
BYOVD and EDR Killers: Four Kill-Chain Variants, Four Hunts—Before Ransomware Encrypts Your Files
Information Technology/IT2 weeks ago

BYOVD and EDR Killers: Four Kill-Chain Variants, Four Hunts—Before Ransomware Encrypts Your Files

Bring Your Own Vulnerable Driver (BYOVD) attacks have become a cornerstone technique enabling ransomware groups such as RansomHub, Black Basta, Kasseika, BlackByte, and LockBit to neutralize endpoint detection and response (EDR) tools before deploying encryption. Attackers load legitimately signed but flawed kernel drivers—exploiting the gap between Microsoft's driver-signing trust model and its incomplete blocklist enforcement—to issue process-termination IOCTLs that kill security agents at Ring 0, bypassing Protected Process Light entirely. The commoditization of purpose-built EDR killers like AvNeutralizer (AuKill) and EDRKillShifter, sold on Russian-language forums for $4,000–$15,000 and distributed through ransomware affiliate programs, has industrialized what was once a sophisticated capability into a repeatable checklist item available to any affiliate operator. The BYOVD threat is no longer a niche kernel-exploitation concern—it is the standard pre-ransomware preparation step across multiple major threat actor ecosystems. With tooling commoditized, affiliate programs distributing EDR killers at scale, and four distinct kill-chain variants (BYOVD, BYOI, admin-to-kernel, and driverless suspension) each evading single-technique detection rules, organizations that rely on endpoint security alone face a widening, often invisible coverage gap that precedes every encryption event.

Critical impact

Kill Chain

ICInitial Compromise(medium)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(medium)
IImpact(high)
Read report
The Industrialization of BYOVD: How Ransomware Turned EDR Killing Into Big Business
The Industrialization of BYOVD: How Ransomware Turned EDR Killing Into Big Business
Financial Services3 weeks ago

The Industrialization of BYOVD: How Ransomware Turned EDR Killing Into Big Business

Bring Your Own Vulnerable Driver (BYOVD) attacks have evolved from isolated tactics into an industrialized supply chain serving ransomware operators. Research shows attackers successfully disabled security tools in 48% of intrusions in 2024, with BYOVD emerging as the fastest-growing method. What began as custom one-off binaries has transformed into a mature marketplace, with tools like AvNeutralizer selling for $4,000-$15,000 and spreading across multiple ransomware families including Black Basta, LockBit, and RansomHub. The technique leverages thousands of vulnerable signed drivers to achieve kernel-level access and terminate EDR processes, with some attack chains reaching SYSTEM privileges in just 30 milliseconds. This industrialization has dramatically lowered the skill barrier for ransomware affiliates while increasing attack success rates. The threat landscape now features maintained toolkits, versioned releases, and tiered affiliate access models that mirror legitimate software development practices, making BYOVD a structural threat to enterprise security defenses.

Medium impact

Kill Chain

ICInitial Compromise(medium)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(high)
Read report
The BYOVD Trust Gap: How Vulnerable Drivers Bypass Modern Security
The BYOVD Trust Gap: How Vulnerable Drivers Bypass Modern Security
Financial Services3 weeks ago

The BYOVD Trust Gap: How Vulnerable Drivers Bypass Modern Security

Bring Your Own Vulnerable Driver (BYOVD) attacks exploit a fundamental trust gap in Windows kernel security, where attackers leverage legitimate but vulnerable signed drivers to bypass endpoint protection systems. Recent analysis shows approximately 36% of catalogued vulnerable drivers remain unblocked by default Windows security policies, with attackers exploiting revoked and expired certificates that the kernel still accepts. These attacks concentrate on compromised signing certificates rather than individual drivers, allowing threat actors to generate unlimited malicious payloads using stolen cryptographic keys. The persistence of this attack vector demonstrates a structural flaw in how operating systems validate driver trust, with some vulnerable drivers remaining exploitable for years after initial disclosure. This attack method has gained renewed prominence as ransomware groups and APT actors increasingly adopt BYOVD techniques to disable security tools and establish kernel-level persistence, highlighting the urgent need for trust-based rather than signature-based defensive approaches.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
Yam Store Exposed: How Storm-3119 Built a Billion-Message Phishing Empire
Yam Store Exposed: How Storm-3119 Built a Billion-Message Phishing Empire
Financial Services3 weeks ago

Yam Store Exposed: How Storm-3119 Built a Billion-Message Phishing Empire

In 2026, Microsoft Threat Intelligence exposed Yam Store, a Chinese-language cybercrime marketplace tracked as Storm-3119, responsible for facilitating over one billion phishing emails and SMS messages targeting 75,000 organizations worldwide. The operation sold phishing kits including CoGUI, Haozi, and Iron Man System, along with fraudulently obtained Microsoft and Google cloud domains from legitimate organizations. Storm-3119 leveraged automation to identify expired environments and used legitimate customer information to circumvent detection systems, enabling threat actors to operate seemingly trustworthy phishing infrastructure at scale. This incident highlights the industrialization of phishing-as-a-service operations and the increasing sophistication of cloud infrastructure abuse. As threat actors leverage AI and legitimate cloud services to enhance their campaigns, organizations face unprecedented challenges in distinguishing malicious activity from legitimate communications, making traditional security awareness training and detection methods insufficient.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
UTA0576 Exploits Ivanti Connect Secure Zero-Day Despite Partial Vendor Discovery
UTA0576 Exploits Ivanti Connect Secure Zero-Day Despite Partial Vendor Discovery
Computer/Network Security3 weeks ago

UTA0576 Exploits Ivanti Connect Secure Zero-Day Despite Partial Vendor Discovery

In October 2026, threat actor UTA0576 exploited a zero-day vulnerability chain in Ivanti Connect Secure (ICS) appliances, tracked as CVE-2026-104935, combining authentication bypass and remote code execution flaws. The attack compromised fully patched ICS devices, allowing attackers to gain root-level access, extract credentials, and pivot into Active Directory environments. While Ivanti had partially discovered the vulnerability through AI-assisted security scanning in July 2026 and patched newer versions, the fix had not been backported to all supported versions when exploitation began on October 3, 2026. This incident highlights the growing sophistication of threat actors who monitor vendor patch releases to identify unpatched vulnerabilities across product versions. The attack demonstrates how the window between partial fixes and comprehensive deployment creates exploitable gaps, emphasizing the critical need for coordinated vulnerability management and rapid deployment capabilities in an era of accelerated threat actor reconnaissance.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(low)
IImpact(medium)
Read report
Langflow's Critical RCE Flaw Under Active Attack: 1,423 Exploitation Attempts Detected
Langflow's Critical RCE Flaw Under Active Attack: 1,423 Exploitation Attempts Detected
Computer Software/Engineering3 weeks ago

Langflow's Critical RCE Flaw Under Active Attack: 1,423 Exploitation Attempts Detected

A critical authenticated remote code execution vulnerability (CVE-2026-105740, CVSS 9.9) in Langflow, an open-source AI application development platform owned by DataStax and acquired by IBM in February 2025, is being actively exploited by threat actors. The flaw allows any authenticated user to execute arbitrary OS commands through malicious MCP server configurations with zero validation. Previdian honeypot sensors recorded 1,423 exploitation attempts from 27 unique IP addresses across 15 countries since September 2026, with activity significantly ramping up in October. Attackers are using common credentials to authenticate and then exploiting the vulnerability to extract sensitive configurations, access host filesystems, and establish persistent backdoors. This incident highlights the growing threat landscape targeting AI development platforms as organizations rapidly adopt AI technologies without adequate security oversight. The systematic targeting of multiple Langflow vulnerabilities by the same threat actors demonstrates the critical need for securing AI infrastructure as these platforms become integral to business operations.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
[ INCIDENT RESPONSE // UNDER ATTACK? ]

Stop Active Cloud Data Exfiltration

Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.

Under Attack

Looking for threats in a different sector?

Browse All Threat Reports