Your Health Records and Your Software Updates: Two Big Threats Today 🩺⛓️

From hospital records covering 200 million patients to a hijacked software update reaching dozens of countries, today's security headlines are a reminder that the systems we rely on every day are only as strong as the code behind them. Here are the two stories worth your attention.

🩺 200 Million Patient Records at Risk: 38 New Bugs Found in Major Health Records Software

Researchers at AISLE just disclosed 38 vulnerabilities in OpenEMR, an electronic health records platform used by more than 100,000 medical providers serving an estimated 200 million patients. Two of the flaws are rated a perfect 10.0 on the severity scale, meaning attackers could potentially extract or even modify patient data with relatively simple techniques. The findings also include ways to bypass security controls that are supposed to keep one patient's information separate from another's.

If you're a patient, this is a reminder that the software running behind the scenes at clinics and hospitals isn't always as locked down as you'd hope. If you run or work with a healthcare organization using OpenEMR, this is urgent: upgrade to the latest patched version immediately and audit who has access to what.

Read more

⛓️ A Trusted Software Update Turned Into a Backdoor: The Daemon Tools Attack

For about a month, attackers slipped malware into official, signed updates for Daemon Tools, a popular Windows disk utility used by individuals and businesses worldwide. Because the updates carried the legitimate vendor's digital signature, antivirus tools and users had no obvious reason to be suspicious. The malware quietly fingerprinted infected machines and, on selected targets, installed a remote-control backdoor capable of evading detection.

At least 100 organizations across more than 100 countries have been hit. The takeaway: even software you trust and update regularly can become an attack vector. This is the third major "supply chain" attack of its kind in recent memory, and it won't be the last. If your team uses Daemon Tools, check your install dates and scan affected machines now.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.