CISA Advisories

Hackers Heat Up Blood Plasma 🩸 & 100M Patient Records at Risk 🏥

Today's top threats hit two things we all depend on: the blood supply and our medical records. Here's what happened and why it matters.

🩸 Hackers Tried to Cook France's Blood Supply

Attackers broke into a company that supplies refrigeration equipment to France's national blood service (EFS) and remotely changed the settings on cold rooms storing plasma, flipping the target temperature from -30°C to a scorching 110°C. Fortunately, EFS's monitoring caught the changes, staff isolated the affected units, and plasma and samples were moved to safety. No blood products were lost. But this isn't a one-off: similar attacks on European supermarket fridges have already spoiled food, and French cyber authorities had warned about flaws in the Danfoss controllers involved. The takeaway for every business: your "boring" building systems, like HVAC, fridges, and the vendors who manage them, are now a real way in for attackers.

Read more

🏥 40+ Security Holes Found in Software Used for 100 Million Patients

Researchers using AI-assisted code review found 42 security flaws in OpenEMR, a popular open-source electronic health records system used by clinics and hospitals worldwide. Three are critical, and some flaws let attackers read patient records, take over patient portal logins, or even pose as an administrator while skipping passwords and multi-factor authentication entirely. The good news: everything is fixed in OpenEMR version 8.5.0, released October 27. The bad news: healthcare providers are notoriously slow to update. If your practice or a vendor you rely on runs OpenEMR, make sure it's updated now.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.

Comments