Microsoft just disclosed a maximum-severity flaw in Entra ID, the cloud identity service your practice logs in through every day. It was rated a perfect 10, exploited in the wild — and there is nothing for you to patch, because Microsoft fixed it on its...
A cyber insurance policy is only a safety net if the claim actually pays. Insurers have quietly rewritten the rules: coverage now depends on security controls you have to prove you were running before the incident. Here is what dental practices are being asked to...
CISA has confirmed attackers are actively exploiting a critical flaw in a networking component built into every supported version of Windows. It needs no password and no click — just a crafted packet sent to an exposed port. Here is what CVE-2026-33824 means for a...
Microsoft quietly patched a critical flaw in its Configuration Manager (SCCM) back in July. This week, a working proof-of-concept exploit went public, turning a paper risk into a practical one. If your practice group or its IT provider uses SCCM to manage Windows machines, the...
The Microsoft deadline was one thing. Now your practice management vendor has drawn its own line: after June 30, 2026, Henry Schein One will not support Dentrix on Windows 10. If your operatory or front-desk machines are still on Windows 10, the software running your...
Multi-factor authentication is supposed to be the wall that keeps intruders out of your Microsoft 365 and practice-management accounts. But a fast-growing class of malware, infostealers, does not try to climb the wall. It waits for your staff member to unlock the door, then quietly...
Federal investigators found a hidden backdoor in a widely used patient monitor that silently shipped patient data to a hard-coded overseas address - and a US state has since ordered agencies to inventory Chinese-made networked medical devices. Dental practices run connected devices too: intraoral sensors,...
A critical Microsoft SharePoint flaw, CVE-2026-55040, lets a remote attacker forge a valid login token and impersonate any user - up to a full site administrator - without ever knowing a password. Microsoft patched it in July, but once Rapid7 published proof-of-concept code this week,...
Every dental practice runs on messages: a texted appointment reminder, an emailed treatment plan, a quick photo of an X-ray sent to a specialist. But standard SMS and ordinary email were never built to carry health information, and a single misdirected message can become a...
A new attack called 'Plug and Pwn,' disclosed at DEF CON 34, abuses the Windows Plug and Play feature every computer relies on. By emulating a USB device, an attacker can make Windows automatically install a signed-but-vulnerable vendor driver as SYSTEM - the highest level...
Microsoft's August 2026 Patch Tuesday fixed an actively exploited Windows zero-day (CVE-2026-68820) that the North Korean Lazarus group used to turn a fake job offer into total, stealthy control of a Windows machine. The attack chain - social engineering, then a kernel privilege-escalation flaw, then...
CISA has confirmed that ransomware crews are actively exploiting two SonicWall SMA1000 remote-access flaws - one of them a maximum-severity, no-password-required bug - to seize the appliance and walk straight into the network behind it. For any dental practice that reaches its systems through a...
A newly disclosed flaw in the widely used RadiAnt DICOM Viewer means a single malformed X-ray file can crash the program - and, in the worst case, run an attacker's code on the machine that opened it. For dental practices that view outside imaging on...
A new exploit called Certighost lets a single low-privileged Windows account take over an entire domain - no admin password required. If your dental practice runs a Windows server, a public proof-of-concept just raised the stakes. Here is what changed and the short list of...
For the first time, researchers have measured ransomware's cost in lives, not just dollars. A February 2026 study puts the in-hospital mortality increase at 34 to 38 percent. Here is what that means for a dental practice - and why the rules are about to...
