Microsoft's September security updates are knocking out Always On VPN connections on Windows. If your team logs in from home or a satellite office, here is exactly what breaks, how to confirm it, and how to restore secure remote access without leaving your practice exposed....
Since 2023, U.S. law has required the makers of connected medical and dental imaging devices to build cybersecurity in and prove it to the FDA. Most practices have never thought to ask about it. Here is how to turn that rule into three questions you...
Security firms are tracking active, unpatched attacks against a flaw in FastJson - an open-source Java component buried inside other people's software - and healthcare is on the list of industries being hit. Most dental practices will never run FastJson directly. The reason this still...
Backup software is supposed to be the thing that saves you after an attack - so it is unsettling when the backup tool itself becomes the way in. On September 16, 2026, CISA added CVE-2026-87886, a flaw in the Acronis Backup plugin for cPanel and...
Weeks after the last N-central scare, a worse one has landed: CVE-2026-86218, a pre-authentication remote code execution zero-day rated a perfect 10.0 and already exploited in the wild. It needs no password. Most dental practices are exposed through their IT provider, not directly - here...
A new strain of Android malware called RatHat uses an AI engine to drive a phone or tablet on its own, self-pairs with Android's debug bridge to keep shell-level control even after the app is deleted, and is built to steal banking logins and one-time...
A Windows update locks out your server, a billing vendor lands on a leak site, or ransomware freezes the schedule at 8 a.m. - and suddenly a fully digital dental practice cannot see patients. The fix is not more panic on the day; it is...
Google Meet can be used for a compliant patient video visit - but only on a paid Google Workspace plan with a signed Business Associate Agreement and the right configuration. The free version most people click into is not covered, and using it for a...
Medit has launched AuraVue, a workspace built with Overjet that puts a 3D intraoral scan and the patient's X-rays side by side on one screen, with Overjet's AI reading the radiographs for decay and bone levels. It's a genuinely useful step for digital practices -...
Two critical flaws in Check Point VPN gateways (CVE-2026-85102 and CVE-2026-85103, both rated 9.8) let an unauthenticated attacker run code on the device that guards your network - no password, no VPN account needed. The Dutch national cyber agency says mass exploitation is imminent. Here's...
CISA has warned that a flaw in the Orthanc DICOM server lets an attacker crash your imaging archive with a single malformed X-ray image. It's a denial-of-service bug, not a data theft - but in a clinical setting, an imaging server that won't stay up...
Anthropic - the company behind the Claude AI model - just disclosed that attackers used its own AI to rebuild malware every time security products caught it, and to strip secrets out of 1.8 million Android apps. This is the shift defenders have been bracing...
The same September Windows Server update you were told to install to close two actively exploited zero-days is now knocking Remote Desktop Services offline - the exact way many dental practices reach their practice-management server. Sessions hang, new logins fail, and some servers need a...
CISA has confirmed ransomware gangs are now exploiting a critical WatchGuard Firebox firewall flaw (CVE-2025-14733) that lets an attacker run code on the device with no password at all. Nine months after the patch shipped, roughly 9,000 firewalls are still exposed. If your dental practice...
Every dental AI demo skips the least glamorous question: how does the X-ray actually get from your sensor to the AI, and the result back onto your screen? The answer is one of four plumbing methods - TWAIN, DICOM, cloud API, or a PMS bridge...
