A newly disclosed 'SMS of Death' flaw that remotely crashes unpatched Android phones is a reminder of an uncomfortable truth: the personal phones and tablets your team carries now hold patient data, sit outside your controls, and almost never appear in your security plan. Here...
Security researchers found attackers chaining three previously unknown flaws in Ivanti Connect Secure to seize full root control of VPN appliances that were already fully patched — and doing it silently, without planting malware. Here is what the Ivanti zero-day chain means for any dental...
A recent breach at Johns Hopkins Bayview did not start with a hacker. It started with one employee uploading a spreadsheet of patient data to a public AI tool the hospital had never approved. Here is why the same "shadow AI" risk is quietly growing...
Attackers have stopped only knocking on the door and started compromising the door itself. A string of recent, actively exploited flaws in firewalls, VPN gateways and virtualization platforms shows why the device guarding your practice network is now the prize — and what a dental...
There are tens of thousands of software vulnerabilities, and your practice cannot patch them all at once. CISA's Known Exploited Vulnerabilities catalog is a free, public list of the ones attackers are actually using right now — the shortlist that tells a dental practice what...
On October 13, 2026, the last paid security update for Windows Server 2012 and 2012 R2 shipped — and that was the end of the line. Windows Server 2016 is next, with free support ending January 12, 2027. If your Dentrix or imaging server runs...
A string of 2026 dental ransomware breaches keeps pointing at the same open door: remote access left exposed to the internet. Here is why Remote Desktop is the vector attackers love, and the practical steps that shut it....
Your Dentrix server holds the schedule, the ledger, the clinical notes, and the images — the entire operating record of the practice. Most offices assume it is protected. Here is the backup, patch, and access checklist that decides whether a bad day is an inconvenience...
A newly reported UEFI bootkit is the latest malware able to slip past Secure Boot on fully patched Windows machines — because the fix for this class of threat is not applied automatically. It is the kind of infection that survives wiping the disk, and...
A new quarterly roundup puts hard numbers on a trend dental practices have been feeling all year: ransomware against the U.S. healthcare sector climbed 64% from Q2 to Q3 2026, with confirmed attacks now averaging more than three a day. The targets are not just...
On October 21 the PHP project shipped emergency patches for two critical flaws it calls PHP2Shell — unauthenticated remote code execution scored 9.2, affecting essentially every web server that runs PHP. That quietly includes a large share of dental practice websites, patient portals and self-hosted...
This quarter, AI radiograph reading moved decisively into the cloud — Pearl, Overjet and Dentsply Sirona's DS Core all shipped practice-ready tools. The clinical pitch is easy to say yes to. The IT decision underneath is the one that protects your patients. Here is the...
Between October 15 and 16, copies of the paid Rank Math PRO SEO plugin downloaded from the vendor's own site carried malware that installs a hidden, self-restoring backdoor. It is a reminder that many dental practice websites run on WordPress plugins nobody is actively watching...
At a July hacking competition, a researcher disclosed something quietly significant: he had used AI to help find a Linux kernel bug and build a working root exploit for it — including tuning the split-second timing a normally fragile attack depends on. The vulnerability matters...
When the Interlock group listed O2 Dental Group on its leak site in October, the alarming part was not the breach itself — it was how long the attackers had reportedly been inside first. Analysts place initial access as far back as December 2025: the...
