A critical, actively exploited flaw in Sangoma's Switchvox phone system lets an unauthenticated attacker run code on the box with no password at all. The uncomfortable reminder for dental practices: the appliance humming in your phone closet is a full Linux server on your network...
On August 25, 2026, McKesson - one of the largest healthcare distributors on the continent - discovered a breach. The extortion group ShinyHunters now claims roughly 284 million records. The interesting part is how they got in: no exotic malware, just a phone call, a...
On August 18, 2026, CISA, the FBI and HHS refreshed their joint advisory on Medusa ransomware - now past 500 victims, with healthcare a favourite target. The interesting part is not the malware. It is how the attackers get in: phishing, and unpatched remote-access and...
More than half of connected medical devices ship with a known critical vulnerability, and most can't be patched on the vendor's schedule - or at all. A new wave of agentic AI tools promises to cut the remediation backlog by 75%. Here is what that...
A full-mouth series and a cone-beam scan are not two versions of the same thing - they answer different clinical questions, carry different radiation and different data. Here is a practical, even-handed guide to choosing between FMX and CBCT, and what each one asks of...
PaperCut is warning that attackers are actively exploiting an unpatched flaw in every version of its NG and MF print-management software, and it has confirmed real customer incidents. The print server is the machine nobody thinks of as 'IT' - which is exactly why it...
The same brand that runs the network gateway in many dental offices also runs their security cameras and their phones - and this week Ubiquiti patched three maximum-severity flaws across exactly those products. All three are remotely exploitable without a password. Here is what UniFi...
The headline says a clinic was breached. The invoice arrives quietly for months afterward: legal fees, notification mailings, credit monitoring, a class-action settlement, and the revenue lost while the practice was dark. Here is what a data breach actually costs a dental office - and...
The server that runs your clinic is not the only computer with your name on it. Attackers are actively forging admin logins into WordPress through two critical flaws in a popular single sign-on plugin — and for most practices, the marketing website is the one...
In a single week this August, two dental organizations turned up on ransomware leak sites — one of them newly named by the Rhysida gang. A leak-site listing is a different kind of emergency than a locked-up server, and it changes what your practice has...
Overjet is the most heavily FDA-cleared dental AI on the market, and it now sits on both the clinical and the insurance side of a claim. For a practice, the real questions are not about accuracy - they are about how it connects to your...
"Keep your software updated" is the most-repeated and least-useful piece of security advice a dental practice ever gets. The three platforms that run dentistry — Dentrix, Eaglesoft, and Open Dental — each handle updates in a fundamentally different way, and a patching policy that ignores...
Microsoft just disclosed a maximum-severity flaw in Entra ID, the cloud identity service your practice logs in through every day. It was rated a perfect 10, exploited in the wild — and there is nothing for you to patch, because Microsoft fixed it on its...
A cyber insurance policy is only a safety net if the claim actually pays. Insurers have quietly rewritten the rules: coverage now depends on security controls you have to prove you were running before the incident. Here is what dental practices are being asked to...
CISA has confirmed attackers are actively exploiting a critical flaw in a networking component built into every supported version of Windows. It needs no password and no click — just a crafted packet sent to an exposed port. Here is what CVE-2026-33824 means for a...
