Welcome to HEAL Security Dispatch, your daily insight into the world of healthcare and tech cybersecurity. Hosted by Richard Simmons, this podcast delivers the latest on AI vulnerabilities, new malware threats, and critical security risks affecting healthcare and tech industries. From data breaches targeting patient information to evolving malware tactics and AI-driven risks, we provide in-depth analysis and practical insights to keep you informed and protected. Join us to understand the importance of proactive cybersecurity measures in safeguarding lives, reputation, and integrity within the healthcare sector and beyond. For essential updates on today’s cyber landscape, tune in daily to HEAL Security Dispatch. healsecurity.com/

HEAL Security Dispatch: AI Vulnerabilities & Emerging Malware in Healthcare & Tech

The HEAL Security Dispatch Daily Digest is your trusted source for up-to-date cybersecurity news, with a special focus on healthcare and technology. Hosted by Richard Simmons from London, the show provides expert insights into pressing security issues. In this episode of Tuesday, November 5th, 2024, the podcast explores a range of critical developments: from Synology’s urgent call to patch a zero-click vulnerability affecting millions of NAS devices, to Interpol’s successful takedown of a cybercrime network impacting over 22,000 IP addresses. Also covered are the risks of a DocuSign API exploit used in business email compromise (BEC) schemes, Schneider Electric’s latest ransomware attack involving the Hellcat variant, and the dangers of a typosquatting campaign targeting developers on npm. The episode highlights Google’s Big Sleep LLM’s role in identifying vulnerabilities in SQLite, along with newly released patches for Android zero-day vulnerabilities actively exploited in the wild. Lastly, Sekoia reports on a social engineering tactic called ClickFix, which deceives users on Google Meet and Zoom to download malware. Stay informed on these vital security updates and more at healsecurity.com.

HEAL Security Dispatch: Zero-Day Exploits, and Typosquatting Threats in Cybersecurity

The HEAL Security Dispatch Daily Digest is a concise and authoritative podcast delivering the latest cybersecurity news and expert analysis with a focus on healthcare and digital safety. Hosted by Richard Simmons from London, each episode explores critical developments in the cybersecurity landscape, including global tech outages, major data breaches, evolving malware threats, and industry-specific challenges. In this episode from April 2, 2025, listeners are briefed on a global ChatGPT outage, GitHub’s intensified security measures, the discovery of novel malware targeting Ivanti systems, a possible Royal Mail data leak, and phishing scams exploiting Google Calendar and Microsoft Teams. The episode also highlights the resurgence of the Triada trojan on counterfeit Android devices and discusses the growing threat of ransomware in the healthcare sector. Tailored for cybersecurity professionals and healthcare stakeholders, the podcast emphasizes the importance of vigilance, security best practices, and proactive defense in an increasingly digital world. 
https://healsecurity.com/

ChatGPT Outage, GitHub Security Boost, and Microsoft Teams Exploits: HEAL Security Daily Digest

In this week's cybersecurity and health tech briefing, we delve into emerging digital threats and technological advancements. Hackers are now exploiting OAuth 2.0 workflows to infiltrate Microsoft 365 accounts, bypassing multifactor authentication by tricking users into authorizing malicious applications. On the Android front, a newly uncovered malware uses NFC to access financial apps and conduct unauthorized transactions. Meanwhile, leading AI models are found vulnerable to a novel adversarial technique called "policy puppetry" prompt injections, raising concerns about AI reliability and safety. In healthcare, Frederick Health Medical Group experienced a ransomware attack affecting nearly a million patients, while the University of New Mexico Hospital cut 53 executive positions in a cost-saving effort. On a more promising note, researchers at Mount Sinai have refined an FDA-approved AI tool to better predict risks for hypertrophic cardiomyopathy using ECG data. Finally, new cybersecurity threats include the "SessionShark" phishing toolkit, designed to bypass Office 365 MFA, and a massive breach by the hacking group R00TK1T, which compromised over 900,000 TikTok user credentials. Stay informed and protected as digital threats continue to evolve. 
https://healsecurity.com/

Today’s Cybersecurity Rundown: Microsoft 365 Exploits, TikTok Breach, & AI Vulnerabilities

In today’s episode of the Cybersecurity Roundup for Friday, June 13, 2025, we explore a turbulent week in the tech world marked by major disruptions and critical vulnerabilities. Cloud service outages hit industry giants including Cloudflare, Google, and Microsoft, revealing the fragility of even the most robust digital infrastructures and highlighting the need for stronger service-level contingency planning. We examine a zero-click exploit in Apple iMessage used to infect journalists’ devices with Paragon spyware, a stark reminder of escalating privacy threats. The episode also covers the Fog ransomware group’s novel tactics, the misuse of expired Discord invites for malware distribution, and a widespread JavaScript injection campaign dubbed JSFireTruck that infected over 269,000 websites. Additional threats include malware posing as trusted software, a smartwatch-based data exfiltration technique named SmartAttack, and critical vulnerabilities in Mitel and Trend Micro products. For professionals and individuals alike, these stories emphasize the evolving sophistication of cyber threats and the urgent need for proactive security measures. 
https://healsecurity.com/

Cloudflare, Google, Microsoft Hit by Outages; and Trend Micro Vulnerabilities Raise Security Alarms

In this episode of HEAL Security Dispatch Daily Digest, Richard Simmons reports on the latest wave of critical cybersecurity threats impacting global systems and data. Fortinet users are urged to patch immediately as a severe remote code execution flaw surfaces, while researchers track a stealthy new PHP-based Interlock RAT and the group’s malicious “FileFix” tool posing as recovery software. A tax consulting firm exposes nearly 250,000 sensitive records due to a cloud misconfiguration, and Gigabyte motherboards are found vulnerable to UEFI malware that bypasses Secure Boot. A malicious VS Code extension in Cursor IDE leads to over half a million dollars in stolen crypto, and a global data breach at Louis Vuitton compromises customer information in the UK, South Korea, and Turkey. Stay tuned for a fast-paced briefing on the critical vulnerabilities and breaches shaping today’s cyber threat landscape.

Fortinet Flaw, RAT Deception, and High-End Data Leaks: Today’s Top Cybersecurity Headlines

Today’s episode dives into a wave of emerging cyber threats shaking the digital landscape — from AI-generated Linux malware and malicious Copilot commands to steganography-based attacks hiding in innocent-looking images. We examine how fake error pages are delivering platform-specific payloads, how healthcare AI tools may be exposing sensitive data, and why open-source repositories are facing a surge in supply chain breaches. Stay informed as we break down what these threats mean for cybersecurity in healthcare and beyond.

AI Threats, Stealthy Malware & Supply Chain Risks: Today in Healthcare Cybersecurity

From major ransomware attacks in the healthcare sector to PBS confirming a data breach, today’s roundup dives into the latest cybersecurity headlines. We cover how phishers are abusing Microsoft 365, a massive scam account takedown on WhatsApp, and new malware tactics using fake CAPTCHA. Plus, a deep dive into Mustang Panda’s evolving threats and the staggering updated numbers from the Change Healthcare breach.

Ransomware Hits Healthcare, PBS Breached, and 6.8M WhatsApp Scams Shut Down

From AI-powered phishing scams in Brazil to a major breach at Allianz Life, today’s cybersecurity roundup covers the latest threats and revelations. Learn how attackers are using generative AI tools—and how defenders are fighting back using AI-powered forensics. We dive into a privilege escalation flaw in Amazon ECS, a new malware analysis platform from CISA, and cyberattacks targeting Air France, KLM, and Allianz. Plus, find out what’s next for three Pennsylvania hospitals in a major healthcare shake-up. Stay informed and stay secure with today’s top stories in cybersecurity.

AI Scams, Cloud Flaws, and Global Breaches: This Week in Cybersecurity

This episode covers the latest in cybersecurity, from the GPU-based “GPUGate” malware campaign and SVG image phishing kits to a major GitHub breach and hijacked npm packages with billions of downloads. We also look at new spyware enabling sextortion, phishing abuse of Amazon’s email service, and a data breach at Canadian fintech firm Wealthsimple. Stay updated on the threats shaping today’s digital landscape.

Global Cyber Threats: Malware Campaigns, Supply Chain Attacks, and Major Data Breach

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #TechSecurity