Healthcare radar · liveUpdated — · refreshed every hour

What is being exploited against hospitals and medical devices today

Medical device and imaging advisories, and the vulnerabilities ransomware uses to get into a hospital, from public sources and refreshed every hour.

0exploited in VPN, firewall and remote accessHow ransomware gets into hospitals
0medical device advisoriesCISA ICS Medical ·
0advisories affecting healthcare critical (CVSS ≥ 9)
0medical imaging advisories (DICOM/PACS)Last 6 months
1 · Medical devices and imaging

Security advisories for healthcare

Medical devices, imaging systems and clinical software with vulnerabilities published by CISA and vendors in the last 6 months.

PublishedAdvisoryVendor · productMax CVSSCVEsSectors
Loading data…

Source: CISA ICS Medical Advisories (CSAF 2.0).

0 advisories ·

Do you know which medical devices are on your network?

Most hospitals lack a complete inventory. With IoMT visibility you know which devices these advisories affect.

See IoMT Visibility
2 · Exploited now

The way in: VPNs, firewalls and remote access

Ransomware attacks on hospitals almost always start at an unpatched edge device. These are the edge vulnerabilities already being actively exploited.

AddedCVEVendor · productTypeEPSSRansomware
Loading data…

Source: CISA Known Exploited Vulnerabilities · 30-day exploitation probability: EPSS, first.org/epss.

Trend · 12 weeks

Exploited vulnerabilities per week

Edge devices (VPN, firewall, remote access)Other

Vendors with the most healthcare advisories

CISA ·

3 · AI in the attack surface

AI tools are already a target

Clinical assistants, agents and automation are entering hospitals fast. These tools already have exploited vulnerabilities and real abuse cases.

0exploited in AI tools

CISA KEV · since ·

    Real and demonstrated cases

    MITRE ATLAS · cases

    Sources: CISA KEV · MITRE ATLAS™.

    4 · Global context

    Application-layer and DDoS attacks by industry and country

    Cloudflare Radar publishes global layer 3 and layer 7 attack trends, including healthcare.

    See it on Cloudflare Radar ↗

    OT/ICS Radar · iotech.mx
    Plants, energy and manufacturing

    See the industrial radar on IOTECH ↗
    Sources and methodology. CISA Known Exploited Vulnerabilities, CISA ICS and ICS Medical Advisories (CSAF 2.0), EPSS (first.org/epss), MITRE ATLAS™ and Cloudflare Radar. "Affecting healthcare" = medical advisories plus advisories that list the Healthcare sector. "Edge devices" = VPN, firewall, secure email, SD-WAN and remote access. Data refreshed every hour.
    For guidance only. The radar summarizes public sources; it does not replace the vendor advisory or an assessment of your hospital. Before updating a medical device, validate with the vendor and biomedical engineering.