HSCI A.I CyberSecurity Scoring
05/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Health Service and Clinical Innovation in 2026.
No incidents recorded for Health Service and Clinical Innovation in 2026.
No incidents recorded for Health Service and Clinical Innovation in 2026.
As an integrated health system, we provide care throughout Iowa, western Illinois and southern Wisconsin in not-for-profit hospitals, clinics and home health settings. Each year, we serve nearly 8 million patient visits of all different types, including around 100,000 surgeries and deliver more than 20,000 babies. Whatever stage of life you’re in, our goal is to make your care easier and more personal. At UnityPoint Health, we put people first. And we start from the inside out. We care deeply about making UnityPoint Health a great place to work because our team members are the compassionate core of who we are and how we serve. We’re proud to be recognized as a Top 150 Place to Work in Healthcare by Becker’s Healthcare for four years in a row. We've worked diligently to invest in our team members across key areas, including: o Team Member Empowerment o Leadership Effectiveness o Community Impact and Engagement o Career Development Visit www.unitypoint.org/join-our-team to explore career opportunities at UnityPoint Health.
Die RHÖN‐KLINIKUM AG ist einer der größten Gesundheitsdienstleister in Deutschland. Die Kliniken bieten exzellente Medizin mit direkter Anbindung zu Universitäten und Forschungseinrichtungen. An den fünf Standorten Campus Bad Neustadt, Klinikum Frankfurt (Oder), Universitätsklinikum Gießen und Universitätsklinikum Marburg (UKGM) sowie der Zentralklinik Bad Berka werden jährlich rund 855.000 Patienten behandelt. Über 18.100 Mitarbeitende sind im Unternehmen beschäftigt. Das innovative RHÖN-Campus-Konzept für eine sektorenübergreifende und zukunftsweisende Gesundheitsversorgung im ländlichen Raum, die konsequente Fortsetzung des schrittweisen digitalen Wandels im Unternehmen sowie die strategische Partnerschaft mit Asklepios sind wichtige Säulen der Unternehmensstrategie. Die RHÖN-KLINIKUM AG ist ein eigenständiges Unternehmen unter dem Dach der Asklepios Kliniken GmbH & Co. KGaA.
A purpose-driven company, Clariane is the leading European community for care in times of vulnerability. Our Group’s purpose “To take care of each person’s humanity in times of vulnerability” is inspired by our three core values: trust, responsibility and initiative. With facilities at the heart of 700 cities and communities across six European countries, we are dedicated to standing alongside vulnerable individuals, ensuring our presence wherever they need us. Our expertise? Delivering our Positive Care approach through 3 areas of activity: - Care homes – we care. - Healthcare facilites and services – we cure. - Shared living solutions – we welcome and enliven. Relying on their diverse expertise, each year, our community unites, trains and supports around 63,000 employees who provide services to over 890,000 patients and residents in three main areas of activity: long-term care (Korian, Seniors Residencias, etc.), specialty care (Inicea, Ita, Grupo 5, Lebenswert, etc.), and community care (Âges & Vie...). In 2025, Clariane was awarded Top Employer certification in Europe and in each of the six countries where we operate: Germany (for the 5th consecutive year), France (for the 4th consecutive year), Belgium and Italy (for the 3rd consecutive years), and Spain and the Netherlands (for the 1st time). Our actions are guided every day by five key commitments: consideration, equity, innovation, proximity and sustainability. Our Clariane community: at your side, at every moment. #ClarianeAtYourSide #WeAreClariane #PurposeDrivenCompany
NorthShore University HealthSystem, Swedish Hospital, Northwest Community Healthcare and Edward-Elmhurst Health are now united under one name: Endeavor Health. Together, we’re driven by our mission to help everyone in our communities be their best and our commitment to setting a new standard for healthcare by delivering a truly personal patient experience combined with convenient access to pioneering, world-class care. We are proud to be Illinois’ third-largest health system with more than 27,000 team members, nine award-winning hospitals and more than 300 clinic locations based in the communities we call home.
At NewYork-Presbyterian, we put patients first. It’s the kind of work that requires an unwavering commitment to excellence and a steady spirit of professionalism. And it’s a unique opportunity for you to collaborate with some of the brightest minds in health care, while building on our success as one of the nation’s best hospitals. A career here is one that helps improve the lives of countless human beings throughout the world. From preventive, inpatient and ambulatory care, to technology management and beyond, all of our work is essential to the delivery of top-notch care. Representing a wide range of fields, our talented employees collaborate across several facilities within our network, including: • NewYork-Presbyterian/Columbia University Irving Medical Center • NewYork-Presbyterian/Weill Cornell Medical Center • NewYork-Presbyterian Allen Hospital • NewYork-Presbyterian Brooklyn Methodist Hospital • NewYork-Presbyterian Hudson Valley Hospital • NewYork-Presbyterian Komansky Children's Hospital of Children's Hospital of New York • NewYork-Presbyterian Lower Manhattan Hospital • NewYork-Presbyterian Morgan Stanley Children’s Hospital of Children's Hospital of New York • NewYork-Presbyterian Queens • NewYork-Presbyterian Westchester • NewYork-Presbyterian Westchester Behavioral Health No matter where you work within our organization, you’ll enjoy inspirational and supportive leaders, the latest in technology, and a benefits package that fosters true work-life balance. These are just some of the many reasons why employee engagement and patient satisfaction are at all-time highs within our hospital. Explore our life-changing careers today, and discover the promising future ahead.
Every day millions of people feel the impact of our intelligent devices, advanced analytics and artificial intelligence. As a leading global medical technology and digital solutions innovator, GE HealthCare enables clinicians to make faster, more informed decisions through intelligent devices, data analytics, applications and services, supported by its Edison intelligence platform. With over 100 years of healthcare industry experience and around 50,000 employees globally, the company operates at the center of an ecosystem working toward precision health, digitizing healthcare, helping drive productivity and improve outcomes for patients, providers, health systems and researchers around the world. We embrace a culture of respect, transparency, integrity and diversity and we work to create a world where healthcare has no limits.
Indiana University Health is Indiana’s largest and most comprehensive system. A unique partnership with the Indiana University School of Medicine—one of the nation’s largest medical schools—gives patients access to groundbreaking research and innovative treatments, and it offers team members access to the latest science and the very best training—advancing healthcare for all. At IU Health, your personal and professional growth is a top priority. You will have access to many diverse opportunities to learn and develop in meaningful ways that matter most to you, such as advanced clinical training, leadership development, promotion opportunities and cross-training development.
Encompass Health is the largest owner and operator of rehabilitation hospitals in the United States. With a national footprint that includes more than 170 hospitals in 39 states and Puerto Rico, the Company provides high-quality, compassionate rehabilitative care for patients recovering from a major injury or illness, using advanced technology and innovative treatments to maximize recovery. Encompass Health is ranked as one of Fortune’s 100 Best Companies to Work For and Modern Healthcare’s Best Places to Work in Healthcare.
Advocate Aurora Health and Atrium Health are now Advocate Health – the fifth-largest nonprofit integrated health system in the U.S. Advocate Health is the fifth-largest nonprofit integrated health system in the United States –created from the combination of Advocate Aurora Health and Atrium Health. Providing care under the names Advocate Health Care in Illinois, Atrium Health in the Carolinas, Georgia and Alabama, and Aurora Health Care in Wisconsin, Advocate Health is a national leader in clinical innovation, health outcomes, consumer experience and value-based care, with Wake Forest University School of Medicine serving as the academic core of the enterprise. Headquartered in Charlotte, North Carolina, Advocate Health serves nearly 6 million patients and is engaged in hundreds of clinical trials and research studies. It is nationally recognized for its expertise in cardiology, neurosciences, oncology, pediatrics and rehabilitation, as well as organ transplants, burn treatments and specialized musculoskeletal programs. Advocate Health employs nearly 150,000 team members across 67 hospitals and over 1,000 care locations, and offers one of the nation’s largest graduate medical education programs with over 2,000 residents and fellows across more than 200 programs. Committed to equitable care for all, Advocate Health provides nearly $5 billion in annual community benefits. Learn more: advocatehealth.org Read our social media community engagement guidelines: aah.org/social
Latest updates, reports, and threat intel affecting the global network.
Healthcare cybersecurity isn't just about technology—it's about people, trust, and the future of care. Healthcare leaders today are...
About CHIME The College of Healthcare Information Management Executives (CHIME) is an executive organization dedicated to serving chief...
ALPENA — MyMichigan Health earned three honors by the College of Healthcare Information Management Executives (CHIME) HealthCare's Most...
A lawsuit filed by Nebraska Attorney General Mike Hilgers over the 2024 Change Healthcare data breach has been allowed to proceed after...
Proposed new laws will strengthen cyber defences for essential public services like healthcare, drinking water providers, transport and...
Companies this past month announced many new products and services that use artificial intelligence to automate complex processes,...
This partnership will enable Moro Hub and DCAS to jointly develop and implement initiatives that enhance digital infrastructure,...
A new 2025 report reveals that cyberattacks are increasingly disrupting patient care, with 72 percent of organizations affected.
These are the events healthcare leaders should plan for next year, covering topics like digital health, rural care and financial management.
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the owner has reused across multiple agents. The deletion removes the file globally — not just from the shared agent — breaking the owner's other private agents that reference the same `file_id`. The private agent retains a stale `file_id` reference that no longer resolves. A shared-agent editor can destroy files that the owner uses across multiple agents. The owner's private agents — which the attacker has no access to — break silently with stale `file_id` references. This is a cross-agent integrity violation: editing access to one agent should not affect another. Version 0.8.4 contains a patch.
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, users with only `VIEW` access to an MCP server can retrieve the server's decrypted admin-managed secrets through `GET /api/mcp/servers` and `GET /api/mcp/servers/:serverName`. The returned config includes plaintext values for `apiKey.key` and `oauth.client_secret`. This allows viewers of a shared MCP server to exfiltrate the underlying provider credentials. Version 0.8..4 contains a patch. Other remediations include: never returning decrypted admin-managed secrets to non-owners; redacting apiKey.key and oauth.client_secret from all API responses consider returning only boolean presence indicators for secrets, similar to the auth-values route pattern; and, if owners need to edit configs without re-entering secrets, preserving secrets server-side and returning placeholders instead of plaintext.
When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, the alf.io extension sandbox injects a fully-functional HTTP client (`simpleHttpClient`) into every extension script's scope. The `postFileAndSaveResponse()` method accepts an arbitrary filesystem path as its `file` parameter and reads the file contents using `new FileInputStream(file)` with no path validation, directory restriction, or allowlist. A malicious extension script can read any file accessible to the JVM process user and exfiltrate it to an attacker-controlled server via HTTP POST. Version 2.0-M5-2606 patches the issue.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.