IHS A.I CyberSecurity Scoring
01/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for IQVIA HCP Space in 2026.
No incidents recorded for IQVIA HCP Space in 2026.
No incidents recorded for IQVIA HCP Space in 2026.
Cleveland Clinic, located in Cleveland, Ohio, is a not-for-profit, multispecialty academic medical center that integrates clinical and hospital care with research and education. Founded in 1921 by four renowned physicians with a vision of providing outstanding patient care based upon the principles of cooperation, compassion and innovation, Cleveland Clinic has become one of the largest and most respected hospitals in the country. Cleveland Clinic facilities can be found throughout Northeast Ohio, as well as around the country and world including: Cleveland Clinic Abu Dhabi Cleveland Clinic Canada Cleveland Clinic Florida Cleveland Clinic London Cleveland Clinic Lou Ruvo Center for Brain Health - Las Vegas
Novant Health is an integrated network of more than 850 locations, including 19 hospitals, more than 700 physician clinics and urgent care centers, outpatient facilities, and imaging and pharmacy services. This network supports a seamless and personalized healthcare experience for communities in North Carolina and South Carolina. Novant Health is nationally recognized for our unwavering commitment to safety and the highest quality care, and we serve as a catalyst for healthcare transformation through clinical trials, leading-edge research, innovative care delivery models and robust virtual care networks. The expertise and empathy of our 40,000 team members along with more than 8,300 independent and employed clinicians are at the heart of Our Cause as industry leaders caring for communities across the Carolinas. In 2023, Novant Health provided more than $1.6 billion in community benefit, including financial assistance and services. To learn more about our social media community standards, visit: https://www.novanthealth.org/policy/disclaimer/social-media-disclaimer/
The people of Memorial Sloan Kettering Cancer Center (MSK) are united by a singular mission: ending cancer for life. Our specialized care teams provide personalized, compassionate, expert care to patients of all ages. Informed by basic research done at our Sloan Kettering Institute, scientists across MSK collaborate to conduct innovative translational and clinical research that is driving a revolution in our understanding of cancer as a disease and improving the ability to prevent, diagnose, and treat it. MSK is dedicated to training the next generation of scientists and clinicians, who go on to pursue our mission at MSK and around the globe. One of the world’s most respected comprehensive centers devoted exclusively to cancer, we have been recognized as one of the top two cancer hospitals in the country by U.S. News & World Report for more than 30 years.
As a nationally ranked academic medical center and one of Alabama’s largest employers, UAB Medicine is about teamwork, support, mentorship, and collaboration. Employees are empowered to lead, learn, and innovate as they deliver world-class care to every patient, every family, every time. When you are a part of UAB Medicine, you change the world - starting with you. What happens here? • 1,100+ patient bed facility caring for 60,000+ each year • Level I Trauma Center and an ER the size of a football field • 9 speciality Intensive Care Units, including a Level IV Regional Neonatal ICU • Alabama’s first Comprehensive Stroke Center • First Magnet Hospital in Alabama and the only one in our state Why work at UAB Medicine? • Excellent benefits package: 100% tuition assistance, paid parental leave for moms and dads, professional development opportunities • Named among the “150 Best Places to Work in Healthcare” and "100 Great Hospitals in America" by Becker's Hospital Review • Ranked among the best by U.S. News & World Report year after year • Rated in the top 25 by Forbes for “Best Midsized Employer” Our website is a great career resource- be sure to check it out! www.uabmedicine.org/careers
AdventHealth is a connected network of care that helps people feel whole – body, mind and spirit. More than 100,000 team members across a national footprint provide whole-person care to nearly nine million people annually through more than 2,000 care sites that include hospitals, physician practices, ambulatory surgery centers, outpatient clinics, home health agencies, hospice centers, the AdventHealth app and more. Our wholistic approach to improving the health and prosperity of our communities is inspired by our mission to extend the healing ministry of Christ.
At Mercy Health, we understand that every family is a universe. A network of people who love, and support, and count on one other to be there. Everybody means the world to someone and we are committed to care for others so they can be there for the ones they love. With nearly 35,000 employees across regions of Ohio and Kentucky, we’re one of the largest health care systems in the country. At each of our more than 600 points of care, we deliver high-quality, compassionate care with one united purpose: to help our patients be well in mind, body and spirit.
We are Erasmus MC. Our roots lie in Rotterdam, a city and port of international standing. We are the most innovative university medical center in the Netherlands and one of the world’s leading centers of scientific research. We are committed to achieving a healthy population and pursuing excellence in healthcare through research and teaching. Day in, day out, our staff, volunteers and students work with passion and dedication to achieve everything we stand for: safe, first-rate healthcare for patients with complex issues, unusual and rare conditions or acute needs. But we also stand for top-quality teaching that attracts ambitious, inquisitive and talented students and seeks to answer the healthcare questions of tomorrow. And we stand for world-class scientific research that bolsters our understanding of diseases and disorders and helps to predict, treat and prevent them. We do our work based on our basic principles, the core values of Erasmus MC, 'responsible', 'connecting' and 'enterprising'. We believe that we provide the best care, research and education if we are responsible, binding and enterprising.
RWJBarnabas Health is New Jersey’s largest and most comprehensive academic health system, caring for more than 5 million people annually. Nationally renowned for quality and safety, the system includes 14 hospitals and 9,000 affiliated physicians integrated to provide care at more than 700 patient care locations. RWJBarnabas Health is among New Jersey’s largest private employers, with more than 44,000 employees, contributing more than $5.5 billion to the state economy every year. RWJBarnabas Health partners with its diverse communities to build and sustain a healthier New Jersey. It provides patient-centered care in a compassionate and equitable manner. RWJBarnabas Health’s commitment to enhancing access to care includes a transformative partnership with Rutgers University, including the Rutgers Cancer Institute — the state's only NCI-designated Comprehensive Cancer Center - and Rutgers Robert Wood Johnson Medical School.
Region Skåne, or Skåne Regional Council, is the self-governing authority of Skåne, the southernmost county of Sweden. Region Skåne has its head office in the city of Kristianstad and has work places in every municipality in Skåne. Region Skåne is responsible for healthcare and medical services, the development of trade and industry, public transport, culture and cooperation with other regions in and outside Sweden. Region Skåne employs around 34,000 people, most of whom work in the healthcare sector, in hospitals, primary healthcare units or dental services. Region Skåne contributes to an open and tolerant community that stimulates creativity and innovative development opportunities. www.skane.se/jobb (mostly in Swedish)
Latest updates, reports, and threat intel affecting the global network.
A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.
SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.