NYSDH A.I CyberSecurity Scoring
09/12/2025
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for New York State Department of Health in 2026.
No incidents recorded for New York State Department of Health in 2026.
No incidents recorded for New York State Department of Health in 2026.
Public Health
Latest updates, reports, and threat intel affecting the global network.
The HIPAA Journal has compiled healthcare data breach statistics from October 2009, when the Department of Health and Human Services (HHS)...
New York state plans to invest $300 million in efforts to modernize hospital IT infrastructure, bolster cybersecurity and expand telehealth...
The state announces new funding aimed at expanding electronic health records, strengthening cybersecurity, and increasing telehealth and...
ALBANY, N.Y. — Rome Health Hospital, Samaritan Medical Center in Watertown, and Claxton-Hepburn Medical Center in Ogdensburg are among the...
The money is coming from the Statewide Health Care Facility Transformation Program IV and V.
Gov. Hochul announced more than $300 million in new state funding to support health care transformation projects aimed at improving health...
ALBANY, New York — New York is hoping its road map for investing in the state's rural health care industry will garner a generous share of...
NEW YORK — The state Department of Health has developed an automated reporting system to monitor hospital capacity across New York in almost...
ALBANY, New York — The $50 billion federal Rural Health Transformation program is setting up a battle between states seeking to secure...
A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.
vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefill/decode disaggregated deployments. Attackers can trigger GPU memory exhaustion by submitting completion requests with multiple prompts, causing orphaned KV cache blocks to accumulate until process restart and eventually preventing legitimate requests from executing.
vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints, allowing attackers to allocate unbounded memory. Attackers can supply arbitrary tp_size values in prefill/decode disaggregated deployments to exhaust memory and trigger kernel OOM-kill of the decode worker process.
vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 480 seconds while health checks continue returning success.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.