Vendors and CVEs › Sectors › Healthcare
Healthcare: industrial cyber security news for the sector
9 stories in Industrial Cyber Brief name Healthcare, 1 on CISA’s list of known exploited flaws, from Monday 19 October 2026 to Friday 6 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
Critical
US agencies urge hardening of refrigeration and cold-chain monitoring systems
New: a joint US federal advisory gives hardening guidance for these systems.
Critical
Cyber-attack on French blood service supplier overheats blood cold rooms
A supplier of the French National Blood Service was hit by a cyber-attack. Hackers turned cold rooms hosting blood samples up to 110°C (230°F).
Low
Dispel joins White House-led pilot to secure rural hospital remote access
Dispel, a vendor of secure remote access for operational technology (OT), is taking part in Project Lifeline 250. The six-month pilot began on 26 October at Newberry Health and covers rural hospitals in South Carolina.
High
China-backed group used AI penetration tool against about 140 targets
CrowdStrike says the group Vapor Panda used the agentic AI penetration testing tool ARTEX, with DeepSeek, to compromise about 140 targets in 11 days.
Critical
Internet-exposed refrigeration controls found in 99 countries after French supermarket attacks
Forescout's Vedere Labs found 12,976 internet-exposed service observations tied to refrigeration control systems on 6,017 public IP addresses in 99 countries and territories.
Medium
Hackers hid backdoor in VMware Tools during two-year Russian healthcare intrusion
A Belarus-aligned hacktivist group, Partisan Zmiy (Cyber Partisans), spent nearly two years in a Russian healthcare organisation's network, according to Solar.
High Known exploited
Ransomware groups exploit Palo Alto GlobalProtect VPN flaw since June
Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect patched in May.
High
Flaws in PEAK-System CAN drivers for Windows could crash the system
Several memory-handling flaws were found in HMS Networks PEAK-System PCAN Windows drivers. Successful exploitation could crash the Windows kernel. The vendor rates the flaws 7.1 on the CVSS v3 scale.
Critical
Hackers hit French grocery refrigeration systems, spoiling food and starting fires
Late Sunday night, an unknown attacker or group hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores. Temperatures rose, food spoiled and fires started.