Hims & Hers sued over alleged health data privacy failures

The US Federal Trade Commission FTC, together with Utah and California, has filed a lawsuit against telehealth provider Hims & Hers. The FTC alleges that the company shared consumers’ sensitive health information with third‑party advertising platforms despite promising strong privacy protections...

EUVD-2022-32423

Malicious code in bioql PyPI...

Malicious code in telehealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1341fa0434bd6d34d4cd7c6e981f3454a6c1f5fc415c6fed9415ffa817d4721f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5586 Malicious code in telehealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1341fa0434bd6d34d4cd7c6e981f3454a6c1f5fc415c6fed9415ffa817d4721f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in telehealth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2022-27935

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth...

FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations

The U.S. Federal Trade Commission FTC has ordered mental telehealth company Cerebral from using or disclosing personal medical data for advertising purposes. It has also been fined more than $7 million over charges that it revealed users' sensitive personal health information and other data to...

The Most Popular Digital Abortion Clinics, Ranked by Data Privacy

Telehealth companies that provide abortion pills are surging in popularity. Which are as safe as they claim to be?...

Telehealth Sites Put Addiction Patient Data at Risk

New research found pervasive use of tracking tech on substance-abuse-focused health care websites, potentially endangering users in a post-Roe world...

Cloud Security: Buyer Be Critical

Tailoring solutions to challenges It takes a toolbox with different, well, tools to secure an ever-expanding operational perimeter in the cloud. Think about what’s under the general daily purview of cloud security teams: preventing misconfigurations, taming threats and vulnerabilities, and so muc...

CVE-2022-27935

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth...

CVE-2022-27935

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth...

CVE-2022-27935

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth...

Code injection

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth...

CVE-2022-27935

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth...

CVE-2022-27935

Pexip Infinity before 27.3 is affected. The vulnerability allows remote attackers to trigger a software abort via Epic Telehealth, caused by an input validation issue in the affected versions. Impact is described as a potential denial/abort condition rather than data exfiltration. Remediation: up...

PT-2022-18703 · Pexip · Pexip Infinity

Name of the Vulnerable Software and Affected Versions: Pexip Infinity versions prior to 27.3 Description: The issue allows remote attackers to trigger a software abort via Epic Telehealth. Recommendations: For versions prior to 27.3, update to version 27.3 or later to resolve the issue...

CVE-2022-27935: Undefined Security Weakness

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth...

Unpatched Security Bugs in Medical Wearables Allow Patient Tracking, Data Theft

Telehealth care is on the rise as medical service providers cope with the strain of a pandemic and rising costs. But the rush to roll out remote healthcare has also unleashed a universe of wearable medical devices to collect sensitive data, which researchers say are widely vulnerable to attack...

Telehealth: a new frontier in medicine—and security

Telehealth today doesnt just involve chatting with a doctor via a video-conferencing application. Its become an entire collection of rapidly developing technologies and products that includes specialized applications, wearable devices, implantable sensors, and cloud databases, many of which have...