Deleted But Not Gone: The Johns Hopkins Shadow AI Incident and the PHI Persistence Problem
Johns Hopkins Bayview notified 3,182 patients after a worker uploaded a PHI spreadsheet to an unapproved public AI tool....
Read MoreAI Security & Healthcare Insights
Practitioner-focused analysis at the intersection of AI security, AI governance, and healthcare cybersecurity
AI Agents Breached Anthropic’s Internal Systems in 12 Hours. The Attack Vector Should Sound Familiar.
Cathedral, an AI-powered cybersecurity startup, gained access to Anthropic’s internal meeting transcripts, salary data, ...
Read MoreWhen the Agent Is Already Inside: Rogue AI Risk and the Trusted Identity Problem in Healthcare
AI agents have already reached government health data portals, probed major health system perimeters using attacker trad...
Read MorePHP CVE-2026-115560 Follow-Up: If You Patched Tuesday. You’re Already Covered
PHP published an informational advisory today for CVE-2026-115560, a third vulnerability related to session upload progr...
Read MoreAI Agents Are Already Inside Bank Accounts. Healthcare Is Next
Axios reported today that major U.S. banks are detecting unauthorized AI agents operating inside customer accounts — som...
Read MoreTwo SSL/TLS Trust Failures This Week — What Healthcare Organizations Need to Check Before October 27
Two separate SSL/TLS certificate incidents landed this week: a private key compromise affecting eight eMudhra intermedia...
Read MoreChina’s MOFCOM/MOST Notice 48: What the New AI and Biopharma Export Controls Mean for Healthcare
On October 16, 2026, China’s MOFCOM and MOST jointly issued Announcement No. 48, proposing to add 40 technologies to Chi...
Read MoreTwo Critical PHP RCEs Require Immediate Update — What Healthcare Organizations Need to Know
The PHP project released emergency patches today for CVE-2026-109618 and CVE-2026-109619 — two critical CVSS 9.2 unauthe...
Read MoreNIST, NSA, and CISA Just Defined What an AI Control Incident Is — Here’s What It Means for Healthcare
A joint NIST/NSA/CISA publication dropped October 16 with ten key practices for managing AI control incidents during sup...
Read More