ShinyHunters uses healthcare help desks to break into cloud accounts

The group is using phone calls to persuade help desks to reset multifactor authentication, then taking over cloud accounts and stealing data from connected services—often without deploying traditional ransomware.

Clinical Cyber Dispatch — Issue 011 · 6 July 2026

Healthcare-specific CVE analysis for July 2026. CVSS; EPSS; Exploitation Status; and action guidance for healthcare security teams.

Clinical Cyber Dispatch Issue 010 — Healthcare Threat Intel 2026-06-22

Threat level: CRITICAL. 8 CVEs reviewed — 3 on CISA KEV; 2 in VulnCheck KEV. Free edition of Clinical Cyber Dispatch.

Clinical Cyber Dispatch — Healthcare Threat Intel | 15 June 2026

Healthcare-specific CVE analysis for June 2026. CVSS; EPSS; Exploitation Status; and action guidance for healthcare security teams.

Clinical Cyber Dispatch — Healthcare Threat Intel | 11 June 2026

Healthcare-specific CVE analysis for June 2026. CVSS; EPSS; Exploitation Status; and action guidance for healthcare security teams.

Clinical Cyber Dispatch — Healthcare Threat Intel | 1 June 2026

Threat level: CRITICAL. 8 CVEs reviewed — 5 on CISA KEV; 5 in VulnCheck KEV. Free edition of Clinical Cyber Dispatch.

Clinical Cyber Dispatch — Healthcare Threat Intel | 30 May 2026

Threat level: CRITICAL. 8 CVEs reviewed — 6 on CISA KEV; 6 in VulnCheck KEV. Free edition of Clinical Cyber Dispatch.