S. 3315 clears the Senate with proposed minimum cybersecurity requirements, while iRhythm begins notifying patients following data theft from third-party business applications.
Citrix disclosed two exploited NetScaler flaws with fixed builds and compromise checks, while Astrana Health described an impersonation campaign that spoofed its main phone number.
This week: exploited Cisco email and identity flaws, three healthcare cyber developments, new Class I device actions, and practical AI-agent oversight signals.
Boston Scientific says manufacturing and shipping are restored; meanwhile, three Mirth Connect flaws and five urgent KEV additions sharpen this week’s healthcare security priorities.