Healthcare Data Theft, Identity Flaws, and Exposed Cameras Show How Breaches Spread

The advisory summarizes multiple healthcare and related-sector incidents where stolen credentials, third-party application access, and identity flaws enabled attackers to exfiltrate and in some cases encrypt data (ransomware), exposing millions of records and sensitive PII/PHI; it also catalogs several critical CVEs affecting identity platforms and exposed devices and recommends prioritizing remediation, microsegmentation, and removal of internet-exposed unmanaged devices.