LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Change Healthcare

Change Healthcare

Change Healthcare in MedDevice Cyber coverage: 2 stories, 4 products named, 2 CVEs, and the company's own disclosures.

Follow Change HealthcareClaim this page
Stories
2
Products named
4
Product CVEs
2
Responses on record
0
Latest story
Aug 29, 2019

Coverage

2 stories
01
Vulnerability

Change Healthcare, McKesson and Horizon Cardiology installs ship with insecure file permissions

CISA advisory ICSMA-19-241-01 covers CVE-2018-18630 (CVSS 7.8), insecure default file permissions in Change Healthcare Cardiology, McKesson Cardiology and Horizon Cardiology that let a local user run arbitrary code. Change Healthcare supplies a patch through its support team.

CISAAug 292 min read
02
Vulnerability

Change Healthcare PeerVue Web Server leaks technical details in HTTP error messages

CISA advisory ICSMA-18-277-02 reports that Change Healthcare PeerVue Web Server versions before 7.6.2 expose technical information through error messages (CVE-2018-10624, CVSS v3 4.3). Change Healthcare released a patch through its support team.

CISAOct 42 min read

Products in our coverage

CVEs in coverage of Change Healthcare products

CVE-2018-10624 CVE-2018-18630
← All manufacturers