LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Hologic

Hologic

Hologic in MedDevice Cyber coverage: 5 stories, 14 products named, 2 CVEs, and the company's own disclosures.

Public disclosure program
Follow HologicClaim this page
Stories
5
Products named
14
Product CVEs
2
Responses on record
0
Latest story
Oct 12, 2023

Coverage

5 stories
01
Vulnerability

Hologic lists SecurXChange Router and Chrome installs as affected by libwebp CVE-2023-4863

Hologic says its medical software does not process WebP, but the vulnerable libwebp (CVE-2023-4863) sits in Chrome on Breast and Skeletal Health products and in the SecurXChange Router OS. Update Chrome to 116.0.5845.187 or higher and apply USN-6369-2.

HologicOct 122 min read
02
Vulnerability

Hologic removes PTC Axeda agent from systems running Hologic Connect

Hologic bulletin CTB-01038 says the PTC Axeda agent and Axeda Desktop Server flaws (ICSA-22-067-01) affect all Hologic systems with Hologic Connect installed. Mitigation is removing the Axeda services and files.

HologicMar 152 min read
03
Vulnerability

Hologic flags Log4j exposure in PowerChute and a Faxitron CT utility

Hologic bulletin CTB-00996 says its software does not use Log4J, but APC PowerChute Business Edition v9.5 on AWM and Unifi Workspace may, as may a Faxitron CT utility. Hologic recommends uninstalling PowerChute and removing the utility.

HologicDec 162 min read
04
Vulnerability

Hologic validates MS17-010 WannaCry patch for Selenia, Dimensions and SecurView

Hologic bulletin CTB-00315 validates and recommends Microsoft patch KB4012212 (MS17-010, rated Critical) on Affirm, AWM, Dimensions, Trident, Windows Selenia, Cenova, SecurView and MultiView against WannaCry and EternalBlue.

HologicJul 252 min read
05
Vulnerability

Hologic urges MS17-010 patch on Skeletal Health DXA and Fluoroscan systems

Hologic bulletin CTB-00318 strongly recommends applying the Microsoft MS17-010 security patch to Skeletal Health DXA (QDR) systems and Fluoroscan to block WannaCry and EternalBlue, with installation instructions.

HologicJul 252 min read

Products in our coverage

Products and threat intel

6

Hologic products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.

ProductDevice typeAttributesMatched advisories
Brevera Biopsy System with CorLumina Imaging TechnologyInstrument, Biopsy128
Aptima HCV Quant Dx AssayAssay, Hybridization And/Or Nucleic Acid Amplification For Detection Of Hepatitis C Rna,Hepatitis C Virus75
Aptima BV Assay; Aptima CV/TV AssayVaginitis And Bacterial Vaginosis Nucleic Acid Detection System80
Aptima CMV Quant AssayCytomegalovirus (Cmv) Dna Quantitative Assay30
Panther Fusion SARS-CoV-2/Flu A/B/RSV assayMulti-Target Respiratory Specimen Nucleic Acid Test Including Sars-Cov-2 And Other Microbial Agents70
RFID Localization SystemMarker, Radiographic, Implantable30

CVEs in coverage of Hologic products

CVE-2021-44228 CVE-2023-4863
← All manufacturers