LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Illumina

Illumina

Illumina in MedDevice Cyber coverage: 2 stories, 8 products named, 2 CVEs, and the company's own disclosures.

Follow IlluminaClaim this page
Stories
2
Products named
8
Product CVEs
2
Responses on record
0
Latest story
Aug 1, 2025

Coverage

2 stories
01
Enforcement

$9.8 million says product security is now a False Claims Act problem

Illumina settled DOJ allegations that it sold genomic sequencers with vulnerable software to federal agencies while lacking an adequate security program from 2016 to 2023. A former insider brought the case and takes $1.9 million.

MedTech DiveAug 13 min read
02
Vulnerability

Illumina Universal Copy Service on sequencers binds to every IP address and runs with excess privileges

CISA advisory ICSMA-23-117-01 covers CVE-2023-1968 (CVSS 10.0), binding to an unrestricted IP address, and CVE-2023-1966 (CVSS 7.4), execution with unnecessary privileges, in the Illumina Universal Copy Service on MiSeq, NextSeq, NovaSeq, iSeq, MiniSeq and iScan instruments.

CISAApr 273 min read

Products in our coverage

  • Local Run Manager genomic sequencer control software
  • MiSeq MiSeq Control Software 4.0; MiSeqDx Operating Software 4.0.1 and later genomic sequencing instrument
  • MiniSeq MiniSeq Control Software 2.0 and later genomic sequencing instrument
  • NextSeq 1000/2000 Control Software 1.4.1 and earlier genomic sequencing instrument
  • NextSeq 500/550 and NextSeq 550Dx Control Software 4.0; 550Dx Operating Software 1.0.0 to 1.3.1 and 1.3.3 and later genomic sequencing instrument
  • NovaSeq NovaSeq 6000 Control Software 1.7 and earlier; NovaSeq Control Software 1.8 genomic sequencing instrument
  • iScan iScan Control Software 4.0.0 and 4.0.5 genomic sequencing instrument
  • iSeq 100 All versions genomic sequencing instrument

CVEs in coverage of Illumina products

CVE-2023-1966 CVE-2023-1968
← All manufacturers