LIVE FEED

A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.

Manufacturers // Natus Medical

Natus Medical

Natus Medical in MedDevice Cyber coverage: 1 story, 1 product named, 8 CVEs, and the company's own disclosures.

Follow Natus Medical Claim this page

Stories: 1
Products named: 1
Product CVEs: 8
Responses on record: 0
Latest story: Jun 14, 2018

Coverage

1 story

Natus Xltek NeuroWorks 8 has eight packet parsing flaws, three scored 10.0

CISA advisory ICSMA-18-165-01 covers eight vulnerabilities in Natus Xltek NeuroWorks 8, including stack-based buffer overflows (CVE-2017-2853, CVE-2017-2868, CVE-2017-2869) scored CVSS 10.0. Natus released NeuroWorks/SleepWorks 8.5 GMA 3 as a free update.

CISAJun 143 min read

Products in our coverage

Xltek NeuroWorks 8 EEG and sleep study software

CVEs in coverage of Natus Medical products

CVE-2017-2852 CVE-2017-2853 CVE-2017-2858 CVE-2017-2860 CVE-2017-2861 CVE-2017-2867 CVE-2017-2868 CVE-2017-2869

← All manufacturers