Two healthcare signals landed in the window. HIPAA Journal reported on 16 October that cyberattacks on healthcare providers are increasing in frequency and having a greater impact on patient care, with ransomware disruption now routinely delaying diagnostics and treatment — reinforcing the sector's shift from data-theft harm to operational-outage harm. Separately, CISA published an ICS Medical Advisory on 15 October for Thermo Fisher's Torrent Suite Software (versions 5.18 and earlier), whose path-traversal flaw CVE-2026-107777 allows an authenticated attacker to read arbitrary files on the Torrent Server, a system in the genomics and laboratory workflow. The pairing captures the sector's core risk profile: clinical and device-facing software carries exploitable flaws while the enterprise side absorbs ransomware that stops care. Australian and New Zealand health services should treat internet-exposed laboratory and device-management systems as part of the attack surface, apply the vendor's fixed release, and rehearse downtime procedures and offline backups for clinical operations.

• Source article