CareScope Watch/Cybersecurity/August 6, 2026
Attackers keep using vulnerabilities that already have patches
CISA's Known Exploited Vulnerabilities catalog lists flaws confirmed to be under active exploitation. A recurring share of them are in remote access and file transfer products used by small organizations, and patches existed before the attacks.
Why it matters
Small practices are rarely breached by novel techniques. They are breached through an unpatched remote access appliance nobody owns.
What it means for your practice
Ask your IT provider to check your equipment against the catalog and to tell you, in writing, who is responsible for patching each device and how quickly.
Related product
Read our review of Cisco DuoMore from the Watch
Cybersecurity/Sep 11
CISA Adds ConnectWise ScreenConnect Flaw to Exploited Vulnerabilities List
CISA added three vulnerabilities to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The additions include an improper privilege management and missing authorization vulnerability in ConnectWise ScreenConnect (CVE-2026-84869), alongside two authorization and authentication flaws in JFrog Artifactory.
What it meansCybersecurity/Sep 10
Orthanc DICOM Server Vulnerable to Denial-of-Service Flaw
A vulnerability in Orthanc DICOM Server versions prior to 1.13.0 allows an authenticated remote attacker to trigger a heap out-of-bounds write. The issue stems from an integer overflow in pitch and buffer-size computation when decoding an attacker-supplied PNG or JPEG image. Exploitation crashes the Orthanc process, causing a denial-of-service condition.
What it meansCybersecurity/Sep 10
CISA Warns of Actively Exploited MikroTik RouterOS Vulnerabilities
CISA has added two MikroTik RouterOS vulnerabilities to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. The flaws include CVE-2026-67277, a missing authentication vulnerability for a critical function, and CVE-2026-86060, an improper neutralization of argument delimiters in a command.
What it means