HIPAA Digest | Catapult Business Innovations – October 9, 2025

Critical GoAnywhere Vulnerability Exploited in Medusa Ransomware Attacks

A critical vulnerability in GoAnywhere’s managed file transfer software has been exploited in Medusa ransomware campaigns, potentially exposing PHI and sensitive data if patching lags. This underscores the importance of rapid patch management, vendor risk monitoring, and incident response planning for PHI-handling businesses.

Read full article

Cl0p Mass Exploiting Zero-day Vulnerability in Oracle E-Business Suite

The Cl0p group is exploiting a zero-day vulnerability in Oracle E-Business Suite, which could allow attackers to exfiltrate data or disrupt ERP operations. For business leaders, this highlights the necessity of timely patching, strict access controls, and continuous monitoring of critical systems, especially where PHI or sensitive data is involved.

Read full article

Harris Health Notifies Patients About 10-Year Insider Data Breach

A decade-long insider data breach exposed patient information, underscoring the ongoing risk of insider threats and the need for strong access governance, auditing, and data protection practices to prevent PHI exposure.

Read full article

Understanding Low-Code and No-Code for Healthcare

HealthTech Magazine explains how low-code and no-code platforms are changing healthcare IT, enabling faster development of patient-facing apps and marketing tools while raising governance and compliance considerations. This can help executives plan faster digital initiatives and AI-enabled workflows with proper controls.

Read full article