HEAL Security · 2026-04-03 · 20 min
Key moments - from our scoring
Substance score
57 / 100
Five dimensions, 20 points each
The HEAL Security Dispatch connects four critical threat vectors affecting the healthcare sector and beyond. US hospitals are engaged in a $2 billion+ lawsuit against the Centers for Medicare and Medicaid Services over disproportionate share hospital payment calculations while simultaneously dealing with massive data breaches - including 3.4 million patient records exposed in a health tech breach and HIMS and HERS compromised through Zendesk. The episode explains why medical data commands premium prices on black markets and persists as exploitable assets for years, unlike financial data. The conversation then scales to supply chain poisoning, where threat actors embed malware into seemingly legitimate Claude AI-related code repositories on GitHub, exploiting developers' urgent need to integrate AI tools. This highlights how obfuscated malicious payloads buried thousands of lines deep in open source libraries can survive community vetting. The episode reports on Europe's cybersecurity agency breach attributed to organized criminal syndicates operating with corporate structure, specialized divisions (initial access brokers, payload developers, negotiation teams), and R&D budgets. Finally, it addresses active mobile threats: Novoice malware infecting 2.3 million Android devices through 50 Google Play Store apps with persistence across factory resets via root-level exploitation, and Apple's urgent iOS 18 patch for the Dark Sword zero-day vulnerability. The hosts argue that defending requires both immediate patching and philosophical shifts toward resilience over impermeability.
Novoice is a malware strain that infected 2.3 million Android devices across 50 Google Play Store apps. It survives factory resets by exploiting unpatched vulnerabilities to gain root-level access and embed itself in the system partition (the core operating system), whereas a standard reset only wipes the user data partition, so the device rebuilds from a compromised foundation.
Medical data has no expiration date and includes comprehensive personal profiles (medical history, Social Security numbers, prescriptions, diagnostics) that cannot be cancelled like credit cards. Threat actors package this into fullz for synthetic identity creation, long-term insurance fraud, and draining lifetime healthcare caps, making it worth premium prices on black markets for years of exploitation.
Attackers are embedding malware into seemingly legitimate Claude AI-related open source projects on GitHub, exploiting developers' urgent need to integrate AI quickly. The malicious code is obfuscated and buried thousands of lines deep within complex dependencies, allowing it to survive community vetting while the functional AI wrapper works perfectly until the payload is activated.
Dark Sword is an acute zero-day vulnerability in iOS 18 that was being actively exploited in the wild and requires immediate patching, whereas Novoice is a persistent systemic threat that exploits known, unpatched older Android vulnerabilities that millions of outdated devices have not yet updated against.
The breach demonstrated that organized criminal syndicates with corporate structure and massive R&D budgets can compromise even the top government agencies tasked with defending the continent, proving that localized defense is insufficient and only cross-border intelligence sharing and unified defense strategies are viable against decentralized global cybercrime networks.
Our reviewer’s read on each dimension, with quotes from the episode.
The episode connects several real cybersecurity incidents (healthcare data breaches, supply chain attacks, European agency breach, mobile malware) with some substantive technical detail (root-level access, factory reset persistence, ransomware-as-a-service structure), but is padded significantly with repetitive analogies (termite/house metaphor, moat/castle, thief/lock comparisons) and throat-clearing between speakers. The core insights about third-party risk, supply chain poisoning, and systemic vulnerability are present but not densely packed per minute.
An attacker might upload a functional, genuinely useful API wrapper for CLAUDE AI. It works perfectly. But there's a catch. Buried on, say, line 4000, deeply nested within complex dependency trees, is a tiny, tiny string of code.
Novoice exploits those older vulnerabilities to gain root level access. So it embeds itself directly into the concrete foundation, the core operating system partitioned.
The framing of healthcare as a 'two-front war' and the connection between systemic vulnerabilities is reasonably coherent, but individual insights are largely recycled: third-party risk and supply chain attacks are well-established topics in security discourse, the ransomware-as-a-service business model has been widely documented, and the mobile threat examples follow standard threat briefing patterns. The termite/house and thief/lock analogies are familiar educational devices. No novel frameworks or counterintuitive claims emerge.
Medical data doesn't have an expiration date in the same way financial data does.
Threat actors package all of this into what are called fulx, F U L L Z Full information Packages, and they use them to build synthetic identities.
This is a two-person hosted show (Mark and Diana) with no external guests, which limits assessment. Neither speaker identifies themselves with specific credentials, company affiliations, or operational background. They discuss real incidents and threats but present themselves as reporters/analysts rather than as practitioners who have directly managed these defenses or incidents at scale. No evidence of hands-on operator experience is provided.
Good evening and welcome back to the HEAL Security Dispatch Deep Dive with Mark and Diana, your trusted source for the latest in cybersecurity trends and expert insights, proudly presented by Heal Security.
We have a report from HelpNet Security that highlights...
The episode includes concrete numbers and named entities: 131 hospitals suing HHS, 3.4 million patient records exposed in health tech breach, HIMS/Hers Zendesk breach, 2.3 million Novoice-infected devices, 50 infected apps on Google Play Store, Dark Sword iOS 18 vulnerability. The supply chain attack explanation names Anthropic's Claude AI. However, many claims lack supporting metrics: the billion-dollar funding dispute is asserted but no specific dollar figures are cited, and several threat actors and mechanisms are described generically without concrete examples of victims or financial impact.
According to a report from MedCity News, 131 US hospitals are currently suing the Department of Health and Human Services, or hhs.
It has successfully infected over 2.3 million devices. And it did so by sneaking into more than 50 different apps available directly on the Google Play Store.
The dialogue flows smoothly with responsive back-and-forth, but the questioning is largely soft and affirming rather than challenging. Speaker A asks foundational 'explain this' questions ("What do you mean by life cycle?", "Break that down for us") and Speaker B elaborates, but there is no genuine pushback, skepticism, or productive disagreement. The hosts agree on nearly every point and use leading questions that confirm the narrative rather than test claims. No attempt to steel-man counterarguments or probe weak spots in the analysis.
Okay, what do you mean by life cycle?
Break that down for us.
Computed from the transcript - who did the talking, and the words that came up most.
This week’s cybersecurity landscape highlights escalating risks across healthcare, mobile ecosystems, and developer environments. From a legal battle over billions in U.S. healthcare funding to large-scale data breaches exposing millions of patient records, the healthcare sector remains both financially and operationally under pressure. At the same time, a widespread Android malware campaign infected over 2.3 million devices, while Apple rushed to patch a critical iOS vulnerability actively exploited in the wild. Meanwhile, attackers are increasingly leveraging trusted platforms - such as GitHub and Zendesk - to execute supply chain and data access attacks, signaling a shift toward more sophisticated and indirect intrusion methods. These incidents underscore a clear trend: cyber threats are becoming more persistent, scalable, and coordinated. Organizations and individuals alike must prioritize timely updates, stronger access controls, and vigilance when interacting with third-party tools and platforms.
Transcribed and scored by The B2B Podcast Index.
Speaker A: Good evening and welcome back to the HEAL Security Dispatch Deep Dive with Mark and Diana, your trusted source for the latest in cybersecurity trends and expert insights, proudly presented by Heal Security. Today is Friday, April 3, 2025. You know, imagine discovering termites in your house.
Speaker B: Oh, man, that is the worst nightmare.
Speaker A: Right? So you take drastic measures. You just decide to bulldoze the entire structure.
Speaker B: You just start over completely from the ground up.
Speaker A: Exactly. You rebuild it completely from scratch on the exact same lot. But then you walk into your brand new home and somehow the termites are already sitting there waiting in your brand new living room.
Speaker B: That is genuinely a terrifying thought.
Speaker A: It really is. And today we're actually looking at active malware that does exactly that. It survives a total factory reset of
Speaker B: your phone, which is, uh, just incredibly hard to pull off technically.
Speaker A: Right. But honestly, that's just the tip of the iceberg for our deep dive today. We are on a mission right now to connect the dots between these massive sweeping institutional vulnerabilities and. And the very devices sitting in your pocket today.
Speaker B: Because it is all connected. We are looking at a profound convergence of risk across the board.
Speaker A: We really are. We're exploring how the US Healthcare infrastructure is, um, hemorrhaging both foundational funding and highly sensitive patient data at the same time.
Speaker B: Yeah. Hitting them from both flanks.
Speaker A: We'll break down how the software development supply chain is being actively poisoned right now with shiny new AI tools.
Speaker B: That one is a fascinating psychological trick.
Speaker A: It really is. And then we'll discuss why even Europe's top cybersecurity watchdogs are being overpowered. And finally, we'll bring it right back to those mobile threats targeting you today.
Speaker B: When we stack all these reports together, you know, the narrative really shifts from just isolated bad days for certain companies to a stark look at systemic stress testing. We are watching an interconnected ecosystem being probed for weaknesses at every conceivable level.
Speaker A: I want to start right at the center of argue arguably the most stressed sector on the board right now, which is healthcare.
Speaker B: Yeah, absolutely.
Speaker A: The healthcare sector is essentially fighting a two front war. On one flank, you have a massive financial and legal dispute threatening their operational
Speaker B: lifelines, and on the other, a relentless onslaught of digital data breaches.
Speaker A: Right, so let's look at the financial flank first. According to a report from MedCity News, 131 US hospitals are currently suing the Department of Health and Human Services, or hhs.
Speaker B: And, um, this isn't just some minor administrative squabble over paperwork.
Speaker A: No, not at all.
Speaker B: This is a Highly complex, really. Foundational dispute over how operational funding is calculated.
Speaker A: Right. It all centers on a policy from the Centers for Medicare and Medicaid Services. Cms.
Speaker B: Exactly.
Speaker A: The core of this legal fight is about the specific formula used to count Medicare Advantage patients. The hospitals are arguing that the CMS formula unfairly reduces their Medicare disproportionate share hospital payments.
Speaker B: Which is a mouthful, but.
Speaker A: It is a mouthful, but in plain English, I mean, these are the payments specifically, uh, designated for safety net hospitals.
Speaker B: Yes, the facilities that serve vulnerable low income populations.
Speaker A: So the hospitals state that the way these patients are being counted artificially makes it look like they are serving fewer low income patients than they actually are in reality.
Speaker B: Right. And to look at this totally neutrally, just looking at the math, the stakes of that calculation are staggering.
Speaker A: We're talking billions of dollars, right?
Speaker B: Literally billions. The hospitals are arguing that this specific met results in billions of dollars in lost funding. And for safety net hospitals, that is foundational capital.
Speaker A: That's the money used to literally keep the lights on.
Speaker B: Keep the lights on, keep emergency rooms staffed, and crucially for our topic today, maintain critical infrastructure.
Speaker A: And while they are locked in this fierce legal battle over billions in basic operational funding, their digital walls are basically caving in.
Speaker B: Yeah, the timing couldn't be worse.
Speaker A: Fox News just reported a major health tech data breach exposing approximately 3.4 million patient records. Wow, we are talking about highly sensitive personal and medical information here. And on top of that bleeping, computer reported that the telehealth company, HIMS and hers disclosed, uh, a massive data breach as well.
Speaker B: That combination of factors is exactly what makes the current state of healthcare so fragile. If we pull the thread on those 3.4 million patient records, you know, we have to look at the life cycle of that stolen data.
Speaker A: Okay, what do you mean by life cycle?
Speaker B: Well, why target a hospital instead of a bank? Because medical data doesn't have an expiration date in the same way financial data does.
Speaker A: Oh, I see. Because a stolen credit card, I mean, you can cancel that with a five minute phone call.
Speaker B: Exactly. If someone steals your credit card, the fraud algorithms usually catch it within hours. The bank cancels the card and the credential is dead. It's totally useless.
Speaker A: But medical data is permanent.
Speaker B: Yes. Your medical history, your Social Security number, your prescription records, your diagnostic history, that is a comprehensive profile of a human being.
Speaker A: You can't just call and cancel your medical history.
Speaker B: No, you can't. Threat actors package all of this into what are called fulx, F U L L Z Full information Packages, and they use them to build synthetic identities. Or they commit long term insurance fraud or even drain people's lifetime healthcare caps. That data can be actively exploited on the black market for years. And it wholesales for a massive premium.
Speaker A: It really paints a dire picture of the industry right now. It's like the healthcare system is a massive ship taking on water through these gaping cyber leaks, while the crew is locked in a fierce legal battle on the deck over who gets the funding just to buy materials to patch the hull.
Speaker B: Honestly, it's worse than that. It's a ship taking on water where the crew might not even have the resources to buy the blueprints for modern defenses.
Speaker A: Because it's so expensive.
Speaker B: Building robust cybersecurity architecture is incredibly expensive. It requires continuous, aggressive investment in threat hunting personnel and auditing.
Speaker A: Right.
Speaker B: When hospitals, especially the safety net hospitals, are engaged in a desperate fight for foundational survival, allocating resources to build an impenetrable digital fortress becomes nearly imposs.
Speaker A: And that hims and hers breach actually perfectly illustrates how complex that defense needs to be.
Speaker B: It really does.
Speaker A: Because they didn't get hacked directly, did they?
Speaker B: No, they didn't. The attackers didn't break down their front door at all.
Speaker A: They slipped in through the side window, specifically through Zendesk.
Speaker B: Right. Which is a, uh, trusted third party customer support platform.
Speaker A: The attackers compromised Zendesk, which then exposed hims and hers customer support tickets.
Speaker B: And those tickets contained health related information.
Speaker A: Right.
Speaker B: Which is a classic example of third party risk. I mean, you can spend millions locking down your own proprietary servers, but if
Speaker A: your partners aren't secure.
Speaker B: Exactly. If your patients are emailing their symptoms, their prescriptions and their IDs to a third party support portal, your perimeter actually extends to that vendor.
Speaker A: That idea of a backdoor through a trusted vendor actually scales up to a much bigger, more systemic problem.
Speaker B: It's a huge issue right now because
Speaker A: hackers aren't just going after end users or even companies directly anymore. They are targeting the very foundations of how our technology is built. They are going after the developers.
Speaker B: We're talking about supply chain attacks here. This is a massive shift from targeting the consumer of a product to targeting the assembly line that actually builds the product.
Speaker A: We have a report from HelpNet Security that highlights just how devious this has become. Threat actors are currently using leaked code related to Anthropic's Claude AI, um, to distribute malware.
Speaker B: And they're operating right on GitHub.
Speaker A: Right, the massive platform where developers share and collaborate on code.
Speaker B: Exactly. The attackers are taking malicious code and Basically embedding it into seemingly legitimate open
Speaker A: source projects, trying to trick software developers into downloading infected tools.
Speaker B: And the psychology here is fascinating because it relies on exploiting the current gold rush in the tech industry.
Speaker A: Everyone wants AI right now.
Speaker B: Exactly. Every developer on the planet right now is under immen pressure to integrate AI into their platforms as quickly as possible.
Speaker A: Right, the need for speed.
Speaker B: Yes. By wrapping their malware in code related to Anthropic's CLAUDE AI, which is one of the most cutting edge models available, the attackers are basically weaponizing a, uh, developer's need for innovation.
Speaker A: I'm stuck on something here though. I know GitHub, I know the whole philosophy of open source is that, you know, many eyes make all bugs shallow.
Speaker B: That's the theory, yeah.
Speaker A: There are thousands of developers looking at these repositories. How on earth does a blatant malware payload survive community vetting just because it has a shiny AI label slapped on the front of it?
Speaker B: Well, because modern malicious code doesn't look like a cartoon bomb with a fuse sticking out of it.
Speaker A: Okay, fair point.
Speaker B: It survives through highly sophisticated obfuscation. Yes, there are many eyes on open source projects, but the sheer volume of code in a single library can be astronomical.
Speaker A: Right. It's lines and lines of text, thousands of lines.
Speaker B: An attacker might upload a functional, genuinely useful API wrapper for CLAUDE AI. It works perfectly.
Speaker A: But there's a catch.
Speaker B: A huge catch. Buried on, say, line 4000, deeply nested within complex dependency trees, is a tiny, tiny string of code.
Speaker A: And what does that code do?
Speaker B: It reaches out to an external server to pull down a payload. A developer on a tight Friday afternoon deadline might test the tool, see that the AI functions properly, and just pull that library into their company's core product without doing a line by line audit.
Speaker A: And once that poison block is in the foundation, it cascades.
Speaker B: This is exactly why supply chain attacks, uh, are the holy grail for threat actors right now.
Speaker A: Because of the scale.
Speaker B: Yes. If an attacker compromises a single user, they have one victim. But if an attacker tricks a software developer into unknowingly incorporating compromised code, every single piece of software that developer compiles and distributes becomes a vehicle for the malware.
Speaker A: Wow. So you, the end user, could download a perfectly legitimate app from a highly
Speaker B: trusted company, completely unaware that the very building blocks of that app were poisoned months ago at the source?
Speaker A: That is wild. So healthcare Systems are struggling to fund their defenses, and developers are actively being tricked into building malware directly into our daily apps.
Speaker B: It's a tough Landscape.
Speaker A: If the developers are compromised, who is watching the perimeter? You would think the massive international agencies dedicated to fighting this would be our shield.
Speaker B: You would hope so. Definitely.
Speaker A: But according to a really sobering report from TechCrunch, the Watchmen themselves have been compromised.
Speaker B: Yeah, it's a stark reality check regarding the true balance of power in cyberspace right now.
Speaker A: Europe's cybersecurity agency, the literal agency tasked with mitigating these kinds of global threats, suffered a massive data breach and leak.
Speaker B: It's a huge deal.
Speaker A: Large volumes of sensitive data were exposed. Authorities are attributing this attack to highly organized hacking groups. And I have to ask you, and honestly, I'm asking the listener directly right now. If the top cybersecurity agency on the continent gets breached, what hope do any of the rest of us have?
Speaker B: I know it sounds totally defeatist. On the surface, it really does. But it actually requires a fundamental paradigm shift in how we view the adversary. We have to completely discard that outdated Hollywood trope of the lone hacker in a hoodie typing furiously in a dark room.
Speaker A: Right. It's not a kid in a basement anymore.
Speaker B: Not at all. The adversaries pulling off a breach on a European cybersecurity agency are highly coordinated, organized criminal syndicates. They operate with the structure and discipline of multinational corporations.
Speaker A: Corporate structure. Like they actually have managers in departments?
Speaker B: Absolutely. They utilize what we call ransomware as a service models. They have specialized divisions.
Speaker A: Like what?
Speaker B: Well, you have initial access brokers who only focus on finding vulnerabilities and basically selling the keys to the front door.
Speaker A: Okay.
Speaker B: Then you have payload developers who write the actual malware. And they even have negotiation teams and literal HR departments to recruit affiliates.
Speaker A: Literal hr? Ah, departments for cybercrime. That is crazy.
Speaker B: It is. They have massive R and D budgets funded by the exact types of medical data theft we discussed earlier.
Speaker A: So they have the financial and technical resources to just go toe to toe with literal government agencies?
Speaker B: Exactly. When a syndicate targets a major institution, they bring immense, focused and well funded resources to bear. This breach reveals that systemic vulnerabilities exist across all organizations, no matter how heavily guarded they are.
Speaker A: Right.
Speaker B: If the people writing the rules and analyzing the threats are vulnerable, it proves that no single perimeter is truly immune.
Speaker A: So what is the takeaway from the authorities who are dealing with the fallout of this agency breach?
Speaker B: The authorities are effectively warning that localized defense is a dead concept.
Speaker A: Meaning you can't just build a moat around your own castle.
Speaker B: Exactly. A single agency, a single corporation, or even a single country cannot fight a decentralized well funded global cybercrime network, uh, in a silo. The only viable path forward is aggressive cross border intelligence sharing and unified defense strategies.
Speaker A: Because the attackers don't care about borders.
Speaker B: Right. If the syndicates are operating globally without borders, the defenders have to do the exact same thing.
Speaker A: It's staggering to think about the sheer scale of it all. We go from these massive global syndicates infiltrating European agencies directly down to the absolute micro level.
Speaker B: Yeah, right down to the individual.
Speaker A: Let's move to the final part of our deep dive today.
Speaker B: Mhm.
Speaker A: The threat in your pocket. Because right now you are very likely listening to us on a smartphone. And both major mobile platforms, Android and Apple, are facing severe active threats today.
Speaker B: This is where those vast abstract global networks manifest in our daily personal lives.
Speaker A: Let's look at Android first. Android Headlines is reporting on a newly discovered malware strain called Novoice. And the numbers here are terrifying.
Speaker B: Oh, they are huge.
Speaker A: It has successfully infected over 2.3 million devices. And it did so by sneaking into more than 50 different apps available directly on the Google Play Store.
Speaker B: And what stands out about Novoice is its specific methodology. It doesn't rely on cutting edge, newly discovered flaws, though. It specifically targets and exploits older, unpatched Android vulnerabilities.
Speaker A: And once it gets into a device, it gains incredibly deep system access. It collects your device data, it injects malicious code into other clean apps, and it actively hijacks services like WhatsApp to steal user information. But here is the most alarming part of the report, going right back to my opening thought determines yes, this malware can survive a factory reset. Google removed the 50 infected apps from the Play Store, but affected users actually have to take highly technical manual steps to remove the threat.
Speaker B: And that level of persistence is what separates, you know, a nuisance from a critical threat.
Speaker A: Surviving a factory reset is wild. As I said earlier, it's like bulldozing a house to get rid of termites, rebuilding the house on the exact same lot and finding the termites sitting in the new living room.
Speaker B: It's a great analogy because a factory reset only tears down the drywall. The user partition.
Speaker A: Okay, break that down for us.
Speaker B: Think of your phone's storage in two distinct areas. You have the data partition where your photos, your downloaded apps and your settings live.
Speaker A: The stuff I put on the phone.
Speaker B: Exactly. And then you have the system partition where the core operating system actually resides. A standard factory reset wipes the data partition clean to give you a fresh start. But Novoice exploits those older vulnerabilities to gain root level access.
Speaker A: So it goes deeper.
Speaker B: It embeds itself directly into the concrete foundation, the core operating system partitioned. So when the phone rebuilds itself after a reset, it is literally rebuilding from a compromised foundation.
Speaker A: So that is a persistent nightmare for Android users who haven't updated their devices. Yeah, but Apple users are not having a relaxed week either.
Speaker B: No, definitely not.
Speaker A: Hot Hardware reports that Apple just rushed out an urgent security patch for iOS 18 to fix a critical vulnerability known as Dark Sword.
Speaker B: And the mechanics of this threat are quite different from Novoice, though the danger level is equally high.
Speaker A: The report says Dark Sword was being actively exploited in the wild. This wasn't just some theoretical bug.
Speaker B: Real people were being hit.
Speaker A: Right. The flaw allowed attackers to gain elevated privileges on affected devices. That poses a massive risk to user data and system integrity. And Apple is urging every single user to update their OS immediately to close this gap.
Speaker B: If we contrast these two mobile threats, it actually provides a perfect lesson in the types of risks we face daily.
Speaker A: How do you mean?
Speaker B: Well, Apple's Dark Sword is an acute targeted threat. It is a zero day or near zero day flaw, meaning a vulnerability that the manufacturer was completely unaware of. It gave them zero days to prepare a defense before it was exposed, exploited.
Speaker A: Oh, wow.
Speaker B: So it requires immediate urgent action from the user to apply the patch and shut the door.
Speaker A: Right.
Speaker B: Android's no voice, on the other hand, is a persistent systemic threat. It doesn't use unknown magic. It just relies on the statistical reality that millions of devices out there are running outdated software with known vulnerabilities.
Speaker A: Vulnerabilities that basically act like open windows.
Speaker B: Yes.
Speaker A: It's the difference between a highly skilled thief picking a brand new state of the art lock on your front door versus a thief just walking through a back window you left unlatched three years ago.
Speaker B: That is exactly it. And this grounds our entire deep dive today. We've traced the path from multi billion dollar lawsuits starving hospitals of funding, to
Speaker A: sophisticated obfuscation and developer code, right to
Speaker B: global syndicates breaching international agencies. It is incredibly easy to feel overwhelmed by the sheer scale of it all. But ultimately, your personal cybersecurity hygiene, Actively auditing the apps you grant permissions to, updating your operating system, the minute patches like iOS 18 drop, and frankly, retiring old devices that can no longer receive security updates. Yeah, uh, that is your final critical line of defense. The highly funded syndicates that breach your appeal agencies are the exact same entities building the malware targeting your WhatsApp data today.
Speaker A: It really is one massive singular ecosystem the data broker who buys stolen health records from a hospital breach might be the exact same actor buying the contact list skimmed from an infected Android phone. Yeah, it all feeds the same beast.
Speaker B: It really does. And before we close the books on these reports, I want to leave you with something to mull over regarding this entire landscape.
Speaker A: All, uh, right.
Speaker B: If our foundational healthcare systems, our cutting edge software developers, and even our international cybersecurity agencies are all fundamentally vulnerable to compromise, perhaps we need to shift our entire philosophy.
Speaker A: Shift it to what?
Speaker B: Maybe we need to stop asking how do we build an impenetrable wall? And start asking how do we build digital lives and digital infrastructures that are resilient enough to survive the inevitable breach.
Speaker A: We're grateful for your time and hope you found today's insights valuable. Join us again on Monday for more expert updates and critical cybersecurity news. Remember to, like, subscribe for ongoing coverage and analysis, and sign up for a free trial of Heals security desktop@healsecurity.com com until next time, stay safe, stay informed, and keep your digital world secure.
Other episodes covering the same guests and topics, from across The B2B Podcast Index.
D2C Without a Tax Degree: How to Sell On a Web Shop Without Becoming a Tax ExpertGrowth Stage by FastSpring · on Google Play Store84 / 100
How Private Equity Is Buying Up Home Care AgenciesPrivate Equity Conversations with Fexingo · on Centers for Medicare and Medicaid Services (CMS)68 / 100
2026-06-20: Google and AdMob agreed to pay $8.25 million to settle children's privacy claims related to GoogleLegal & Privacy Brief · on Google Play Store46 / 100
Healthcare Unlocked: Jeff Grant on Policy, Payments, and People#GovCom Unfiltered · on Centers for Medicare and Medicaid Services (CMS)
Cybersecurity Daily Digest: Cloud Breaches, MFA Bypass & Persistent Malware Threats38 / 100
Breaches, Exploits, and Evolving Attack Tactics Across IndustriesCybersecurity Updates: Supply Chain Attacks, Zero-Days & Quantum ThreatsFrom Healthcare Breaches to Advanced ExploitsTop Cybersecurity Threats This Week: Cloud Breaches, Malware, and Critical Vulnerabilities