Research and write-ups from the field.

Incident post-mortems, healthcare security research, and product updates from the SecUnit team.

NewSecurity

Your Help Desk Is the Heist — What the Hims Breach Teaches Healthcare

Attackers hit Hims through its support platform and walked off with PHI. Your help desk is next if you don't treat it like infrastructure.

NewProduct

Autonomous Threat Containment for EHR Systems

How enterprise healthcare teams use SecUnit's autonomous agents to detect and contain threats across EHR infrastructure before patient data is compromised.

NewSecurity

Your DICOM Library Is Leaking Memory and Nobody Told You

CVE-2026-3650 hits Grassroots DICOM with an 8.7 CVSS score. If your imaging pipeline uses GDCM, you're exposed.

NewCompliance

HIPAA Compliance Automation: What Changed in 2026

The latest HIPAA Security Rule updates introduce new requirements for AI-assisted monitoring. Here's how SecUnit keeps you ahead of the curve.

NewSecurity

Email Is Still the Front Door and Healthcare Keeps Leaving It Unlocked

74% of breached healthcare orgs had broken DMARC. 3 million addresses exposed by bad TLS certs. The basics are still killing us.

NewSecurityEngineering

From Disclosure to Protection in 45 Minutes

How SecUnit handled a published zero-day timeline from rapid exposure testing through containment guidance and virtual patching recommendations.

SecurityResearch

Securing IoMT at Scale: What 340,000+ Devices Taught Us

Field observations from monitoring over 340,000 connected medical devices and surfacing thousands of device-level vulnerabilities that traditional scanning can miss.

Research

Mean Time to Remediation: From Hours to Seconds

How three health systems reduced MTTR by 94% with SecUnit's precision remediation agent - without disrupting clinical workflows.

ComplianceCompany

Our SOC 2 Type II Journey in Healthcare Security

How SecUnit completed a 12-month SOC 2 Type II assessment across Security, Availability, and Confidentiality while supporting healthcare-focused operations.

CompanyResearch

Why We Built SecUnit for Healthcare

After decades building security products in regulated sectors, we focused on healthcare because clinical operations need security controls that do not create downtime.

NewSecurity

There Was a Ghost in Your Network - 17 Million Records Gone From Three Hospitals

PIH Health lost 2 terabytes of patient data across three hospitals. The attackers sent faxes to brag about it.

NewSecurity

No Antivirus, No Chance - How PhilHealth Handed Medusa the Keys

The Philippine health insurer got hit by Medusa ransomware because their antivirus subscription expired. 42 million records leaked.