The ZOLL ePCR iOS mobile application contains a WebView-based input‑sanitization flaw (tracked as CVE‑2025‑12699) that can be triggered by attacker‑controlled strings in patient care report (PCR) fields, allowing injected HTML/JavaScript to read local application files that may contain device...
Anyone who has ever trusted Microsoft 365 or Google Workspace with their most sensitive information—especially in regulated fields like healthcare—may want to pause and reconsider that trust after reading Paubox’s new report. Titled “How Microsoft and Google Put PHI at Risk,” the investigative...
