Healthcare Providers Warned About Vulnerability in SimpleHelp Remote Access Software

Three vulnerabilities in SimpleHelp Remote Monitoring and Management (RMM) software are thought to be under active exploitation. The American Hospital Association (AHA) in conjunction with the Health Information Sharing and Analysis Center (Health-ISAC) has issued a cybersecurity advisory about the vulnerabilities and threat actor activity. Healthcare organizations have been advised to prioritize patching the vulnerabilities.
The vulnerabilities were identified by researchers at Horizon3 in December 2024 and were disclosed to SimpleHelp on January 6, 2025. Patches were released to fix the vulnerabilities on January 13, 2025, when the flaws were publicly disclosed. Within one week of the public disclosure, threat actors are thought to have started exploiting the vulnerabilities.
Read the full article in The HIPAA Journal. Click Here
- Related Resources & News
- Healthcare Heartbeat 2024 Q4
- Health-ISAC Hacking Healthcare 2-19-2025
- Podcast: Reflecting on the Change Healthcare cyberattack
- Senate Confirms Trump Pick RFK Jr. to Lead HHS
- The Alarming Backdoor Hiding in 2 Chinese Patient Monitors
- Health-ISAC 2025 Health Sector Cyber Threat Landscape
- How Health Systems Manage Security in the Cloud
- Change Healthcare Attack a Wake-up Call for the Industry
- Five High-Impact Cyberattacks Healthcare Industry Should Avoid in 2025
- Health-ISAC Hacking Healthcare 2-11-2025