Scam news
InterSystems IRIS for Health Vulnerability Exposes Sensitive Data
Reported by US Cybersecurity and Infrastructure Security AgencyOctober 22, 2026
What is happening
A security vulnerability in InterSystems IRIS for Health could allow attackers to view sensitive data being transmitted. This issue affects several versions of the software.
How the scam works
The vulnerability occurs because TLS/SSL encryption is turned off by default. Without encryption, data transmitted by the server can be intercepted and misused by attackers.
What to do
To protect against this vulnerability, configure your IRIS superserver to require SSL/TLS. Follow the steps in InterSystems documentation or contact their support for assistance.
This is our summary of reporting by US Cybersecurity and Infrastructure Security Agency. We have not reproduced their article.
Read the original source