Why the number keeps breaking records – and why that is not the scary part

Microsoft has been setting monthly records all year, and the reason is structural: the company is using AI to hunt for bugs in its own code, and AI finds them faster than humans ever did. More vulnerabilities discovered is not the same as more vulnerabilities being used against you. The security industry was blunt about this. “AI-assisted vulnerability discovery in 2026 is creating larger haystacks, but it isn’t finding more needles,” said Tenable’s Satnam Narang, urging organizations to work out which flaws actually apply to them and are genuinely reachable before panicking about the total (CyberScoop, September 2026 Patch Tuesday coverage). The Zero Day Initiative’s Dustin Childs made the same point – the pile keeps growing, but there has been “no correlating spike in active exploits.” Translation for a practice: a 974-item update is not 974 times more dangerous than a normal month. It is a normal month with a much longer to-do list, and the trick is sorting the list.

The two that actually matter this month

Both of the flaws being exploited before the patch existed are privilege-escalation bugs rated CVSS 7.8. The first, CVE-2026-81963, is in the Windows Update Stack. The second, CVE-2026-85880, is in Windows Advanced Local Procedure Call (ALPC), a core piece of how Windows processes talk to each other. Neither is a remote “click a link and you’re owned” flaw. Both are the second move in an attack: an intruder who has already gotten a small foothold on a machine – through a phishing attachment, a malicious download, a stolen password – uses the bug to escalate from an ordinary user account to SYSTEM, the highest level of control on a Windows machine. Once an attacker is SYSTEM, they can disable security tools, install ransomware across the network and reach the patient data on your server. That is why local privilege escalation is never “just” local. It is the hinge between a minor incident and a practice-ending one, and it is exactly why the foothold stage – the phishing email, the invisible-text phishing that slips past your spam filter – matters so much. Patch these two first. On the practice server and any machine that touches patient records, they go on tonight or first thing tomorrow, not at the end of the month.

A priority order for everything else

After the two exploited zero-days, you are not clearing 972 items by hand – you are sorting them. As Action1’s Jack Bicer put it, at this scale “the challenge is not simply getting through the patch list but knowing what needs attention first.” A sensible order for a dental practice:

1. The two exploited zero-days – server and record-handling machines, immediately. 2. Critical-rated flaws on anything internet-facing – your firewall-adjacent server, any remote-access tool, anything a patient or vendor can reach from outside. More than one in ten of this month’s fixes are rated critical, and the internet-facing ones are where an outsider can actually touch them. 3. Reachable workstations – reception and operatory PCs that open email and browse the web, because that is where the foothold usually starts. 4. The long tail – the hundreds of fixes for components you may not even run (SQL Server features, developer tools, server roles a small practice never enabled) follow your normal monthly cycle. Most of the 974 simply do not apply to a typical office, and the ones that do are handled by letting Windows Update run on your managed schedule.

The machines you can’t just reboot at 2 p.m.

The real friction in a clinical setting is not deciding to patch – it is when. You cannot force a restart on the PC driving a CBCT or an intraoral sensor in the middle of a patient’s appointment, and some older imaging devices cannot take the latest Windows updates at all. That is a scheduling and segmentation problem, not a reason to skip the update. Imaging and operatory machines get patched in off-hours with the vendor’s blessing on the version, and the devices that genuinely cannot be patched get walled off on a segmented network so a compromise elsewhere can’t reach them. It is also worth remembering that Patch Tuesday is a Microsoft event – your other computers-in-disguise patch on their own calendars. The same month we have been reminded to patch actively exploited flaws in practice routers and to update the VoIP phone system, which is a computer too. A complete patch posture covers all of it, not just Windows.

What this means for your practice

A 974-fix Patch Tuesday is a test of process, not heroics. A practice with a managed patching program barely notices a record month: the two exploited flaws get pushed on a priority ring, the criticals follow on a tight schedule, workstations update overnight, imaging machines patch in approved off-hours windows, and the long tail rides the normal cycle – all tracked, so you can actually prove the practice is current if PHIPA ever asks. A practice without that program faces the same 974 as a wall of noise, patches nothing, and leaves the two exploited bugs sitting open for weeks. That gap is the whole game. Compudent runs managed patching for dental practices across Ontario – prioritizing the flaws that are actually being exploited, scheduling around clinical hours, version-checking updates against your imaging vendors, and keeping the audit trail that proves you stayed current. If this month’s number made you wonder whether your practice is actually keeping up, contact Compudent for a patch-posture assessment – we will tell you where you stand and what, if anything, is still sitting open.

Sources & further reading:

• Microsoft Security Response Center – September 2026 Security Updates
• CyberScoop – Microsoft discloses two actively exploited zero-days among 974 vulnerabilities
• Trend Micro Zero Day Initiative – The September 2026 Security Update Review

Related Reading

• A Fake Job Offer, a Windows Kernel Rootkit: The Lazarus Zero-Day (CVE-2026-68820) and What It Means for Your Dental Practice
• February 2026 Patch Tuesday: Microsoft Fixes 6 Actively Exploited Zero-Day Vulnerabilities — What Dental Practices Need to Do Now
• When the Tool That Manages Your Network Gets Hacked: The N-able N-central Breach and What It Means for Dental Practices

The post 974 Patches, Two Being Exploited Right Now: How a Dental Practice Should Read September’s Patch Tuesday appeared first on Compudent Systems.

A different kind of AI than the imaging tools

The first thing to be clear about is a distinction that matters for how you evaluate these products. Imaging AI – Pearl, Overjet’s detection engine, VideaHealth – makes a clinical claim about a patient’s radiograph, which is why those functions carry FDA clearances and are regulated as medical devices. Revenue-cycle and analytics AI makes no clinical claim. It parses a remittance, flags a likely denial, or charts your collections trend. That is administrative software, and it is not an FDA-cleared medical device – nor should you expect it to be. The right lens is not “is it cleared” but “is it accurate, and is it handling our data responsibly,” because the value of these tools comes entirely from reading the practice-management database, and that database is full of protected health information.

Job one: automating the revenue cycle

Revenue cycle management (RCM) is the end-to-end money loop – eligibility and benefits, claim creation and submission, adjudication, payment posting, and collections. AI is now applied as a layer across that loop rather than as a single tool. As RCM vendor Zentist puts it, AI in dental billing “isn’t a single tool, it’s a layer of intelligence applied across” the cycle – most visibly in automated payment posting that reconciles payments to claims and updates ledgers without staff keying it in (Zentist, How AI Is Transforming Dental RCM). The practical effect in an office is that the repetitive, error-prone administrative work – matching an insurance payment to the right claim and the right patient, updating the ledger, spotting the underpayment – gets done faster and more consistently than a busy front desk can manage manually. For a DSO running many locations on mixed systems, that consistency is often the whole point.

Job two: claims, denials, and reading the remittance

The sharpest pain in dental billing is denials, and this is where the current crop of AI is most concentrated. Zentist’s Remit AI, for example, automates EOB/ERA parsing, payment posting, and denial management, and the company reports use across more than 3,000 practices. “EOB/ERA parsing” is the unglamorous core of it: an explanation of benefits or electronic remittance advice arrives in dozens of payer formats, and AI reads it, extracts what was paid, adjusted, and denied, and turns it into a structured action – post this, appeal that. Overjet, better known for imaging, has built payer-facing RCM workflows on the same idea of using AI to reduce claim denials and improve billing accuracy (Overjet, Dental RCM with AI). Clearinghouse-based engines such as Vyne Trellis sit in the same lane. There is also a clinical-documentation crossover worth flagging: several major carriers now have workflows to process claims that include AI-generated clinical narratives and annotated radiographs, particularly for crown, perio, and implant cases where documentation quality drives approval – which is where the billing side and the imaging side of dental AI quietly meet.

Job three: analytics that turn the PMS into a dashboard

The third category is analytics – platforms that read your PMS and surface the KPIs a practice runs on: production, collections, case acceptance, hygiene reappointment, open treatment, no-show rates. Dental Intelligence, Practice by Numbers, and Jarvis Analytics are the recognizable names here, and their pitch is the same: eliminate the manual effort that normally stops a dental team from using its own data (Practice by Numbers, Dental Practice Analytics). The “AI” in this category ranges from genuine predictive modelling – which patients are likely to lapse, which treatment is likely to be accepted – down to automated morning-huddle briefings and trend alerts. Treat the marketing accordingly: a live, reliable dashboard of your real numbers is valuable on its own, whether or not every feature is truly predictive.

The integration reality: how these tools reach your data

This is the part that determines whether any of it works in your office, and it is the part the sales demo glosses over. Revenue-cycle and analytics AI has to read the PMS, and it does so in a few well-worn ways. Analytics platforms typically use a PMS bridge or a small practice-server agent – software installed on your on-site server that syncs data out to the vendor’s cloud. Denzif’s platform survey describes exactly this pattern: syncing with Dentrix, Eaglesoft, Open Dental, and Curve via a practice-server agent. Claims and RCM tools lean more on the insurance plumbing – clearinghouse connections and EDI transactions (the 837 claim, the 835 remittance) – to move data to and from payers. The critical caveat for buyers: not every vendor supports every PMS. As one 2026 buyer’s guide notes bluntly, most AI vendors integrate with Dentrix, Eaglesoft, or Open Dental “but not always all three,” which becomes a real constraint for a DSO that has inherited mixed systems through acquisition. Before you fall for a feature list, confirm the tool supports your PMS, on your version, with a sync method your IT setup can actually host.

What this means for your practice

Practice-management AI is, for many offices, the most immediately profitable slice of the dental-AI story – vendors report figures like a 25% lift in case acceptance and an 18x return (Overjet customer data, 2026), and while those are self-reported and should be read as directional rather than guaranteed, the underlying mechanics of fewer denials and faster posting are real and measurable in your own numbers. But every one of these tools earns its keep by reading the full ledger – patient names, procedures, insurance, payments – which makes each adoption a data-governance decision as much as an operations one. The same questions we apply to clinical AI apply here: a signed business associate or PHIPA agent agreement before any data flows, encryption in transit and at rest, a clear picture of where the data is hosted and who the subprocessors are, and an installed sync agent that your network is set up to run securely. That is the review Compudent does with dental clients before an RCM or analytics platform touches the PMS – confirming the integration fits your systems and that the data flow holds up under PHIPA and HIPAA. Our breakdown of Overjet’s RCM workflow and data governance works a single platform end to end, our guide to PHIPA, HIPAA, and dental AI vendor risk lays out the compliance homework, and our look at the AI front desk covers the patient-facing end of the same back office. If you are weighing a revenue-cycle, claims, or analytics tool and want the integration and vendor-risk work done properly first, contact Compudent for a practice assessment.

Sources & further reading:

• Zentist – How AI Is Transforming Dental Revenue Cycle Management
• Overjet – Dental Revenue Cycle Management with AI
• Overjet – Dental Practice Profitability with AI
• Practice by Numbers – Dental Practice Analytics

Related Reading

• PHIPA, HIPAA, and Dental AI: PHI, Data Governance, and Vendor Risk
• The AI Front Desk: Call Intake, Scheduling, and Voice Agents in Dentistry
• Overjet in Your Practice: Integration, RCM Workflow, and Data Governance

The post Practice-Management AI: Revenue Cycle, Claims, and Analytics appeared first on Compudent Systems.

What eAssist is, and why the target matters

eAssist is not a household name to patients, but it is deeply embedded in the back office of the profession. It provides outsourced billing, insurance-claim management, and collections for a large network of independent dental offices – the unglamorous financial plumbing that keeps a practice’s cash flow moving. To do that work, a billing outsourcer necessarily holds a rich file on every patient it touches: names, addresses, dates of birth, insurance policy details, procedure and diagnostic codes, and outstanding balances. That is a near-complete identity-and-insurance profile, and it is exactly the kind of data extortion crews prize. It is the same lesson we drew from the 284-million-record claim against supplier McKesson: the richest targets in healthcare are increasingly not the clinics themselves but the vendors that aggregate data from thousands of them.

Concentration risk: one vendor, hundreds of practices

This is the part that should reframe how you think about outsourcing. When you hand billing to a shared service, you are trading a bit of your own attack surface for a share of a much larger, more attractive one. A single administrative platform that manages workflows for hundreds of independent clinics is a concentrated choke point – compromise it once, and the attacker walks away with downstream data spanning every practice it serves. Your office may have excellent internal security; it does not matter to the patient whose insurance file was exfiltrated from a vendor’s server. Outsourcing a task does not outsource the accountability, and it certainly does not outsource the harm.

How Direwolf operates: steal first, encrypt second

Direwolf runs the now-standard double-extortion playbook, and understanding it explains why “we have backups” is no longer a complete answer. Rather than relying only on encryption to freeze a victim’s operations, the group first exfiltrates the valuable data – corporate documents, financial ledgers, and client or patient records – and only then deploys the encryption payload. Groups like this deliberately go after backup infrastructure, too, so that clean restores are difficult and the victim is squeezed from both sides: your systems are down and your data is already gone. Even a practice or vendor that recovers its systems flawlessly from backup still faces the second threat – public release of the stolen files. That is why immutable, offline backups matter, but also why they are only half the defense; we covered the backup and retention side of this in our guide to records retention, backups, and PHIPA in Ontario. The other half is preventing the theft in the first place. This is also why the response to a vendor breach is a compliance problem as much as an IT one – much like the FBI’s refreshed Medusa ransomware warning for healthcare, the technical event and the regulatory clock start together.

The uncomfortable truth: their breach can be your notification

Here is where practice owners are most often caught off guard. Under both U.S. HIPAA and Ontario’s PHIPA, a practice remains the custodian of its patients’ health information even when a third party processes it on the practice’s behalf. If a billing vendor holding your patients’ data is breached, your obligations – notifying affected patients, and in many cases regulators – are triggered by that event, not waived by it. The vendor’s contract may make them responsible to you, but to your patients and to the regulator, the duty of care still runs through your practice. That is the entire reason a written data-protection agreement exists between a custodian and its service providers – what U.S. rules call a Business Associate Agreement and what PHIPA frames through the custodian’s obligations to bind its agents. If you have never seen that document for your billing vendor, that gap is itself a finding. We walk through the governance side of these relationships in our piece on PHI, data governance, and vendor risk.

What to do this week

Whether or not eAssist is your vendor, this listing is a prompt to act. Take these steps in order:

1. Establish your exposure. Confirm whether your practice uses eAssist directly, or works with a billing partner who in turn subcontracts to it. Downstream relationships are exactly how practices end up affected without realising they were ever connected.

2. Demand a written status update. If you are a client, contact the vendor and ask, in writing, three specific questions: was any of our patient data involved, what categories of data, and what is the notification timeline. Keep the correspondence – you may need it for your own regulatory filing.

3. Pull your agreement. Locate the data-protection or business-associate terms in your contract and read what the vendor is obligated to do on a breach, and how quickly. If no such agreement exists, treat that as an urgent gap to close regardless of this incident.

4. Prepare, do not wait. If patient data was involved, ready your own breach-notification process now rather than after the vendor’s timeline slips. Identify which patients would be affected and draft the communications so you are not starting from zero under a regulatory clock.

5. Widen the audit. eAssist is one vendor among many with access to your patient data – your practice-management cloud, imaging archive, payment processor, and marketing tools all belong on the same list. Inventory who holds what, and confirm each has a written safeguarding agreement and a track record you can point to.

The takeaway for practice IT

The eAssist listing is a clean illustration of a risk that has quietly grown as dentistry has outsourced more of its back office: your security is only as strong as the weakest vendor holding your patients’ data, and their breach lands on your desk as a compliance obligation. The fix is not to stop outsourcing – shared billing services are often more capable than a small in-house team – but to treat every vendor relationship as an extension of your own security perimeter, governed by a real agreement and a real understanding of what they hold. The practices that will handle an incident like this calmly are the ones that already know their vendor list, their contracts, and their notification duties before the leak site posts.

Compudent Systems helps dental practices across the GTA and Ontario map exactly this: which third parties hold your patient data, whether each has an enforceable data-protection agreement, and what your notification obligations look like if one of them is breached. If a vendor incident has you unsure where your patients’ information actually lives, contact Compudent for a third-party risk assessment – the time to understand your exposure is before your billing company shows up on a leak site, not after.

Sources & further reading:

• Brinztech Alert – eAssist Dental Solutions Listed as Victim by Direwolf Ransomware Group
• HIPAA Journal – MCNA Dental data breach (dental-billing sector precedent)

Related Reading

• Ransomware Is Now a Patient-Safety Issue: What a 38% Hospital Mortality Study Means for Your Dental Practice
• Two Dental Groups on Leak Sites in One Week: What It Means When Your Practice’s Name Appears on a Ransomware Blog
• What a Data Breach Actually Costs a Dental Practice: The Bill Behind the Headline

The post Your Billing Company Is on a Leak Site: The eAssist/Direwolf Attack and Outsourced-RCM Risk appeared first on Compudent Systems.

The uncomfortable truth: the accountability does not leave with the data

The single most important thing to understand about both HIPAA in the United States and Ontario’s Personal Health Information Protection Act (PHIPA) is that they are built on the same principle: the practice that collects the patient’s information stays responsible for it, wherever it goes. Sending a radiograph to a cloud AI vendor does not transfer the legal duty to protect it. It extends your obligation to include that vendor’s conduct. An AI system tends to multiply the data flows that duty covers – the image or audio goes up, a result comes back, copies may be cached, logs are written, and in some architectures the data is retained to improve the model. Every one of those is a place where PHI lives, and every one of them is your responsibility to have accounted for. Good governance is not paranoia here; it is simply the mirror image of the accountability the law already assigns to you.

HIPAA: any AI vendor touching PHI is a business associate

Under HIPAA, a vendor that creates, receives, maintains, or transmits PHI on your behalf is a business associate, and you are required to have a signed business associate agreement (BAA) in place before that data changes hands. Practically every clinically useful dental AI tool meets this definition – imaging AI receives the radiograph, an AI scribe receives the consult audio, a claims or analytics tool receives the chart. There is a common and dangerous misconception that a vendor which only stores encrypted data, or which “cannot see” the content, falls outside this. It does not. The U.S. Department of Health and Human Services has been explicit that a cloud service provider handling PHI is a business associate even in a “no-view” arrangement where the data is encrypted and the provider holds no key – and a BAA is still required (HHS, Guidance on HIPAA & Cloud Computing). The relevant obligations sit at 45 C.F.R. §§ 164.308(b)(1) and 164.502(e).

AI raises the bar on what that BAA has to say. A boilerplate agreement written for a storage vendor may not authorize the way an AI platform actually moves data – to subprocessors, to a model-hosting environment, or back to the practice through a third-party integration. Health-privacy counsel now advise that the BAA should explicitly permit the contemplated upstream and downstream data flows of the AI operating environment, rather than leaving them to be inferred (Morgan Lewis, Healthcare AI Deployment). If a vendor will not sign a BAA, or will only sign one that is silent on how the AI itself uses the data, that is your answer.

PHIPA: you are the custodian, the AI tool is your agent

For an Ontario practice, the framework is PHIPA, and the vocabulary is different but the logic rhymes. Your practice is a health information custodian (HIC). A vendor that handles PHI on your behalf is your agent, and where it supplies the electronic services that let you collect, use, store, or dispose of PHI, it may specifically be an electronic service provider (ESP) – or, if it routes PHI between custodians, a health information network provider (HINP). The label matters less than the consequence: PHIPA keeps the custodian accountable for what its agents and service providers do with the information. You are expected to bind them by contract, to permit only the uses you actually authorize, and to exercise due diligence over their safeguards. An AI vendor operating as your agent is not a way to offload responsibility; it is an extension of your own compliance perimeter that you are on the hook to govern.

The cross-border question: where does the PHI actually go?

This is where Canadian practices get caught, because most of the marquee dental AI platforms are US-hosted. PHIPA does not prohibit storing or processing PHI outside Ontario or Canada – but it does require the custodian to remain accountable and to exercise real due diligence over the safeguards, transparency, and contractual controls that apply once the data leaves. Sending PHI to a US-hosted AI service also engages federal law: PIPEDA (and, for practices touching Quebec residents, Quebec’s Law 25) treats a transfer for processing as something you must handle with comparable protection and, increasingly, disclose. And there is a jurisdictional wrinkle that is easy to miss – data held by a US provider can be reachable under the US CLOUD Act regardless of where the servers physically sit, which is a real exposure most clinic owners have never modelled. None of this makes US-hosted AI off-limits. It makes three questions mandatory before adoption: in which country is the PHI stored and processed, which subprocessors and jurisdictions are in the chain, and can the vendor offer Canadian data residency if you need it?

The quiet risk: secondary use and training on your patients’ data

The compliance failure that rarely shows up in a demo is secondary use. An AI vendor may, by default, retain the images, audio, or notes you send and use them to train or refine its models. That can be entirely legitimate – de-identified data responsibly used improves the tools everyone relies on – but it is a use of PHI that you, as custodian or covered entity, have to have authorized and understood. “De-identified” is also a technical claim, not a marketing one: dental radiographs and CBCT volumes can carry embedded DICOM metadata (names, dates of birth, device identifiers) that has to be stripped properly for de-identification to mean anything. Before you sign, get a plain answer to a plain question: does the vendor use our patient data to train models, can we opt out, and if data is de-identified, exactly how? A vendor that treats that question as unreasonable is telling you something important.

A vendor-risk checklist to run before you sign

Governance for dental AI does not require a compliance department – it requires a short, repeatable checklist applied every time, translating the law above into questions a vendor can answer in writing:

• Signed agreement in place: a HIPAA BAA and/or a PHIPA agent/ESP agreement, signed before any PHI is shared – and one that names the AI-specific data flows, not a generic storage template.
• Encryption in transit and at rest: confirmed for the image, audio, or chart on the way out, in processing, and in any retained copy.
• Access controls and audit logs: role-based access on the vendor side and a log you can actually obtain that shows who or what touched the PHI.
• Data residency and subprocessors: where the data is stored and processed, the full subprocessor list, and whether a Canadian-hosted option exists.
• Retention, deletion, and training: how long PHI is kept, how it is destroyed on request or at contract end, and whether it is used for model training – with an opt-out.
• Breach notification: a contractual commitment to notify you promptly of any security incident, so you can meet your own reporting duties to the patient and the regulator.

What this means for your practice

Adopting AI in a dental practice is a genuine upgrade to care and efficiency – and it is also a moment where your responsibility for patient information quietly expands to include a new set of vendors. The practices that will look good in five years are the ones treating that as a routine, boring, documented step: identify the data flow, sign the right agreement, verify the safeguards, and keep the paper. That is exactly the review Compudent runs with dental clients before a new imaging AI, scribe, or voice agent goes anywhere near a patient record – mapping where the PHI travels, checking the BAA or PHIPA agent agreement covers what the tool actually does, and confirming the data-residency and vendor-risk picture stands up under PHIPA and HIPAA. Our breakdown of deploying Overjet with its data governance intact applies this discipline to clinical imaging AI, our guide to AI on the dental front desk covers the same questions for call intake and scheduling, and our comparison of AI scribes for dentistry shows where consult audio becomes PHI. If you are evaluating a dental AI tool and want the compliance and vendor-risk homework done properly first, contact Compudent for a practice assessment.

Sources & further reading:

• HHS – Business Associates (HIPAA)
• HHS – Guidance on HIPAA & Cloud Computing
• Morgan Lewis – Healthcare AI Deployment: Compliance Through Contracting, BAAs, and Data Governance
• Information and Privacy Commissioner of Ontario – PHIPA
• Office of the Privacy Commissioner of Canada – PIPEDA and transfers for processing

Related Reading

• Can Your Dental Practice Use ChatGPT Without Breaking HIPAA and PHIPA? A 2026 Compliance Guide
• Overjet in Your Practice: Integration, RCM Workflow, and Data Governance
• Practice-Management AI: Revenue Cycle, Claims, and Analytics

The post PHIPA, HIPAA, and Dental AI: PHI, Data Governance, and Vendor Risk appeared first on Compudent Systems.

What was actually found

The six flaws span the SSH server and client, the bandwidth-test service, X.509 certificate handling, and the WebFig management interface. CERT Polska highlighted three as the ones that matter most:

CVE-2026-67276 – SSH authentication bypass (CVSS 9.2). RouterOS did not properly verify the public keys used for SSH login; it failed to compare the entire RSA public key assigned to a user. An attacker who knew a valid username and the public modulus of that user’s key could craft a different key and log in without ever possessing the private key, inheriting that account’s privileges.

CVE-2026-86060 – SSH privilege manipulation via a crafted username (CVSS 9.2). RouterOS mishandled usernames beginning with a disallowed character during SSH login. By supplying a specially crafted username, an attacker could elevate their session to full administrative privileges.

CVE-2026-67277 – bandwidth-test memory disclosure and crash (CVSS 8.8). The bandwidth-test service let an unauthenticated connection reach a state that should only follow a successful login. Combined with a buffer-disclosure bug and an integer underflow, it enabled kernel memory leakage or a remote denial-of-service that restarts the device.

Combine the first two and you have MikroTrick: bypass authentication, then escalate to admin. Game over for that router – which, on a practice network, is the device that sees every packet between your operatory, your imaging server, and the internet.

Why a dental practice should care about a router bug

MikroTik hardware is popular in small and mid-size deployments precisely because it is capable and inexpensive – which is also why it turns up in dental offices, often installed years ago by a contractor and rarely touched since. That “set it and forget it” posture is the real exposure here. A router that owns your gateway can be used to sniff traffic, redirect DNS, pivot into your practice-management server, or sit quietly as a foothold for ransomware. This is the same lesson we walked through when the summer advisories landed – see our earlier breakdown, Is Your Practice Router a Backdoor? – except this time the flaws are being actively exploited, not just theoretically dangerous. The pattern of an internet-reachable management service becoming a live entry point is exactly what we described with the actively exploited flaw in practice phone systems: the edge device nobody thinks of as a computer is the one that gets taken.

The good news, and the catch

MikroTik’s default configuration blocks the SSH port from the internet, so a router left in its out-of-the-box state is not directly exposed to MikroTrick. The catch is how often that default gets changed. Someone opens SSH “temporarily” for remote support, adds a port-forward for a camera system, or loosens the firewall to get a stubborn service working – and the management plane ends up facing the public internet. If that describes any change ever made to your router, you are in scope. The confirmed attacks originated from a single IP address (82.192.72.4) and created a highly privileged user account named “ops” – a concrete sign to look for.

What to do right now

The fix exists and, per CERT Polska, patched devices are protected against the observed attacks. Take these steps in order:

1. Update RouterOS immediately. Fixes ship in 7.25 beta 3, 7.24.2, 7.23.4, and 6.49.21. Most devices will offer the upgrade under “Check for updates.” Do not defer this to next month’s maintenance window.

2. Get SSH off the internet. Confirm the SSH port is not reachable from untrusted networks. If you genuinely need remote management, restrict it to known trusted IPs, or – far better – close all management ports and reach the router only through a strong VPN such as WireGuard.

3. Check the ‘Flagged’ status. The patched releases add a mechanism that, at startup, scans the configuration for known signs of tampering, disables suspicious entries, and writes a critical log entry setting the device to “Flagged.” If your log shows a Flagged entry, follow MikroTik’s Flagged-status documentation and treat the device as compromised.

4. Hunt for the indicators of compromise. Even without a Flagged marker, inspect the router for anything you do not recognise. Watch for log lines like login failure for user -2 from <ip> via ssh and user <name> added by ssh:-2@<ip>, and for that rogue “ops” account. Also review users, scripts, scheduler tasks, proxy settings, and tunnels. Importantly, the absence of a Flagged marker is not proof of safety – the mechanism catches only selected traces.

If the device was compromised, patching is not enough

This is the step practices most often get wrong. If your router shows Flagged status, an unknown “ops” user, or any of the log indicators, assume the attacker had full control – which means credentials, VPN keys, and configuration secrets that passed through or lived on that device should be considered exposed. Simply upgrading the firmware does not evict an attacker who has already planted persistence. A compromised gateway calls for a full rebuild: reset to a known-good configuration, rotate every credential and key associated with the network, and review what else on the practice LAN that router could reach. Because MikroTrick hands over an administrative session, the blast radius is your whole network, not just one box. The same containment discipline we apply to segmenting legacy imaging devices applies here in reverse: a flat network with a compromised router means nothing downstream can be trusted until it is checked.

The takeaway for practice IT

MikroTrick is a textbook reminder that the network’s plumbing is a computer too, and it needs the same patch cadence and the same “no management ports on the public internet” rule as any server. The immediate actions are simple – update RouterOS, close SSH to the outside world, check for the Flagged marker and the “ops” user – but they only help if someone actually does them, and does them now while exploitation is ongoing. If you are not certain who last looked at your practice router, what version it runs, or whether any management port is exposed, that uncertainty is the finding.

Compudent Systems handles exactly this for dental practices across the GTA and Ontario: confirming your router’s firmware and exposure, closing off remote-management ports, standing up a proper VPN for support access, and checking a device for signs of the MikroTrick indicators before they become a breach. If your network gear has been running untouched for a while, contact Compudent for a security assessment – the best time to find an exposed router is before an attacker does.

Sources & further reading:

• CERT Polska – Critical vulnerabilities in MikroTik RouterOS are being actively exploited
• MikroTik security bulletin – September 2026 vulnerability (MikroTrick)
• MikroTik ‘Flagged’ status documentation

Related Reading

• Is Your Practice Router a Backdoor? What the New MikroTik RouterOS Advisories Mean for Dental Networks
• Ransomware Gangs Are Now Through the Front Door: What the SonicWall SMA1000 VPN Attacks Mean for Dental Practices
• A Forged Login Walks Straight Into SharePoint: What the Actively Exploited CVE-2026-55040 Auth Bypass Means for Dental Practices

The post MikroTrick: Six Actively Exploited MikroTik RouterOS Flaws – Patch Your Practice Router Now appeared first on Compudent Systems.

What an “AI scribe” actually is – and its two flavours

Before comparing vendors, separate two things that both get sold as scribes. The first is structured voice-command charting: the clinician speaks measurements or findings aloud – “three, two, three, bleeding on distal” – and the software drops them into the correct fields of a perio or restorative chart in real time. It is hands-free data entry with a fixed vocabulary. The second is the ambient conversation scribe: the tool listens to the natural back-and-forth of a patient consult and generates a narrative clinical note, typically in SOAP format, that the clinician reviews and signs. One fills structured fields; the other writes prose. A few platforms now do both, which is exactly why the category is confusing. Knowing which flavour you are buying tells you what changes at the chairside and what has to connect on the back end.

Bola AI – the dental-native voice specialist

Bola AI is built for dentistry first. Its headline products are Voice Perio and Voice Restorative – structured voice-command charting – alongside an ambient AI Scribe for clinical notes. The reason it matters to a practice-IT buyer is integration: Bola writes directly into the practice-management system’s own chart. Its Voice Perio integration with Open Dental drops perio data straight into the native Open Dental Perio Chart, and it maintains a parallel integration with Dentrix, so the readings land in your system of record in real time rather than in a separate app someone has to reconcile. That native, two-way PMS write-back is the differentiator – and it is a partner-gated integration, meaning Bola works where it has built and certified a bridge, not universally. Practical note for deployment: Bola depends on approved, high-quality microphones to hit its recognition accuracy in a noisy operatory, so the hardware is part of the rollout, not an afterthought.

Heidi – the horizontal scribe borrowed from medicine

Heidi (Heidi Health) is the odd one out, and deliberately so. It is a general-purpose ambient medical scribe used across primary care, specialty clinics, telehealth and even veterinary settings – dentistry is one audience among many, not the design centre. It listens to the consult, produces a SOAP or template-based note, offers an inline “Ask Heidi” assistant, and supports multiple languages. On compliance it is strong for a horizontal tool: HIPAA compliance with a Business Associate Agreement available on its paid Practice tier, plus stated adherence to PIPEDA (relevant for Canadian practices), GDPR and NHS standards, and enterprise certifications including SOC 2 and ISO 27001. What it does not do is deep, structured dental-PMS integration. Heidi produces an excellent note; getting that note into Dentrix or Open Dental generally means an EHR sync or copy-paste workflow, not automated structured charting. For a practice that mainly wants consult notes written faster and is comfortable moving them into the chart manually, that trade may be fine. For one that wants perio numbers auto-filled, it is the wrong tool.

Denti.AI – the all-in-one dental platform

Denti.AI bundles the most into one subscription: an ambient AI Scribe, Voice Perio charting, an AI receptionist, and Auto-Chart, its FDA-cleared imaging diagnostic. It is dental-native, Health Canada licensed, holds a US patent (No. 11,389,131), and competes hard on price at an entry point around $49 – with hygienists in particular praising the five-minute hands-free perio charting. The all-in-one framing is genuinely appealing for a practice that would rather manage one vendor than four. But it also creates the single most common accuracy error buyers make, which deserves its own section.

The regulatory point everyone gets wrong

An ambient scribe that transcribes a conversation and drafts a note is a documentation tool. It makes no diagnosis, so it is generally not regulated by the FDA as a medical device, and there is no 510(k) clearance number attached to the scribe itself – for Bola’s scribe, Heidi, or Denti.AI’s scribe alike. Where this trips people up is Denti.AI. Denti.AI genuinely holds FDA clearance, but that clearance covers its Auto-Chart imaging diagnostic – automated detection of caries, periapical radiolucencies, and bone levels across panoramic and intraoral radiographs – not the scribe or the voice charting. Conflating the two, and marketing an ambient scribe as “FDA-cleared,” is exactly the kind of claim a decision-maker should refuse to take at face value. Verify what the clearance actually covers, and treat the scribe and the diagnostic as separate products with separate regulatory status even when they ship in one platform. If a vendor cannot cleanly explain which of its features is cleared and which is not, that is your answer.

PHIPA, HIPAA, and where the audio goes

Regardless of which tool you choose, the compliance exposure is the same and it is real. The consult audio, the transcript, and the generated note are all protected health information the moment the recording starts. Under Ontario’s PHIPA and under HIPAA in the US, that PHI remains your practice’s responsibility even though a vendor is processing it. You need a signed data-processing agreement – a BAA in the US, the equivalent contractual safeguards under PHIPA – covering how consult audio is stored, who can access it, how long it is retained, and what happens to it when you leave. Because most of these platforms are US-based cloud services, data residency is a live question for a Canadian practice: if your patients’ consult recordings sit on US infrastructure, you are making a cross-border PHI transfer and you remain the accountable custodian. Confirm the retention policy, the BAA or PHIPA terms, and where the data physically lives – in writing, before go-live, not from a slide.

Which one fits which practice

The choice sorts cleanly once you know what you are optimising for. If your pain is perio and restorative charting speed and you run Open Dental or Dentrix, Bola AI’s native structured write-back is the tightest fit. If you want a single dental platform covering scribing, voice charting, imaging AI and the front desk – and you keep the regulatory distinctions straight – Denti.AI is the consolidation play, and its pricing makes it easy to pilot. If your priority is fast, high-quality narrative consult notes, you value multilingual support and mature compliance certifications, and you can live with a manual path into the chart, Heidi is the strong horizontal option. In every case the deciding factors are the same two Compudent flags on any dental AI: how cleanly it integrates with your exact PMS, and whether the vendor’s data handling survives a PHIPA review.

This is the kind of evaluation Compudent Systems runs for practices across the GTA and Ontario – matching an AI scribe to your existing PMS and workflow, confirming what integrates natively versus what means re-keying, and checking that consult audio and generated notes are handled in a way that stands up under PHIPA. For the wider picture, our sister site’s plain-language look at Denti.AI covers the patient-facing side, our guide to AI on the dental front desk tackles the same integration questions for scheduling and call intake, and our breakdown of deploying Overjet applies the same discipline to clinical imaging AI. If you are weighing an AI scribe and want the integration and compliance homework done properly first, contact Compudent for a practice assessment.

Sources & further reading:

• Open Dental – Bola AI integration
• Bola AI + Dentrix integration
• Denti.AI – Dental AI Scribe, Voice Perio & Imaging
• Heidi – AI care partner for clinical practice
• Best AI Scribe for Dentists (2026) – 9 Tools Compared

Related Reading

• The AI Front Desk: Call Intake, Scheduling, and Voice Agents in Dentistry
• Practice-Management AI: Revenue Cycle, Claims, and Analytics
• PHIPA, HIPAA, and Dental AI: PHI, Data Governance, and Vendor Risk

The post AI Scribes for Dentistry: Bola AI vs Heidi vs Denti.AI Scribe appeared first on Compudent Systems.

The ten-year rule, and the trap inside it

The baseline most Ontario practices work from is the RCDSO recordkeeping standard: a patient’s dental record must be retained for at least ten years after the date of the last entry. For a patient who was a minor, the clock is more generous – retention runs for ten years after the day the patient reached, or would have reached, the age of majority. Radiographs are part of the clinical record, so a bitewing series taken today is subject to the same decade-plus horizon as the written chart. Financial records live under a separate schedule entirely: the Canada Revenue Agency generally expects business records to be kept for six years. So a single patient visit can spawn two overlapping retention clocks running on different timelines.

The trap is that these are minimums, expressed in years, being applied to data that lives on hardware measured in months. A ten-year retention obligation quietly assumes that the drive, the server, the backup, the imaging software, and the file format will all still exist and still be readable a decade from now. None of that is guaranteed by default. Retention is a promise your IT has to be built to keep, not a checkbox in your PMS.

PHIPA makes retention an IT obligation, not a filing habit

PHIPA is where retention stops being a College standard and becomes a legal duty about how you hold the data. As a health information custodian, a dental practice must take reasonable steps to protect personal health information against theft, loss, and unauthorized use – for the entire time it is retained, and through the moment it is destroyed. That framing matters. Every year you keep a record, you are also on the hook to keep it secure. The obligation does not pause because a chart is inactive; an archived record from 2019 carries the same protection duty as the patient you are treating this afternoon.

This is why retention and security cannot be run as separate projects. An old radiograph archive sitting on an unpatched, unmonitored server in the back room is not “just storage” – under PHIPA it is live personal health information you are legally responsible for. The same discipline that governs your active systems has to reach the archive, or the archive becomes your weakest point.

Backups: the thing that saves retention, and the thing that breaks disposal

Retention has a recoverability requirement hiding inside it. Keeping a record for ten years is meaningless if a drive failure or a ransomware event wipes it in year four. This is where a genuine backup strategy earns its place: a primary copy on the practice server, a local backup for fast recovery, and an offsite or immutable copy that a network attacker cannot reach or encrypt. The immutable copy is the part practices most often skip and most often need – it is what lets you honestly say a decade of records will still exist after a bad day. And a backup you have never restored is a hope, not a plan; we have made the case before that your backups are only as good as your last test restore, and retention is exactly the obligation that assumption is protecting.

But backups cut the other way too. When a record’s retention period ends and you securely destroy it from the live system, copies of it usually still exist inside your backup sets and archives. Truly disposing of personal health information means accounting for those copies – either through backup rotation that ages them out on a defined schedule, or through a documented policy that treats backup-resident data as protected until it expires. A disposal process that only touches the production system, and quietly leaves ten years of the same record in cold storage, is not a disposal process.

Disposal is a compliance event, not a right-click

The end of a record’s life gets almost no planning attention, and it should get a lot. Under PHIPA, personal health information must be disposed of securely, in a way that makes reconstruction impossible. For paper, that means cross-cut shredding or a bonded destruction service, not the recycling bin. For digital records, “delete” is not disposal – a deleted file is typically still recoverable until it is overwritten. Secure digital destruction means cryptographic erasure, a verified secure wipe, or physical destruction of the media, ideally paired with a certificate of destruction you can produce if you are ever asked to prove it.

That paper trail is the point. If a former patient, the College, or the Information and Privacy Commissioner asks what happened to a record, “we think it was deleted” is not an answer. A dated destruction log, tied to a retention schedule, is. Disposal done properly is auditable by design.

Why keeping everything is now a liability, not a safety net

The old instinct – keep everything forever, just in case – made sense when the risk of holding data was near zero. It is not zero anymore. Every record you retain past its required life is additional blast radius on the day you are breached: more patients to notify, more data in the dump, more exposure in the class action. When we broke down what a data breach actually costs a dental practice, the size of the exposed dataset was a direct multiplier on the bill. Data you have already destroyed – lawfully, on schedule – cannot be stolen. Retention discipline is, in that sense, a security control.

There is a format problem lurking behind all of this too. A ten-year horizon means the imaging you capture today has to remain both stored and readable long after the sensor, the workstation, and possibly the software vendor have changed. Proprietary formats, orphaned imaging applications, and un-migrated archives can leave you technically compliant on retention but practically unable to open the file – which is its own failure. Planning storage for the long haul is part of the same conversation as building imaging storage infrastructure that can grow with the practice.

What a defensible retention program looks like

Pulling it together, a dental practice that can stand behind its records handling has a few things in place. A written retention schedule that reflects the RCDSO minimums, the age-of-majority rule for minors, and the separate CRA horizon for financial records. Storage and backups – including an immutable offsite copy – engineered to keep records both recoverable and secure for the full period. A disposal process that is scheduled, secure, and logged, and that accounts for backup-resident copies rather than pretending they do not exist. And a format-migration plan so that a decade-old radiograph is not just retained but openable.

None of this is glamorous, and none of it shows up in a treatment plan. But it is the difference between a practice that can answer a records question in minutes and one that discovers, mid-audit or mid-breach, that its policy was “keep everything and hope.” If you are not sure whether your retention, backup, and disposal setup would hold up to a PHIPA review, that is exactly the kind of assessment worth doing before someone asks. Contact Compudent Systems and we will map your current records lifecycle against what Ontario actually requires – and fix the gaps before they become the story.

Sources & further reading:

• RCDSO Standards of Practice and Guidelines (Dental Recordkeeping)
• Personal Health Information Protection Act, 2004 (Ontario e-Laws)
• Information and Privacy Commissioner of Ontario – Resources
• Canada Revenue Agency – Keeping records

Related Reading

• Can Your Dental Practice Use ChatGPT Without Breaking HIPAA and PHIPA? A 2026 Compliance Guide
• From Roentgen’s Lab to Your Practice Server: How Dental X-ray Imaging Became an IT Discipline
• The First Hours After a Data Breach: What an Ontario Dental Practice Must Do Under PHIPA

The post How Long Must You Keep a Patient Chart? Records Retention, Backups, and PHIPA in Ontario appeared first on Compudent Systems.

Why the phone is the front desk’s biggest leak

The numbers the vendors cite are uncomfortable because they are broadly true. Industry figures repeated across the category – including by Y Combinator-backed Arini – put missed inbound calls at roughly a third of a typical practice’s total, even in offices with staff dedicated to the phone, while something like 80% of appointments are still booked by voice rather than through an online form. A missed call at a dental office is rarely a patient who calls back; it is a patient who dials the next practice on the list. Every unanswered ring during a busy hygiene block, a lunch break, or after 5 p.m. is a booking that quietly went to a competitor. That is the gap this software is built to close, and it is why the category has attracted real funding and moved quickly.

What “AI front desk” actually means

The label covers three distinct things, and conflating them is the first mistake a buyer makes. The first is the voice agent: a conversational AI that answers the call, understands what the patient wants, and either books, reschedules, or routes them – the closest thing to an autonomous receptionist. The second is call analytics: software that records and transcribes calls, scores them, and flags missed opportunities and unbooked callers for staff to follow up. The third is the AI scheduling assistant, which may live in chat, SMS, or web and apply dental-specific booking logic – appointment types, provider rules, block scheduling – rather than a naive calendar lookup. Many products blend two or three of these, but knowing which layer you are actually buying tells you what changes on the front desk and what does not.

The vendors, sorted by type

The market splits cleanly into dental-native platforms and repurposed generic voice AI. On the dental-native side, Arini positions itself as a full AI receptionist answering calls in under 300 milliseconds with genuine dental scheduling logic and native PMS integration; Peerlogic comes from the call-analytics direction and pairs conversation intelligence with an AI scheduling assistant; and a growing field – Dentina, TrueLark, Weave, Viva AI and newer entrants like CallSara and HeyDonto – competes on how well it plugs into existing phone systems and practice software. The generic tier is any general-purpose VoIP or voice-AI tool retrofitted onto a dental office. The distinction matters for one concrete reason: as Peerlogic and others note, the dental-specific platforms do real-time, two-way integration with major practice-management systems, while generic VoIP-based tools typically do not. For a dental practice, an agent that cannot write a confirmed appointment back into the PMS is a fancier answering machine.

How it connects to your stack

This is the part a decision-maker has to interrogate, because “integrates with your PMS” hides a lot of variation. The meaningful question is whether the tool does two-way integration – reading live availability from Dentrix, Open Dental, Eaglesoft, Curve or your platform of choice, and writing a booked, correctly-typed appointment back – or whether it merely captures an intake and hands a human a to-do. Two-way is the difference between automation and a slightly smarter voicemail. Underneath that sits the telephony layer: some products replace or front-end your phone system, others ride on top of an existing VoIP setup, and that choice determines what has to change on your network, your number porting, and your call routing.

Unlike the imaging AI covered elsewhere in this series, front-desk tools are not TWAIN or DICOM integrations – there are no radiographs moving. What moves is scheduling data, patient contact details, and call audio, over cloud APIs and telephony. That is simpler on paper, but it means the integration risk is concentrated in two places: the fidelity of the PMS write-back (a mis-typed or double-booked appointment is worse than a missed call) and the reliability of the telephony hand-off (a dropped or mis-routed patient call is a live reputational event, not a background error). Confirm both against your exact PMS and phone setup before signing, not from the vendor’s list of logos.

It is not a medical device – but PHIPA and HIPAA still apply

Here is a genuine difference from the imaging side that cuts both ways. A front-desk voice agent makes no diagnosis, so it is not a regulated medical device and carries no FDA clearance – there is no 510(k) number to check, and any vendor implying otherwise is confused or careless. That lowers one bar. It does not lower the privacy bar. The moment a patient is on the line, the call recording, the transcript, the reason for the visit, and the scheduling record are all protected health information. Under Ontario’s PHIPA and under HIPAA in the US, that PHI does not stop being your responsibility because a vendor is processing it. You need a signed data-processing agreement – a Business Associate Agreement stateside, the equivalent contractual safeguards under PHIPA – covering how call audio is stored, who can access it, how long it is retained, and what happens on termination. And because most of these platforms are US-based cloud services, data residency is a live question: if call recordings and patient details are stored on US infrastructure, your practice is making a cross-border PHI transfer and remains the accountable custodian for it. That is a decision the principal dentist should make with the terms in writing.

What to check before you buy

A clean rollout comes down to a short, unglamorous checklist. Confirm true two-way integration with your specific PMS, and ask to see it write a correctly-typed appointment, not just read availability. Establish the telephony model – does it replace your phone system or sit on top, and what does number porting involve. Get the data agreement and residency terms in writing before go-live. Decide the escalation path: what the agent does when it cannot handle a call, and how cleanly it hands a genuinely urgent patient – a swelling, a knocked-out tooth, post-op bleeding – to a human. And set expectations internally that this is an assistive front-desk tool: it books, confirms, and captures after-hours demand, but your team still owns the judgment calls and the relationships. Practices that treat it as a revenue-recovery and coverage layer are happy; practices that expect it to replace the front desk wholesale are not.

Front-desk AI is the most immediately profitable slice of dental AI precisely because the problem it solves – missed calls equal missed patients – is so measurable. It is also the slice where the integration and compliance groundwork is easiest to skip in the excitement of a slick demo. This is the kind of evaluation Compudent Systems handles for practices across the GTA and Ontario: vetting how an AI receptionist will connect to your existing PMS and phone system, what it means for your network, and whether the vendor’s handling of call recordings and patient data stands up to a PHIPA review. For the wider picture, our sister site’s field guide to AI in dentistry maps the whole landscape, and our own breakdown of deploying Overjet walks through the same integration-and-governance discipline on the clinical side. If you are weighing an AI front desk and want the technical and compliance homework done properly first, contact Compudent for a practice assessment.

Sources & further reading:

• Arini – AI receptionist for dentists (Y Combinator)
• 7 AI Assistants for Patient Scheduling Efficiency in 2026 – Peerlogic
• Best Dental AI Receptionists 2026: Compared – Avized
• 10 Best Dental AI Virtual Receptionist Tools for Clinics 2026 – CloudTalk

Related Reading

• AI Scribes for Dentistry: Bola AI vs Heidi vs Denti.AI Scribe
• Practice-Management AI: Revenue Cycle, Claims, and Analytics
• PHIPA, HIPAA, and Dental AI: PHI, Data Governance, and Vendor Risk

The post The AI Front Desk: Call Intake, Scheduling, and Voice Agents in Dentistry appeared first on Compudent Systems.

The technique is called ASCII smuggling, and it does not rely on a new virus or a clever attachment. It relies on characters your screen refuses to draw. For a dental practice, where the front desk lives in its inbox and every message could plausibly be a patient, an insurer, or a supplier, that is a problem worth understanding before it lands.

What ASCII smuggling actually does

Unicode, the standard that lets your computer display every alphabet and emoji, contains a little-used range called the Tags block, running from U+E0000 to U+E007F. These are shadow copies of ordinary keyboard characters that are not meant to be shown to a reader. They take up space in the underlying data of a message, but they render as nothing at all.

Attackers exploit that gap between what is stored and what is seen. Take a word a filter might flag, such as “funding.” Insert one invisible tag character between “fun” and “ding,” and a human still reads “funding” without a flicker of difference. A security filter scanning for the literal string “funding,” however, no longer finds it. The word has been split by a character that exists in the data but not on the screen. The lure sails through, looking clean to the machine and normal to the person.

In the campaign researchers tracked, the hidden splits targeted financial keywords tied to business loans, credit lines, and advance funding, with the operation impersonating lenders and chasing small-business loan applicants. The volume was enormous and oddly corporate in its rhythm: it ran on weekdays, went quiet on weekends, and resumed on Mondays, peaking in late February before tapering off. The point is not the specific lure. The point is the delivery method, which works for any theme an attacker chooses next, including a fake insurance notice or a spoofed supplier invoice aimed squarely at a dental office.

Why the dental front desk is the target

Phishing follows the path of least resistance, and the front desk is a wide one. It is high-volume, so a receptionist processes dozens of messages an hour without time to scrutinize each. It is high-trust, because the job is to be helpful and responsive to patients and outside parties. And it is often high-turnover, so security habits reset with each new hire. Add a filter-evasion trick that makes a malicious email look ordinary to your defenses, and the last line of protection becomes a distracted human under time pressure.

The stakes are not abstract. A phished credential is rarely the end of an attack; it is the beginning. It is the doorway to your practice management system, your imaging archive, and the protected health information that PHIPA obliges you to safeguard. We have written before about how attackers turn a stolen login into session theft that quietly sidesteps multi-factor authentication, and about how a single breach translates into real dollars, downtime, and liability for a practice. ASCII smuggling simply makes the first step, getting the bait into the inbox unflagged, more reliable.

Why your existing filter may miss it

Most email security gateways were built to read text the way a person does and then match it against lists of known-bad words, domains, and patterns. That model is fast and effective against ordinary phishing. It is also precisely what invisible characters defeat, because the attacker is not hiding the malicious intent from a human; they are hiding the searchable text from the scanner.

The fix is a defense that normalizes a message before it judges it, stripping or accounting for non-printing Unicode so that “fun” plus an invisible tag plus “ding” is evaluated as “funding.” Heavy or unusual use of Unicode is itself a suspicious signal that mature filters can weigh. The question for your practice is not whether such defenses exist, but whether the specific configuration protecting your mailboxes today does this. That is a concrete thing to check rather than assume.

What a dental practice should do now

No single control stops this cleanly, so the answer is layers, each one catching what the others miss.

Confirm your email security normalizes Unicode. Ask whoever manages your mail platform, whether that is Microsoft 365, Google Workspace, or a third-party gateway, whether it strips or scores invisible and non-printing characters. If nobody can answer, that is the first gap to close.

Make stolen passwords less useful. Phishing exists to harvest credentials, so assume some will eventually leak. Phishing-resistant multi-factor authentication, ideally passkeys rather than SMS codes, limits the damage a captured password can do. Your practice website and portals are part of this too; treat them as the exposed surface they are, as we covered in how attackers forge logins into practice websites.

Give the front desk a verification habit, not just a warning. The most durable defense against a message that looks perfect is a rule that does not depend on how it looks: any request to change payment details, release records, or move money is confirmed through a known phone number, never by replying to the email. That habit neutralizes a flawless lure.

Test your response, not just your prevention. Know in advance who is called when a staff member clicks something, how a compromised account is locked, and how you would tell whether patient data was reached. A rehearsed response turns a scare into a contained incident.

The takeaway

ASCII smuggling is a reminder that attacker tradecraft keeps moving, and that a defense which only reads what a human reads will always be one trick behind. The reassuring part is that the countermeasures are not exotic. Well-configured email filtering, authentication that survives a stolen password, a front desk with a verification reflex, and a practiced response plan defeat this campaign and the next one built on the same idea. What matters is that these controls are actually in place and correctly tuned, not merely assumed.

If you are not certain whether your practice’s email security accounts for tricks like invisible-character evasion, or whether your authentication and response plans would hold up, that uncertainty is worth resolving before an attacker resolves it for you. Compudent Systems helps dental practices across the GTA and Ontario assess and harden their email security, authentication, and incident response. Contact us for a practical review of where your inbox defenses stand today.

Sources & further reading:

• Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Related Reading

• A ‘Half-Click’ Email Zero-Day Is Hitting Outlook Web Access. Here’s Why Dental Practices Should Care.
• They’re Calling Your Front Desk: How Voice Phishing Cracked a Healthcare Giant’s Microsoft Login
• Your Practice Website Is Part of Your Attack Surface: Hackers Are Forging Logins Into WordPress Right Now

The post Your Spam Filter Can’t See This: Invisible-Text Phishing Is Slipping Past Email Security appeared first on Compudent Systems.

What actually got cleared – and why it’s a trend, not a gadget

It helps to see this as a wave rather than a single product. The dental-dedicated MRI is the marquee item because it brings an entirely new, radiation-free modality to dentistry for soft-tissue and temporomandibular imaging. But it is landing at the same time as new FDA-cleared 3D imaging and AI-assisted detection tools that read radiographs and CBCT volumes for the clinician. The common thread across all of them is data density: MRI produces multi-image series, modern 3D units produce ever-higher-resolution volumes, and AI tools generate additional annotated derivatives of each study. None of this replaces your existing CBCT and sensors – it stacks on top of them. So the practical question for a practice isn’t “MRI, yes or no?” It is “is our infrastructure ready for imaging that is several times heavier than what we run today?” And that question deserves the same rigour as choosing which imaging modality your practice actually needs and when.

Why bigger images are an IT problem, not just a clinical win

A single 2D bitewing is a small file. A high-resolution CBCT volume is dramatically larger; an MRI series larger still; and an AI-annotated study adds yet another layer on top of the original. Individually, none of these is alarming – modern storage is cheap. The trap is the curve. Take a bigger average study size, multiply it by the number of studies your practice captures every day, and compound that across the years of retention a dental record requires, and you get an accumulation curve that climbs far faster than the gentle slope film-replacement radiography produced. Practices that sized their storage, network, and backups for 2D imaging and never revisited the assumption are the ones that get surprised – not by the first MRI scan, but by month eighteen, when the drive that was “plenty” is suddenly at ninety percent and the nightly backup no longer finishes before the team arrives.

The server and storage question

Start with where the images actually live. Many practices keep imaging on a local server or an imaging workstation acting as one, and that is perfectly workable – provided the capacity is planned against the new curve, not last year’s. The right conversation covers headroom (size for two to three years of growth, not this month’s footprint), architecture (local storage versus a proper PACS versus a hybrid that tiers older studies to cloud), and retention. Retention is not optional: under PHIPA and HIPAA, diagnostic images are part of the patient record and must be kept for years, so “we’ll delete old scans to make room” is not a storage strategy – it is a compliance problem. The goal is a storage plan that expects the growth, tiers it sensibly, and never forces a clinical-versus-capacity trade-off at the front desk.

The network and the workstation that has to open it

Big images have to travel, and then someone has to open them. On the network side, moving 3D volumes and MRI series between the modality, the server, and the operatory where the dentist reviews them puts real load on office cabling and switches that were fine when the heaviest traffic was a panoramic. On the workstation side, a review PC needs enough RAM and graphics capability to load and manipulate a large volume smoothly – a dentist rotating a CBCT or scrolling an MRI stack on an underpowered machine simply waits, and waiting at the chair is expensive. Underneath both sits the plumbing: the DICOM worklist and PACS pathways that route a study from capture to the right patient chart. When those are healthy the workflow is invisible; when they are undersized, every heavy new modality makes the stalls more obvious. The same data-flow discipline is exactly what makes AI imaging tools usable in practice, which is why integrating an AI platform like Overjet is as much an integration and data-governance project as a clinical one.

Backups and business continuity – the images are the record

Here is the part that is easy to skip and painful to relearn: the images are not a by-product of care, they are the clinical record, and larger datasets make protecting them both more important and more demanding. Bigger studies stretch backup windows – the nightly job that comfortably finished at 2 a.m. can start bleeding into the working day – and they raise the cost of whatever off-site or cloud copy you keep. That is not a reason to back up less; it is a reason to design the backup deliberately: a genuine 3-2-1 approach (multiple copies, more than one medium, at least one off-site and ideally immutable), sized for the new data volume, and – the step everyone forgets – tested restores, because a backup you have never restored is a hope, not a safeguard. This is also where new imaging meets old equipment on the same network. As you add heavier modern modalities, the aging units that cannot be updated still need containment, which is a discipline in its own right: keeping unpatchable legacy imaging devices safely segmented so the growing, valuable image store they sit beside stays protected.

The takeaway: size the IT during procurement, not after install

The single most useful habit a practice can adopt is to treat an imaging purchase as an IT project, not just a clinical one. Before the unit is ordered – not after it is bolted to the wall – ask what average study size it produces, how much daily volume that adds, whether the server has the headroom and the retention plan to absorb years of it, whether the network and review workstations can move and open the images without stalling, and how the backup window and cost change. None of these are reasons to hesitate on adopting better imaging; the diagnostic gains from radiation-free MRI and high-resolution 3D are real. They are simply the questions that separate a smooth rollout from a scramble six months later. Plan the infrastructure with the same care you plan the clinical use, and the new imaging becomes an upgrade instead of a surprise.

If your practice is weighing a new imaging modality – a dental MRI, a next-generation CBCT, or an AI platform layered on top of what you already run – and you want to know whether your server, network, and backups are ready for it, contact Compudent Systems. We help dental practices across Ontario size storage and networks for modern imaging, design PACS and backup strategies that meet PHIPA retention obligations, and make sure the infrastructure is ready before the equipment arrives – so the only surprise is how good the images look.

Sources & further reading:

• From the first dental MRI to orthodontic AI: Four FDA clearances reshaping dentistry – Oral Health Group
• Dentsply Sirona Advances Dental Imaging With MRI – Dentistry Today
• First-ever Dental Dedicated MRI Validated in Clinical Trial and Cleared by FDA for Advanced Soft-Tissue Diagnostics – Dentsply Sirona

Related Reading

• From Roentgen’s Lab to Your Practice Server: How Dental X-ray Imaging Became an IT Discipline
• FMX vs. CBCT: Which Dental Imaging Does Your Practice Actually Need, and When
• You Can’t Patch That Old Sensor or CBCT: How to Safely Keep Legacy Imaging Devices on Your Dental Network

The post The New Imaging Is Bigger Than Your Server: What Dental MRI and AI-Cleared Modalities Demand From Your Practice IT appeared first on Compudent Systems.

Why imaging devices go unpatchable – and why that isn’t negligence

It is tempting to treat an out-of-support imaging device as evidence someone dropped the ball. Usually it isn’t. Medical and dental imaging hardware is regulated, validated as a unit, and built to last a decade or more – far longer than the operating system or software it shipped with. Manufacturers certify a device against a specific Windows version and a specific driver, and once that version reaches end of life, updating the underlying OS can technically break the device or void its clinical validation. So the capture PC stays frozen in time on purpose, and the embedded controller inside a CBCT is often a black box no one is permitted to modify. The result is a device that is simultaneously essential and unpatchable – a structural feature of long-lived medical equipment, not a mistake. What is a mistake is pretending the problem doesn’t exist. The FBI and medical-device security researchers have been blunt that unsupported devices left on clinical networks are a favourite target, precisely because everyone knows they cannot be fixed the normal way.

The core move: put it in its own zone

If you cannot change the device, change what the device can reach. The single most effective control for an unpatchable imaging system is network segmentation: placing it in its own isolated network segment – a dedicated VLAN or zone – so it no longer shares a flat network with your practice-management server, your Microsoft 365 credentials, your backups, and every front-desk PC. The logic is containment. A vulnerability on an isolated device is a contained problem; the same vulnerability on a flat network is a doorway into everything. This is the same lesson we keep arriving at from different directions – it is why the phone system in the closet turned out to be a full computer too, and why so many connected medical devices carry critical flaws that will never be patched. Segmentation does not fix any of those devices. It makes sure that when one of them is compromised, the damage stops at the segment boundary instead of spreading to patient records.

Segmentation that’s real, not cosmetic

Dropping a device onto a separate VLAN and calling it done is where a lot of well-intentioned segmentation quietly fails. To be worth anything, the design has to answer three questions about the legacy device. Who can talk to it? Only the specific workstations and users that clinically need to – enforced with permit-only rules, not “anyone on the network.” What is it allowed to talk to? Ideally a short allowlist: the one server it must reach, and nothing else – and crucially, no direct path to the internet, since a frozen device has no business browsing the web and every reason not to. Any remote servicing the vendor needs should come through a controlled gateway – a jump host with multi-factor authentication – never a permanent open door. And how fast would you notice if either of those changed? A legacy device has a boringly predictable traffic pattern; monitoring tuned to that known-good behaviour turns any deviation into an early alarm. Get those three answers right and the segment is a real boundary. Get them wrong and it is a line on a diagram.

Compensating controls: securing the space around the device

When you cannot patch the device itself, you apply what security professionals call compensating controls – protections placed around the device that stand in for the fix it will never get. Several are worth putting in place for every unpatchable imaging system:

• Virtual patching. A firewall or intrusion-prevention system in front of the segment can block the specific attacks a known vulnerability enables, even though the device itself remains unchanged. It is not a true patch, but it closes the road to the pothole.
• Strict access control and MFA. Every human or system that reaches the imaging segment should authenticate, with multi-factor authentication on any remote access. Shared logins and standing vendor access are exactly how a contained device becomes an entry point again.
• Disable what you’re not using. Old devices ship with services and ports enabled that your practice never touches. Every one that is closed is one fewer thing an attacker can reach.
• Back up what the device produces. The images are the asset. Rigorous, tested backups of the radiographs and scans mean a compromised or failed legacy device is a replaceable box, not a loss of patient records.

The inventory and lifecycle discipline underneath it all

None of this works if you do not know what you have. You cannot isolate, monitor, or plan around a device you have never catalogued, and the uncomfortable truth in many offices is that no one can list, from memory, every networked imaging device and what operating system it runs. So the foundation is an honest inventory: every sensor, phosphor-plate scanner, panoramic and CBCT unit, and capture workstation, with its software version, its support status, and who is responsible for it. That inventory is also where you separate the devices you genuinely cannot patch from the ones you simply haven’t – your practice-management software and its servers, for instance, usually can be kept current, and that is a patching discipline worth getting right on its own terms. And because segmentation buys time rather than granting immunity, every truly unpatchable device needs a documented end-of-life plan: a replacement target date, so the frozen box on your network is a managed risk with an expiry, not a permanent resident everyone has stopped seeing.

What this does – and what it doesn’t

It is worth being honest about the limits. Segmentation and compensating controls contain the blast radius and buy you time; they do not make an unsupported device safe in any absolute sense, and they are not an excuse to run a decade-old sensor forever. Think of them as the responsible way to bridge the gap between “we cannot replace this today” and “we have replaced it.” That framing matters for compliance as much as for security. Under PHIPA and HIPAA, an unsupported device that stores or transmits patient images is a live exposure – and if an incident ever occurs, the question a regulator will ask is not whether you had a perfect device, but whether you took reasonable steps to protect the information on an imperfect one. A documented segment, a set of compensating controls, a monitoring alert, and a replacement plan are exactly what “reasonable steps” looks like. Choosing the right imaging equipment in the first place, and knowing which modality your practice actually needs, is the front end of the same lifecycle – security and clinical planning are not separate conversations.

The old sensor and the aging CBCT are not going away tomorrow, and they should not be sitting naked on your network in the meantime. If you are not certain which of your imaging devices are still supported, whether any of them are exposed to the wider office network or the internet, or how you would even begin to isolate them, contact Compudent Systems. We help dental practices across Ontario inventory every imaging device, design and build the segmentation that keeps an unpatchable box from becoming the way in, put practical compensating controls around the equipment you cannot yet replace, and plan the replacements so today’s necessary risk has a documented end date.

Sources & further reading:

• Beyond Patching: Secure Medical Devices and Meet FDA Compliance – RunSafe Security
• Closing the Cybersecurity Gap in Legacy Medical Devices – Medical Product Outsourcing
• FBI Warnings on Unpatched Medical Devices – Censinet

Related Reading

• Where Was Your Imaging Sensor Made, and What Is It Talking To? Device Provenance Is Now a Dental Practice Security Question
• Half Your Connected Devices Carry a Critical Flaw. Can Agentic AI Finally Clear the Patching Backlog?
• The Other Computers in Your Operatory: Why Connected Dental Devices Are the Attack Surface Nobody Audits

The post You Can’t Patch That Old Sensor or CBCT: How to Safely Keep Legacy Imaging Devices on Your Dental Network appeared first on Compudent Systems.

What the researchers found

The flaw was disclosed by Horizon3, which had been auditing Sangoma’s products after related FreePBX vulnerabilities landed on the U.S. government’s known-exploited-vulnerabilities list. In total the team reported twelve distinct vulnerabilities in Switchvox; this one is the most severe. The mechanism is a textbook failure. Switchvox exposes an unauthenticated HTTP endpoint that parses an XML message sent by supported IP phones. One field inside that message – the phone’s IP – is concatenated directly into a database query that was never written to expect hostile input. That is a classic SQL injection: an attacker puts database commands where a value should go, and the server dutifully runs them. Because the query runs with database superuser rights, the injection does not stop at reading records – it reaches all the way to command execution and a reverse shell, handing the attacker an interactive foothold on the appliance.

This is not theoretical. Honeypots have already captured real attack traffic, the flaw class was first disclosed by independent researchers in July 2026, and a public scan shows roughly 4,000 internet-exposed Switchvox instances, most of them in North America. The good news is that there is a fix: Sangoma has patched the flaw in version 8.4.0.2. Everything below that on an internet-reachable box should be treated as exposed until proven otherwise.

A phone system is a full computer – that is the real story

It is tempting to file this under “telephone problem” and move on. Don’t. A modern VoIP PBX like Switchvox is not an appliance in any meaningful sense – it is a Linux server running a database, sitting on your practice network, often with a web interface reachable from the outside so the vendor or a remote admin can manage it. In other words, it is exactly the same kind of computer as the server your practice-management software runs on, and it is exposed to exactly the same kinds of attacks. The only difference is that nobody thinks of it that way, so nobody patches it, and nobody notices it going quietly out of date in a closet for years.

We keep running into the same shape of problem from different directions. It was true of the print server no one calls IT about, and it was true of the single vendor quietly running a practice’s network, cameras, and phones. The phone system is simply the next forgotten computer on the list. Every one of these boxes is a small server with a network cable, and every one of them needs the same discipline you would apply to a workstation.

What a hijacked phone system actually hands an attacker

Assume the worst has happened and someone owns your PBX. What do they get? Three things worth taking seriously. First, toll fraud – the oldest and most immediate motive – where an intruder uses your telephony to place expensive international or premium-rate calls and leaves you the bill. Second, and more sensitive for a dental office, the calls themselves: a compromised PBX can intercept or record conversations and voicemails, which in a practice routinely contain patient names, appointment details, medication questions, and other protected health information that never belonged in an attacker’s hands.

The third consequence is the one that should worry you most. A phone system that shares a flat network with everything else becomes a quiet foothold. From that box an attacker can look sideways at the practice-management server, the imaging workstations, and the Microsoft 365 credentials cached around the office, and begin to pivot toward the data that actually matters. It is also a ready-made platform for the kind of layered attack we keep urging practices to plan for: control of your telephony makes fraudulent calls to your patients – or to your own staff – far more convincing. The initial break-in is a phone flaw; the damage is a whole-network problem.

Is your practice exposed?

Three questions decide it. Do you run Sangoma Switchvox SMB Edition? Is its management or phone-provisioning interface reachable from the public internet? And is it running a version below 8.4.0.2? If the answer to the first is yes and you are not certain about the other two, treat the box as exposed and act today. The honest complication is that many practices cannot answer the first question – the phone system was installed years ago by a telecom vendor, it has worked ever since, and no one in the office knows the brand, the version, or who is responsible for updating it. That uncertainty is itself the vulnerability. An asset nobody owns is an asset nobody patches.

What to do now

None of the remediation here is exotic; it is the same fundamentals that protect any networked computer, finally applied to the one in the phone closet.

• Update to Switchvox 8.4.0.2 immediately. If you run Switchvox, this is the single most important step, and it is being exploited right now – it is not a next-quarter item. If a vendor manages your phones, call them today and get written confirmation of the version.
• Get the management interface off the public internet. A PBX admin or provisioning page should not be reachable from the open web. Put it behind the firewall and require a VPN for remote management. This one change defuses the entire class of internet-facing attack, not just this CVE.
• Inventory every networked appliance. Phone system, print server, network switches, cameras, door controllers, imaging hardware – list each one, its version, and who is responsible for patching it. You cannot secure a device you have forgotten you own.
• Segment the phone system away from clinical systems. The PBX does not need to share a network with your practice-management server and imaging workstations. Putting voice traffic on its own segment means a compromised phone system is a contained problem, not a doorway into patient data.
• Assign ownership of telephony patching. Decide – in writing – whether your telecom vendor or your IT provider is responsible for keeping the phone system current, and hold that answer to the same standard as your server patching. Silence is how a box stays years out of date.

The Switchvox flaw will be patched and forgotten within a month. The pattern behind it will not go away: the modern dental office is full of small computers wearing the costume of appliances, and attackers have learned to go after the ones nobody is watching. The phone system was never just a phone system.

If you are not certain what brand of phone system your practice runs, whether its management interface is exposed to the internet, or who is responsible for keeping it patched, contact Compudent Systems. We help dental practices across Ontario inventory every networked device – phones included – get management interfaces off the public internet, segment voice traffic away from clinical systems, and put clear ownership behind the patching that keeps a forgotten box in a closet from becoming the way in.

Sources & further reading:

• CVE-2026-9586: Sangoma Switchvox RCE – Horizon3 attack research disclosure
• CVE-2026-9586: Switchvox RCE Exploited in the Wild – SecurityOnline

Related Reading

• One Vendor Runs Your Network, Cameras, and Phones: Three Max-Severity Ubiquiti Flaws and What Your Practice Must Patch
• Ransomware Gangs Are Now Through the Front Door: What the SonicWall SMA1000 VPN Attacks Mean for Dental Practices
• A Fake Job Offer, a Windows Kernel Rootkit: The Lazarus Zero-Day (CVE-2026-68820) and What It Means for Your Dental Practice

The post The Phone System Is a Computer Too: An Actively Exploited Switchvox Flaw and What Your Practice Must Patch appeared first on Compudent Systems.

What is confirmed, and what is only claimed

It is worth being disciplined about the numbers, because the headline figure is not McKesson’s. What the company has confirmed is a breach, unauthorized access to third-party applications, some data exfiltration, and an affected subset of two specific business units. What ShinyHunters claims – and it is a claim, from a group whose business is extortion – is around 284 million records spanning personal and protected health information, which the group itself concedes does not mean 284 million unique patients. If it holds up, it would rank among the largest healthcare data thefts ever recorded. Treat the confirmed facts as facts and the leak-site boast as an unverified allegation, and you will read this story more clearly than most of the headlines about it.

The confirmed business units – oncology, multispecialty, and medical-surgical distribution – are not dental. So to be plain: there is no indication that dental patient records were part of this, and this article is not claiming otherwise. Its value is elsewhere – in how the attackers got in, because that method is coming for practices of every size and specialty.

The part a dental office should study: a phone call, not a zero-day

Strip away the scale and the interesting thing about this breach is how ordinary the entry was. According to ShinyHunters’ own account to BleepingComputer, the group did not defeat some exotic defence. It ran voice-phishing – vishing – calls against multiple employees, talked its way to compromised Okta single sign-on accounts, and then used that stolen identity to reach into Salesforce and Snowflake and pull data out. The group claims to have removed roughly 1 TB between August 21 and 25. No malware headline, no unpatched appliance – a human on the phone, a captured login, and two cloud applications that trusted it.

That chain – person → single sign-on → cloud app – is the whole lesson, and it is the same playbook ShinyHunters has run against a long list of organizations. It is also almost exactly the technique we described when voice phishing cracked a healthcare giant’s Microsoft login: convince a person, capture the identity, and the identity opens the doors. And ShinyHunters is the same crew behind the Medtronic breach we covered earlier this year – this is a repeat performer with a proven method, not a one-off.

Why your practice is in scope for the same technique

Here is the uncomfortable translation. A modern dental practice no longer keeps everything on a server in the back room. Your practice-management software may be cloud-hosted; your email and files live in Microsoft 365; your imaging, your patient communications, your online booking, and your payroll are very likely separate cloud apps. And to keep staff sane, most of those are unlocked by a small handful of identities – often a single Microsoft or Google sign-in per person. That is exactly the shape of target ShinyHunters just exploited: not a network to breach, but an identity to borrow.

The attacker does not need to be sophisticated about your firewall if they can get one staff member on the phone, spin a believable story – “I’m from your IT provider, we’re seeing an issue with your account” – and walk away with a login. Once inside as a trusted user, they do not look like an intruder; they look like your receptionist. The scale of McKesson’s cloud footprint made the haul enormous, but the technique scales down to a six-operatory office just as cleanly.

The near-term risk: your patients are about to get scam calls

Even setting your own network aside, a breach of this size creates a downstream problem that lands on your front desk. When identity information and healthcare details are combined and sold or leaked, they become fuel for convincing impersonation scams. Criminals pose as a pharmacy, an insurer, a provider’s office, a debt collector, or a patient-support line, and use real personal details to make the approach sound legitimate – a supposed prescription problem, an unpaid claim, a delivery issue, an appointment change, or a request to “verify” insurance information. The health context is what makes it work; it manufactures urgency.

Your patients will not parse which company was breached. Some will receive these calls, and a few will phone your office confused, or worse, will be primed to hand over information to the next caller who claims to be from your practice. Your team should know that a wave of health-themed scam calls is a predictable aftershock of any large breach, and should never treat inbound callers as automatically trustworthy – a caller who “already knows” a patient’s details has proven nothing. This is also a reminder of what a breach actually costs when it is your own name on the notice.

What a dental practice should do about it

None of the defences here are exotic; they are the unglamorous fundamentals of protecting an identity-and-cloud practice. Make sure someone – your team or your IT provider – can confirm these five things:

• Inventory your cloud apps and the identities that unlock them. List every SaaS application the practice uses – practice management, Microsoft 365, imaging, communications, booking, payroll – and note which login unlocks each. You cannot protect a stack you have never mapped, and single sign-on means one compromised identity may open several of these at once.
• Move to phishing-resistant MFA. Text-message and app-tap codes can be phished or talked out of a user in real time. Passkeys or FIDO2 hardware keys cannot be handed over on a phone call, which is precisely the attack that worked here. Prioritize the accounts that unlock the most.
• Train staff – and the front desk – to resist vishing. The breach started with a phone call. Teach the team that no legitimate IT provider or vendor will ever ask them to read out a code, approve a prompt, or surrender a login over the phone, and give them a no-blame way to hang up and call back on a known number to verify.
• Watch for anomalous access to your cloud data. Ask whether your Microsoft 365 and other cloud platforms alert on unusual sign-ins and bulk data exports. The theft here was a large, quiet data pull by a “trusted” account – the kind of thing that is invisible unless someone is watching for it.
• Prepare a patient-facing response now. Draft a short, calm script for the front desk about breach-related scam calls, and a reminder that your practice will never phone a patient to demand payment or verify sensitive details out of the blue. Preparing the message before you need it beats improvising during a rush of confused calls.

The through-line of the McKesson story is not the eye-watering number ShinyHunters is advertising. It is that a company of that size was reached the same way a small office can be reached: a person, a stolen sign-in, and the cloud applications that trusted it. The record count is what makes the news; the method is what should make you check your own logins.

If you are not certain how many cloud applications your practice depends on, which identities unlock them, or whether those logins would survive a convincing phone call, contact Compudent Systems. We help dental practices across Ontario inventory their SaaS and single sign-on footprint, move the accounts that matter onto phishing-resistant MFA, train staff and front-desk teams to shut down vishing, and put monitoring in place so a quiet data pull from a cloud app does not go unnoticed – closing the exact door this breach walked through.

Sources & further reading:

• McKesson confirms cyber incident after ShinyHunters claims patient-data theft – Malwarebytes
• Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson – TechCrunch
• McKesson discloses breach after ShinyHunters claims patient data theft – BleepingComputer

Related Reading

• The FBI Just Refreshed Its Medusa Ransomware Warning for Healthcare: The Real Lesson for Your Dental Practice
• Ransomware Is Now a Patient-Safety Issue: What a 38% Hospital Mortality Study Means for Your Dental Practice
• Two Dental Groups on Leak Sites in One Week: What It Means When Your Practice’s Name Appears on a Ransomware Blog

The post 284 Million Records Claimed at the Supplier: What the McKesson Breach Means for Your Dental Practice appeared first on Compudent Systems.

What Medusa actually is

Medusa is a ransomware-as-a-service (RaaS) operation, first identified in June 2021. Think of it less as a gang and more as a franchise. Since 2023 the core developers have run an affiliate model: they build and maintain the ransomware, and other criminals – affiliates – do the breaking-in, splitting the proceeds. That structure matters, because it means the people who compromise your network and the people who run the extortion are often not the same, and the whole thing scales like a business. It also runs on double extortion, which we will come back to.

The part that should worry a dental office: how they get in

Strip away the branding and Medusa gets in through two doors, and both of them are sitting on the average small-practice network right now.

The first is phishing – the same tired email that tricks a staff member into handing over a password or running an attachment. The second is unpatched software that faces the internet. Medusa’s affiliates recruit initial access brokers – criminals paid anywhere from $100 to $1 million to break in and resell that access – and the advisory names the products those brokers lean on: ScreenConnect, Fortinet, Fortra, and BeyondTrust. None of those are obscure. They are remote-support and remote-monitoring tools, firewalls, secure file transfer, and privileged-access software – precisely the categories a dental practice or its IT provider runs to keep the office online and supportable. The uncomfortable translation: the software that lets your IT company help you from across town is the same software a broker is hunting for a missing patch on.

And they move fast. The advisory notes brokers weaponize new vulnerabilities within 24 hours – sometimes before a flaw is even publicly announced. That is why a patching routine that runs “monthly, when we get to it” is not a routine at all for internet-facing gear. It is exactly the gap that lets a single overlooked box become the entry point, the same lesson behind why one patching policy cannot quietly cover every system you own.

Living off the land, then the squeeze

Once inside, Medusa’s operators do not announce themselves. They use legitimate remote-monitoring software – the very kind of tool a real IT provider uses – to blend in, move around, and quietly copy data out before anyone notices. Access brokers use the same trick to cover their tracks while they shop the access around. This is why simply owning security tools is not enough; you have to know what is supposed to be running on your network so that a rogue copy of a remote-access tool stands out instead of hiding in the noise. It is the same initial-foothold-then-quietly-expand pattern we saw with infostealers harvesting session cookies to slip past MFA.

Then comes the double extortion. Medusa encrypts your data so the practice cannot function – no charts, no schedule, no imaging – and it also threatens to publish the stolen files unless you pay. That second lever is the one that has changed the math for healthcare: even a practice with flawless backups, able to restore and reopen tomorrow, still faces the prospect of patient records posted on a leak site. We covered what that actually looks like when dental practices’ names appear on a ransomware blog. For a Canadian practice, that is not just downtime – it is a PHIPA privacy breach with reporting obligations attached.

Why you are in scope even though you were not named

It is easy to read “500 victims, mostly large organizations” and file it under someone else’s problem. That is the wrong read. An affiliate model with brokers paid to break in is, by design, indiscriminate about the victim’s size – it targets whatever is reachable and unpatched. A small dental office with a public-facing firewall that missed a firmware update, or a remote-support tool a year behind on patches, is not too small to be worth $100 of a broker’s time. It is exactly the opportunistic, automatable target that model was built to harvest. The named victims are big because big organizations get press; the broker’s scanner does not care what your letterhead says.

What a dental practice should do about it

The reassuring part of this advisory is that none of the defences are exotic. Make sure someone – your team or your IT provider – can confirm these five things:

• Patch the edge, fast. Inventory every internet-facing device and service: firewall, VPN, remote-support tool, secure file transfer. Those get patched on a rapid cadence, not the general workstation schedule. If you run any of the named families (Fortinet, ScreenConnect, Fortra, BeyondTrust), confirm they are current today.
• Make phishing fail. Move accounts to phishing-resistant MFA (passkeys or hardware keys) so a stolen password is not enough, and keep running staff phishing awareness. The advisory puts phishing tests and training at the top of its own mitigation list.
• Know your own tools. Write down which remote-monitoring and remote-access tools legitimately run on your network, and alert on anything else. You cannot spot an attacker “living off the land” if you never mapped the land.
• Keep offline, tested backups. Double extortion has not made backups useless – it has made them table stakes. Keep backups offline or immutable so ransomware cannot reach them, and actually test a restore. Backups answer the encryption; only prevention answers the data theft.
• Use the advisory. The CISA/FBI/HHS advisory (AA25-071A) publishes concrete indicators of compromise and remediation steps. Have whoever manages your security review and block them – and if this rings any alarm bells about your current controls, revisit whether your cyber-insurance policy’s required security controls are genuinely in place, because an unmet requirement can void a claim exactly when you need it.

The through-line of the Medusa advisory is not a scary piece of malware; it is a supply chain of ordinary failures – an unpatched appliance, a reused password, an unmonitored remote tool – that criminals have industrialized into a repeatable break-in. Every one of those failures is fixable, and none of them require you to become a security expert. They require someone to own the list and work it.

If you are not certain which of your internet-facing devices are fully patched, whether your remote-support tools are current, or whether your backups would actually survive a ransomware event, contact Compudent Systems. We help dental practices across Ontario inventory and harden the exact systems Medusa’s brokers hunt for – firewalls, remote-access tools, and edge software – lock down access with phishing-resistant MFA, and build tested, offline backups, so the way this ransomware gets in is closed before anyone comes knocking.

Sources & further reading:

• Medusa Ransomware Hitting Healthcare Industry’s Unpatched Software Vulnerabilities – National Law Review
• #StopRansomware: Medusa Ransomware (AA25-071A) – CISA
• SWK Cybersecurity News Recap August 2026

Related Reading

• Ransomware Is Now a Patient-Safety Issue: What a 38% Hospital Mortality Study Means for Your Dental Practice
• Two Dental Groups on Leak Sites in One Week: What It Means When Your Practice’s Name Appears on a Ransomware Blog
• Dental Practices Under Siege: The Rising Threat of Ransomware Targeting Healthcare Data

The post The FBI Just Refreshed Its Medusa Ransomware Warning for Healthcare: The Real Lesson for Your Dental Practice appeared first on Compudent Systems.

Why connected devices are the hardest thing to patch

Practices already know they should patch Windows and their practice-management software. Connected medical and imaging devices are a harder category for three specific reasons. First, they are regulated: because an imaging device is an FDA-cleared medical product, you usually cannot patch it yourself – a fix has to come from the manufacturer, validated and released on the vendor’s timeline, which can lag a disclosed vulnerability by months. Second, they run old, embedded operating systems that were current when the device shipped and are now unsupported, quietly sitting on your network years past their software’s end of life. Third, and most quietly dangerous, many of them were never written down as computers at all. They are “the X-ray” or “the scanner,” not “a networked server with a web interface” – which is precisely how they escape every patch inventory. We have written before about why where an imaging sensor was made and what it quietly talks to is now a security question, not just a purchasing one.

The real problem isn’t detection – it’s the backlog

It is tempting to think the fix is a better scanner that finds the flaws. But most organizations can already generate a list of vulnerabilities; what they cannot do is act on it. When more than half your devices show a critical finding and each one needs to be researched, risk-assessed, matched to a fix or a workaround, and scheduled around clinical use, the list becomes noise. A backlog that can never be cleared by hand is functionally the same as having no list at all – you cannot tell which three devices actually put patients and data at risk this week from the two hundred findings that do not. This is the same operational trap that makes device attacks so damaging in practice, and why they are already disrupting patient care at a quarter of healthcare organizations.

What “agentic AI” actually changes here

“Agentic AI” is an overused phrase, so it is worth being precise about what Trimedx is describing. Its TMX Protect platform now lets a security team query its device and vulnerability data in plain language – ask which assets present the greatest risk, generate a risk assessment, and get a prioritized remediation plan back – rather than reading raw scan output. Crucially, the tool weighs both cybersecurity severity and clinical importance, and it helps find mitigations for devices that have no manufacturer-approved patch. Trimedx says the result is a 75% average reduction in remediation time for cybersecurity projects, on top of device identification accuracy it puts as high as 95%. Strip away the marketing and the meaningful part is this: the AI is aimed at the triage and prioritization bottleneck, not at detection. That is the right target, because triage is where human teams drown.

That is also the honest caveat. This is an enterprise platform sold to health systems managing tens of thousands of devices. A three-operatory practice in Ontario is not the customer, and a 75% efficiency gain on a backlog you do not have the staff to work at all is not a purchase decision for you. So what is the takeaway for a normal practice?

The same discipline, scaled down to a dental practice

The value of the enterprise story is that it spells out the correct method, and the method scales down to something a practice can genuinely do. You do not need an AI platform to apply it – you need the discipline it automates.

• Build a real device inventory. List every networked device, not just the PCs: intraoral sensors, the CBCT and pano units, intraoral scanners, sterilizer and equipment monitors, cameras, door controllers, and VoIP phones. A device that is not on the list is never patched, never segmented, and never noticed until it is the entry point.
• Know what each device is and what it talks to. For each one, capture its operating system, its firmware version, whether the manufacturer still supports it, and what it connects to on the network and the internet. This is the visibility the AI tools are built to produce – you can approximate it with a competent IT partner and a network scan.
• Prioritize by risk, not by count. Do not try to fix everything. Ask the enterprise question at small scale: which one or two devices combine a serious, exploitable flaw with real exposure and real clinical importance? Fix those first. Everything else is scheduled, not ignored.
• When you cannot patch, contain. This is the most important move, because most medical devices cannot be patched on your schedule. Put the device on a segmented network that cannot reach the internet or the rest of the office, restrict who and what can talk to it, and monitor it. A vulnerable device that is walled off is a manageable risk; the same device flat on your main network is a breach waiting to happen.
• Fold devices into one patch and review routine. The reason these systems rot is that they live outside the process that keeps everything else current – the same gap that makes it so easy for one patching policy to quietly miss the systems it was never told about. Every device belongs on one list, reviewed on a schedule.

Where the AI actually reaches your practice

You will not buy TMX Protect, but you will still feel this shift – through your IT provider’s tooling. The remote monitoring and management (RMM) platforms, vulnerability scanners, and security services that a managed IT partner uses on your behalf are absorbing the same agentic-AI capabilities: natural-language triage, risk-based prioritization, and automated remediation planning. The practical implication is that the bar for “we keep an eye on the devices” is rising. It is fair to ask whoever handles your IT a direct question: do you inventory our connected medical devices, and how do you decide which risks to act on first? If the answer is that devices are outside scope, that is the gap the whole industry is now racing to close.

The bottom line for a dental practice

The headline number – half of connected devices carrying a critical flaw – is not a reason to panic and it is not solved by buying an AI. It is a reminder that the equipment which makes a modern practice run is also a fleet of small, often unpatchable computers, and that securing them is an exercise in knowing what you have, prioritizing what matters, and containing what you cannot fix. Agentic AI is making that exercise faster for hospitals with thousands of devices. For a dental practice with a few dozen, the same three habits – inventory, prioritize, segment – get you most of the protection with none of the platform cost.

If you have never taken a full inventory of the connected devices on your practice network – or you are not sure which of your imaging units and scanners are running unsupported software, what they can reach, or whether they should be segmented off – contact Compudent Systems. We help dental practices across Ontario find every networked device, understand its real risk, isolate the ones that cannot be patched, and build the review routine that keeps a forgotten scanner from becoming the way an attacker gets in.

Sources & further reading:

• Trimedx introduces agentic AI capabilities that reduce medical device cybersecurity remediation time by 75% – GlobeNewswire
• Trimedx Adds AI to Cybersecurity Platform to Speed Up Risk Remediation – 24×7

Related Reading

• The Other Computers in Your Operatory: Why Connected Dental Devices Are the Attack Surface Nobody Audits
• You Can’t Patch That Old Sensor or CBCT: How to Safely Keep Legacy Imaging Devices on Your Dental Network
• When Your Device Vendor Gets Breached: An IoMT and Third-Party Security Checklist for Dental Practices

The post Half Your Connected Devices Carry a Critical Flaw. Can Agentic AI Finally Clear the Patching Backlog? appeared first on Compudent Systems.