May 29, 2026 • 4 mins
This episode covers the new Paubox CLI support for Forms, the LockBit 5.0 ransomware attack on Mt. Spokane Pediatrics affecting over 32,000 patients, a CISA-flagged vulnerability in medical imaging software, and the FBI warning about the Kali365 phishing-as-a-service platform targeting Microsoft 365 credentials. The hosts discuss the security gaps facing small clinics and emphasize actionable steps including patching systems, network segmentation, and staff training to address these evolving threats.
Listen
Watch
Mark as Played
Transcript
Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
SPEAKER_00 (00:00):
You're listening to Powbox Weekly fully automated.
SPEAKER_01 (00:03):
I'm Jen, cybersecurity analyst,
professional pessimist,occasional bearer of good news.
SPEAKER_00 (00:09):
And I'm Alex, healthcare IT guy who reads
breach reports, so you don'thave to.
Well, you still have to.
But at least we can talk aboutit.
SPEAKER_01 (00:17):
Let's start with something that isn't a disaster
for once.
Powbox CLI now supports forms.
SPEAKER_00 (00:23):
This is actually huge for workflow automation.
So you've got Powbox Forms,already HIPAA compliant, already
encrypted.
But submitting through abrowser, that doesn't play nice
with automated systems.
SPEAKER_01 (00:35):
Right.
Now developers can retrieve formmetadata, submit responses,
verify delivery, all from thecommand line.
SPEAKER_00 (00:43):
Email and forms in one workflow.
If you're building intakeprocesses, patient
communications, anything thattouches PHI and needs to scale,
this is the tool.
SPEAKER_01 (00:53):
Alright, now the part where I ruin the mood.
There it is.
Lockbit 5.0 hit a pediatricclinic in Washington, Mount
Spokane Pediatrics.
Over 32,000 patients affected.
SPEAKER_00 (01:05):
Pediatric data?
That's that's the worst kind.
SPEAKER_01 (01:09):
It really is.
Kids' records are valuablebecause they're clean.
No credit history to flag fraud.
And Lockbits threatening topublish in 20 days if demands
aren't met.
SPEAKER_00 (01:20):
So what's the takeaway here?
Besides the obvious ransomwareis everywhere.
SPEAKER_01 (01:25):
It's small clinics.
They don't have enterprisesecurity budgets, but they hold
the same sensitive data as largehealth systems.
The gap between risk andresources, that's where
attackers live.
SPEAKER_00 (01:36):
And speaking of things that can take down a
healthcare system, CISA flaggeda vulnerability in medical
imaging software.
SPEAKER_01 (01:43):
Yeah, this one's nasty.
A flaw in a widely used DICOMcomponent.
Attackers can craft a maliciousimage file that crashes the
server.
SPEAKER_00 (01:52):
So someone opens what looks like a normal scan
and boom, imaging goes down.
SPEAKER_01 (01:58):
Exactly.
And imaging isn't optional.
You can't diagnose, you can'ttreat, you can't discharge.
Everything backs up.
SPEAKER_00 (02:06):
Patch it.
Segment your imaging systems.
Don't assume the pack server issafe just because it's internal.
SPEAKER_01 (02:12):
If it touches patient data and connects to a
network, it's a target.
SPEAKER_00 (02:16):
Now here's one that made me physically sigh.
Cali365.
Phishing as a service, becauseof course that's a thing.
The FBI's warning about thisplatform.
It targets Microsoft 365.
And here's the twist (02:30):
it doesn't just steal your password and MFA
code.
SPEAKER_01 (02:35):
It generates an authentication code that the
victim copies and pastesthemselves.
They're essentially handing overtheir own access token.
SPEAKER_00 (02:42):
And once an attacker has that token, they're in.
MFA didn't help because the userbypassed it for them.
The kicker?
These access tokens can beshared, sold, passed around like
trading cards.
So training matters.
If your staff sees a promptasking them to paste a code
somewhere unexpected, red flag.
(03:03):
Big red flag.
SPEAKER_01 (03:04):
On fire.
SPEAKER_00 (03:06):
Alright, let's end on something genuinely good.
The Powbox Kahikina Scholarshipjust hit a major milestone.
SPEAKER_01 (03:13):
This one's close to home.
The scholarship supports NativeHawaiians pursuing STEM and tech
careers.
Started in 2019 with onerecipient.
SPEAKER_00 (03:21):
Nick Wong, first recipient, now a college
graduate.
SPEAKER_01 (03:25):
And as of this year, 62 recipients.
Over$163,000 awarded, 14graduates so far.
SPEAKER_00 (03:34):
And PALBox is pushing for 620 recipients.
It's a 501c3, so donations aretax deductible.
SPEAKER_01 (03:42):
This is the kind of long-term investment that
actually changes the talentpipeline.
More diverse voices in tech, insecurity, in healthcare IT.
SPEAKER_00 (03:51):
If you're looking for something meaningful to
support, links in thenewsletter.
SPEAKER_01 (03:55):
Alright, let's tie this together.
Pediatric clinic breach, imagingvulnerabilities, fishing kits
that outsmart MFA.
SPEAKER_00 (04:03):
None of this is random bad luck.
It's misconfigurations, blindspots, underinvestment in the
basics.
And most of it, fixable.
SPEAKER_01 (04:13):
Patch your systems, train your people, automate
securely.
SPEAKER_00 (04:18):
That's the theme.
Not everything's broken.
It's we know how to fix this.
So let's do it.
SPEAKER_01 (04:24):
Thanks for listening, everyone.
Stay safe out there.
SPEAKER_00 (04:28):
See you next week.
You're listening to Powbox Weekly fully automated.
SPEAKER_01 (00:03):
I'm Jen, cybersecurity analyst,
professional pessimist,occasional bearer of good news.
SPEAKER_00 (00:09):
And I'm Alex, healthcare IT guy who reads
breach reports, so you don'thave to.
Well, you still have to.
But at least we can talk aboutit.
SPEAKER_01 (00:17):
Let's start with something that isn't a disaster
for once.
Powbox CLI now supports forms.
SPEAKER_00 (00:23):
This is actually huge for workflow automation.
So you've got Powbox Forms,already HIPAA compliant, already
encrypted.
But submitting through abrowser, that doesn't play nice
with automated systems.
SPEAKER_01 (00:35):
Right.
Now developers can retrieve formmetadata, submit responses,
verify delivery, all from thecommand line.
SPEAKER_00 (00:43):
Email and forms in one workflow.
If you're building intakeprocesses, patient
communications, anything thattouches PHI and needs to scale,
this is the tool.
SPEAKER_01 (00:53):
Alright, now the part where I ruin the mood.
There it is.
Lockbit 5.0 hit a pediatricclinic in Washington, Mount
Spokane Pediatrics.
Over 32,000 patients affected.
SPEAKER_00 (01:05):
Pediatric data?
That's that's the worst kind.
SPEAKER_01 (01:09):
It really is.
Kids' records are valuablebecause they're clean.
No credit history to flag fraud.
And Lockbits threatening topublish in 20 days if demands
aren't met.
SPEAKER_00 (01:20):
So what's the takeaway here?
Besides the obvious ransomwareis everywhere.
SPEAKER_01 (01:25):
It's small clinics.
They don't have enterprisesecurity budgets, but they hold
the same sensitive data as largehealth systems.
The gap between risk andresources, that's where
attackers live.
SPEAKER_00 (01:36):
And speaking of things that can take down a
healthcare system, CISA flaggeda vulnerability in medical
imaging software.
SPEAKER_01 (01:43):
Yeah, this one's nasty.
A flaw in a widely used DICOMcomponent.
Attackers can craft a maliciousimage file that crashes the
server.
SPEAKER_00 (01:52):
So someone opens what looks like a normal scan
and boom, imaging goes down.
SPEAKER_01 (01:58):
Exactly.
And imaging isn't optional.
You can't diagnose, you can'ttreat, you can't discharge.
Everything backs up.
SPEAKER_00 (02:06):
Patch it.
Segment your imaging systems.
Don't assume the pack server issafe just because it's internal.
SPEAKER_01 (02:12):
If it touches patient data and connects to a
network, it's a target.
SPEAKER_00 (02:16):
Now here's one that made me physically sigh.
Cali365.
Phishing as a service, becauseof course that's a thing.
The FBI's warning about thisplatform.
It targets Microsoft 365.
And here's the twist (02:30):
it doesn't just steal your password and MFA
code.
SPEAKER_01 (02:35):
It generates an authentication code that the
victim copies and pastesthemselves.
They're essentially handing overtheir own access token.
SPEAKER_00 (02:42):
And once an attacker has that token, they're in.
MFA didn't help because the userbypassed it for them.
The kicker?
These access tokens can beshared, sold, passed around like
trading cards.
So training matters.
If your staff sees a promptasking them to paste a code
somewhere unexpected, red flag.
(03:03):
Big red flag.
SPEAKER_01 (03:04):
On fire.
SPEAKER_00 (03:06):
Alright, let's end on something genuinely good.
The Powbox Kahikina Scholarshipjust hit a major milestone.
SPEAKER_01 (03:13):
This one's close to home.
The scholarship supports NativeHawaiians pursuing STEM and tech
careers.
Started in 2019 with onerecipient.
SPEAKER_00 (03:21):
Nick Wong, first recipient, now a college
graduate.
SPEAKER_01 (03:25):
And as of this year, 62 recipients.
Over$163,000 awarded, 14graduates so far.
SPEAKER_00 (03:34):
And PALBox is pushing for 620 recipients.
It's a 501c3, so donations aretax deductible.
SPEAKER_01 (03:42):
This is the kind of long-term investment that
actually changes the talentpipeline.
More diverse voices in tech, insecurity, in healthcare IT.
SPEAKER_00 (03:51):
If you're looking for something meaningful to
support, links in thenewsletter.
SPEAKER_01 (03:55):
Alright, let's tie this together.
Pediatric clinic breach, imagingvulnerabilities, fishing kits
that outsmart MFA.
SPEAKER_00 (04:03):
None of this is random bad luck.
It's misconfigurations, blindspots, underinvestment in the
basics.
And most of it, fixable.
SPEAKER_01 (04:13):
Patch your systems, train your people, automate
securely.
SPEAKER_00 (04:18):
That's the theme.
Not everything's broken.
It's we know how to fix this.
So let's do it.
SPEAKER_01 (04:24):
Thanks for listening, everyone.
Stay safe out there.
SPEAKER_00 (04:28):
See you next week.
Popular Podcasts
Stuff You Should Know
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
The Breakfast Club
The World's Most Dangerous Morning Show, The Breakfast Club, With DJ Envy, Jess Hilarious, And Charlamagne Tha God!