Majority of Internet-Accessible REDCap Servers Outdated

A large proportion of internet-accessible REDCap servers — widely used in academic and medical research — are running outdated, vulnerable software versions, creating an easy target for sophisticated threat actors. China-linked group UNC6508 has exploited these unpatched systems to deploy custom backdoors like InfiniteRed, stealing credentials and exfiltrating sensitive research data. The failure to maintain current patch levels on internet-facing systems is a fundamental security hygiene lapse that dramatically lowers the cost of attack for adversaries. This incident underscores that research organizations handling sensitive data must treat patch management as a critical operational priority, not an afterthought. Exposure of research data to state-sponsored espionage can compromise intellectual property, national security interests, and the integrity of clinical or scientific findings.