SecurityArchitecture.comMedStar attack apparently enabled by unpatched software
Attackers who find vulnerable servers can deploy ransomware without any action on the part of users in the targeted organization.
Privacy and Security Tiger Team recommends federal PKI cross-certification for all NwHIN participants
In the latest round of security recommendations for the Nationwide Health Information Network (NwHIN), the Privacy and Security Tiger Team (a workgroup of the federal Health IT Policy Committee that advises the National Coordinator for Health…
VA over-disclosure of EHR data highlights difficulty in managing fine-grained consent
In its Monthly Report to Congress On Data Incidents for the month of September (the exact time period noted on the report is August 30 – October 3, 2010), the Department of Veterans Affairs (VA) describes…
Lots of health data breaches reported to HHS, only trivial ones to FTC
With just over a year having passed since the health data breach notification rules mandated by the Health Information Technology for Economic and Clinical Health (HITECH) Act went into effect, and interesting contrast has emerged between…
Rules still pending on privacy and security requirements for PHRs
The Office of the National Coordinator for Health Information Technology (ONC) within the Department of Health and Human Services (HHS) has announced plans for a public roundtable discussion on personal health records (PHRs) to be held…
NCHICA offers recommendations to health care providers on security and meaningful use
The North Carolina Healthcare Information and Communications Alliance (NCHICA) just released a white paper entitled “Privacy and Security Implications of Meaningful Use for Health Care Providers” that reflects the results not only of an analysis of…
Identity theft from hospital records violates more than HIPAA
HealthcareInfoSecurity.com‘s Howard Anderson and others last week covered an indictment filed in Pennsylvania against a man who allegedly used his authorized access (as a hospital employee) to patient records to steal names, dates of birth, social…
Dark Reading
- How to Protect Your Environment From the NTLM Vulnerability
- LockBit Ransomware Developer Arrested in Israel
- US Ban on TP-Link Routers More About Politics Than Exploitation Risk
- How Nation-State Cybercriminals Are Targeting the Enterprise
- Managing Threats When Most of the Security Team Is Out of the Office
- OT/ICS Engineering Workstations Face Barrage of Fresh Malware
- Fortinet Addresses Unpatched Critical RCE Vector
- Orgs Scramble to Fix Actively Exploited Bug in Apache Struts 2
- Bridging the 'Keyboard-to-Chair' Gap With Identity Verification
