Health IT Security and HIPAA News

FBI Alerts to Rise in DDoS Attacks Via Exploited Built-In Network Protocols

by

The FBI is warning private sector organizations of an increase of threat actors exploiting built-in network protocols to amplify distributed-denial-of-service (DDoS) cyberattacks using limited...

Reports Finds IoT Devices Host Social Media Apps, FDA-Recalled Platforms

by

An analysis of over 5 million IoT, IoMT, and unmanaged devices found a host of security risks, including those in the healthcare sector, from Facebook and...

Emotet Malware Threat Actors Return with Massive Email Campaign

by

The notorious Emotet malware threat actors have resurfaced after a 5-month hiatus with a massive campaign that has send well over 250,000 emails containing highly obfuscated,...

Top Risks of 1H 2020: Ransomware, Mobile, Health Infrastructure

by

The first half of 2020 has seen a spate of cyberattacks fueled by the COVID-19 pandemic with a spike in ransomware samples and mobile vulnerabilities, as well as a host of...

DOJ Accuses China of Targeted Hacking on COVID-19 Research Data

by

The Department of Justice has indicted two hackers for allegedly working with the government of China to target and hack hundreds of US companies, governments, organizations, and others...

Lorien Health Services Ransomware Attack Impacts 48K Patients

by

Maryland Health Services, DBA Lorien Health Services, recently reported that a June ransomware attack on its systems potentially breached the data of 47,754 patients. Lorien...

Feds Issue Emergency Directive to Patch Critical DNS Server Flaw

by

An emergency directive from the Department of Homeland Security Cybersecurity and Infrastructure Security Agency gave federal agencies just 24-hours to apply a patch to a...

DHS Shares Insights on Network Tunneling, Obfuscating Cyberattacks

by

Recent insights from the Department of Homeland Security Cybersecurity and Infrastructure Security Agency shed light on recent cyberattacks that leverage network tunneling and spoofing...

Report Finds Serious Flaws in COVID-19 Vaccine Developers’ Systems

by

An examination by BitSight into 17 biomedical, healthcare, pharmaceutical, and other academic research facilities publicly known to be working on the development of a COVID-19...

Russian Hackers Target COVID-19 Vaccine Developers with Cyberattacks

by

Russian hackers are targeting the healthcare, pharmaceutical, and academic research sectors, as well as other vaccine developers with cyberattacks, in an effort designed to steal information...

The Key to Improving Medical Device Security is Collaboration, Visibility

by

The recently reported Ripple20 vulnerabilities found in more than 52,000 medical device models that could allow for remote code execution, highlight the need for greater...

Microsoft Patches Critical, Wormable Flaw in Windows DNS Servers

by

The Department of Homeland Security Cybersecurity and Infrastructure Security issued an alert, urging organization administrators to apply a Microsoft-issued patch for a...

Report: Over 1 in 10 Ransomware Attacks Results in Data Theft

by

More than one out of 10 ransomware attacks results in data theft, increasing the risk of data loss, business interruption, regulatory penalties, legal harm, and reputational damage, according to...

SAMHSA Revises Privacy Rule 42 CFR Part 2 for Substance Use Patients

by

The Department of Health and Human Services’ Substance Abuse and Mental Health Services (SAMHSA) announced the agency has revised the Confidentiality of...

274K Patients Impacted by Benefit Recovery Specialists Credential Hack

by

More than 274,000 patients from several healthcare providers and payers that use Benefit Recovery Specialists (BRSI) for billing and collections services are...

41 Providers Reported Ransomware Attacks in First Half of 2020

by

At least 41 hospitals and healthcare providers organizations reported being impacted by successful ransomware attacks during the first half of 2020, according to recent Emsisoft research....

15 Billion Compromised Credentials Available for Sale on Hacker Forums

by

There are currently 15 billion compromised credentials and passwords for sale on hacker forums, stolen from more than 100,000 separate data breaches in the last two years, according to a new...

RWJF, Manatt Share Consumer Health Data Privacy Framework

by

The Robert Wood Johnson Foundation and Manatt Health recently released a consumer Health Data Privacy Framework designed to address some of the gaps in existing health data privacy...

UPDATE: The 10 Biggest Healthcare Data Breaches of 2020, So Far

by

The healthcare sector saw a whopping 41.4 million patient records breached in 2019, fueled by a 49 percent increase in hacking, according to the Protenus Breach Barometer. And despite the...

Microsoft Sues, Now Controls COVID-19 Phishing Campaign Domains

by

The US District Court for the Eastern District of Virginia recently unsealed court documents that reveal Microsoft's to put an end to a massive COVID-19-themed phishing campaign...