Coronavirus

Remote Attacks on Cloud Service Targets Rose 630% Amid COVID-19

by Jessica Davis

A recent McAfee report confirms that cybercriminals have been steadily working to exploit the increase in remote work during the COVID-19 pandemic, with researchers finding that remote attacks on cloud...

New COVID-19 Spear-Phishing, Spoofing Attacks Mimic Google, WHO

by Jessica Davis

Cybercriminals are once again working to take advantage of the COVID-19 pandemic through two new phishing campaigns: Hack-for-hire groups are spoofing the World Health Organization (WHO), while other...

Health Departments, State Govts. At Risk of COVID-19 Spoofing, Fraud

by Jessica Davis

Forty-four percent of state health departments and state governments do not have a published Domain-based Message Authentication, Reporting & Conformance (DMARC), making these entities much more...

Sens. Ask FBI, CISA How to Protect COVID-19 Medical Research Data

by Jessica Davis

The FBI and the Department of Homeland Security Cybersecurity and Infrastructure Agency are being asked how they’re defending against attempts to hack COVID-19-related research data, following...

NetWalker Ransomware Expands Operations, Targeting Healthcare

by Jessica Davis

The NetWalker ransomware threat actors – a serious threat to the healthcare sector – has ramped up its business model, transitioning into a Ransomware-as-a-Service (Raas) model in an...

Feds Issue Joint Alert on COVID-19 CARES Act Payment Fraud Scams

by Jessica Davis

In the latest COVID-19-related fraud scheme, threat actors are looking to exploit the Coronavirus Aid, Relief, and Economic Security (CARES) Act economic impact payments to steal personal and financial...

COVID-19 Contact Tracing Apps Spotlight Privacy, Security Rights

by Jessica Davis

Contact tracing app initiatives have emerged in the wake of the COVID-19 pandemic, as a modern enhancement to traditional methods for tracking the spread of the virus, finding new infections, and...

Hackers Using COVID-19 Phishing, Website Spoofing for Credential Theft

by Jessica Davis

Proofpoint researchers have detected a steep rise in spoofing attempts that leverage phishing attacks with COVID-19 themes and fake websites that mimic government agencies and non-governmental...

Guide to Healthcare’s Security Tactical Crisis Response, Amid COVID-19

by Jessica Davis

The Healthcare and Public Health Sector Coordinating Council (HSCC) and the Health Information Sharing and Analysis Center (H-ISAC) jointly released guidance for healthcare entities, on ways to manage...

Congressional Bills Target COVID-19 Contract Tracing App Privacy

by Jessica Davis

A group of Congressional Democrats proposed privacy legislation designed ensure the privacy and security of proposed COVID-19 contact tracing apps. Senate Republicans released a competing privacy bill...

DHS CISA, FBI Warn Chinese Hackers Targeting COVID-19 Research Firms

by Jessica Davis

Research facilities working on the response to the COVID-19 pandemic are being targeted by hackers tied to the People’s Republic of China, according to a joint alert from the FBI and the...

Zoom Settles with NY AG Over COVID-19-Related Privacy, Security Issues

by Jessica Davis

Zoom settled with New York Attorney General Letitia James on May 7, following a state-led investigation into the videoconferencing platform. James launched an investigation after a number of privacy...

Insights into HHS COVID-19 HIPAA Waivers and Lasting Implications

by Jessica Davis

The nationwide public health emergency brought on by the COVID-19 outbreak has led to several Good Faith HIPAA waivers from the Department of Health and Human Services and the Office for Civil Rights. The waivers aim to fuel data sharing...

Ransomware Success Declines Amid COVID-19, But Resurgence is Likely

by Jessica Davis

Successful ransomware attacks on the US healthcare sector are in decline with just 25 providers impacted during the first quarter of 2020, compared to a total of 764 events, or an average of 191 per...

OCR Shares COVID-19 Privacy and Security Threat Resources

by Jessica Davis

The Office for Civil Rights issued a list of COVID-19-related cyber threat resources for covered healthcare providers to help the sector best prevent, detect, respond, and recover from privacy and...

Maze Ransomware Hackers Post Patient Data Stolen from 2 Providers

by Jessica Davis

The notorious Maze ransomware hacking group has failed to follow through with their assurance the healthcare sector would be off-limits during the COVID-19 pandemic, by publishing data stolen from two...

COVID-19: OCR Reminds Providers of Media Access Restrictions to PHI

by Jessica Davis

The Office for Civil Rights issued a reminder to healthcare providers that even amid the COVID-19 crisis, the HIPAA Privacy Rule does not permit them to give site access to media and other film...

APT Hackers Targeting Healthcare, Essential Services Amid COVID-19

by Jessica Davis

Healthcare organizations and other essential services are again being warned that advanced persistent threat (APT) hacking groups are continuing to exploit the COVID-19 pandemic; this time to actively...

COVID-19 Remote Work Causes Spike in Brute-Force RDP Cyberattacks

by Jessica Davis

The number of brute-force attacks on remote desktop protocol (RDP) servers has drastically increased amid the COVID-19 pandemic, as a record number of employees are now working from home, according to...

DHS Shares Cloud, Microsoft Office 365 Insights for COVID-19 Telework

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency released COVID-19 telework guidance for Microsoft Office 365 and other cloud services, given many organizations have...