Cyber Hygiene

FBI: $3.5B Lost to Cybercrime in 2019, Led by Business Email Compromise

by Jessica Davis

The FBI estimates that cybercrime cost individuals and US businesses $3.5 billion in losses last year, as estimated in the 2019 Internet Crime Report published by the FBI Internet Crime Complaint...

Hackers Increasing Complex Attacks with Hack Tools, Ransomware

by Jessica Davis

Cybercriminals are ramping up attacks on business targets using diverse threats and attack strategies, as highlighted by a rapid increase of hack tool detections through unpatched vulnerabilities and a...

Insider Breach Remediation Costs Health, Pharma $10.81M Annually

by Jessica Davis

Health and pharma organizations that experience security incidents caused by careless or malicious insiders spend an average of $10.81 million each year to remediate the threat, according to a recent...

Medtronic Patches Vulnerabilities in CareLink, Implanted Medical Devices

by Jessica Davis

Medtronic recently issued a set of patches for previously disclosed vulnerabilities found in certain implanted cardiac medical devices and its CareLink Encore 29901 programmers. The first set of...

DHS CISA Warns Hackers Exploiting Unpatched Citrix Servers

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency is warning organizations that hackers have successfully compromised numerous systems of those continuing to operate...

NIST Shares Draft Guides on Ransomware, Data Integrity Attacks

by Jessica Davis

NIST National Cybersecurity Center of Excellence (NCCoE) recently released a pair of draft ransomware guides designed to help organizations detect and respond to the threat, as well as ways to identify...

Feds Alert to Critical Vulnerabilities in GE Patient Monitoring Products

by Jessica Davis

Critical vulnerabilities found in certain GE patient monitoring, servers, and telemetry systems could allow a remote hacker to alter the function of the device, steal patient data, or interfere with...

Evaluating Cyber Readiness, Vulnerabilities with Pen Testing

by Jessica Davis

Healthcare suffers with a unique endpoint challenge: a host of vendors, legacy systems, and an ever-increasing list of connected devices. But even with what it may deem a secure network, the threat landscape also continuously adds new...

Emotet Reemerges with Massive Campaign Targeting Pharma Industry

by Jessica Davis

Proofpoint is urging all organizations to take steps to shore up any vulnerabilities, after detecting a massive Emotet campaign targeting the pharmaceutical industry. The hacking group behind Emotet is...

Evasive Domain-Impersonation Phishing Attacks Increase by 400%

by Jessica Davis

Barracuda researchers detected a 400 percent increase in domain-impersonation attacks aimed at conversation hijacking since July. While the method is used far less frequently than other phishing attack...

NSA Discloses, Urges Patch of Critical Microsoft Windows 10 Vulnerability

by Jessica Davis

The National Security Agency discovered a critical spoofing vulnerability impacting Microsoft Windows 10, which could allow an attacker to undermine the verification of cryptographic trust and allow...

Hackers Demand Ransom From Patients After Breaching Florida Clinic

by Jessica Davis

Current and former patients of Richard Davis, MD, who operates The Center for Facial Restoration, have received ransom demands from a cybercriminal who hacked the clinic's server. Other providers...

DHS Alerts to Citrix Server Vulnerabilities, Urges Remediation

by Jessica Davis

The Department of Homeland Security is urging organizations to secure vulnerabilities found in certain Citrix servers through its Application Delivery Controller and Gateway. Security researchers have...

Data of 50K Alomere Health Patients Exposed by Employee Email Hack

by Jessica Davis

Minnesota-based Alomere Health is notifying 49,351 patients that their medical data was potentially exposed during a hack on two employee email accounts. Hospital staff first discovered unauthorized...

LifeLabs Hit With Several Lawsuits Over Data Breach of 15M Patients

by Jessica Davis

LifeLabs is potentially facing a class-action lawsuit after a several civil lawsuits were filed against the testing giant in a British Columbia Court, following reports that the data of 15 million...

Georgia Revives Patient Breach Lawsuit Against Athens Orthopedic

by Jessica Davis

The Supreme Court of Georgia has revived a patient data breach lawsuit against Athens Orthopedic Clinic, by unanimously reversing a Court of Appeals decision to dismiss the case. In July 2016, Athens...

New Mexico Hospital Finds Malware Infection on Digital Imaging Server

by Jessica Davis

New Mexico-based Roosevelt General Hospital discovered malware on the digital imaging server of its radiology department, which possibly allowed hackers to view the digital medical images of about 500...

Number of Exposed PACS Medical Images Increasing, US Biggest Culprit

by Jessica Davis

A 60-day update on the number of Picture Archiving and Communication Systems (PACS) images left unprotected online has found a 60 percent increase in exposed medical data, to about 1.19 billion images,...

Filling Healthcare Security Staffing Gaps with Virtual CISOs, Students

by Jessica Davis

In 2017, a damning report from the Department of Health and Human Services Health Care Industry Cybersecurity Task Force revealed the troubled state of healthcare security staffing: three out of four organizations were operating without a...