Endpoint Security

CISA Alerts to Phishing Campaign Deploying KONNI RAT Malware

by Jessica Davis

Hackers are using a phishing campaign to deploy KONNI malware, a remote access trojan (RAT), via Microsoft Word documents containing malicious Visual Basic Application (VBA) macro...

Judge Dismisses Heritage Valley Malware Lawsuit Against Nuance

by Jessica Davis

A federal judge for the US District Court of the Western District of Pennsylvania has filed a motion to dismiss the lawsuit against Nuance Communications, filed by Heritage Valley Health System...

9 GitHub Repositories Found Leaking Health Data from Over 150K Patients

by Jessica Davis

Improper access controls have left the data of more than 150,000 to 200,000 patients, and likely more, exposed online in at least nine GitHub repositories, shining a light on the need for...

COVID-19 Home Monitoring Tools Pose Patient Privacy, Safety Risks

by Jessica Davis

The COVID-19 pandemic spurred the rapid adoption of remote patient monitoring tools to support patient care in light of social distancing needs. But the accelerated development...

Medical Software Database Exposes Personal Data of 3.1M Patients

by Jessica Davis

A medical software company’s database containing the personal information of more than 3.1 million patients was left exposed online without the need for a password or other authorization,...

Citrix Urges Patch of Critical XenMobile Server Vulnerabilities

by Jessica Davis

Citrix is urging organizations to apply a patch for two critical vulnerabilities found in its XenMobile Server, a mobile device management platform, as hackers will likely quickly move to...

Microsoft Patches Remote Execution, Spoofing Flaws Under Active Exploit

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency alerted to two software updates from Microsoft. The latest patch addresses both a spoofing vulnerability...

NIST Shares Final Zero Trust Architecture Strategies, Guidance

by Jessica Davis

NIST unveiled the final version of its Zero Trust Architecture publication, which sheds light on the enterprise security model and provides private sector organizations a road map for...

Researchers Find More Devices, Vendors Vulnerable to Ripple20

by Jessica Davis

An additional 34 devices have been identified as vulnerable to Ripple20 flaws, which are found in the TCP/IP communication stack software developed by Treck, according to...

Hacker Leaks 900 Enterprise VPN Server Passwords on Dark Web

by Jessica Davis

The usernames and passwords, as well as IP addresses, from more than 900 Pulse Secure Virtual Private Network enterprise servers were posted in plain text on the dark web by a Russian-speaking...

FBI: Operating Windows 7 Increases Cyber Risk to Network Infrastructure

by Jessica Davis

Organizations continuing to operate with Microsoft Windows 7 platforms on the network infrastructure are at an increased risk of cyberattack, according to a private industry notification from the...

The Risk of Nation-State Hackers, Government-Controlled Health Data

by Jessica Davis

The COVID-19 pandemic has driven a rise in targeted, sophisticated cyberattacks designed to take advantage of an increasingly connected environment. In healthcare, it’s led to a rise in...

COVID-19 Impact on Ransomware, Threats, Healthcare Cybersecurity

by Jessica Davis

COVID-19 has significantly shifted the threat landscape from attacks on individuals and small businesses to critical infrastructure, governments, and major corporations, according to Interpol....

DHS CISA Alert Warns of Chinese-Backed Malware Cyberattacks

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency identified a malware variant tied to the Chinese government, which is targeting US organizations to both...

Moderna COVID-19 Vaccine Data Targeted by Nation-State Hackers

by Jessica Davis

Massachusetts-based Moderna, a research firm currently tasked with the development of a COVID-19 vaccine, was targeted by hackers with ties to the government of China, in an effort designed to...

Philips Discloses Vulnerability in DreamMapper Mobile App Software

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency released an advisory on a medium-severity vulnerability found...

FBI Alerts to Rise in Targeted Netwalker Ransomware Attacks

by Jessica Davis

Netwalker ransomware attacks are again on the rise, targeting US and foreign health agencies, education entities, private companies, and governments, according to a recent FBI flash...

IBM: Health Sector Leads in Annual Data Breach Costs, Topping $7.13M

by Jessica Davis

Data breaches are the most expensive in healthcare when compared to all global industries with costs topping $7.13 million annually, compared to $3.86 million across all sectors,...

COVID-19 Cybersecurity: Building Resilience Beyond the Crisis

by Jessica Davis

A recent Forescout report showed more than a third of workstations in healthcare operate on unsupported versions of Windows, among a host of other vulnerabilities found in...

FBI Alerts to Rise in DDoS Attacks Via Exploited Built-In Network Protocols

by Jessica Davis

The FBI is warning private sector organizations of an increase of threat actors exploiting built-in network protocols to amplify distributed-denial-of-service (DDoS) cyberattacks using limited...