Survey Finds Change Healthcare Cyberattack Impacting Hospital Finances and Patient Care Access
The recent cyberattack on Change Healthcare, a subsidiary of UnitedHealth Group, has sent affected the U.S. healthcare system greatly, marking it as one of the most consequential attacks in its history. Targeting a company responsible for processing 15 billion healthcare transactions annually, with a direct impact on one in every three patient records, the fallout has been severe. Patients across the nation have experienced concerning...
CISA and NSA Issue Guidance Sheets on Best Practices for Cloud Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have jointly issued a series of five cybersecurity information sheets following increasing cyber threats targeting cloud environments. These resources are designed to assist organizations in strengthening the security posture of their cloud environments, providing invaluable guidance on best practices and recommended...
Joint Fact Sheet Warns of Volt Typhoon Threat to Critical Infrastructure
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with the Federal Bureau of Investigation (FBI) and international partners, have issued a joint fact sheet urging critical infrastructure entities to heed the warning of potential attacks by Chinese state-sponsored actors. This alert follows a February 2024 cybersecurity advisory highlighting the presence of an advanced persistent threat group dubbed Volt Typhoon,...
Study Finds Alarming Vulnerabilities in Medical Devices
A recent comprehensive study conducted by Claroty, a leader in cyber-physical systems (CPS) protection, has highlighted concerning trends within healthcare cybersecurity. This research, outlined in Claroty’s State of CPS Security Report: Healthcare 2023, has revealed a concerning gap in the maintenance practices of medical devices within hospital environments, emphasizing their susceptibility to potential cyber attacks and the...
Google Agrees to Settle $5 Billion “Incognito” Privacy Lawsuit
Google has agreed to settle a $5 billion lawsuit that alleged it spied on people who used the Chrome Browser in incognito mode and the privacy modes of other Chromium browsers. The Google Chrome browser’s incognito mode includes greater privacy protections, allowing users to browse the Internet anonymously. A lawsuit – Brown et al v Google LLC et al – was filed in the U.S. District Court, Northern District of California in June...
Black Basta Generated At Least $107 Million in Ransoms Since April 2022
An investigation of the Black Basta ransomware group by Corvus Insurance and Elliptic has revealed the group obtained at least $107 million in ransom payments from more than 90 victims since April 2022. Black Basta is a Russia-linked ransomware-as-a-service (RaaS) operation, where affiliates are recruited to conduct ransomware attacks for a cut of the profits. The group emerged after the infamous Conti ransomware operation was shut...