April 7, 2023 Phishers Turn to Telegram to Market Their Kits and Services Cybercriminals are increasingly turning to Telegram to share tactics and market their services, especially threat actors specializing in phishing, according to Kaspersky. The phishing community ... Read more
March 15, 2023 March 2023 Patch Tuesday: Microsoft Fixes 83 Flaws, Including 2 Zero-Day Bugs Microsoft released patches to fix 83 vulnerabilities on March 2023 Patch Tuesday, including two actively exploited zero-day flaws, one in Outlook and one in Windows ... Read more
March 13, 2023 International Law Enforcement Operation Takes Down NetWire RAT An international law enforcement operation has resulted in the seizure of the infrastructure used to support the NetWire remote access Trojan (RAT). NetWire was first ... Read more
March 6, 2023 FTC Proposes Multi-Million-Dollar Penalty for BetterHelp to Resolve Consumer Privacy Violations The Federal Trade Commission (FTC) has announced another enforcement action stemming from the disclosure of consumers’ sensitive health information to marketing companies for advertising purposes. ... Read more
February 8, 2023 Dashlane Publishes Password Manager Source Code The password manager provider Dashlane has made the surprising announcement that the source code for its mobile app has been released on GitHub, in what ... Read more
February 1, 2023 Spate of DDoS Attacks on Hospitals as Hacktivist Group Responds to Increased Support for Ukraine Healthcare providers in the United States and other NATO countries have been warned about the risk of distributed denial of service (DDoS) attacks by the ... Read more
January 23, 2023 Some Popular Password Managers Found to Auto-Fill Passwords on Untrusted Websites Last week, Google announced that it had discovered a security issue with certain password managers, which could be tricked into autosuggesting passwords on untrusted pages. ... Read more
January 15, 2023 What is HIPAA Email Archiving Compliance? HIPAA email archiving compliance is an alternative way to describe HIPAA compliant email archiving. However, there is more than one way to archive emails; and ... Read more
January 3, 2023 LockBit Ransomware Gang Apologizes for Attack on Canadian Children’s Hospital An affiliate of the LockBit ransomware gang recently conducted an attack on the Hospital for Sick Children (SickKids) in Toronto, Canada. The attack occurred on ... Read more
December 29, 2022 270,000 Patients Affected by Louisiana Hospital Cyberattack Lake Charles Memorial Health System has confirmed that the sensitive information of almost 270,000 patients was compromised in an October 2022 cyberattack. The attack was ... Read more
December 21, 2022 Fortnite Developer Agrees to Pay $520 Million to Settle FTC Complaint Epic Games, the developer of the hugely popular battle royale game Fortnite, has agreed to pay $520 million to settle claims that it violated the ... Read more
December 11, 2022 HIPAA and Pictures – The Challenge of Compliance The relationship between HIPAA and pictures is a challenging area of compliance – especially for healthcare providers who may often receive unsolicited images that do ... Read more
December 9, 2022 Bitwarden Adds Passwordless Authentication to its Password Manager Password managers improve security by making it easy for users to set strong and unique passwords for their accounts. They also make logging in convenient, ... Read more
December 3, 2022 What Does Pharmacy HIPAA Compliance Consist Of? Pharmacy HIPAA compliance consists of meeting the requirements of the HIPAA Administrative Requirements, the Privacy Rule, the Security Rule, and the Breach Notification Rule. However, ... Read more
December 1, 2022 HIPAA Compliance for Dental Offices HIPAA compliance for dental offices is not as straightforward as complying with the standards of the Privacy, Security, and Breach Notification Rules because there are ... Read more
November 15, 2022 What are the HIPAA Rules for Medical Devices? Following the introduction of the HITECH Act and the passing of the HIPAA Privacy and Security Rules, Pharmaceutical companies and medical device manufacturers have had ... Read more
October 31, 2022 Why You Stop Using Your Web Browser as a Password Manager Passwords are often all that stands between a cybercriminal and your sensitive personal information. If the password for an online account is guessed, all information ... Read more
October 20, 2022 Information of up to 3 Million Advocate Aurora Health Patients Impermissibly Disclosed to Meta and Others Advocate Aurora Health has recently announced that patient data has been impermissibly disclosed to Meta/Facebook and Google as a result of the use of third-party ... Read more
October 12, 2022 October Patch Tuesday: 90+ Vulnerabilities Patched, but Not ProxyNotShell Flaws Microsoft released patches to fix 96 vulnerabilities across its suite of products on October 2022 Patch Tuesday, including fixes for two zero-day vulnerabilities, one of ... Read more
October 3, 2022 Safe and Secure Password Sharing for Businesses In an ideal world, every employee would have their own password for the accounts and resources they need to access from the moment they started ... Read more
September 23, 2022 Using a Business Password Manager to Share ePHI in Compliance with HIPAA Using a business password manager to share ePHI in compliance with HIPAA is a viable alternative to other secure forms of communication if your organization ... Read more
September 22, 2022 Why Changes May Soon be Required to ISO 27001 Password Management Policies Most accredited organization´s ISO 27001 password management policies are based on the 2013 version of the standard for information security management systems. However, with new ... Read more
September 10, 2022 Is the Use of Mandrill by Healthcare Organizations HIPAA Compliant? The leading automated email marketing platform Mandrill is a transactional email service that MailChimp provides. This software allows companies to automatically broadcast emails to customers ... Read more
August 17, 2022 2022 Sees Major Increase in Malicious Browser Downloads According to Kaspersky, in H1, 2022, 1,300,000 attempts were made to install malicious browser extensions, which is a substantial increase from 2021, when 1,823,263 attempts ... Read more
August 8, 2022 Is FIDO Authentication as Effective as It Claims to Be? FIDO authentication protocols can be used as an alternative to passwords, and – in theory – they provide a fast and secure method for users ... Read more
August 2, 2022 Meta Facing Class Action Lawsuit over Use of Health Data for Serving Targeted Advertisements Another lawsuit has been filed against Meta by a patient who claims her private healthcare information was collected without consent and was used to serve ... Read more
July 16, 2022 HIPAA Compliance and Dropbox: What You Need to Know Dropbox is a one of the most popular and successful file hosting services available online, but doe it comply with HIPAA? Dropbox claims it is ... Read more
July 7, 2022 U.S. Healthcare Sector Warned About Maui Ransomware Attacks by North Korean Hackers North Korean state-sponsored hackers are targeting organizations in the U.S. healthcare and public health sector (HPH) and are using Maui ransomware for extortion, according to ... Read more
July 6, 2022 PFC USA Data Breaches Affects Almost 660 Healthcare Provider Clients Professional Finance Company Inc., (PFC) one of the largest accounts receivable management agencies in the United States, has announced that it was the victim of ... Read more
July 4, 2022 New IIS Backdoor Identified in Microsoft Exchange Servers Security researchers at Kaspersky have sounded the alarm about a new malware threat that is being used to gain persistent, stealthy access to corporate Microsoft ... Read more