June 13, 2023 June 2023 Patch Tuesday: Microsoft Patches 78 Flaws; 6 Critical Microsoft has fixed 78 vulnerabilities on June 2023 Patch Tuesday bringing the month’s total up to 94 including the 16 vulnerabilities in Chromium-based browsers that ... Read more
June 2, 2023 Harvard Pilgrim Health Care: 2.5 Million Members Affected by Ransomware Attack Harvard Pilgrim Health Care, a Canton, Massachusetts-based nonprofit health services provider, has confirmed that it was the victim of a ransomware attack in April 2023. ... Read more
May 2, 2023 How to Make Google Forms HIPAA Compliant HIPAA Covered Entities and Business Associates need to know how to make Google Forms HIPAA compliant before using the Workspace service to collect, store, or ... Read more
April 21, 2023 HB 300 Training Requirements Information on the HB 300 training requirements for companies, organizations, and individuals that do business with Texas residents that involves access to protected health information ... Read more
April 19, 2023 HHS Publishes New Resources for Improving Healthcare Cybersecurity The Health Sector Coordinating Council Cybersecurity Working Group and the HHS 405(d) Program have published three additional resources for the healthcare sector to help them ... Read more
April 12, 2023 Healthcare Providers, Google Meet and HIPAA Compliance For the past few years, the good faith use of Google Meet and HIPAA compliance has not been an issue for healthcare providers due to ... Read more
April 7, 2023 Phishers Turn to Telegram to Market Their Kits and Services Cybercriminals are increasingly turning to Telegram to share tactics and market their services, especially threat actors specializing in phishing, according to Kaspersky. The phishing community ... Read more
March 15, 2023 March 2023 Patch Tuesday: Microsoft Fixes 83 Flaws, Including 2 Zero-Day Bugs Microsoft released patches to fix 83 vulnerabilities on March 2023 Patch Tuesday, including two actively exploited zero-day flaws, one in Outlook and one in Windows ... Read more
March 13, 2023 International Law Enforcement Operation Takes Down NetWire RAT An international law enforcement operation has resulted in the seizure of the infrastructure used to support the NetWire remote access Trojan (RAT). NetWire was first ... Read more
March 6, 2023 FTC Proposes Multi-Million-Dollar Penalty for BetterHelp to Resolve Consumer Privacy Violations The Federal Trade Commission (FTC) has announced another enforcement action stemming from the disclosure of consumers’ sensitive health information to marketing companies for advertising purposes. ... Read more
February 8, 2023 Dashlane Publishes Password Manager Source Code The password manager provider Dashlane has made the surprising announcement that the source code for its mobile app has been released on GitHub, in what ... Read more
February 1, 2023 Spate of DDoS Attacks on Hospitals as Hacktivist Group Responds to Increased Support for Ukraine Healthcare providers in the United States and other NATO countries have been warned about the risk of distributed denial of service (DDoS) attacks by the ... Read more
January 23, 2023 Some Popular Password Managers Found to Auto-Fill Passwords on Untrusted Websites Last week, Google announced that it had discovered a security issue with certain password managers, which could be tricked into autosuggesting passwords on untrusted pages. ... Read more
January 15, 2023 What is HIPAA Email Archiving Compliance? HIPAA email archiving compliance is an alternative way to describe HIPAA compliant email archiving. However, there is more than one way to archive emails; and ... Read more
January 3, 2023 LockBit Ransomware Gang Apologizes for Attack on Canadian Children’s Hospital An affiliate of the LockBit ransomware gang recently conducted an attack on the Hospital for Sick Children (SickKids) in Toronto, Canada. The attack occurred on ... Read more
December 29, 2022 270,000 Patients Affected by Louisiana Hospital Cyberattack Lake Charles Memorial Health System has confirmed that the sensitive information of almost 270,000 patients was compromised in an October 2022 cyberattack. The attack was ... Read more
December 21, 2022 Fortnite Developer Agrees to Pay $520 Million to Settle FTC Complaint Epic Games, the developer of the hugely popular battle royale game Fortnite, has agreed to pay $520 million to settle claims that it violated the ... Read more
December 11, 2022 HIPAA and Pictures – The Challenge of Compliance The relationship between HIPAA and pictures is a challenging area of compliance – especially for healthcare providers who may often receive unsolicited images that do ... Read more
December 9, 2022 Bitwarden Adds Passwordless Authentication to its Password Manager Password managers improve security by making it easy for users to set strong and unique passwords for their accounts. They also make logging in convenient, ... Read more
December 3, 2022 What Does Pharmacy HIPAA Compliance Consist Of? Pharmacy HIPAA compliance consists of meeting the requirements of the HIPAA Administrative Requirements, the Privacy Rule, the Security Rule, and the Breach Notification Rule. However, ... Read more
December 1, 2022 HIPAA Compliance for Dental Offices HIPAA compliance for dental offices is not as straightforward as complying with the standards of the Privacy, Security, and Breach Notification Rules because there are ... Read more
November 15, 2022 What are the HIPAA Rules for Medical Devices? Following the introduction of the HITECH Act and the passing of the HIPAA Privacy and Security Rules, Pharmaceutical companies and medical device manufacturers have had ... Read more
October 31, 2022 Why You Stop Using Your Web Browser as a Password Manager Passwords are often all that stands between a cybercriminal and your sensitive personal information. If the password for an online account is guessed, all information ... Read more
October 20, 2022 Information of up to 3 Million Advocate Aurora Health Patients Impermissibly Disclosed to Meta and Others Advocate Aurora Health has recently announced that patient data has been impermissibly disclosed to Meta/Facebook and Google as a result of the use of third-party ... Read more
October 12, 2022 October Patch Tuesday: 90+ Vulnerabilities Patched, but Not ProxyNotShell Flaws Microsoft released patches to fix 96 vulnerabilities across its suite of products on October 2022 Patch Tuesday, including fixes for two zero-day vulnerabilities, one of ... Read more
October 3, 2022 Safe and Secure Password Sharing for Businesses In an ideal world, every employee would have their own password for the accounts and resources they need to access from the moment they started ... Read more
September 23, 2022 Using a Business Password Manager to Share ePHI in Compliance with HIPAA Using a business password manager to share ePHI in compliance with HIPAA is a viable alternative to other secure forms of communication if your organization ... Read more
September 22, 2022 Why Changes May Soon be Required to ISO 27001 Password Management Policies Most accredited organization´s ISO 27001 password management policies are based on the 2013 version of the standard for information security management systems. However, with new ... Read more
September 10, 2022 Is the Use of Mandrill by Healthcare Organizations HIPAA Compliant? The leading automated email marketing platform Mandrill is a transactional email service that MailChimp provides. This software allows companies to automatically broadcast emails to customers ... Read more
August 17, 2022 2022 Sees Major Increase in Malicious Browser Downloads According to Kaspersky, in H1, 2022, 1,300,000 attempts were made to install malicious browser extensions, which is a substantial increase from 2021, when 1,823,263 attempts ... Read more