March 30, 2021 Critical Flaws Identified in Facebook for WordPress Plugin A critical flaw with a CVSS score of 9.0 has been identified in the official Facebook for WordPress plugin, which is used on more than ... Read more
March 29, 2021 New Jersey Plastic Surgery Practice Pays $30K to OCR Settle HIPAA Right of Access Case The HHS’ Office for Civil Rights (OCR) has revealed a settlement has been agreed with Ridgewood, NJ-based Village Plastic Surgery to resolve a potential breach ... Read more
March 25, 2021 United States Data Protection and Privacy Laws Although not the first state law to address data protection and consumer privacy, the passage of the California Consumer Privacy Act (CCPA) made the headlines ... Read more
March 19, 2021 Internet Crime Complaints Increased by 69% in 2020 with $4.2 Billion in Losses to Cybercrime During the pandemic, cybercriminals stepped up their attacks on businesses and individuals and record numbers of complaints about cybercrime were filed with the Federal Bureau ... Read more
March 4, 2021 AllyAlign Health Ransomware Attack Impacts Tens of Thousands of Patients Following an attempted ransomware attack that took place November 13, 2020, AllyAlign Health breach alerts have been sent to make members and providers aware of ... Read more
February 25, 2021 Cisco Patches Critical Flaws in its Application Services Engine and ACI Multi-Site Orchestrator Cisco has released a patch to address a critical flaw in the API endpoint of the Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application ... Read more
February 24, 2021 U.S. Healthcare Data Breach Report for January 2021 January witnessed a 48% month-over-month drop in the number of large healthcare data breaches, down from 62 breach incidents in December to 32 in January, ... Read more
February 22, 2021 Harvard Eye Associates Pays Ransom to Recover Healthcare Data Stolen in Hacking Incident In California, Laguna Hills-based Harvard Eye Associates has been affected by a cyberattack on its online storage vendor and the protected health information (PHI) of ... Read more
February 18, 2021 US Healthcare Data Breach Report Shows Breaches Increased by 55% In 2020 An analysis of 2020 healthcare data breaches has been conducted by Bitglass that shows the extent to which the healthcare industry was targeted by hackers. ... Read more
February 10, 2021 Microsoft Fixes 56 Flaws on February 2021 Patch Tuesday Including 1 Zero Day Compared to previous months, February 2021 Patch Tuesday saw relatively few patches released by Microsoft to correct flaws across its range of products, although several ... Read more
February 5, 2021 U.S. Companies Slow to Terminate Access to Systems When Employees Leave the Company When an employee is terminated or leaves a company for other reasons, access to systems should be immediately revoked, but in the U.S., many companies ... Read more
January 27, 2021 Blackbaud Ransomware Attack Leads to Rady Children’s Hospital Class Action Lawsuit In May 2020, the cloud software group Blackbaud was targeted and attacked with ransomware. As is typical in human managed ransomware attacks, data was stolen ... Read more
January 25, 2021 2020 Saw 560 U.S. Healthcare Facilities Affected by Ransomware During 2020 – according to the latest State of Ransomware report from the New Zealand-based cybersecurity firm Emsisoft – healthcare, education, and government entities were ... Read more
January 21, 2021 Interpol Warns of Rise in Investment Scams Targeting Dating App Users With opportunities for meeting potential partners now limited due to the COVID-19 pandemic and many people isolated due to lockdown measures, use of dating apps ... Read more
January 21, 2021 Patients Rerouted to Other Hospitals After Cyberattack on Belgian Hospital A hospital in Belgium has suffered a cyberattack that has seen approximately between 40 and 80 of its 300 servers encrypted using Windows BitLocker. The ... Read more
January 14, 2021 Healthcare Sector Cyberattacks Have Increased by 45% in the Past 2 Months A recent joint CISA, FBI, and HHS cybersecurity alert warned that the healthcare sector was being targeted by threat actors who were deploying ransomware. Attacks ... Read more
January 13, 2021 Ransomware Attack Impacts Lake Region Healthcare On December 22, 2020, Minnesota-based Lake Region Healthcare discovered ransomware had been deployed on its network and the attackers gained access to its databases. The ... Read more
January 6, 2021 Ransomware Attacks on Healthcare Organizations Continue to Rise with Ryuk the Biggest Threat Cyberattacks on healthcare organizations have continued to increase over the past two months, according to research conducted by cybersecurity firm Check Point, and ransomware is ... Read more
January 4, 2021 Hidden Backdoor Identified in Zyxel Firewalls and AP Controllers A security researcher has identified a hidden backdoor in Zyxel firewalls and AP controllers, caused by the use of hardcoded administrative credentials for an account ... Read more
January 2, 2021 Wilmington Surgical Associates Ransomware Attack Impacts Over 14,000 Patients The NetWalker ransomware group has claimed it is behind a ransomware attack that took place on the North Carolina-based surgical center, Wilmington Surgical Associates in ... Read more
December 19, 2020 Three Vulnerabilities Identified in Medtronic MyCareLink Smart Patient Readers Three critical vulnerabilities have been found in Medtronic MyCareLink (MCL) Smart Patient Readers, which could be exploited by threat actors to gain access to protected ... Read more
December 3, 2020 Foreign APT Groups Targeting Think Tanks, Warns CISA/FBI The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a warning about ongoing cyberattacks on think tanks by ... Read more
November 24, 2020 Warning Issued After Discovery of Scores of Spoofed FBI Websites Scores of domains have been identified which spoof official Federal Bureau of Investigation (FBI) websites, prompting the FBI’s Internet Crime Complaint Center to issue a ... Read more
November 22, 2020 University of Cincinnati Medical Center HIPAA Right of Access Failure Results in $65,000 Fine The 18th HIPAA financial penalty of 2020, the 12th fine under its HIPAA Right of Access enforcement initiative, has been revealed by HHS’ Office for ... Read more
November 17, 2020 U.S. Data Breach Impacts 829,454 Luxottica Patients The largest eyewear firm globally, Luxottica, has had a number of its web portals targeted in a cyberattack that has resulted in a breach of ... Read more
November 16, 2020 Time to Switch from SMS and Phone-Based MFA to More Secure Authentication Methods Multi-factor authentication is an important security measure to prevent compromised credentials from being used to gain access to accounts and sensitive data, but not all ... Read more
November 10, 2020 Microsoft Fixes 112 Vulnerabilities Including 17 Critical Flaws November 2020 Patch Tuesday has seen Microsoft correct 112 vulnerabilities across its range of products, including 17 critical flaws. 93 of the vulnerabilities are rated ... Read more
November 10, 2020 Saint Francis Healthcare Data Breach Lawsuit Settled for $350,000 In relation to September 2019 ransomware attack on Ferguson Medical Group (FMG), a $350,000 settlement has been reached between Saint Francis Healthcare System and patients ... Read more
November 8, 2020 10th HIPAA Fine Under Right of Access Initiative Revealed by Office for Civil Rights The 10th financial penalty under its HIPAA Right of Access enforcement initiative has been revealed by the U.S. Department of Health and Human Services’ Office ... Read more
November 4, 2020 Adobe Update Corrects 14 Vulnerabilities in Acrobat and Reader Including 4 Critical Flaws Adobe has released an out-of-band update to correct several vulnerabilities in Adobe Acrobat and Adobe Reader, just a week before November Patch Tuesday when updates ... Read more