November 3, 2020 City of New Haven Fined €202,000 for Failure to Terminate Former Employee’s Access Rights In Connecticut the City of New Haven has committed to paying a $203,400 financial penalty to the Department of Health and Human Services’ office for ... Read more
November 2, 2020 WordPress 5.5.2 Released: 10 Vulnerabilities Corrected Including 1 High-Severity Flaw Version 5.5.2 of the WordPress content management platform has been released. The latest WordPress version fixes 10 security vulnerabilities, including one high-severity flaw that could ... Read more
October 30, 2020 Ryuk Ransomware Gang Steps Up Attacks on U.S. Hospitals The U.S Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Health and Human ... Read more
October 28, 2020 78% of Microsoft 365 Administrators Have Not Enabled Multi-Factor Authentication Despite the risk of phishing attacks and email account compromises, 78% of Microsoft 365 admins have not enabled multi-factor authentication and 97% of all Microsoft ... Read more
October 19, 2020 Microsoft Issues Out-of-Band Updates to Correct Two RCE Flaws On Friday, Microsoft issued out-of-band patches to correct two flaws which could potentially lead to remote code execution. The flaws have been rated ‘important’ by ... Read more
October 16, 2020 Multi-State Breach Investigation Settled with Community Health Systems Paying $5 Million Penalty Tennessee-based Community Health Systems and subsidiary CHSPCS LLC have settled a multiple-state action with 28 state attorneys general for $5 million. A joint investigation was ... Read more
October 13, 2020 Microsoft Patches 11 Critical and 75 Important Flaws on October 2020 Patch Tuesday October 2020 Patch Tuesday has seen Microsoft issue patches to correct 87 flaws across its product range, including 11 Critical flaws and 75 Important vulnerabilities. ... Read more
October 13, 2020 What is the Legal Recommended Email Archiving Retention Period? Legal recommended email archiving retention periods differ considerably depending on the nature of a business’s operations and the regulations it is required to comply with. ... Read more
October 2, 2020 Emotet Campaign Impersonates Democratic National Convention An Emotet malware campaign is underway which has already targeted hundreds of organizations in the United States. The emails spoof the Democratic National Convention with ... Read more
September 29, 2020 Universal Health Services Ransomware Attack Cripples Hospitals Across the United States Universal Health Services (UHS) has suffered a ransomware attack that has taken IT systems out of action across its nationwide network of hospitals. UHS is ... Read more
September 21, 2020 7,777 Patients Impacted by Starling Physicians Email Breach Starling Physicians has begun contacting 7,777 patients to make them aware that a portion of their protected health information may have been accessed by an ... Read more
September 18, 2020 Ransomware Attack on Hospital Leads to the Death of a Patient A ransomware attack on a German hospital that took critical systems out of action and forced the cancellation of appointments and the temporary closure of ... Read more
September 16, 2020 Five OCR HIPAA Fines for HIPAA Right of Access Failures The Department of Health and Human Services’ Office for Civil Rights (OCR) has recently agreed to settle five HIPAA compliance cases that were investigated after ... Read more
September 9, 2020 Adobe Patches 12 Critical Flaws in Experience Manager, InDesign, and Framemaker Adobe has released patches to correct 18 flaws on September 2020 Patch Tuesday. The flaws exist in Adobe Experience Manager, Adobe InDesign, and Adobe Framemaker. ... Read more
September 7, 2020 Microsoft Will End Support for Adobe Flash Player on January 1, 2020 Microsoft has announced that web browser support for Adobe Flash Player will end on January 1, 2021. Adobe Flash Player will no longer be distributed ... Read more
August 18, 2020 Northern Light Health Foundation Alerts 657,392 Donors About Blackbaud Ransomware Attack The Brewer, ME-based integrated healthcare group, Northern Light Health Foundation, has revealed it has been impacted by the recent ransomware attack on Blackbaud Inc. The ... Read more
August 18, 2020 Google to Add MitM Protection Mechanism to Chrome 86 Warning Users About Insecure Forms Google has announced that the Google Chrome browser will soon alert individuals about insecure forms on websites. Google is planning on rolling out the new ... Read more
August 11, 2020 Microsoft Fixes 120 Vulnerabilities on August 2020 Patch Tuesday, Including 17 Critical Flaws August 2020 Patch Tuesday has seen Microsoft release 120 patches covering 13 products and a Servicing Stack Update for Windows 10 advisory. 17 of the ... Read more
August 11, 2020 Adobe Fixes 26 Vulnerabilities Including 11 Critical Flaws Adobe has released patches to address 26 vulnerabilities in Adobe Acrobat and Adobe Reader, including 11 flaws that have been rated critical. The critical flaws ... Read more
August 10, 2020 Phishing Attack Hits Children’s Hospital in Colorado Children’s Hospital Colorado is contacting 2,553 patients to inform them that some of their protected health information was held in an email account that was ... Read more
August 5, 2020 Online Shopping Scams Have Soared During the COVID-19 Pandemic There has been a major increase in online shopping scams during the COVID-19 pandemic, according to a recent public service announcement by the FBI. Reports ... Read more
July 28, 2020 Rhode Island Health System Hit with $1 Million Fine for Noncompliance with HIPAA Rules The Rhode Island non-profit health system, Lifespan Health System Affiliated Covered Entity (Lifespan), has been fined $1,040,000 by the Department of Health and Human Services’ ... Read more
July 22, 2020 Out of Band Update Corrects 12 Critical Flaws in Adobe Photoshop, Prelude and Bridge Adobe has issued an out of band update to correct 12 critical vulnerabilities in Adobe Photoshop, Adobe Prelude, and Adobe Bridge, and an information disclosure ... Read more
July 14, 2020 Maximum Severity Flaw in SAP Could Allow Full Takeover of Enterprise System The U.S. Department of Homeland Security’s Cybersecurity & Infrastructure Security Agency has issued an alert about a critical vulnerability in the SAP NetWeaver Application Server ... Read more
July 14, 2020 Healthcare Fiscal Management Ransomware Attack Impacts Up to 58,000 People The Wilmington, NC-based provider of self-pay conversion and insurance eligibility services to hospitals, clinics and physician groups, Healthcare Fiscal Management Inc. (HFMI), has revealed that ... Read more
July 13, 2020 Zoom Fixes Zero-Day Legacy Windows RCE Flaw A zero-day vulnerability in the Zoom Windows client that could potentially allow remote code execution has now been patched by Zoom. The flaw only affected ... Read more
July 10, 2020 96% of Companies are Concerned About Public Cloud Security While most companies have adopted the public cloud and have moved at least some of their workloads or infrastructure to the cloud, confidence in cloud ... Read more
July 3, 2020 Portals Accessed Using Stolen Credentials of Health Plan Members Independence Blue Cross, AmeriHealth HMO, Inc. and AmeriHealth Insurance Company of New Jersey have discovered hackers obtained access to pages in their member portals between ... Read more
July 3, 2020 Critical Vulnerabilities Identified in Apache Guacamole Remote Access System Security researchers have discovered multiple vulnerabilities in the Apache Guacamole remote access system used by thousands of companies to support home workers. Apache Guacamole is ... Read more
July 2, 2020 Microsoft Releases Out of Band Fixes for Two Serious Flaw in the Windows Codecs Library Microsoft has released an out of band update to correct two serious vulnerabilities in the Windows Codecs library, which, if exploited, could allow remote code ... Read more