Security

IT teams need strong visibility into their networks – and the ability to respond fast to neutralize polymorphic threats that aim to steal credentials, intercept MFA authentication codes or deceive users into downloading malicious software.

Securing a patchwork of IT systems can be a tall order for small facilities, but collaboration and info sharing is helpful, says one chief security officer.

The initial expiration of MITRE's contract for the Common Vulnerabilities and Exposures program was a shock to many cybersecurity experts. But the Cybersecurity and Infrastructure Security Agency quickly pledged that there would be no lapse in service.

ASTP has released the 2025 SAFER Guides, which aim to improve health systems' adherence to electronic health record best practices. They were updated by clinicians with informatics training and informaticians with clinical experience.

Also: Three partners will combine advanced analytics, social risk assessments and actuarial validation to measure the impacts of SDOH interventions.

The mass layoffs have severely undercut essential IT, policy and contracting functions, and sources say they fear critical expertise has been lost. The government could hire contractors to fill the gaps, putting ousted employees in an ethical bind.

After staff and program cuts at the U.S. Department of Veterans Affairs, lawmakers showcased how the loss of funding and employee expertise could affect care delivery for vets, data security for patients and more.

Improving cybersecurity despite resource challenges requires small healthcare providers to pull many support levers. "We need to move away from the idea that each rural hospital is solving these issues alone," says one infosec leader.

Now operating as ransomware-as-a-service, affiliates employ a double or triple extortion where they encrypt victim data, threaten to publicly release exfiltrated data if a ransom is not paid and may request an additional ransom.

The Senate Intelligence Committee's annual worldwide threats hearing touched on how U.S. defense agencies must partner with healthcare and other industries to neutralize threats from Volt Typhoon, Salt Typhoon and others.