Privacy & Security

The agency says that FIN11 uses a variety of TTPs and has gained access to more organizations than it is able to monetize, choosing to initiate zero-day exploits based on an organization's location and security posture.

HHS Office for Civil Rights Director Melanie Rainer describes how her office is helping providers understand and meet their security and compliance requirements.

An April ransomware attack that compromised the PPI and PHI of some 2.5 million members has led to multiple class action lawsuits against the Massachusetts-based health plan and its parent company.

The Illinois Catholic health system has signed a nonbinding letter of intent with OSF Healthcare to acquire the Peru campus.

They say a vulnerability in MOVEit, a managed file transfer product from Progress Software that provides automated high-volume, HIPAA- and GDPR-compliant transfers, could leave hospitals or healthcare organizations at risk.

Reports of an alleged hack have no basis says the Health Ministry.

By using Nubeva's ransomware recovery tool, the small metro hospital reportedly reversed the encryption and restored critical systems quickly after a cyberattack. 

Three updates to Amazon HealthLake aim to help EHR and health IT developers reduce complex data exports, boost interoperability and maintain compliance with federal API and data exchange rules.

The health system is prioritizing "patient safety, privacy and ethical considerations" as it pushes forward to realize positive impacts from artificial intelligence and machine learning, says CIO Cris Ross.

Cybersecurity experts at HIMSS23 European Health Conference and Exhibition explain how in the era of decentralised healthcare, more emphasis should be put on resilience and preparing for recovery after attacks, rather than just preventative measures.