Privacy & Security

The U.S. Department of Health and Human Services' cybersecurity arm said this week that the operation has not claimed a victim since last October.

While compliance-based frameworks are not without merit, it is important that they be viewed as minimum acceptable standards and not as end goals.

Health-ISAC chief security officer Errol Weiss discusses ransomware and risks to the healthcare industry this year, including spear phishing and third-party breaches.

In a preview of her HIMSS22 session, Tamra Durfee explains the importance of securing medical devices from a patient safety perspective and outlines key first steps for getting started.

This week's top stories include SCOTUS striking down a COVID-19 vaccine mandate, while upholding another one for healthcare workers at facilities that accept Medicare and Medicaid funding, and warnings of threat actors leveraging flaws in Log4J.

Dr. Dan Golder discusses how he believes TEFCA implementation will affect organizations at multiple levels of the healthcare industry.

New York Attorney General Letitia James announced this week that the vision-coverage benefits provider had also agreed to enact a series of measures to protect customer information.

Meanwhile, the Cybersecurity and Infrastructure Security Agency says "every organization in the United States" is at risk from cyber threats.

The hack allegedly involves the personal data of over 20,000 people.

According to the International Committee of the Red Cross, some of the data belonged to "highly vulnerable" individuals, including missing persons and their families.