New & Notable
Medtronic notifies impacted patients of data breach tied to April hack
While the total number of impacted individuals has not yet appeared on OCR's breach portal, Medtronic issued a notice to patients, and state attorney general breach reports have been trickling in.
Remote desktop tools offer hackers a front door to healthcare networks: report
As hackers increasingly exploit poorly configured remote management tools to gain broad access to clinical systems, a new report says that no other industry sees remote desktop exploitation at this scale.
Healthcare AI platform Xsolis suffers data breach impacting 1.4M individuals
The third-party data breach impacted patients at Mayo Clinic, UW Medicine, VHC Health and more.
ShinyHunters threatens to leak One Medical Seniors patient data
Cyber extortion group ShinyHunters claimed to have exfiltrated 8.8 terabytes of data from One Medical Seniors, threatening to publish it if the Amazon-owned company refuses to pay.
Check Point warns of zero-day flaw targeted by ransomware affiliate
— Cybersecurity DiveHealthcare Strategies: A Podcast
-
A podcast for healthcare professionals seeking solutions to today's and tomorrow's top challenges. Hosted by the editors of Xtelligent Healthcare Media, this podcast series focuses on real-world use cases that are leading to tangible improvements in care quality, outcomes, and cost.
Guests from leading provider, payer, government, and other organizations share their approaches to transforming healthcare in a meaningful and lasting way.
View All Episodes
Latest News
-
Organizations struggle with third-party risk management after vendor approval
Healthcare organizations are diligent about third-party risk management during vendor assessment and procurement, but falter in ongoing lifecycle oversight, new research reveals.
-
New HSCC guidance confronts AI cyber risk, champions governance
HSCC released its latest installment in a series of AI-specific publications aimed at helping healthcare organizations securely adopt AI.
-
AHA urges court to dismiss tracking tech lawsuit against Endeavor Health
The AHA argued that hospitals' use of common online analytics tools serves a legitimate purpose rather than a criminal one, making the complaint against Endeavor Health invalid.
-
Healthcare embraces AI while facing an identity security gap: report
Most healthcare organizations anticipate AI-driven attacks on their identity infrastructure, but less than a third are very confident they could regain control if an AI agent exposed admin credentials.
-
Third-party pixel use greatly increases healthcare data breach risk: study
The use of third-party tracking pixels at hospitals increased breach risk by 46%, an analysis of 12 years of historical pixel usage data revealed.
-
Health-ISAC: How Claude Mythos could impact healthcare cybersecurity
Claude Mythos has the potential to enhance global cybersecurity or undermine it by becoming a weapon in the hands of threat actors.
Features
-
Pennsylvania vs. Character.AI: What the lawsuit signals for the AI legal landscape
The state of Pennsylvania sued Character.AI, alleging that its chatbot violated the Medical Practice Act by posing as a licensed psychiatrist.
-
Georgia Tech builds network sandbox to test hospital cyber defenses
With ARPA-H funding, Georgia Tech researchers are building a platform that emulates a hospital's network, enabling them to identify and fix vulnerabilities without risking patient care.
-
OCR director defends HIPAA updates: "The cost of doing nothing is very high"
OCR Director Paula M. Stannard addressed concerns about proposed HIPAA Security Rule updates, but said OCR has yet to decide which, if any, of the proposals will ultimately be finalized.
-
Managing shadow AI risks as healthcare embraces innovation
At HIMSS, experts spoke about managing shadow AI risk with governance, education and technical safeguards.