Attackers are constantly testing new combinations of tactics to improve their success rates, such as a recently discovered and widespread phishing scam that uses layering and numbering techniques to hide its nefarious script and…
Continue Reading
Generative artificial intelligence is making it easier to harvest credentials. Phishing emails written by generative AI had a click-through rate of 54%, compared with 12% for those written manually, per the report.In one instance,…
Continue Reading
With the increasing digital transformation of healthcare and improvements in the quality of data, IT systems in healthcare are becoming an increasingly attractive target for malicious actors. A cyberattack can cripple an institution, cause…
Continue Reading
Why Healthcare Systems Are Targeted
Greg Young, vice president of cybersecurity at Trend Micro, says an organization’s biggest vulnerability is simply being in the healthcare industry.
“The amount of key data within these organizations is a…
The Security Incident
A phishing attack between April-June 2019 compromised eight employee email accounts at Solara Medical Supplies, exposing sensitive data of 114,000+ individuals.
Impact and Information Exposed
Names
Social Security numbers
Bank details
Patient login credentials
Medical diagnoses
Contact information
Investigation Findings
HHS…
Understanding the Communication Security Challenge
Healthcare organizations routinely make outbound calls to patients, yet unlike in-person visits, patients have no reliable way to verify the caller’s authenticity. This vulnerability creates opportunities for fraudsters to exploit…
Top News
HHS OCR fines Children’s Hospital Colorado $548,000 for HIPAA breaches involving phishing and cyberattacks.
In the first incident from 2020, an IT help desk technician disabled two-factor authentication for a physician’s account and…
Senior Care Leaders Should Be Aware of Common Vulnerabilities
In addition to phishing and stolen or compromised credentials, other notable causes of data breaches include misconfiguration, business email compromise, zero-day vulnerabilities, unpatched known vulnerabilities and…
As a radiologist, I know too well how cybersecurity is foundational to the day-to-day imaging work my team and I do. While radiologists are not experts in phishing, zero-trust, or threat hunting, we know…
Continue Reading
The Health Sector Cybersecurity Coordination Center published a sector alert to advise on mitigations to defend against U.S. and UK-based threat actors that initially targeted customer relationship management, business process outsourcing and technology companies…
Continue Reading
