October is Cybersecurity Awareness Month and Tuesdays are Talent Tuesday. Healthcare’s cybersecurity challenges have expanded far beyond networks, endpoints, and EHRs. Today, one of the most urgent, and least prepared, areas of risk sits inside the clinical environment itself: co…
Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.
Dr. Rick Baehner, Abbott’s chief medical officer for precision oncology, spoke to MedTech Dive about how the new version of the Oncodetect test performs and the market it addresses.
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. [...]
Roundtable: An Orrick Conversation on Health Data Privacy - Transcript JD Supra
How to prepare for the proposed HIPAA Security Rule update with AWS Backup and the HIPAA Assistant Amazon Web Services (AWS)
Medtech CEOs and consultants advised focusing on a core market and preparing for complex processes in a highly regulated industry.
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses. Huntress Labs ranks the threats hitting organizations hardest, highlighting which attack techniques deserve imm…
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TL…
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary cod…
Torrance, United States / California, 27th October 2026, CyberNewswire
Massachusetts-based Brockton Neighborhood Health Center has agreed to pay up to $825,000 to settle class action litigation over a 2024 […] The post Brockton Neighborhood Health Center to Pay Up to $850,000 to Settle Breach Lawsuit appeared first on The HIPAA Journal.
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authen…
By Douglas B. Vandergraph - Healthcare transformation programs rarely fail because leaders lack ambition. They fail because the distance between strategy and execution is filled with dependencies that nobody fully owns. The post Why Healthcare Transformation Breaks Between Strate…
Nunca se escreveu tanto software quanto em 2026, e a fatia dele que passa por um teste de segurança encolheu. O NVD registrou mais de 72 mil vulnerabilidades-CVEs entre janeiro e setembro, contra 48.244 em todo o ano de 2025. O número subiu porque a quantidade de código em produç…
O grupo de ransomware Emperador incluiu a AB InBev em sua lista de vítimas, com a publicação detectada em 25 de outubro às 03h22 no horário UTC. O grupo alega ter 3,9 GB de dados internos da cervejaria e cobra 1 milhão de dólares em bitcoin. Nada disso foi confirmado pela empresa…
An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online check owners use to verify a Ke…
Data Breach Announced by NorthShore Health Centers The HIPAA Journal
NorthShore Health Centers, a nonprofit healthcare provider serving patients in Porter, Lake, La Porte, and Jasper Counties in Northwest Indiana, […] The post Data Breach Announced by NorthShore Health Centers appeared first on The HIPAA Journal.
Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and tailor phishing attempts to specific employees or organizations. Some fake login pages go beyond…
