Privacy & Security

When employees say yes to unsolicited push notifications, they effectively allow a malicious actor to bypass the controls offered by two-factor authentication – and open a new vulnerability for phishing attacks, or "phushing."

This week's top stories include providers looking for an extension of the pandemic public health emergency that created waivers and flexibilities, and Oracle databases powering Cerner systems at DOD, Coast Guard and VA sites went offline for hours.

The Cybersecurity and Infrastructure Security Agency released information detailing who should report incidents and what should be included.

The agency is seeking stakeholder feedback on the guidance, which seeks to clearly outline its recommendations for premarket submission content when it comes to cybersecurity concerns. 

The addition of its technology will help secure third-party digital identities – "critical, but often overlooked and vulnerable points of access."

"They have already compromised healthcare organizations and have no reason to stop," said the Health Sector Cybersecurity Coordination Center about the group known as Lapsus$.

Clinicians at dozens of Defense Department, Coast Guard and Veterans Affairs sites were unable to update medical records for hours this past Wednesday.

Experts say preparedness is stymied by funding gaps and complexity, according to Brussels-based Frieda Klotz.

The State of Connecticut Auditors of Public Accounts found that the Connecticut Health Insurance Exchange experienced 44 breaches between July 2017 and March 2021.