Risk Assessments/Management

The Department of Health and Human Services Cybersecurity Coordination Center detailed a number legitimate security tools most often abused by threat actors, like Cobalt Strike and PowerShell. Mitigation measures, however, are not as straightforward as patching or applying set security measures.

Challenges facing many providers can’t be boiled down into a singular problem or solution, and current assessments of risk could leave a vulnerable market unable to see the forest through the trees.

A new HHS alert sheds light on past and current spear-phishing and supply chain attacks against healthcare and pharma sectors by the Chinese state-backed threat group.

The Cybersecurity Solarium Commission emphasized that the U.S. could only have lasting cyber resilience should attention, investments, and agility to adapt to evolving threats continue, reports The Record, a news site by cybersecurity firm Recorded Future.

NIH says it relies on grantees to protect health information, intellectual property, but OIG says data could be at risk without program controls.

Medtronic MiniMed insulin pumps are vulnerable to a highly specific attack scenario that would interfere with the flow of insulin.

For best results, security teams should take an empathetic approach to insider security risk.

Security pros in 7 of 8 countries surveyed found that cyber threats were the dominant risk to the business, according to a study by insurance firm Hiscox.