Risk Assessments/Management

The first HHS OCR enforcement action of 2022 settles four potential HIPAA compliance failures with three dental practices and a psychiatric medical services provider, two of which over right of access violations.

The bill would require CISA and HHS to enter into a collaborative agreement around improving cybersecurity in the healthcare and public health sectors, with CISA ultimately charged with defining what that means.

This week’s healthcare data breach includes multiple ransomware-related data access incidents and led by a Horizon Actuarial data theft and extortion incident that involved MLB benefit plan member data.

Rachel Tobac is a hacker and the CEO of SocialProof Security, but her behavioral science and neuropsychology background is nontraditional for the information security field. So how does she use that background to hack people?

Security teams need to focus more on preventing insider attacks in the wake of the Okta breach.

JFrog researchers say there’s a high chance some developers might be fooled by this typosquatting attack.

A new Health-ISAC report shows healthcare security leaders are aware of the biggest cybersecurity threats, but communication gaps hinder investments and imparting threat intelligence to boards.