From Futurism:
DARPA Is Planning to Hack the Human Brain to Let Us “Upload” Skills
"In March 2016, DARPA — the U.S. military’s “mad science” branch — announced their Targeted Neuroplasticity Training (TNT) program. The TNT program aims to explore various safe neurostimulation methods for activating synaptic plasticity, which is the brain’s ability to alter the connecting points between neurons — a requirement for learning. DARPA hopes that building up that ability by subjecting the nervous system to a kind of workout regimen will enable the brain to learn more quickly."
The purpose of this blog is to help small-medium businesses (SMB's) deal effectively with their unique cyber security needs. With over 15 years experience in IT and cyber security I will show SMB's how they can leverage their limited resources to develop effective cyber defenses to the most common threats using information security best practices and no/low cost tools.
LinkedIn: http://www.linkedin.com/in/ecissorsky/
Twitter: @ecissorsky
Showing posts with label Healthcare. Show all posts
Showing posts with label Healthcare. Show all posts
Wednesday, May 3, 2017
Healthcare Breaches Hit All-Time High in 2016
From Dark Reading:
Healthcare Breaches Hit All-Time High in 2016
"More than 300 healthcare businesses reported data breaches in 2016, but a drop in leaked records put fewer Americans at risk.
A record-breaking 328 healthcare businesses reported data breaches in 2016, surpassing the record of 268 set one year prior. Healthcare records of about 16.6 million Americans were exposed due to hacks, lost or stolen devices, unauthorized disclosure, and other activity."
Healthcare Breaches Hit All-Time High in 2016
"More than 300 healthcare businesses reported data breaches in 2016, but a drop in leaked records put fewer Americans at risk.
A record-breaking 328 healthcare businesses reported data breaches in 2016, surpassing the record of 268 set one year prior. Healthcare records of about 16.6 million Americans were exposed due to hacks, lost or stolen devices, unauthorized disclosure, and other activity."
Wednesday, July 22, 2015
Healthcare Hacker Attacks: The Impact
From Data Breach Today:
Healthcare Hacker Attacks: The Impact
The recent string of major hacker attacks in the healthcare sector, including the cyber-attack on UCLA Health, calls attention to the urgent need for organizations to step up their security programs.
Security experts say healthcare organizations need to carefully reassess their risks and then take appropriate security measures, which, in many cases, will include implementing multifactor authentication; improving breach monitoring and detection; and ramping up staff security education, among other steps.
Healthcare Hacker Attacks: The Impact
The recent string of major hacker attacks in the healthcare sector, including the cyber-attack on UCLA Health, calls attention to the urgent need for organizations to step up their security programs.
Security experts say healthcare organizations need to carefully reassess their risks and then take appropriate security measures, which, in many cases, will include implementing multifactor authentication; improving breach monitoring and detection; and ramping up staff security education, among other steps.
Monday, July 20, 2015
Why this doctor posted his medical history online for anyone to see
From Sophos Naked Security:
Why this doctor posted his medical history online for anyone to see
Would you want your friends and family to know your entire medical history?
How about sharing your personal health information with your employer, potential employers, insurance companies - anyone at all?
One doctor, John D. Halamka, MD, has posted his entire medical history online, and he wants others to do the same.
Why this doctor posted his medical history online for anyone to see
Would you want your friends and family to know your entire medical history?
How about sharing your personal health information with your employer, potential employers, insurance companies - anyone at all?
One doctor, John D. Halamka, MD, has posted his entire medical history online, and he wants others to do the same.
UCLA Health attacked, data on up to 4.5 million individuals at risk
From SC Magazine:
UCLA Health attacked, data on up to 4.5 million individuals at risk
UCLA Health announced on Friday that attackers accessed parts of its network containing personal and medical information on as many as 4.5 million individuals.
According to a release posted to the website, UCLA Health detected suspicious activity on its network on October 2014, and determined on May 5 that attackers accessed parts of the network containing information such as names, addresses, dates of birth, Social Security numbers, medical record numbers, Medicare or health plan ID numbers and some medical information.
UCLA Health attacked, data on up to 4.5 million individuals at risk
UCLA Health announced on Friday that attackers accessed parts of its network containing personal and medical information on as many as 4.5 million individuals.
According to a release posted to the website, UCLA Health detected suspicious activity on its network on October 2014, and determined on May 5 that attackers accessed parts of the network containing information such as names, addresses, dates of birth, Social Security numbers, medical record numbers, Medicare or health plan ID numbers and some medical information.
Wednesday, July 15, 2015
Hospital Slammed With $218,000 HIPAA Fine
From Data Breach Today:
Hospital Slammed With $218,000 HIPAA Fine
Federal regulators have slapped a Boston area hospital with a $218,000 HIPAA penalty after an investigation following two security incidents. One involved staff members using an Internet site to share documents containing patient data without first assessing risks. The other involved the theft of a worker's personally owned unencrypted laptop and storage device.
The Department of Health and Human Services' Office for Civil Rights says it has entered a resolution agreement with St. Elizabeth's Medical Center that also includes a "robust" corrective action plan to correct deficiencies in the hospital's HIPAA compliance program.
Hospital Slammed With $218,000 HIPAA Fine
Federal regulators have slapped a Boston area hospital with a $218,000 HIPAA penalty after an investigation following two security incidents. One involved staff members using an Internet site to share documents containing patient data without first assessing risks. The other involved the theft of a worker's personally owned unencrypted laptop and storage device.
The Department of Health and Human Services' Office for Civil Rights says it has entered a resolution agreement with St. Elizabeth's Medical Center that also includes a "robust" corrective action plan to correct deficiencies in the hospital's HIPAA compliance program.
BCBS Plans Offer Blanket ID Protection
From Data Breach Today:
BCBS Plans Offer Blanket ID Protection
In the wake of large hacking attacks against several of its affiliates in recent months, the Blue Cross Blue Shield Association says all 36 of its affiliated health plans will begin offering free identity protection services to their members for as long as they're enrolled in insurance coverage. The services will include credit monitoring as well as fraud detection and resolution.
Although details of the extraordinary offer are still being worked out, the association says the ID protection services will be available no later than Jan. 1, 2016, to all 106 million individuals who are members of Blues plans nationwide. Individual plans will be reaching out to members, who can opt in to sign up for the services, a BCBSA spokeswoman tells Information Security Media Group.
BCBS Plans Offer Blanket ID Protection
In the wake of large hacking attacks against several of its affiliates in recent months, the Blue Cross Blue Shield Association says all 36 of its affiliated health plans will begin offering free identity protection services to their members for as long as they're enrolled in insurance coverage. The services will include credit monitoring as well as fraud detection and resolution.
Although details of the extraordinary offer are still being worked out, the association says the ID protection services will be available no later than Jan. 1, 2016, to all 106 million individuals who are members of Blues plans nationwide. Individual plans will be reaching out to members, who can opt in to sign up for the services, a BCBSA spokeswoman tells Information Security Media Group.
Tuesday, May 12, 2015
Experts urge cautious use of wireless devices as health effects reassessed
From The Globe and Mail:
Experts urge cautious use of wireless devices as health effects reassessed
Wireless devices such as smartphones and tablets have certainly made staying in touch and plugging into the digital world easier and more convenient. But the increasingly ubiquitous nature of the technology is also raising concerns about possible adverse health effects from exposure to the electromagnetic radio-frequency waves that these devices emit.
Experts urge cautious use of wireless devices as health effects reassessed
Wireless devices such as smartphones and tablets have certainly made staying in touch and plugging into the digital world easier and more convenient. But the increasingly ubiquitous nature of the technology is also raising concerns about possible adverse health effects from exposure to the electromagnetic radio-frequency waves that these devices emit.
10 Security Questions To Ask A Cloud Service Provider
From Dark Reading:
10 Security Questions To Ask A Cloud Service Provider
As security teams try to help line-of-business users and other IT practitioners take advantage of cloud benefits as safely as possible, they're increasingly stepping into the role of trusted advisor. The scalability, flexibility, and convenience of software-as-a-service (SaaS), infrastructure-as-a-service (IaaS), and platform-as-a-service (PaaS) offerings frequently come at the cost of added risk to the business. It is up to information security pros to help evaluate potential providers to best evaluate where those risks are coming from.
10 Security Questions To Ask A Cloud Service Provider
As security teams try to help line-of-business users and other IT practitioners take advantage of cloud benefits as safely as possible, they're increasingly stepping into the role of trusted advisor. The scalability, flexibility, and convenience of software-as-a-service (SaaS), infrastructure-as-a-service (IaaS), and platform-as-a-service (PaaS) offerings frequently come at the cost of added risk to the business. It is up to information security pros to help evaluate potential providers to best evaluate where those risks are coming from.
Cane uses facial recognition to steer the blind to friends and family
From Sophos Naked Security:
Cane uses facial recognition to steer the blind to friends and family
Students at Birmingham City University in the UK have created a cane that recognises familiar faces and vibrates to let its blind owner know that they're near people they know.
Cane uses facial recognition to steer the blind to friends and family
Students at Birmingham City University in the UK have created a cane that recognises familiar faces and vibrates to let its blind owner know that they're near people they know.
Saturday, May 9, 2015
Cyber-Attack Risk Mitigation: Key Steps
This is a must read/listen for those in the healthcare sector.
From Data Breach Today:
Cyber-Attack Risk Mitigation: Key Steps
Healthcare organizations need to take several key steps to protect their environments from the type of cyber-attacks that recently affected Anthem Inc. and Premera Blue Cross, says security expert Mac McMillan.
"If we could just start eliminating some of the easy ways that attackers can get in, that more than anything will have the biggest impact," McMillan says in an interview with Information Security Media Group at the HIMSS 2015 Conference in Chicago.
From Data Breach Today:
Cyber-Attack Risk Mitigation: Key Steps
Healthcare organizations need to take several key steps to protect their environments from the type of cyber-attacks that recently affected Anthem Inc. and Premera Blue Cross, says security expert Mac McMillan.
"If we could just start eliminating some of the easy ways that attackers can get in, that more than anything will have the biggest impact," McMillan says in an interview with Information Security Media Group at the HIMSS 2015 Conference in Chicago.
6 Questions About the Partners Breach
From Data Breach Today:
6 Questions About the Partners Breach
The number of online attacks that result in the theft of personal health information continues to rise.
The latest organization to disclose such a breach is Boston-based Partners HealthCare System (see Partners HealthCare Reports Breach).
On April 30, the integrated health delivery network - which operates several hospitals, including Massachusetts General - said in a statement that "a group of Partners HealthCare workforce members" received - and responded - to phishing emails, resulting in the exposure of about 3,300 patients' Social Security numbers and clinical details, amongst other information.
6 Questions About the Partners Breach
The number of online attacks that result in the theft of personal health information continues to rise.
The latest organization to disclose such a breach is Boston-based Partners HealthCare System (see Partners HealthCare Reports Breach).
On April 30, the integrated health delivery network - which operates several hospitals, including Massachusetts General - said in a statement that "a group of Partners HealthCare workforce members" received - and responded - to phishing emails, resulting in the exposure of about 3,300 patients' Social Security numbers and clinical details, amongst other information.
Friday, May 8, 2015
2015-05-08 Link of the Day: Security Risk Assessment Tool
This neat little application is brought to you by HealthIT.gov. It is designed to assist small to medium medical practices perform risk assessments. The tool will also assist with HIPAA compliance.
Security Risk Assessment Tool (SRA Tool)
The Office of the National Coordinator for Health Information Technology (ONC) recognizes that conducting a risk assessment can be a challenging task. That’s why ONC, in collaboration with the HHS Office for Civil Rights (OCR) and the HHS Office of the General Counsel (OGC), developed a downloadable SRA Tool [.exe - 66 MB] to help guide you through the process. This tool is not required by the HIPAA Security Rule, but is meant to assist providers and professionals as they perform a risk assessment.
Security Risk Assessment Tool (SRA Tool)
The Office of the National Coordinator for Health Information Technology (ONC) recognizes that conducting a risk assessment can be a challenging task. That’s why ONC, in collaboration with the HHS Office for Civil Rights (OCR) and the HHS Office of the General Counsel (OGC), developed a downloadable SRA Tool [.exe - 66 MB] to help guide you through the process. This tool is not required by the HIPAA Security Rule, but is meant to assist providers and professionals as they perform a risk assessment.
Thursday, May 7, 2015
Healthcare Data Breaches From Cyberattacks, Criminals Eclipse Employee Error For The First Time
From Dark Reading:
Healthcare Data Breaches From Cyberattacks, Criminals Eclipse Employee Error For The First Time
Cybercriminals and nation-state actors are indeed targeting healthcare organizations for their valuable data: cyberattacks and physical criminal activity now have officially surpassed insider negligence as the main cause of a data breach in healthcare organizations.
Healthcare Data Breaches From Cyberattacks, Criminals Eclipse Employee Error For The First Time
Cybercriminals and nation-state actors are indeed targeting healthcare organizations for their valuable data: cyberattacks and physical criminal activity now have officially surpassed insider negligence as the main cause of a data breach in healthcare organizations.
Wednesday, May 6, 2015
Criminal attacks in healthcare are up 125% since 2010
From Help Net Security:
Criminal attacks in healthcare are up 125% since 2010
The healthcare industry is experiencing a surge in data breaches, security incidents, and criminal attacks—exposing millions of patients and their medical records, according to the Ponemon Institute.
Criminal attacks in healthcare are up 125% since 2010
The healthcare industry is experiencing a surge in data breaches, security incidents, and criminal attacks—exposing millions of patients and their medical records, according to the Ponemon Institute.
Tuesday, May 5, 2015
Bugs in the hospital: how to pwn your own pethidine machine
From Sophos Naked Security:
Bugs in the hospital: how to pwn your own pethidine machine
Naked Security reader Ethan alerted us to a disappointing bug that was recently logged in NVD, the US National Vulnerability Database.
NVD is hosted at NIST, the US National Institute of Standards and Technology, and sponsored by the US Computer Emergency Readiness Team, better known as US-CERT.
Bugs in the hospital: how to pwn your own pethidine machine
Naked Security reader Ethan alerted us to a disappointing bug that was recently logged in NVD, the US National Vulnerability Database.
NVD is hosted at NIST, the US National Institute of Standards and Technology, and sponsored by the US Computer Emergency Readiness Team, better known as US-CERT.
Wednesday, April 29, 2015
Remotely operated surgery robot is easy to e-hijack, researchers find
From Sophos Naked Security:
Remotely operated surgery robot is easy to e-hijack, researchers find
Nothing like having a squid-like alien embryo extracted from your abdomen to make you appreciate automated surgery.
Alas, outside of science fiction, there's a flip side to the world of robotic surgery, as computer security researchers at the University of Washington have found.
Remotely operated surgery robot is easy to e-hijack, researchers find
Nothing like having a squid-like alien embryo extracted from your abdomen to make you appreciate automated surgery.
Alas, outside of science fiction, there's a flip side to the world of robotic surgery, as computer security researchers at the University of Washington have found.
Friday, March 13, 2015
Biometrics Is Helping Defend Against Cyber Attacks in Health-Care Industry
Note: Look at source, may be a little biased.
From Security Sales & Integration:
Biometrics Is Helping Defend Against Cyber Attacks in Health-Care Industry
To help prevent cyber espionage and enhance patient safety, medical companies have begun adopting an array of biometrics security systems that use data from a patient’s fingerprint, iris, veins or face. The new technologies are intended to deter the incentive for hacking incidents by removing reliance on information that’s easy to steal and can easily identify patients.
From Security Sales & Integration:
Biometrics Is Helping Defend Against Cyber Attacks in Health-Care Industry
To help prevent cyber espionage and enhance patient safety, medical companies have begun adopting an array of biometrics security systems that use data from a patient’s fingerprint, iris, veins or face. The new technologies are intended to deter the incentive for hacking incidents by removing reliance on information that’s easy to steal and can easily identify patients.
Thursday, March 12, 2015
Hackers target health care as industry goes digital
From CSO Online:
Hackers target health care as industry goes digital
With more health providers and insurers incorporating IT into clinical care, hackers are viewing the health care industry as their next target.
"Cybercriminals know that the health industry is moving into EHRs and there's more data to steal," said Ann Peterson, program director at the Medical Identity Fraud Alliance, an organization that works to reduce medical fraud.
Hackers target health care as industry goes digital
With more health providers and insurers incorporating IT into clinical care, hackers are viewing the health care industry as their next target.
"Cybercriminals know that the health industry is moving into EHRs and there's more data to steal," said Ann Peterson, program director at the Medical Identity Fraud Alliance, an organization that works to reduce medical fraud.
Medical identity theft affected two million victims in 2014
From Help Net Security:
Medical identity theft affected two million victims in 2014
The number of patients affected by medical identity theft increased nearly 22 percent in the last year, an increase of nearly half a million victims since 2013.
Medical identity theft affected two million victims in 2014
The number of patients affected by medical identity theft increased nearly 22 percent in the last year, an increase of nearly half a million victims since 2013.
Subscribe to:
Posts (Atom)