Showing posts with label Healthcare. Show all posts
Showing posts with label Healthcare. Show all posts

Wednesday, May 3, 2017

DARPA Is Planning to Hack the Human Brain to Let Us “Upload” Skills

From Futurism:

DARPA Is Planning to Hack the Human Brain to Let Us “Upload” Skills

"In March 2016, DARPA — the U.S. military’s “mad science” branch — announced their Targeted Neuroplasticity Training (TNT) program. The TNT program aims to explore various safe neurostimulation methods for activating synaptic plasticity, which is the brain’s ability to alter the connecting points between neurons — a requirement for learning. DARPA hopes that building up that ability by subjecting the nervous system to a kind of workout regimen will enable the brain to learn more quickly."

Healthcare Breaches Hit All-Time High in 2016

From Dark Reading:

Healthcare Breaches Hit All-Time High in 2016

"More than 300 healthcare businesses reported data breaches in 2016, but a drop in leaked records put fewer Americans at risk.

A record-breaking 328 healthcare businesses reported data breaches in 2016, surpassing the record of 268 set one year prior. Healthcare records of about 16.6 million Americans were exposed due to hacks, lost or stolen devices, unauthorized disclosure, and other activity."

Wednesday, July 22, 2015

Healthcare Hacker Attacks: The Impact

From Data Breach Today:

Healthcare Hacker Attacks: The Impact

The recent string of major hacker attacks in the healthcare sector, including the cyber-attack on UCLA Health, calls attention to the urgent need for organizations to step up their security programs.

Security experts say healthcare organizations need to carefully reassess their risks and then take appropriate security measures, which, in many cases, will include implementing multifactor authentication; improving breach monitoring and detection; and ramping up staff security education, among other steps.

Monday, July 20, 2015

Why this doctor posted his medical history online for anyone to see

From Sophos Naked Security:

Why this doctor posted his medical history online for anyone to see

Would you want your friends and family to know your entire medical history?

How about sharing your personal health information with your employer, potential employers, insurance companies - anyone at all?

One doctor, John D. Halamka, MD, has posted his entire medical history online, and he wants others to do the same.

UCLA Health attacked, data on up to 4.5 million individuals at risk

From SC Magazine:

UCLA Health attacked, data on up to 4.5 million individuals at risk

UCLA Health announced on Friday that attackers accessed parts of its network containing personal and medical information on as many as 4.5 million individuals.

According to a release posted to the website, UCLA Health detected suspicious activity on its network on October 2014, and determined on May 5 that attackers accessed parts of the network containing information such as names, addresses, dates of birth, Social Security numbers, medical record numbers, Medicare or health plan ID numbers and some medical information.

Wednesday, July 15, 2015

Hospital Slammed With $218,000 HIPAA Fine

From Data Breach Today:

Hospital Slammed With $218,000 HIPAA Fine

Federal regulators have slapped a Boston area hospital with a $218,000 HIPAA penalty after an investigation following two security incidents. One involved staff members using an Internet site to share documents containing patient data without first assessing risks. The other involved the theft of a worker's personally owned unencrypted laptop and storage device.

The Department of Health and Human Services' Office for Civil Rights says it has entered a resolution agreement with St. Elizabeth's Medical Center that also includes a "robust" corrective action plan to correct deficiencies in the hospital's HIPAA compliance program.

BCBS Plans Offer Blanket ID Protection

From Data Breach Today:

BCBS Plans Offer Blanket ID Protection

In the wake of large hacking attacks against several of its affiliates in recent months, the Blue Cross Blue Shield Association says all 36 of its affiliated health plans will begin offering free identity protection services to their members for as long as they're enrolled in insurance coverage. The services will include credit monitoring as well as fraud detection and resolution.

Although details of the extraordinary offer are still being worked out, the association says the ID protection services will be available no later than Jan. 1, 2016, to all 106 million individuals who are members of Blues plans nationwide. Individual plans will be reaching out to members, who can opt in to sign up for the services, a BCBSA spokeswoman tells Information Security Media Group.

Tuesday, May 12, 2015

Experts urge cautious use of wireless devices as health effects reassessed

From The Globe and Mail:


Experts urge cautious use of wireless devices as health effects reassessed


Wireless devices such as smartphones and tablets have certainly made staying in touch and plugging into the digital world easier and more convenient. But the increasingly ubiquitous nature of the technology is also raising concerns about possible adverse health effects from exposure to the electromagnetic radio-frequency waves that these devices emit.

10 Security Questions To Ask A Cloud Service Provider

From Dark Reading:


10 Security Questions To Ask A Cloud Service Provider


As security teams try to help line-of-business users and other IT practitioners take advantage of cloud benefits as safely as possible, they're increasingly stepping into the role of trusted advisor. The scalability, flexibility, and convenience of software-as-a-service (SaaS), infrastructure-as-a-service  (IaaS), and platform-as-a-service (PaaS) offerings frequently come at the cost of added risk to the business. It is up to information security pros to help evaluate potential providers to best evaluate where those risks are coming from.

Cane uses facial recognition to steer the blind to friends and family

From Sophos Naked Security:


Cane uses facial recognition to steer the blind to friends and family


Students at Birmingham City University in the UK have created a cane that recognises familiar faces and vibrates to let its blind owner know that they're near people they know.

Saturday, May 9, 2015

Cyber-Attack Risk Mitigation: Key Steps

This is a must read/listen for those in the healthcare sector.

From Data Breach Today:

Cyber-Attack Risk Mitigation: Key Steps

Healthcare organizations need to take several key steps to protect their environments from the type of cyber-attacks that recently affected Anthem Inc. and Premera Blue Cross, says security expert Mac McMillan.

"If we could just start eliminating some of the easy ways that attackers can get in, that more than anything will have the biggest impact," McMillan says in an interview with Information Security Media Group at the HIMSS 2015 Conference in Chicago.

6 Questions About the Partners Breach

From Data Breach Today:

6 Questions About the Partners Breach

The number of online attacks that result in the theft of personal health information continues to rise.

The latest organization to disclose such a breach is Boston-based Partners HealthCare System (see Partners HealthCare Reports Breach).

On April 30, the integrated health delivery network - which operates several hospitals, including Massachusetts General - said in a statement that "a group of Partners HealthCare workforce members" received - and responded - to phishing emails, resulting in the exposure of about 3,300 patients' Social Security numbers and clinical details, amongst other information.

Friday, May 8, 2015

2015-05-08 Link of the Day: Security Risk Assessment Tool

This neat little application is brought to you by HealthIT.gov.  It is designed to assist small to medium medical practices perform risk assessments.  The tool will also assist with HIPAA compliance.


Security Risk Assessment Tool (SRA Tool)


The Office of the National Coordinator for Health Information Technology (ONC) recognizes that conducting a risk assessment can be a challenging task. That’s why ONC, in collaboration with the HHS Office for Civil Rights (OCR) and the HHS Office of the General Counsel (OGC), developed a downloadable SRA Tool [.exe - 66 MB] to help guide you through the process. This tool is not required by the HIPAA Security Rule, but is meant to assist providers and professionals as they perform a risk assessment.

Thursday, May 7, 2015

Healthcare Data Breaches From Cyberattacks, Criminals Eclipse Employee Error For The First Time

From Dark Reading:


Healthcare Data Breaches From Cyberattacks, Criminals Eclipse Employee Error For The First Time


Cybercriminals and nation-state actors are indeed targeting healthcare organizations for their valuable data:  cyberattacks and physical criminal activity now have officially surpassed insider negligence as the main cause of a data breach in healthcare organizations.

Wednesday, May 6, 2015

Criminal attacks in healthcare are up 125% since 2010

From Help Net Security:


Criminal attacks in healthcare are up 125% since 2010


The healthcare industry is experiencing a surge in data breaches, security incidents, and criminal attacks—exposing millions of patients and their medical records, according to the Ponemon Institute.


Tuesday, May 5, 2015

Bugs in the hospital: how to pwn your own pethidine machine

From Sophos Naked Security:


Bugs in the hospital: how to pwn your own pethidine machine


Naked Security reader Ethan alerted us to a disappointing bug that was recently logged in NVD, the US National Vulnerability Database.


NVD is hosted at NIST, the US National Institute of Standards and Technology, and sponsored by the US Computer Emergency Readiness Team, better known as US-CERT.

Wednesday, April 29, 2015

Remotely operated surgery robot is easy to e-hijack, researchers find

From Sophos Naked Security:

Remotely operated surgery robot is easy to e-hijack, researchers find

Nothing like having a squid-like alien embryo extracted from your abdomen to make you appreciate automated surgery.
 
Alas, outside of science fiction, there's a flip side to the world of robotic surgery, as computer security researchers at the University of Washington have found.

Friday, March 13, 2015

Biometrics Is Helping Defend Against Cyber Attacks in Health-Care Industry

Note: Look at source, may be a little biased.

From Security Sales & Integration:

Biometrics Is Helping Defend Against Cyber Attacks in Health-Care Industry

To help prevent cyber espionage and enhance patient safety, medical companies have begun adopting an array of biometrics security systems that use data from a patient’s fingerprint, iris, veins or face. The new technologies are intended to deter the incentive for hacking incidents by removing reliance on information that’s easy to steal and can easily identify patients.

Thursday, March 12, 2015

Hackers target health care as industry goes digital

From CSO Online:

Hackers target health care as industry goes digital

With more health providers and insurers incorporating IT into clinical care, hackers are viewing the health care industry as their next target.

"Cybercriminals know that the health industry is moving into EHRs and there's more data to steal," said Ann Peterson, program director at the Medical Identity Fraud Alliance, an organization that works to reduce medical fraud.

Medical identity theft affected two million victims in 2014

From Help Net Security:

Medical identity theft affected two million victims in 2014

The number of patients affected by medical identity theft increased nearly 22 percent in the last year, an increase of nearly half a million victims since 2013.