Healthcare organizations of all shapes and sizes will be held to a stricter standard of cybersecurity starting in 2025 with new proposed rules, but not all have the budget for it.
| LATEST SECURITY NEWS & COMMENTARY | New HIPAA Cybersecurity Rules Pull No Punches Healthcare organizations of all shapes and sizes will be held to a stricter standard of cybersecurity starting in 2025 with new proposed rules, but not all have the budget for it. CISA: Third-Party Data Breach Limited to Treasury Dept. The breach was carried out by exploiting CVE-2024-12356 in BeyondTrust cybersecurity company, just last week. Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer Cyberattackers injected the NFL Wild Card team's online Pro Shop with malicious code to steal credit-card data from 8,500 fans. FireScam Android Spyware Campaign Poses 'Significant Threat Worldwide' A fake Telegram Premium app delivers information-stealing malware, in a prime example of the rising threat of adversaries leveraging everyday applications, researchers say. Thousands of BeyondTrust Systems Remain Exposed Weeks after the critical vulnerability was reported and a hacking of the Treasury Department, nearly 9,000 BeyondTrust instances remain wide open to the Internet, researchers say -- though it's impossible to tell how many are still vulnerable. Pentagon Adds Chinese Gaming Giant Tencent to Federal Ban The sprawling social media and gaming platform says that being considered a Chinese military business must be a mistake. Unpatched Active Directory Flaw Can Crash Any Microsoft Server Windows servers are vulnerable to a dangerous LDAP vulnerability that could be used to crash multiple servers at once and should be patched immediately. Unconventional Cyberattacks Aim to Take Over PayPal Accounts Attackers are abusing a Microsoft 365 feature to send payment requests to users, tricking them into logging in to their accounts so attackers can seize control over them. Best Practices & Risks Considerations in LCNC and RPA Automation Low-code/no-code (LCNC) and robotic process automation (RPA) technologies allow companies to speed up development processes and reduce costs, but security is often overlooked. When this happens, the risks can outweigh the benefits. Cybercriminals Don't Care About National Cyber Policy We can't put defense on hold until Inauguration Day. MORE NEWS / MORE COMMENTARY | | | PRODUCTS & RELEASES | Zivver Report Reveals Critical Challenges in Email Security for 2025 Trend Micro and Intel Innovate to Weed Out Covert Threats CrowdStrike Achieves FedRAMP Authorization for New Modules MORE PRODUCTS & RELEASES |
|
Dark Reading Weekly -- Published By Dark Reading Operated by TechTarget, Inc. and its subsidiaries, 275 Grove Street, Newton, Massachusetts, 02466 US | To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here. | Thoughts about this newsletter? Give us feedback. |
Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: | If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. | We take your privacy very seriously. Please review our Privacy Statement. |
|
|