NOW on Demand Tell Me Where IT Hurts episode with host Dr. Jay Anders and his guest Kimberly Brandt, Chief Operating Officer and Deputy Administrator at CMS. They discuss slow value-based care adoption in Medicare, CMS's data quality push through FHIR APIs and USCDI, and how AI w…
A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers to turn them into proxies for malicious traffic. [...]
In this monthly report you will find news and highlights in the Applied Life Sciences from i-GENETIC AI, Bright Uro, T-CURX, Pantherna Therapeutics, Cercare Medical, ProBioGen, Vetter, United Immunity and more. The post NOW in Life Sciences – June 2026 appeared first on Health IT…
A new ransomware operation named 'Prinz Eugen' prioritizes recently modified files for encryption and leaves no ransom note on the system. [...]
Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet, also known as BlueNoroff. [...]
The thought leaders in our community are good about sharing their thoughts on the issues of today. Here are the top read and shared guest posts of May that we think deserve sharing again. The post Health IT Issues that Deserve a Second Read – May 2026 appeared first on Health IT …
A detailed MDR provider comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach warranties to help you choose.
Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauth…
Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to customers' Salesforce environments, as the new "Icarus" extortion group publicly claims the attack. [...]
HIPAA's No Joke: Gag Gift Firm's Health Plan Pays $450K Fine BankInfoSecurity
Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites. [...]
Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12 and A13 chips. That code is burned into the silicon at manufacture. No software update can reach it. Affected dev…
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates for impairing system defenses before deploying the encryptor. This mature portfolio of EDR-termi…
Meteor 3.0 helped Rocket.Chat move from Node.js 14 to Node.js 20, cutting runtime debt after Fibers removal and reducing supply-chain risk across federal users.
The Texas Parks and Wildlife Department (TPWD) disclosed a data breach at its license system vendor that exposed personal information for more than three million individuals. [...]
Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker's web page, and that page's JavaScript can reach a privileged local service on the same ma…
By Mark Taylor - Hospitals have EHRs. Health plans have care management platforms. Community organizations have case management tools. State agencies have eligibility, reporting, and program management systems. In many cases, those tools work well enough for the people using them…
New HHS-OIG Exclusions The HIPAA Journal
Dutch law enforcement authorities, along with counterparts from Canada , Germany, and the U.S., have disrupted malicious infrastructure associated with SocGholish and cleaned up nearly 15,000 infected WordPress websites. "With these actions we deprive cybercriminals of acces…
The Department of Health and Human Services Office of Inspector General (HHS-OIG) has announced new additions to its List of […] The post New HHS-OIG Exclusions appeared first on The HIPAA Journal.
