Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path …
Central Ohio Primary Care Physicians Data Breach Affects 1.4 Million Patients The HIPAA Journal
Artificial Intelligence is complicating security in the software development lifecycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer CISOs a way ahead.
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited b…
Central Ohio Primary Care Physicians, one of the largest independent physician-owned primary care medical groups in the United States, has […] The post Central Ohio Primary Care Physicians Data Breach Affects 1.4 Million Patients appeared first on The HIPAA Journal.
This Talent Tuesday, we break down the current compensation landscape, why healthcare struggles to keep pace, and what organizations can do right now to attract and retain cyber talent without simply raising salaries. The post Talent Tuesday: Cybersecurity Compensation Trends in …
A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins.
$80 Million Settlement Proposed to Resolve Conduent Data Breach Litigation The HIPAA Journal
An $80 million settlement has been proposed to resolve a consolidated class action lawsuit against Conduent Business Services, LLC, over […] The post $80 Million Settlement Proposed to Resolve Conduent Data Breach Litigation appeared first on The HIPAA Journal.
The U.S. Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove them from government systems. [...]
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet. The agents tried more than 1,200 sites and re…
HIPAA Data Ownership When Your Vendor Uses AI: What Healthcare Organizations Should Know Dentons
CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging, and audit readiness. [...]
A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targeting US tax preparation businesses since 2019. [...]
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia's October 25 snap p…
ResMed CEO Mick Farrell, chair of AdvaMed’s board, said the group plans to come up with standards around privacy, cybersecurity and interoperability.
At AdvaMed’s The MedTech Conference, company executives said they’re bracing for disruption by investing in inventory, scenario planning and their relationships with chip suppliers.
Meta is suspending the sharing feature while it investigates its privacy.
Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links…
By Easton Hallock - Most behavioral health EHR demos follow the same script: a clean intake, a polished note, a claim that drops with one click. The workflows that decide whether a program gets paid rarely make it on screen, because they only appear when real patients move betwee…
