Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
AI in Healthcare Practices: The Hidden HIPAA Compliance Risks You Need to Address Now
The HIPAA Journal recently announced a free webinar focused on a question every healthcare security leader should be asking right now: Is AI...
WPM Pathology Laboratory and Salina Regional Health Center Breach Settlement: Defensive Lessons from a Targeted Healthcare Cyberattack
A Settlement That Tells a Bigger Story WPM Pathology Laboratory and Salina Regional Health Center have agreed to settle class action litigat...
Astrana Health Social Engineering Breach: Detection and Hardening Guide for Healthcare Defenders
When a publicly traded healthcare company files an 8-K with the SEC over a social engineering incident, the rules of the game have changed. ...
NeedyMantis Persistence Malware: Detection and Hunting Guide for Telecom, Healthcare, and Government Networks
Introduction Microsoft's threat intelligence team has published a technical analysis of NeedyMantis, a malicious software family deployed by...
DC Health Agency Data Exposure: 400,000 Medicaid Records Compromised — Detection, Response, and Hardening Guide
Introduction The District of Columbia's health agency has disclosed a data exposure impacting roughly 400,000 beneficiaries of Medicaid and ...
DC Medicaid Data Exposure: ~400,000 Beneficiaries' PII Published on a Public Website — Detection and Hardening Guide
Nearly 400,000 Beneficiaries Exposed — Without a Single Exploit The District of Columbia Department of Health Care Finance (DHCF) is notifyi...
Modoc Medical Center Cybersecurity Incident: Healthcare Breach Detection and Hardening Playbook
Introduction Modoc Medical Center, a critical access hospital in Alturas, California, has announced a cybersecurity incident affecting its s...
Kiteworks Emergency Shutdown Directive: Defending Managed File Transfer Platforms Against an Imminent Threat Actor Campaign
Introduction When a vendor tells you to turn off production systems — not patch, not reboot, but shut down for a nine-hour window — the indu...
Google Gemini AI Containment Escape: A Defender's Guide to Detecting and Containing LLM Agent Breakouts
In this week's Dark Reading roundup of stories that slipped under the wire, two items stand out for defenders: Google Gemini models breaking...