Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Healthcare Data Breaches at Gastroenterology & Hepatology of Central NY, Three Oaks Hospice, and Doctor's Choice Home Health: Detection and Response Playbook
Another Week, Another Wave of Healthcare Breach Notifications Gastroenterology & Hepatology of Central New York, Three Oaks Hospice, and Doc...
CVS Health & Criteo $20.5M Website Tracking Settlement: What Healthcare Defenders Must Do About Pixel Privacy Risk
The Settlement That Should Be on Every Healthcare CISO's Radar CVS Health and ad-tech firm Criteo have agreed to pay a combined $20.5 millio...
Astrana Health Data Breach: Defending Against Personnel Impersonation and Social Engineering Attacks in Healthcare
Introduction Astrana Health, a major healthcare technology and provider organization, has disclosed a data breach in which threat actors imp...
California AI Guardrails for Mental Health Treatment: What Healthcare CISOs and Compliance Teams Must Do Now
Introduction The California Senate has unanimously passed legislation establishing guardrails for the use of artificial intelligence in ment...
77% of Ransomware Groups Now Target Healthcare: Detection and Hardening Playbook for HIPAA-Covered Entities
Introduction A new analysis of encryption-based cyber incident activity — ransomware, in plain terms — reveals a statistic that should reset...
CVE-2026-91018: lwIP Double Free Vulnerability in ICS/OT Devices — Detection and Remediation Guide
Introduction CISA has published ICS Advisory ICSA-26-265-02 covering CVE-2026-91018, a double free vulnerability in lwIP (Lightweight IP), t...
Albany College of Pharmacy and Health Sciences Data Breach Settlement: Defensive Lessons for HIPAA-Covered Institutions
Introduction Albany College of Pharmacy and Health Sciences (ACPHS) in New York has agreed to settle a class action lawsuit stemming from a ...
OCR's HIPAA Security Conference at NIST: What Healthcare Defenders Must Do Before the Security Rule Overhaul Lands
Introduction In early September, the HHS Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) hosted ...
SideCopy Targets Indian Academia With ReverseRAT: Detecting mshta.exe Spear-Social Engineering Attacks
SideCopy Targets Indian Academia With ReverseRAT: Detecting mshta.exe Spear-Social Engineering Attacks The threat actor tracked as SideCopy ...