Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Jefferson County Health Department $2.25M Data Breach Settlement: Detection and HIPAA Hardening Guide for Healthcare Defenders
Introduction The Jefferson County Health Department — the public health agency serving Jefferson County, Missouri, from Hillsboro — has agre...
Vasilek Backdoor Hidden in VMware Tools: Defending Healthcare VMs After the Partisan Zmiy Intrusion
Why this matters to defenders Russian cybersecurity firm Solar attributes a nearly two-year intrusion inside a Russian healthcare organizati...
23andMe Breach Settlement: Defending Against Credential Stuffing on Sensitive-Data Platforms
The Settlement That Puts a Price Tag on Credential Stuffing Negligence California has agreed to a $6 million settlement with 23andMe over th...
Central Ohio Primary Care Physicians Breach Exposes 1.4 Million Patients — Healthcare Defender's Guide to Detecting Bulk PHI Exfiltration
Introduction Central Ohio Primary Care Physicians (COPCP) — one of the largest independent, physician-owned primary care groups in the Unite...
Paradigm Healthcare Data Breach: 970,000 Medi-Cal Members Exposed — Detection Gaps and HIPAA Breach Notification Lessons
Introduction Paradigm Healthcare Services — a vendor that supports school-based Medi-Cal billing for California school districts — has discl...
Conduent Breach Fallout: $80M Settlement for 62M Records — Detection and Third-Party Risk Lessons for Healthcare Defenders
The Settlement That Should Reshape Your Vendor Risk Program Conduent, one of the largest business services firms supporting government agenc...
Boston Children's Health Physicians and XTIUM $2.7M HIPAA Settlement: What Healthcare Defenders Must Fix Now
A $2.7M Lesson in Security Fundamentals Boston Children's Health Physicians (BCHP) and its managed IT service provider, XTIUM, have agreed t...
MITRE ATT&CK v20: Defending Against AI Abuse, MFA Bypass, and ICS Attacks on Water Utilities — Detection Strategies and Hunt Queries
Why ATT&CK v20 Matters to Your SOC Right Now MITRE has released version 20 of the ATT&CK knowledge base, and this update is not a routine ca...
Orphaned VBA Projects Hidden in DWG Files: Detection with YARA and Defensive Response Guide
Introduction The SANS Internet Storm Center recently published a YARA rule for detecting orphaned VBA projects embedded inside DWG files — t...