Increased teleworking has provided bad actors with the opportunity to exploit potentially vulnerable services, such as virtual private networks (VPNs). The attacks may take several different forms. The Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) outlines attacks and suggested steps to prevent them. Note that this is not an exhaustive list… Continue reading
Continue readingPosts tagged security
Beware of Teleconferencing Hijacking
If you have begun or increased your use of Teleconferencing/Telehealth to provide health care, be aware of cyber-attacks. The FBI issued a notice on 3/30/2020, which warned that bad actors have been hijacking Zoom and other teleconference platforms, disrupting them with pornographic or hate images and language. The following steps can help to secure your… Continue reading
Continue readingHIPAA Security Emphasis
Prior to the end of support of Windows 7 in January 2020, many covered entities are still working to upgrade their operating system to Windows 10. We have published an article in the October issue of the Advisor® that warns of some documented security vulnerabilities within Windows 10 that must be considered in properly configuring… Continue reading
Continue readingCyber Extortion
According to the Office for Civil Rights (OCR), incidents of cyber extortion have risen over the past few years and are projected to be a major source of digital disruption in the future. Cyber extortion is defined as a crime involving an attack or threat of attack, coupled with a demand for money to stop… Continue reading
Continue readingSecure Text Messaging
Due to the speed and convenience of texting, many physicians use this form of communication to consult with other providers, exchange lab test results, and other patient information. If text messaging is used to transmit or receive electronic protected health information (EPHI), it must be evaluated as part of the covered entity’s Security Risk Analysis…. Continue reading
Continue reading