The U.S. Department of Health and Human Services (HHS) has outlined voluntary goals for healthcare cybersecurity, proposing incentives and penalties for hospitals’ compliance. Essential goals lay out baseline standards, while enhanced goals suggest advanced practices. The HHS has suggested transferring funds from the Medicare Hospital Insurance Trust Fund to incentivise hospitals’ compliance. Notable penalties for non-compliance include payment reductions and potential reductions of up to 1% off base payments. The proposed measures are essential to Biden’s FY 2025 Budget, which aims to improve cybersecurity practices.

Tenable Finds DeepSeek AI Can Be Manipulated to Generate Malware
A study by cybersecurity firm Tenable shows that DeepSeek R1, a large language model, can be manipulated into creating malware, such as keyloggers and ransomware.