The American Hospital Association expressed concern over potential penalties for hospitals not meeting cybersecurity standards set by the Biden administration. They argue that most cyber risks in healthcare come from ‘business associates’ and non-hospital entities. The AHA opposes mandatory cybersecurity requirements on hospitals and believes Congress should deploy a sector-wide cyber strategy to combat threats effectively. The Change Healthcare cyberattack is expected to cost UnitedHealth Group up to $1.5 billion this year.

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
Fortinet on Wednesday said it observed “recent abuse” of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations. The vulnerability


