The American Hospital Association expressed concern over potential penalties for hospitals not meeting cybersecurity standards set by the Biden administration. They argue that most cyber risks in healthcare come from ‘business associates’ and non-hospital entities. The AHA opposes mandatory cybersecurity requirements on hospitals and believes Congress should deploy a sector-wide cyber strategy to combat threats effectively. The Change Healthcare cyberattack is expected to cost UnitedHealth Group up to $1.5 billion this year.
IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,
%20CISO%E2%80%99s%20Core%20Focus.webp?w=0&resize=0,0&ssl=1 "Identity and Access Management (IAM)")