The US Department of Health and Human Services (HHS) is proposing amendments to the HIPAA Security Rule for the first time since 2013 to increase cybersecurity protections for personal health info amid rising data breaches. The new requirements would mandate frequent vulnerability assessments and security testing, better alignment with cybersecurity best practices, and written policies. Proposed changes also hinge on risk analysis specificity, network segmentation, and routine scanning. Between 2018 and 2023, large data breaches reports rose by 102%, affecting 1002% more individuals.

UK’s Legal Aid Agency Experiences Cyberattack
A UK Ministry of Justice executive agency was targeted in a cyberattack, compromising its systems. The incident highlights vulnerabilities in cybersecurity, prompting a review of