Proposed changes to the 2013 HIPAA Security Rule published in the U.S. Federal Register require stricter cybersecurity from healthcare providers and their partners. The changes include mandatory security risk analysis, comprehensive asset inventories and network maps, encryption of data, multi-factor authentication, and regular screening for software vulnerabilities. Businesses are required to prove the application of these measures, and non-compliance within certain timeframes will result in penalties.

Anne Arundel government has made progress in securing systems since cyber incident, officials say – CBS News
Anne Arundel County government officials have reported making progress in securing systems following a cyber incident. Specific details of the incident were not provided, but