The proliferation of Internet-connected medical devices, combined with inadequate access controls, has created a vulnerable attack surface for cyber criminals. Network detection specialist Vectra’s healthcare security report identified unpartitioned networks, reliance on legacy systems, and lapses in security implementation as contributing factors. Cyber criminals can exploit these vulnerabilities to steal personal and health information, disrupting healthcare delivery processes. The report also found that hidden HTTPS tunnels and hidden DNS tunnels are common methods for attackers to hide their communications and data exfiltration. The healthcare security market is expected to reach $8.7 billion by 2023.

Hackers Use OnyxC2 Malware-as-a-Service to Steal Credentials From 210 Applications
A new and dangerous credential-stealing tool called OnyxC2 has emerged in the cybercrime underground, showing just how easy it has become for even low-skilled attackers


