Cyberattacks on hospitals cannot be completely prevented, but there are ways to lower the risk and minimize the damage. Hospitals should have crisis management plans in place, including communication templates and clear responsibilities. Departments should assess the impact of cyber incidents on their processes, considering clinical risks. Prevention should involve designing systems with security in mind, using technologies like facial or voice recognition. Auditing and security certification schemes are also recommended, along with providing cybersecurity training to staff.

Hackers Abuse Microsoft 365 Exchange Direct Send to Bypass Content Filters and Harvest Sensitive Data
Microsoft 365 Exchange Online’s Direct Send feature, originally designed to enable legacy devices and applications to send emails without authentication, has become an exploitable pathway


