A recent US Department of Defense Office of Inspector General report found serious vulnerabilities in the electronic health record and security systems at the Defense Health Agency, Navy hospitals, and Air Force hospitals and clinics. The report states that these vulnerabilities, ranging from password configurations to user access, may have violated HIPAA and could result in millions of dollars in fines. The report also found that network administrators often failed to address these vulnerabilities. Recommendations have been made to address these flaws, including automatically locking systems after 15 minutes of inactivity.
Alleged Iranian hackers target victims in Saudi Arabia with new spying malware
Iran-based hacking group APT34 has launched a new cyber espionage operation, according to cybersecurity firm Trend Micro. The group has been infecting victims with the
