The Federal Trade Commission (FTC) is proposing amendments to its Health Breach Notification Rule (HBNR) to expand coverage beyond entities covered by HIPAA. The amendments would allow the use of electronic data breach notification methods, require the inclusion of third-party names in breach notifications, and clarify definitions to include non-HIPAA-covered health technologies. The FTC’s proposed changes aim to address the increasing collection of consumer health data by health apps and other direct-to-consumer health technologies. The public has 60 days to comment on the proposed amendments.

Ragnar Loader toolkit evolves amid increased traction among threat operations
The Ragnar Loader malware toolkit, used by several threat operations, has been enhanced with more sophisticated capabilities. It now includes advanced encryption, encoding, and process