The US Department of Health and Human Services and the Health Sector Coordinating Council Cybersecurity Working Group have released a guide to help align healthcare information security programs with the National Institute for Standards and Technology’s Cybersecurity Framework. The guide aims to help prevent cybersecurity incidents and protect patients in the public and private healthcare sectors. It is timely following the release of the White House National Cybersecurity Strategy and could be used to demonstrate implementation of recognized cybersecurity practices to qualify for regulatory relief.

Phishing Campaign Impersonates Booking.com, Plants Malware
Cybersecurity professionals have raised concerns over a new phishing campaign that imitates Booking.com to plant credential-stealing malware. The threat, first detected in December 2024, targets