The U.S. Department of Health and Human Services (HHS) proposes a tighter HIPAA Security Rule, pushing for robust cybersecurity protections about electronic protected health information (ePHI). With healthcare breaches due to hacking and ransomware attacks steadily rising since 2019, the proposal emphasizes network segmentation as a prevention strategy, stressing the role of cyber resilience in protecting ePHI. The suggested rules are set to cost $9bn to implement in the first year. HHS stresses the urgency of immediate action.

400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered