Health Fitness Corporation has reached a settlement with the US Department of Health and Human Services (HHS) over violations of the HIPAA Security Rule, which involved several breaches of unsecured electronic protected health information. The firm will pay $227,816 to the HHS and execute a two-year corrective action plan. This case underscores the importance of cybersecurity practices in the health industry and serves as a reminder of the costs of HIPAA noncompliance.

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed a new malware named RESURGE. Deployed in exploiting Ivanti Connect Secure appliances’ patched security flaw,