The U.S. Department of Health and Human Services’ Office for Civil Rights is urging healthcare providers to develop contingency plans in case of cyberattacks. Organizations should have backup plans to protect resources, minimize patient inconvenience, and ensure they can return to daily operations as soon as possible. These plans should include staff assignments, data recovery strategies, and regular backups segmented from the network. It is also important for providers to refrain from paying ransoms in case of a ransomware attack.

Mandiant warns of attacks on newly-disclosed Ivanti remote takeover threat
Google’s Mandiant team has issued an alert about a remote code execution flaw in the Ivanti Connect Secure VPN platform. The vulnerability, designated CVE-2025-22457, is