The US Department of Health & Human Services (HHS) is proposing new cybersecurity rules to enhance protection of electronic health information, addressing significant updates to HIPAA Security Rule. The proposed changes require mandatory implementation specifications, enhanced documentation, technology asset management, risk analysis and contingency plans. The public, as well as stakeholders, are invited to submit comments within 60 days of its publication.
Active Exploitation of Ivanti VPN 0-Day Vulnerability (CVE-2025-0282)
Ivanti has disclosed two severe vulnerabilities affecting its Connect Secure VPN appliances. The vulnerabilities have raised concerns due to potential network breaches. One of these,