The US Department of Health and Human Services is proposing new cybersecurity requirements for healthcare organizations to protect patients’ private data from cyberattacks. The rules, estimated to cost $9 billion in the first year, include mandatory multifactor authentication, network segmentation, and encryption of patient data. These proposals will update the 1996 Health Insurance Portability and Accountability Act.

The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.