The US Department of Health and Human Services (HHS) has proposed updates to the Health Insurance Portability and Accountability Act (HIPAA). The revised regulations aim to bolster cybersecurity for electronic protected health information (ePHI), through mandatory data encryption, multifactor authentication, and network segmentation. Deputy National Security Adviser Anne Neuberger estimates the first-year cost at $9bn, with an additional $6bn over the following four years. The HHS is seeking public feedback before finalising the rule.

North Korean Hackers Use Fake U.S. Companies to Spread Malware in Crypto Industry: Report
North Korean hackers reportedly set up shell companies in the US to penetrate the crypto sector and target developers via fake job offers, according to