cybersecurity Archives - HIT Leaders and News

What Every Healthcare Organization Should Know About FIPS Validation

Jason Free — Mon, 26 Jan 2026 14:36:08 +0000

Healthcare’s digital transformation has created unprecedented opportunity—and unprecedented risk. The U.S. Government’s Administration for Strategic Preparedness and Response (ASPR) paints a dire picture when it comes to healthcare and public health cybersecurity. It reports that the Healthcare and Public Health (HPH) sector continues to experience increasingly sophisticated cyberattacks that exploit complex, interconnected IT systems at hospitals and healthcare facilities.

The post What Every Healthcare Organization Should Know About FIPS Validation appeared first on HIT Leaders and News.

Washington Turned Healthcare Into A Data Breach Machine

Jason Free — Thu, 14 Aug 2025 19:59:41 +0000

The core federal safeguard for electronic protected health information, the HIPAA Security Rule, had not been materially updated since 2013. Only in January 2025 did HHS publish a Notice of Proposed Rulemaking to modernize requirements such as multi-factor authentication, encryption, vendor notification, and tested contingency planning. Proposed rules are not protections.

The post Washington Turned Healthcare Into A Data Breach Machine appeared first on HIT Leaders and News.

Why AI Governance Now Defines Healthcare Cybersecurity Strategy

Jason Free — Tue, 15 Jul 2025 11:27:08 +0000

The operational reality of healthcare cybersecurity has changed permanently. As George Pappas, CEO of Intraprise Health, outlined in last week’s interview, AI is no longer a future threat vector. It is the principal accelerator of modern cybercrime. Its automation capacity is widening attack surfaces faster than most organizations can respond. That asymmetry places traditional controls such as compliance audits, endpoint detection, routine firewalls, at a disadvantage unless reinforced by governance-level intelligence and executive authority.

The post Why AI Governance Now Defines Healthcare Cybersecurity Strategy appeared first on HIT Leaders and News.

George Pappas Explains What AI Means for Cybersecurity Leadership

Jason Free — Fri, 11 Jul 2025 11:04:54 +0000

The convergence of generative artificial intelligence and healthcare cybersecurity has created a threat environment that many health systems are structurally unprepared to confront. In this week’s interview, George Pappas, CEO of Intraprise Health, a Health Catalyst company, outlines the stark realities of AI-powered attacks, and what health leaders must do to meet the moment.

The post George Pappas Explains What AI Means for Cybersecurity Leadership appeared first on HIT Leaders and News.

When AI Powers the Dark Side of Healthcare Cybersecurity

Jason Free — Tue, 01 Jul 2025 11:59:47 +0000

Healthcare cyber risk has entered a new and perilous phase. The rise of generative artificial intelligence has empowered threat actors to execute attacks at unprecedented speed, scale, and precision. Nearly three-quarters of enterprises, including health systems, have experienced breaches averaging $4.8 million each over the past year, according to a recent analysis by Metomic.

The post When AI Powers the Dark Side of Healthcare Cybersecurity appeared first on HIT Leaders and News.

The Next Cybersecurity Threat Isn’t Russia. It’s Your Vendor Contract.

Jason Free — Fri, 23 May 2025 14:02:40 +0000

While most healthcare executives fixate on state-sponsored cyberattacks from Russia or China, the more immediate and systemic threat is buried in their own legal files. The true weak point in the healthcare cybersecurity chain is not nation-state actors or malware. It is the vendor contract no one has read since go-live.

The post The Next Cybersecurity Threat Isn’t Russia. It’s Your Vendor Contract. appeared first on HIT Leaders and News.

HIMSS Urges Congress to Reauthorize Cybersecurity Law that Encourages Collaboration and Resilience

Jason Free — Tue, 20 May 2025 11:27:06 +0000

“The intent of the healthcare cybersecurity provision of the Cybersecurity Information Sharing Act of 2015 (6 USC 1533) was to establish a voluntary, consensus-based, industry-led approach so we can collectively strengthen our security posture and share meaningful threat intelligence within healthcare and, where appropriate, with other critical infrastructure sectors,” said Lee Kim, HIMSS senior principal, cybersecurity and privacy. “This law has had a significant impact not only on healthcare, but across other sectors by advancing collaboration and improving cyber resilience. I am happy to have contributed to the creation of this provision, which continues to strengthen cybersecurity across healthcare and beyond.”

The post HIMSS Urges Congress to Reauthorize Cybersecurity Law that Encourages Collaboration and Resilience appeared first on HIT Leaders and News.

Special Report Highlights LLM Cybersecurity Threats in Radiology

Jason Free — Mon, 19 May 2025 11:22:19 +0000

In a new special report, researchers address the cybersecurity challenges of large language models (LLMs) and the importance of implementing security measures to prevent LLMs from being used maliciously in the health care system. The special report was published today in Radiology: Artificial Intelligence, a journal of the Radiological Society of North America (RSNA).

The post Special Report Highlights LLM Cybersecurity Threats in Radiology appeared first on HIT Leaders and News.

HHS Office for Civil Rights Settles HIPAA Cybersecurity Investigation with Vision Upright MRI

Jason Free — Mon, 19 May 2025 11:14:02 +0000

The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Vision Upright MRI, a small California health care provider that conducts magnetic resonance imaging and related services, concerning potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Breach Notification and Security Rules. The settlement resolves an OCR investigation concerning the breach of an unsecured server containing the medical images of 21,778 individuals.

The post HHS Office for Civil Rights Settles HIPAA Cybersecurity Investigation with Vision Upright MRI appeared first on HIT Leaders and News.

HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Public Hospital

Jason Free — Mon, 21 Apr 2025 22:13:17 +0000

The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Guam Memorial Hospital Authority (GMHA), a public hospital on the U.S. Territory, island of Guam, concerning a potential violation of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule, following the receipt of two complaints alleging that the electronic protected health information (ePHI) of GMHA patients was impermissibly disclosed.

The post HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Public Hospital appeared first on HIT Leaders and News.