Latest

Endpoint Security

LabCorp Still Recovering From Ransomware Attack

Marianne Kolbasuk McGee  •  July 20, 2018

Medical testing laboratory firm LabCorp is still working to fully recover systems functionality nearly a week after a cyberattack that the company now claims involved "a new variant" of ransomware. What can other organizations do to avoid becoming the next victim?

Endpoint Security

Bank Hackers Exploit Outdated Router to Steal $1 Million

Mathew J. Schwartz  •  July 20, 2018

Hackers stole at least $920,000 from Russia's PIR Bank after they successfully compromised an outdated, unsupported Cisco router at a bank branch office and used it to tunnel into the bank's local network, reports incident response firm Group-IB.

Cyberwarfare / Nation-state attacks

Trump's Views on Russian Election Meddling: A History

Nick Holland  •  July 20, 2018

This edition of the ISMG Security Report includes an analysis by Executive Editor Matthew J. Schwartz on President Donald Trump's changing views on election meddling, plus an update on voter data being accidently exposed by a robocalling company.

Cybersecurity

A New Effort to Draft Medical Device Cybersecurity Guidance

Marianne Kolbasuk McGee  •  July 19, 2018

An advisory group that includes a diverse array of members will spend the coming months devising detailed guidance on how to address the "shared responsibility" of medical device cybersecurity, explains Greg Garcia, who is leading the initiative.

Electronic Healthcare Records

FDA: Make Sure EHRs Used for Clinical Studies Are Secure

Marianne Kolbasuk McGee  •  July 18, 2018

The FDA has issued new guidance spelling out its policy for organizations using electronic health record data in FDA-regulated clinical investigations, such as studies of the long-term safety of various drugs. Among other criteria, the EHRs need to contain certain privacy and security controls, the agency says.

Blockchain Applications

Using Blockchain to Support a New Approach to ID Management

Nick Holland  •  July 18, 2018

Blockchain, the digital ledger used for cryptocurrency, can serve as an effective identity management platform, asserts Chris Boscolo, CEO of ZNO Labs, who describes an approach he calls "self-sovereign identity."

Cyberwarfare / Nation-state attacks

Trump's DNC 'Server' Conspiracy Rebutted

Mathew J. Schwartz  •  July 17, 2018

Asked in a press conference if he would denounce Russia for interfering in U.S. elections, President Trump responded with a conspiracy theory about a missing DNC server. Some security experts say Trump's response was nonsense and flies in the face of good digital forensics and incident response practice.

Data Breach

Telefónica Movistar Site Exposed Customer Billing Details

Jeremy Kirk  •  July 17, 2018

A Spanish consumer rights organization says telecommunications company Telefónica has fixed an elementary security error in its Movistar website that potentially exposed billing invoices for millions of customers. Telefónica says it hasn't detected fraudulent use of the data.

Business Email Compromise (BEC)

LabCorp Cyberattack Impacts Testing Processes

Marianne Kolbasuk McGee  •  July 17, 2018

Medical laboratory testing firm LabCorp is investigating a weekend cyberattack on its IT network, which resulted in the company taking certain processes offline. The attack is just the latest cyber assault on the healthcare sector.

Breach Notification

Timehop Reveals Additional Data Compromised by Hacker

Jeremy Kirk  •  July 16, 2018

Timehop, the social media app that resurfaces older social media posts for entertainment, says its ongoing investigation has revealed that an attacker may have compromised more personal information than it previously suspected over the course of a breach that lasted at least seven months.

Breach Preparedness

Would More Telehealth Bring New Privacy, Security Concerns?

Marianne Kolbasuk McGee  •  July 13, 2018

As part of a sweeping plan to "modernize" Medicare, federal regulators are also proposing to expand reimbursements for telehealth services. But what are the potential privacy and security concerns that healthcare providers need to address if they offer more telehealth services for patients?

Authentication

Australian Airport Identity Card Issuer Breached

Jeremy Kirk  •  July 13, 2018

An Australian company that issues identity cards for access to airports has been notifying applicants and cardholders that their personal information may have been compromised, according to a news report. Australian federal police are investigating.