Effective GRC programs rely on team collaboration

One in three organizations are not currently able to proactively identify, assess, and mitigate risk with their GRC program, nor are they able to ensure compliance with regulations and frameworks – both key aspects of a mature, holistic GRC progr… Continue reading Effective GRC programs rely on team collaboration

Mattis: Don’t create separate military cyber service

The former defense secretary said U.S. Cyber Command needs emergency authority to be able to operate inside the United States.

The post Mattis: Don’t create separate military cyber service appeared first on CyberScoop.

Continue reading Mattis: Don’t create separate military cyber service

HHS pledges $50M for autonomous vulnerability management solution for hospitals

As organizations in the healthcare sector continue to be a prime target for ransomware gangs and CISA warns about a vulnerability (CVE-2023-43208) in a healthcare-specific platform being leveraged by attackers, the Advanced Research Projects Agency for… Continue reading HHS pledges $50M for autonomous vulnerability management solution for hospitals

CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw

CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog. 
The post CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw appeared first on SecurityWeek.
Continue reading CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw

MediSecure Data Breach Impacts Patient and Healthcare Provider Information 

MediSecure says data related to prescriptions distributed until November 2023 was compromised in a ransomware attack.
The post MediSecure Data Breach Impacts Patient and Healthcare Provider Information  appeared first on SecurityWeek.
Continue reading MediSecure Data Breach Impacts Patient and Healthcare Provider Information