HIPAA and Privacy

• HIPAA
• Privacy

• CVE Authorities Make Score 8 Look More Like the New 10

  Exploit Maturity Can Lower Scores Until Attack Evidence or PoCs Emerge
  CVSS 4.0 lets threat intelligence alter a vulnerability's enriched score without changing its Base severity, prompting experts to warn that vendors and defenders must continuously reassess exploitation, exposure and patch priority.

• Defining What Counts as AI Spending

  CIOs Build New Budget Models for Agents, Tokens and Failed Experiments
  AI spending no longer fits neatly into software or cloud budgets. As model access, agents, data preparation and governance drive costs across the enterprise, CIOs are creating new ways to track experimentation, control consumption and demonstrate long-term business value.

• US Lawmakers Eye Stronger Healthcare Cyber Defenses

  House Subcommittee Hearing Highlights Threats to Rural Hospitals and Patient Care
  As U.S. hospitals, clinics and other medical providers continue to face an onslaught of hacking incidents and disruptive cyberattacks this year, the House Energy and Commerce Committee's health subcommittee examined on Tuesday two proposed bills aimed at strengthening health sector cybersecurity.

• Quorum Cyber Adds Autonomous SOC Through Ontinue Acquisition

  Proposed Purchase Combines Agentic SOC Technology With Managed Security Expertise
  Quorum Cyber's planned acquisition of Swiss Microsoft Gold Partner Ontinue would combine Microsoft-focused managed security with agentic SOC technology designed to investigate threats at machine speed while giving customers control over when AI can act autonomously.

• OCC Issues Volcker Rule Proposal for Public Comment

  The Office of the Comptroller of the Currency requested public comment on a proposed regulation implementing the so-called "Volcker Rule" requirements of section 619 of the Dodd-Frank Wall Street Reform and Consumer Protection Act.