HIPAA and Privacy

• HIPAA
• Privacy

• Cyberattack Disrupts New Mexico's Only Trauma Center

  UNM Health Diverts Ambulances, Cancels Surgeries; Hackers Claim Data Theft
  A cyberattack on the University of New Mexico Health Sciences Center forced the state's only Level-1 trauma center to temporarily divert ambulances, cancel surgeries and suspend classes. Hackers reportedly threatened the university and claimed to have stolen sensitive data.

• PHP2Shell Actively Exploited, US Cybersecurity Agency Warns

  North Koreans Tied to Active Scanning for Critical Vulnerabilities in PHP
  The U.S. Cybersecurity and Infrastructure Security Agency sees critical PHP2Shell vulnerabilities being exploited in the wild, and is requiring federal civilian agencies to rapidly mitigate them. Researchers said North Korean hackers are among the many threat actors showing an interest in the flaws.

• Maritime Sector to Catalog Nautical Software Vulnerabilities

  Blue Initiative Will List Vulnerabilities Affecting Maritime IT or OT Systems
  A new public access database launched Monday will catalogue IT and industrial control systems software vulnerabilities that affect maritime systems. The vision "is to have a public and open single source of truth for maritime-related vulnerabilities."

• HHS Retreats on Plan to Scrap EHR Security, Privacy Regs

  Regulators Retreat From Removing Certification Regs After Hearing Industry Concerns
  Federal regulators have backed away from eliminating core privacy and security certification requirements from electronic health records but moved forward with various other proposals to slim down certification regulations with an aim to reduce costs and drive health tech innovation.

• OCC Issues Volcker Rule Proposal for Public Comment

  The Office of the Comptroller of the Currency requested public comment on a proposed regulation implementing the so-called "Volcker Rule" requirements of section 619 of the Dodd-Frank Wall Street Reform and Consumer Protection Act.