Fortified Health Security

"The security debt in legacy systems created back then is part of the reason why there is a new breach in the news every week now." Powerful insight from Paul Connelly, NACD-DC on why "risk acceptance" shouldn't be a rubber stamp. Today's mature organizations need thoughtful discussions about risk appetite, clear accountability, and partnership between security teams and business units from day one. Read Paul's full take on building a responsible approach to cyber risk management: https://lnkd.in/e7bU2rtJ #Cybersecurity #RiskManagement #Leadership #Security

We're thrilled to announce that Fortified Central Command platform has been named "Healthcare Cybersecurity Solution of the Year" at the 2024 CyberSecurity Breakthrough Awards! Central Command delivers threat monitoring, risk management, and 24/7 SOC support in one unified platform. From desktop to mobile, our secure platform gives healthcare teams 24/7 real-time protection and control when every second counts. Thank you @CyberSecurityBreakthrough for recognizing our commitment to protecting healthcare organizations and their patients. Read more: https://rpb.li/OnHe #Cybersecurity #HealthIT #BreakthroughAwards2024

Threat Bulletin ? APT41 Deploys Advanced LightSpy Malware Framework Synopsis: The Chinese state-sponsored APT41 group has enhanced its LightSpy malware with the DeepData framework, targeting Windows, macOS, iOS, and more. This modular espionage tool enables keystroke logging, file exfiltration, and lateral movement, posing significant risks to healthcare organizations. Actions: - Ensure all systems operate on the latest software version with the most current security patches installed - Monitor logs for suspicious traffic and unauthorized logins - Implement network segmentation to isolate critical systems Additional links and resources in comments #fortifiedhealthsecurity #apt41 #cybersecurity #healthcaresecurity

Critical insight from Russell Teague on modern risk management: As organizations increasingly rely on cloud solutions and third-party vendors, defense strategies must be tailored to specific operational configurations. Business impact analysis is key. #Cybersecurity #BusinessContinuity #TPRM

Our monthly client roundtable event moderated by Melissa Adams and Preston Duren was lively today! Our group of healthcare CIOs and CISOs dug into the new HSCC Medical Product Manufacturer Cyber Response Playbook, and discussed cyber-liability insurance trends, password spray attacks, and other current topics. Interested in joining our next roundtable? Contact your Fortified rep or request limited guest access here: https://lnkd.in/eT3wEgxx #HealthcareCybersecurity #HealthcareCIO #CISOConnect

Evolving threats to medical devices demand a new security approach. Our CISO, Russell Teague, explains why outdated IoMT software puts patient care at risk and how a layered defense strategy can protect your organization: https://lnkd.in/gN8jZmHt #HealthcareSecurity #IoMT #CyberSecurity

If you’re in healthcare cyber in New York, the beginning of this episode of Unhack the News is for you! Thanks Kate Pierce, MSMIIT, CHCIO, CHISL, CDH-E, for helping to keep us all informed.

Please join us in welcoming, Guy Denton, CISSP.CISM.CRISC.ICEH.QC, a new Penetration Tester on our team who loves a good challenge—from cracking security systems to mastering his quadcopter skills on his days off. #NewHire #LifeatFortified #cybersecurity

"Be the orchestra conductor" - love this analogy shared by {{linkedin_mention(urn:li:person:qBrpCYY6jc|Drex DeFord)}} during our #KeepingHealthcareHealthy discussion. Your clinical teams aren't resistant to business continuity planning - they often just need cues on where and when to start. The conductor's role? Create spaces for peer learning and sharing real examples. Sometimes the best teaching happens when teams learn from each other's experiences. Listen in on the full conversation here: https://lnkd.in/gjxyetug #HealthcareIT #Leadership #BusinessContinuity #ChangeManagement

Threat Bulletin ? Remote Authentication Bypass in Palo Alto Firewalls Synopsis: A critical vulnerability (CVE-2024-0012) in Palo Alto Next-Generation Firewalls is being exploited. Unauthenticated attackers can gain administrator privileges via the management interface, which poses a severe risk to healthcare organizations relying on these firewalls for perimeter security. Actions: - Patch PAN-OS to the latest version immediately - Restrict admin access to trusted internal IPs - Monitor logs for unusual activity, especially on SSL VPN and GlobalProtect portals Additional details in the comments. #fortifiedhealthsecurity #healthcaresecurity #panos #paloalto