Blog

Background

On November 7-9, 2018, NIST will host the 2018 Cybersecurity Risk Management Conference. Building on previous NIST workshops, the conference aims to share and explore best practices and receive and discuss st

NIST and the Department of Health and Human Services (HHS), Office for Civil Rights (OCR) are pleased to co-host the 11th annual conference, Safeguarding Health Information: Building Assurance through HIPAA S

On October 18, the National Institute of Standards and Technology (NIST), in coordination with the Department of Defense (DoD) and the National Archives and Records Administration (NARA), will host an informa

NIST will exhibit at the 2018 Grace Hopper Conference

Named Data Networking Community Meeting 2018 will be hosted by the National Institute of Standards and Technology (NIST) on September 19 and 20, 2018.

On September 13, 2018, NIST will host a workshop on methods and technologies for reasoning about IoT trustworthiness.

Attack May Pivot On A Data Breach At 'Unknown Card Issuer' Agency SaysThe FBI warns that cybercriminals are planning a large-scale operation aimed at emptying ATMs, a type of attack that has caused swift and costly losses for financial institutions. The attack may utilize data from a breach of an unknown card issuer, the FBI […]

Remotely Exploitable Software Vulnerabilities To Blame For HijackingCybercriminals in Brazil have capitalized on older vulnerabilities in D-Link routers for financially motivated phishing attacks. The attackers changed DNS settings to use their own malicious DNS server, allowing for seamless shifts to phishing sites.

Open Source Electronic Medical Records System Used WorldwideNearly two dozen security weaknesses in OpenEMR - open source electronic medical record and practice management software - left patient data vulnerable to cyberattacks before most were patched, according to the London-based security research firm Project Insecurity.

Experts Offer Insights on Addressing the ChallengesAlthough there's widespread agreement that addressing security early in the software development cycle is an essential component to any breach prevention strategy, implementing DevSecOps can prove challenging.

This package of regulations includes modifications to the HIPAA privacy, security, enforcement and breach notification rules, as required under the HITECH Act.

This rule establishes criteria for electronic health records software that qualifies for Stage 2 of the HITECH Act Electronic Health Record Incentive Program. The program, part of the economic stimulus package, is providing billions of dollars in Medicare and Medicaid incentives to hospitals and physicians to spur widespread adoption of EHRs.

This rule establishes criteria that hospitals and physicians must meet to qualify as "meaningful users" of electronic health records and receive further financial incentives in Stage 2 of the HITECH Act Electronic Health Record Incentive Program. The program, part of the economic stimulus package, is providing billions of dollars in Medicare and Medicaid incentives to […]

This proposed rule from the U.S. Food and Drug Administration would require unique identifiers on medical devices. While the rule aims to ease the collection and analysis of data about adverse health events and help detect counterfeit products, no patient information would be collected in a proposed new FDA database to help track the safety […]

The flaw lets an attacker use the same second factor to bypass multifactor authentication for any account on the same ADFS service.

A guilty plea brings 18-month sentence on money laundering charges for former Microsoft employee.

The kit is designed to prevent credential theft targeting people running for federal, state, and local elected offices.

Let's imagine the consequences the company would have faced if current laws had been on the books earlier.

A researcher proves that it's possible to break the most fundamental security on some CPUs.

Experts in deception shared tricks of the trade and showed their skills at Black Hat and DEF CON 2018.

Nearly 17% of 10,644 vulnerabilities disclosed so far this year have been critical, according to new report from Risk Based Security.

$80K in payouts went to handpicked hackers in nine-hour event during DEF CON in Las Vegas.

Olayinka Olaniyi and his co-conspirator targeted the University of Virginia, Georgia Tech, and other educational institutions.

Spear-phishing techniques are breathing new life into an old scam.

Attack May Pivot On A Data Breach At 'Unknown Card Issuer' Agency SaysThe FBI warns that cybercriminals are planning a large-scale operation aimed at emptying ATMs, a type of attack that has caused swift and costly losses for financial institutions. The attack may utilize data from a breach of an unknown card issuer, the FBI […]

Remotely Exploitable Software Vulnerabilities To Blame For HijackingCybercriminals in Brazil have capitalized on older vulnerabilities in D-Link routers for financially motivated phishing attacks. The attackers changed DNS settings to use their own malicious DNS server, allowing for seamless shifts to phishing sites.

Experts Offer Insights on Addressing the ChallengesAlthough there's widespread agreement that addressing security early in the software development cycle is an essential component to any breach prevention strategy, implementing DevSecOps can prove challenging.

Abdallah Zabian of DXC Technologies on Taking a Holistic ApproachSecurity silos persist because stakeholders within the enterprise security ecosystem are focused on their own key performance indicators, says Abdallah Zabian of DXC Technology, who suggests a more holistic approach is needed.

The FDIC has announced a series of steps intended to provide regulatory relief to financial institutions and facilitate recovery in areas of Illinois affected by severe storms, straight-line winds, and tornadoes.

Five federal regulatory agencies encourage financial institutions to work with customers affected by the federal government shutdown.

The FFIEC on Oct. 7 issued a joint statement concerning Microsoft's discontinuation of support for its Windows XP operating system as of April 8, 2014.

The FDIC is clarifying its policy and supervisory approach related to facilitating payment processing services directly, or indirectly through a third party, for merchant customers engaged in higher-risk activities.