The House Energy and Commerce Subcommittee on Oversight and Investigation today held a hearing to examine findings from a series of Government Accountability Office audits of information security controls at the Department of Health and Human Services, and discuss HHS cybersecurity roles and responsibilities. Due to the sensitivity of some of the GAO findings, most of the hearing was closed to the public. Witnesses included officials from GAO, HHS and the Centers for Disease Control and Prevention. AHA recently shared with the committee its recommendations for improving the security of legacy medical devices and cybersecurity in the health care and public health sectors.

Headline
A joint advisory issued Oct. 20 by U.S. and international agencies warns of recent activity by the SafePay Ransomware group. The group has been active since…
Headline
Two critical vulnerabilities have been discovered in Hypertext Preprocessor, or PHP, a widely-used open-source scripted language for web development, its…
Headline
John Riggi, AHA national advisor for cybersecurity and risk, and Brett Leatherman, assistant director of the FBI Cyber Division, break down Operation Riptide,…
Headline
The National Security Agency has issued guidance on reducing the risk of simple network management protocol abuse. SNMP consists of a standardized framework…
Headline
Microsoft and Health-ISAC Oct. 15 announced that they disrupted three cybercriminal businesses that provided services to threat actors to attack more than 75…
Headline
The AHA will host a webinar Oct. 20 at 1 p.m. ET that will explore the evolving voice threat landscape — including voice phishing, or vishing, spoofing and…