Well being Sector Notified of Crucial Cyber Vulnerability by HHS

The Division of Well being and Human Companies (HHS) not too long ago issued a warning concerning a vital vulnerability in ManageEngine merchandise that’s being exploited by a North Korean state-sponsored actor to focus on healthcare organizations in Europe and the USA. HHS’s Well being Sector Cybersecurity Coordination Heart (HC3) strongly advises healthcare entities to promptly replace their programs to mitigate the potential threat of compromise.

ManageEngine is a third-party community know-how that assists organizations in monitoring, managing, and securing their IT infrastructure, together with energetic listing administration. John Riggi, the nationwide advisor for cybersecurity and threat on the American Hospital Affiliation (AHA), emphasizes {that a} compromise of ManageEngine know-how would pose a major cyber threat to organizations, doubtlessly offering wide-ranging entry to the subtle and harmful Lazarus hacking group. This group has been chargeable for numerous high-profile cyber assaults, together with the 2014 harmful cyberattack towards Sony, an $81 million theft from the Society for Worldwide Interbank Monetary Telecommunications, and the 2017 international WannaCry ransomware assaults that impacted a number of US hospitals. Riggi emphasizes the significance of carefully monitoring and securing third-party community administration instruments, as they’re typically engaging targets for malicious actors. Moreover, he urges third-party know-how suppliers to prioritize safety by adhering to the rules of “safe by design, safe by default.”

For extra data on this subject or different cybersecurity and threat issues, people can contact John Riggi at jriggi@aha.org. The AHA’s web site, aha.org/cybersecurity, additionally supplies the most recent sources, risk intelligence, and steerage on cybersecurity and threat administration.