TraceSecurity Blog

Rise in Ransomware Attacks

Organizations are facing drastic increases in ransomware attacks. A report by Malwarebytes finds a 90% increase in such attacks since 2016–that’s almost ten times the amount of attacks since 2016.

Malware in Digital Ads

Best Bank Account Cybersecurity Tips

​Financial institutions and hacking go hand-in-hand these days and keeping your bank account and credit from being the next victim is more important than ever.

Security Risk Assessment Tool: TraceSRA

Learn about the TraceSRA, a security risk assessment tool modeled after the HHS tool but with improved usability and enhanced feature sets.

40% of Health Organizations Suffered WannaCry Attack in Past 6 Months

A report from Armis found that two years after WannaCry, healthcare and manufacturing organizations are still being impacted due to unpatched, legacy devices.

Understanding Integrity Controls

One of the many recommended practices in cybersecurity is to employ "integrity checking mechanisms" to verify software, firmware, and information integrity. As a cybersecurity consultant, clients often ask me for clarification, or in some cases, implementation guidance for this practice. This is not surprising given the many use cases and interpretations for integrity checking. And to make it worse, the answer can differ dramatically depending on the operating environment. Given these factors, I thought it might be helpful to "de-mystify" the subject of verifying software, firmware, and information integrity.

Nearly 1.4 Million New And Unique Phishing Sites Created Monthly

The Public Service Announcements from the FBI claimed that phishing scams cost businesses in the United States over $500 million each year.

Oregon Specialist Phishing Attack Causes Months-Long Data Breach

Hematology Oncology Associates recently began notifying patients that their data was potentially breached during a months-long phishing attack; a mailing error and records’ dump complete this week’s breach roundup.

Medical Informatics to Pay OCR $100K for Potential HIPAA Violations

The Indiana business associate didn’t perform a comprehensive risk analysis before its server was hacked in May 2015, breaching the data of 3.5 million patients from several healthcare clients.

HHS OCR Clarifies Direct HIPAA Liability of Business Associates

The Office for Civil Rights released a new fact sheet outlining all of the HIPAA and HITECH provisions for which business associates can be held liable and when HHS can take enforcement action.