Well being Sector Notified of Important Cyber Vulnerability by HHS

The Division of Well being and Human Providers (HHS) not too long ago issued a warning concerning a important vulnerability in ManageEngine merchandise that’s being exploited by a North Korean state-sponsored actor to focus on healthcare organizations in Europe and the USA. HHS’s Well being Sector Cybersecurity Coordination Heart (HC3) strongly advises healthcare entities to promptly replace their programs to mitigate the potential threat of compromise.

ManageEngine is a third-party community know-how that assists organizations in monitoring, managing, and securing their IT infrastructure, together with energetic listing administration. John Riggi, the nationwide advisor for cybersecurity and threat on the American Hospital Affiliation (AHA), emphasizes {that a} compromise of ManageEngine know-how would pose a major cyber threat to organizations, probably offering wide-ranging entry to the subtle and harmful Lazarus hacking group. This group has been liable for numerous high-profile cyber assaults, together with the 2014 damaging cyberattack in opposition to Sony, an $81 million theft from the Society for Worldwide Interbank Monetary Telecommunications, and the 2017 world WannaCry ransomware assaults that impacted a number of US hospitals. Riggi emphasizes the significance of intently monitoring and securing third-party community administration instruments, as they’re typically engaging targets for malicious actors. Moreover, he urges third-party know-how suppliers to prioritize safety by adhering to the rules of “safe by design, safe by default.”

For extra info on this challenge or different cybersecurity and threat issues, people can contact John Riggi at jriggi@aha.org. The AHA’s web site, aha.org/cybersecurity, additionally supplies the most recent sources, menace intelligence, and steerage on cybersecurity and threat administration.