Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

acronis

How to meet critical compliance regulations in pharmaceutical manufacturing

Mar 4, 2026 By Lee Pender In Acronis
Pharmaceutical regulation relies on three core pillars: Maximum system availability, trustworthy data and rapid recoverability. With the right strategy, manufacturers can uphold them all. Operational technology (OT) systems such as SCADA, manufacturing execution systems, cleanroom controls, environmental monitors and laboratory automation are essential for maintaining validated, compliant and uninterrupted production. When those systems fail, downtime can result in enormous financial costs.
Read Post
Feroot

Health Insurance Portals: Client-Side PHI Exposure Under HIPAA and State Laws

Mar 2, 2026 By Feroot In Feroot
For marketing, a JavaScript tag is a growth lever. Something that’ll allow your business to target the right people, run personalized campaigns, and onboard more customers with less spend. For your security team, though, it’s a different story. The third-party scripts and tags on your pages can be a shadow PHI disclosure pipeline that quietly avoids detection, sidesteps your server-side controls, and transmits sensitive member data to third parties without triggering a single alert.
Read Post

Cyberattacks on Hospitals Are Attacks on Communities: Why Ransomware Is a Patient Safety Crisis

Feb 26, 2026 By Rubrik In Rubrik
In this episode of Building Cyber Resilience: A Healthcare Leader’s Guide, host Josh Howell speaks with John Riggi, National Advisor for Cybersecurity and Risk at the American Hospital Association. Drawing on nearly 30 years at the FBI and his current work advising more than 5,000 hospitals, Riggi explains why ransomware attacks on healthcare should be treated as threat-to-life events. He breaks down the real-world consequences of cyberattacks, from ambulance diversion to delayed cancer care, and outlines what leaders must do now to prepare for outages that last weeks, not hours.
View Video
Feroot

GA4 Is Collecting PHI from Your Website and a BAA Won't Fix Your HIPAA Problem

Feb 17, 2026 By Feroot In Feroot
Conversations about GA4 in healthcare tend to stay strangely shallow, circling the same procurement question: “Is there a BAA?” It’s as if GA4 creates risk at the contract layer, when the truth is that the risk is born earlier and lower, in the collection layer, where ordinary telemetry becomes sensitive the moment it is attached to health context and allowed to leave your site.
Read Post
vista infosec

HIPAA Compliance for Dental Offices

Feb 17, 2026 By Narendra Sahoo In VISTA InfoSec
When we talk about HIPAA compliance for dental offices, we’re not talking about theory or paperwork. We’re talking about patient privacy, regulatory exposure, and whether a practice can keep operating when something goes wrong. HIPAA is no longer a “back-office” concern—it’s a core part of running a modern dental practice.
Read Post
How Health Risk Assessments Drive Preventive Care and Lower Long-Term Costs?

How Health Risk Assessments Drive Preventive Care and Lower Long-Term Costs?

Feb 17, 2026 By SecuritySenses In SecuritySenses
Health Risk Assessments are increasingly used to support preventive care planning and population health management across healthcare systems.According to the CDC, chronic and mental health conditions account for the majority of U.S. healthcare spending, which exceeds $4 trillion annually.These assessments help identify risks earlier, when interventions are typically more effective and less resource-intensive.
Read Post

How Hospitals Sustain Patient Care When Systems Go Dark

Feb 12, 2026 By Rubrik In Rubrik
In this episode of Building Cyber Resilience: A Healthcare Leader’s Guide, host Josh Howell speaks with Drex DeFord, veteran healthcare CIO, strategist, and President of 229 Cyber & Risk at This Week Health. Drawing on decades of experience leading technology and transformation across organizations like the U.S. Air Force, Seattle Children’s, Scripps Health, and Steward Healthcare, Drex explores what it really takes to sustain patient care when cyberattacks force systems offline.
View Video
Acupuncture in Chicago, IL: How to Choose the Right Clinic

Acupuncture in Chicago, IL: How to Choose the Right Clinic

Feb 11, 2026 By SecuritySenses In SecuritySenses
Choosing a clinic for acupuncture in Chicago, IL can feel overwhelming because there are many options, and not all clinics approach care the same way. The right choice usually depends on how clearly a clinic explains its process, how it integrates acupuncture into overall care, and how comfortable you feel during the first interaction. Acupuncture works best when it is delivered in a structured, clinical environment rather than as a generic wellness service with little individual assessment.
Read Post
trustcloud

Mastering HIPAA compliance in telemedicine: Secure remote healthcare delivery in 2026

Feb 3, 2026 By Shweta Dhole In TrustCloud
Telemedicine has revolutionized healthcare delivery, enabling patients to access medical consultations from the comfort of their homes. However, this shift to virtual care necessitates strict adherence to the Health Insurance Portability and Accountability Act (HIPAA) to ensure the protection of patient privacy and the security of electronic health information.
Read Post
salt security

Why Your WAF Missed It: The Danger of Double-Encoding and Evasion Techniques in Healthcare Security

Feb 2, 2026 By Eric Schwake In Salt Security
If you ask most organizations how they protect their APIs, they point to their WAF (Web Application Firewall). They have the OWASP Top 10 rules enabled. The dashboard is green. They feel safe. But attackers know exactly how your WAF works, and, more importantly, how to trick it. We recently worked with a major enterprise customer, a global leader in healthcare technology, who experienced this firsthand.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.