Government agencies issue urgent alert on network vulnerability

Jul 02, 2020 - 03:45 PM
Cybersecurity Lock on Gold Wall

The departments of Homeland Security and Health and Human Services and the National Security Agency this week alerted the field to a significant vulnerability affecting the Palo Alto Networks’ PAN-OS firewall software that cyber attackers could easily exploit remotely via the internet.

The alert recommends patches, mitigations and workarounds to address the vulnerability.

"This is very serious vulnerability rated as a 10 out of 10 on the vulnerability severity scale,” noted John Riggi, AHA senior advisor for cybersecurity and risk. “In the current COVID-19 expanded telework and telehealth environment, it should be expected that nation-state adversaries and criminals will attempt to hack hospitals and health systems via this vulnerability to steal sensitive data and medical research." 

Hospitals and health systems may direct questions on cybersecurity and risk to Riggi at jriggi@aha.org.

Related News Articles

Headline
Microsoft, Health-ISAC announce disruption to cybercriminal businesses supplying attacks on healthcare, others 
Microsoft and Health-ISAC Oct. 15 announced that they disrupted three cybercriminal businesses that provided services to threat actors to attack more than 75,…
Headline
Webinar to discuss voice threats and ways to improve security
The AHA will host a webinar Oct. 20 at 1 p.m. ET that will explore the evolving voice threat landscape — including voice phishing, or vishing, spoofing and…
Headline
Critical vulnerability discovered in certain Citrix products 
A new critical vulnerability has been discovered in Citrix NetScaler ADC and NetScaler Gateway products, the company announced Oct 8. Citrix said the…
Chairperson's File
Chair File: Strengthening Cybersecurity to Protect Patients and Our Hospitals’ Mission
Public
What does patient safety mean to you? For many, patient safety means what we can see: hand hygiene, infection prevention and control practices, medication…
Headline
Agencies warn of Chinese government-linked cyber actors using hacking tools to steal sensitive data
A joint advisory released Oct. 8 by U.S. and international agencies warns of Chinese government-linked cyber threat actors using automated and hands-on hacking…
Headline
NSA recommends adoption of zero trust controls to improve cybersecurity of essential functions
The National Security Agency Oct. 8 released guidance for critical infrastructure organizations that recommends adopting high-impact zero trust strategies to…