Becerra urges health care sector’s vigilance against Log4j software threat 

Jan 10, 2022 - 03:19 PM
Symantic cyberattack

Health and Human Services Secretary Xavier Becerra today in a letter to health care and public health leaders urged vigilance against cyber threats posed by a vulnerability within the Apache Log4j software. Exploitation of the software, which exists in thousands of applications, including control systems for medical devices and hardware, can result in data exfiltration or ransomware that can significantly disrupt the delivery of health care. Becerra strongly encouraged the implementation of Department of Homeland Security Cybersecurity and Infrastructure Security Agency guidance on the Apache Log4j information; reviews of cybersecurity resources from HHS and CISA; network monitoring and raised cybersecurity awareness to maintain readiness in emergency operations procedures and continuity plans; and promptly reporting any cybersecurity incidents to CISA or the FBI. 
   
 

Related News Articles

Headline
Fact sheet highlights ways to reduce risk working with third-party networks for managing critical functions
The FBI and the Cybersecurity and Infrastructure Security Agency have released a fact sheet for critical infrastructure organizations on ways to reduce risk…
Headline
Webinar to share how to better protect medical devices from cyber threats
The AHA will host a webinar Sept. 30 at 1 p.m. ET on ways healthcare organizations can build an effective, closed-loop cybersecurity program designed…
Headline
CISA shares low-cost cybersecurity strategy for hospitals
New guidance from the Cybersecurity and Infrastructure Security Agency encourages healthcare organizations to consider internal network and internet facing…
Headline
NIST, CISA issue guidelines on protecting authentication tools from forgery, theft
The National Institute of Standards and Technology and the Cybersecurity and Infrastructure and Security Agency have released guidelines to protect…
Headline
AHA comments on proposals regarding Medicare provider payment, cybersecurity during House subcommittee hearing
The House Energy and Commerce Subcommittee on Health held a hearing Sept. 15 to discuss more than a dozen legislative proposals regarding Medicare provider…
Headline
NSA releases best practices guide on cyber hygiene for defending against advanced threats 
The National Security Agency has released a best practices guide on effective cyber hygiene for defending against advanced cyber threats, including those…