Health and Human Services Secretary Xavier Becerra today in a letter to health care and public health leaders urged vigilance against cyber threats posed by a vulnerability within the Apache Log4j software. Exploitation of the software, which exists in thousands of applications, including control systems for medical devices and hardware, can result in data exfiltration or ransomware that can significantly disrupt the delivery of health care. Becerra strongly encouraged the implementation of Department of Homeland Security Cybersecurity and Infrastructure Security Agency guidance on the Apache Log4j information; reviews of cybersecurity resources from HHS and CISA; network monitoring and raised cybersecurity awareness to maintain readiness in emergency operations procedures and continuity plans; and promptly reporting any cybersecurity incidents to CISA or the FBI. 
   
 

Related News Articles

Headline
U.S. and international cybersecurity authorities released an advisory to help health care and other critical infrastructure organizations identify and…
Headline
An interagency task force chaired by the Cybersecurity and Infrastructure Security Agency and FBI yesterday released an updated guide offering best…
Headline
During a month-long ransomware attack on four hospitals in 2021, two neighboring hospital emergency departments experienced increased patient volumes, wait…
Headline
The FBI, Cybersecurity and Infrastructure Security Agency, and Australian Cyber Security Centre issued recommendations to help critical infrastructure…
Headline
Health sector organizations should immediately patch a vulnerability in Veeam software used to back up, replicate and restore data on virtual machines, the…
Headline
The Food and Drug Administration last week alerted health care providers and laboratory personnel to a cybersecurity vulnerability affecting the Universal Copy…