The Cybersecurity & Infrastructure Security Agency encourages OpenSSL users and administrators to upgrade to version 3.0.7 to patch two high-severity vulnerabilities that threat actors could leverage to crash or take control of a computer system. Releasing the software update yesterday, OpenSSL downgraded the vulnerabilities from critical to high severity.

John Riggi, AHA’s national advisor for cybersecurity and risk, encourages all hospitals and health systems to “patch it before the 'bad guys' exploit it.”

The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center this week alerted the health sector to the OpenSSL vulnerabilities and encouraged organizations to test and deploy the patch once available.
 

Related News Articles

Headline
The Department of Justice July 25 announced the indictment of North Korean national Rim Jong Hyok for allegedly conspiring to hack and extort U.S. hospitals…
Headline
The cybersecurity firm CrowdStrike July 24 posted online a preliminary post-incident report  following a non-malicious global technology outage which…
Headline
There has been a sharp uptick this year in ruthless tactics by cybercriminals, who are now directly threatening patients with the release of sensitive…
Headline
The AHA July 24 shared information and new offerings from some of its private sector partners that can help hospitals and health systems strengthen their…
Headline
AHA President and CEO Rick Pollack opened the 2024 AHA Leadership Summit in San Diego discussing the similarities of the U.S. Navy Seals to the hospital field…
Headline
A non-malicious global technology outage that began in the early morning of July 19 is continuing to affect many industries and is having varying effects on…