Agencies alert organizations to common cybersecurity misconfigurations

The National Security Agency and Cybersecurity and Infrastructure Security Agency Oct. 5 recommended organizations take steps to prevent cyber actors from exploiting 10 common network misconfigurations.

“This important technical alert demonstrates that even the largest organizations with well-resourced cybersecurity departments may suffer significant cyber risk exposure,” said John Riggi, AHA’s national advisor for cybersecurity and risk. “The size and complexity of these large networks along with embedded vulnerabilities in the third-party technologies deployed in those networks may contribute to the common cybersecurity misconfigurations identified in the bulletin. This alert by the NSA and CISA certainly warrants a thorough review by health care network defenders.”