WAF for Healthcare

[st_heading][/st_heading]Modern Medical environment has evolved to a new dimension with advancement in technology. New technology services are coming in, new kind of users are being supported even better healthcare services are being delivered. Health care applications are shifting more to cloud versions lately.

These web facing applications are more prone to different types of attacks and vulnerabilities when compared to the traditional in house systems. Web facing application have been increasingly attacked these days as the data stored in them are a lot more valuable and critical to the users.

Read more

What is the Real Cost of a Data Breach – Reflecting LabCorp Data Theft

Another Data breach incident between LabCorp, a medical testing company and American Medical Collection Agency (AMCA), shows the importance of security now a days.

Reports says that data on some 7.7 million consumers were exposed to this breach due to AMCA, a New York based company. They are not responding yet but if it could get you into some legal mess if not handled appropriately. Even if a couple of hackers are behind the scene and not the company itself committed the offence.

One cannot afford to sit back and relax if they happen to store financial and other such private data. Security is the key aspect for such vendors. A glimpse into the LapCorp case would be more insightful.

LabCorp has sent a filing to America’s Securities and Exchange Commission regarding the Leakage of its data. It was told that a 7.7 million patient’s information holding database which was outsourced to AMCA was attacked by hackers. It stored people’s first name, last name, dates of birth, addresses, phone numbers, and money paid or owed. Nearly 200,000 credit card entries or bank account information were taken away by the attackers.

The attack was reported to have happened between August 2018 and March 2019 when the hackers invaded into AMCA’s web payment portal. LabCorp has now stopped its business with AMCA after the occurrence of this incident.

The attacked system included information provided by LabCorp which would include first name, last name, date of birth , address, phone , date of service, provider, and balance information as told by LabCorp to the US securities watchdog. Other crucial data involved credit card or bank account information provided by the consumers to AMCA.

The only relieving news for the customers were that the leaked information did not contain any medical records or confidential medical data of its customers. LabCorp has notified its affected users that they would provide them with free credit monitoring and identity protection services for upto 2 years.

Read more

Ok Cupid Android app’s security breach found

Researchers found that they could gain access to the popular Android app ‘OkCupid’ when they dug deeply into it. They could easily find out details like email aliases, DOBs , genders , names and locations. In the same way one could easily access information like dating preferences such as whether they are looking for long term or short term relations and if they would want to find new friends etc.

Read more

Xiaomi M365 electric scooter hacked

It has been found out that one could take control of a Xiaomi M365 electric scooter from a distance of around 100 meters from it without the knowledge of its actual user. Researchers at Zimperium on Tuesday released a proof-of-concept (PoC) for the attack. The attack allowed them to launch a denial-of-service attack, install malicious firmware which can take full control over the scooter.Thus either accelerate or suddenly halt the scooter without the consent or knowledge of the rider

Read more

Security Issues tracked in Lenovo smartwatch

Lenovo smartwatch which was launched in June 2018 attracted the attention of many with its features, design and affordability. Within a span of just a few months it had to hear a lot of accusations for its usability and mainly for its security.

Read more

Beware if you are using an 8 char NTLM password

Are you using an 8 character NTLM password? Its high time you changed it. HashCat, an open source password recovery tool can now crack your password within less than 2.5 hours, that is definitely less than the time taken to watch a movie!

Read more