Cybersecurity news for hospitals and health systems

Southfield, Mich.-based Ascension Eastwood Clinics reported a patient information breach after an employee sent an email to several patients without blinding the email addresses, according to a release from the system.

Microsoft fixed a vulnerability in Microsoft Teams that would have allowed hackers to tap into a subdomain takeover flaw using a malicious GIF that extracts personal user data from the workplace communication platform, according to a recent CyberArk report. 

Pueblo, Colo.-based Parkview Medical Center's computer network remains down after a cyberattack on April 21, according to local CBS affiliate KKTV. 

Advocate Aurora Health reported an email phishing incident at the Aurora Medical Center-Bay Area in Marinette, Wis., earlier this year.

Hospital executives are working day and night to keep staff safe and update operations to combat the COVID-19 pandemic, including chief information security officers. 

Phoenix-based Banner Health will pay $8.9 million to end claims from a 2016 data breach that exposed personal information of 2.9 million patients, according to Bloomberg Law. 

The FBI released information this week for cybersecurity professionals and hospital administrators to use to protect their organizations from cyber threats during the pandemic.

Since assembling in mid-March, the nonprofit cybersecurity defense group CTI League has struck down more than 2,800 cybercriminal assets on the internet and identified 2,000 security vulnerabilities in healthcare organizations, according to a recent report. 

Apple's iPhones contain a flaw in the email software that makes them vulnerable to hackers, according to a report in The Wall Street Journal.

On April 22, Google's ThreatAnalysis Group reported more than a dozen government-backed attackers are using COVID-19-themed emails for phishing and malware attempts.