Author | Lightnews

Idenhaus @idenhaus.bsky.social · 7h

Security experts will be coming together to hear about the latest risk management strategies, novel hacking techniques, cyber governance and the technologies enterprises need to defend their networks. Will you be there?

Top cybersecurity conferences to attend in 2026

Security experts will come together to hear about the latest risk management strategies, novel hacking techniques, cyber governance and the technologies enterprises need to defend their networks.

www.cybersecuritydive.com

Idenhaus @idenhaus.bsky.social · 9h

As we look to 2026, remain firm in your cybersecurity commitments: Protect your operations, protect your data and protect the trust your clients place in you. In aviation and every sector that values trust and precision, cybersecurity must be a shared responsibility and a permanent priority.

Cybersecurity In Aviation And Beyond: Continuous Vigilance Is Demanded

At the leadership level, leaders must treat cybersecurity as a long-term investment, not a one-time project.

www.forbes.com

Idenhaus @idenhaus.bsky.social · 12h

A more than year-long digital intrusion into cybersecurity company F5 publicized last week and blamed on Chinese spies, has defenders across the industry hunting for signs of compromise among the many corporate networks that use its products.

Cyber defenders sound the alarm as F5 hack exposes broad risks

www.reuters.com

Idenhaus @idenhaus.bsky.social · 14h

Vote now for Idenhaus to win "Best Of Georgia" again this year - we're counting on your help!

Georgia Business Journal - Vote Now

Vot for Idenhaus as Best Of Georgia!

gbj.com

Idenhaus @idenhaus.bsky.social · 1d

The U.S. Department of Justice (“DOJ”) has kept busy in pursuing cybersecurity-related fraud in government contracts resulting in seven settlements. These settlements illustrate the continuing need for contractors to familiarize themselves with applicable regulations and maintain ongoing compliance.

Recent developments in FCA cybersecurity enforcement for government contractors

The U.S. Department of Justice (“DOJ”) has kept busy in pursuing cybersecurity-related fraud in government contracts resulting in seven settlements. These settlements illustrate the continuing need…

www.hoganlovells.com

1

Idenhaus @idenhaus.bsky.social · 2d

While hackers and ransomware groups have historically focused their efforts on attacking larger healthcare organizations with deeper pockets, smaller healthcare practices are increasingly being targeted for the simple reason that they are easier to attack, as they have fewer resources.

HIPAA Compliance Challenges for Small Medical Practices

All healthcare providers are required to comply with the HIPAA Rules, but there are unique challenges for small medical practices. Large healthcare Small medical practices face unique challenges with…

www.hipaajournal.com

1

Idenhaus @idenhaus.bsky.social · 2d

In the third quarter of 2025, ransomware activity reached a new record, rising 36% from the same period in 2024, with 270 publicly disclosed attacks. Healthcare, government, and technology sectors accounted for more than half of these incidents, reflecting a shift in targeted industries.

Ransomware hits record highs: Healthcare, government, tech sectors top targets in BlackFog Q3 2025 analysis - Industrial Cyber

Ransomware hits record highs: Healthcare, government, tech sectors top targets in BlackFog Q3 2025 analysis.

industrialcyber.co

Idenhaus @idenhaus.bsky.social · 2d

Four in 10 companies have created deputy CISO roles as regulatory concerns require greater board engagement.

Fortune 500 companies designate specialist roles to bolster security operations teams

Four in 10 companies have created deputy CISO roles as regulatory concerns require greater board engagement.

www.cybersecuritydive.com

Idenhaus @idenhaus.bsky.social · 5d

In lieu of the re-authorization of the CISA 2015 act, there are pivotal measures that need to be taken across state and local governments to implement new structures to ensure the safety of our students, teachers, and their data.

Don’t Wait, Advocate: K-12 Cybersecurity Needs Our Help

Losing CISA 2015 means losing protections that enable schools to safely and legally share data and threat intelligence.

www.securitymagazine.com

Idenhaus @idenhaus.bsky.social · 5d

At first glance, online petitions seem to be the epitome of digital democracy. They promise a voice to the voiceless and come across as harmless, even noble. However, behind the click lies a dark side which most people never see: a world of data mining, profiling, and outright scams.

Innocuous-looking online petitions can imperil India’s cybersecurity

In the digital age, online petitions have surged in popularity, serving as a potent tool for civic engagement and social change. With platforms like Change.org boasting 56.5 million global users and…

www.awazthevoice.in

Idenhaus @idenhaus.bsky.social · 5d

Kuwait’s Ministry of Education is taking bold steps to protect the next generation—cybersecurity awareness is now part of the school curriculum. Students will learn how to spot phishing, defend against cyberattacks, and stay safe online. A smart move for a safer digital future!

‘Education’ integrates cybersecurity concepts into curricula to combat phishing - Times Kuwait

The Ministry of Education has begun implementing a new initiative to incorporate cybersecurity awareness—particularly the dangers of phishing, cyberattacks, and hacking—into school curricula starting…

timeskuwait.com

Idenhaus @idenhaus.bsky.social · 6d

Healthcare providers need vendors to take a more active role in cybersecurity. We need to require vendors to maintain current patch levels and work towards migration to current operating systems, especially for legacy systems that are still prevalent in healthcare environments.

Building a healthcare cybersecurity strategy that works - Help Net Security

Building a healthcare cybersecurity strategy requires smart prioritization, focusing on controls, resilience, and risk-aware leadership.

www.helpnetsecurity.com

Idenhaus @idenhaus.bsky.social · 6d

Scouting America, the organization formerly known as the Boy Scouts, is giving scouts the chance to earn two merit badges that engage new technology: one in artificial intelligence and another in cybersecurity.

Scouts will now be able to earn badges in AI and cybersecurity | CNN Business

Scouting America, the organization formerly known as the Boy Scouts, is giving scouts the chance to earn two new merit badges: one in artificial intelligence and another in cybersecurity.

www.cnn.com

Idenhaus @idenhaus.bsky.social · 6d

"Storm-2657 is actively targeting a range of U.S.-based organizations, particularly employees in sectors like higher education, to gain access to third-party human resources (HR) software as a service (SaaS) platforms like Workday," the Microsoft Threat Intelligence team said in a report.

Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries

Storm-2657 exploits phishing and weak MFA to hijack HR SaaS accounts and redirect payroll funds.

thehackernews.com

Idenhaus @idenhaus.bsky.social · 6d

Access programs built for humans don’t automatically extend to machines, and without deliberate execution, half your environment remains unsecured. When machine access is governed similarly to human access, drift slows, blast radius shrinks, and accountability is restored.

Beyond Humans: Governing Machine Identity Access at Scale | Identity Defined Security Alliance

Identity security programs must include machines—like CI/CD pipelines, service accounts, and AI agents. Learn how to govern machine access at scale, reduce hidden risks, and extend zero trust beyond…

www.idsalliance.org

Idenhaus @idenhaus.bsky.social · 7d

Health-ISAC said in its threat insight report that it expects 2025 to surpass 2024 in both healthcare and total breaches across sectors, with 4,040 incidents recorded in the first half of the year and another 1,930 recorded in Q3. The health sector saw a total of 394 cyber breaches through September

In 2025, patients are in the healthcare cybersecurity crosshairs

Three reports released this week show that supply chain cyberattacks were the most likely to disrupt care delivery, with cloud account compromises emerging as the most prevalent threat to healthcare…

www.healthcareitnews.com

Idenhaus @idenhaus.bsky.social · 7d

Beginning on Nov. 10, contractors and subcontractors will see CMMC requirements in solicitations and option exercises. The DoD anticipates approximately 63% of the Defense Industrial Base will need to self-assess at Level 1 to remain eligible for contracts involving FCI. Are you ready?

Overview of DOD's Final DFARS Rule and CMMC Level 1 for Contracto

On Sept. 10, 2025, the Department Defense (DoD) issued a final rule amending the Defense Acquisition Regulation Supplement (DFARS) to implement the Cybersecurity Maturity Model Certification (CMMC)…

natlawreview.com

Idenhaus @idenhaus.bsky.social · 7d

To truly reduce human risk, SAT must evolve. We need to make it continuous, contextual, and grounded in real-world threats. The goal isn’t just awareness—it’s enablement.

Cybersecurity Awareness Month: We need to turn employees into defenders, not liabilities

Here's three ways we can make security awareness training more proactive.

www.scworld.com

Idenhaus @idenhaus.bsky.social · 7d

Organizations are now investing in HIPAA compliance services not just to adhere to legal requirements but also to maintain operational continuity and foster secure partnerships. The healthcare industry recognizes that compliance demonstrates a serious commitment to safeguarding patient data.

HIPAA Compliance Service Demand Surges Among U.S. Healthcare Firms Amid Rising Breaches

U.S. healthcare firms turn to HIPAA compliance service to prevent data breaches, strengthen cybersecurity, and build patient trust.

www.einpresswire.com

Idenhaus @idenhaus.bsky.social · 8d

The vast majority of organizations are encountering AI-augmented threats, but remain confident in their defenses, despite inadequate detection investment and more than half falling to successfully thwart attacks.

Deepfake Awareness High, But Cyber Defenses Badly Lag

Most organizations encounter AI-augmented threats, yet are confident in defenses despite inadequate investment and half experiencing successful attacks.

www.darkreading.com

Idenhaus @idenhaus.bsky.social · 8d

NHIs are poised to be as influential to our digital futures as human identities, emphasizing their potential as tools for heightened security, enhanced compliance concerns, and fostering an arena where innovation thrives without hindrance.

Driving Innovation with Secure NHIs

How Are Non-Human Identities Shaping the Future of Cybersecurity? What happens when machines need their own form of identification? This question is increasingly relevant as we dive deeper of…

securityboulevard.com

Idenhaus @idenhaus.bsky.social · 8d

HIPAA compliance officers are encouraged to download the new tool along with the updated SRA Tool User Guide. Although using the SRA tool can aid in audits and demonstrate an organization's commitment to data security, it should be viewed as only one component of a broader compliance strategy.

HHS Releases Updated HIPAA Security Risk Assessment Tool v3.6

The U.S. Department of Health and Human Services’ (“HHS”) Office for Civil Rights (“OCR”) and the Assistant Secretary for Technology Policy (“ASTP”) have released a new version (Version 3.6) of…

natlawreview.com

Idenhaus @idenhaus.bsky.social · 8d

The CMMC deadline is right around the corner—are you ready? Waiting could put your critical contracts at risk and leave you stalled in the certification queue. Take control of your compliance journey — partner with Idenhaus’ specialists and get on track for CMMC success today.

The CMMC ‘grace period’ myth could cost you your contract

Jacob Horne, chief cybersecurity evangelist at Summit 7, writes that the defense industry is wrong to believe the bedtime story about a 12-month certification delay. Here's what program manager…

www.washingtontechnology.com

Idenhaus @idenhaus.bsky.social · 9d

The UAE’s decision to appoint AI leaders in every ministry signals a cultural shift, because in healthcare, success is measured not only in cost savings, but in efficiency, sustainability, and better patient outcomes

How the UAE is using AI to transform healthcare | Computer Weekly

Rising costs, an aging population, and the demand for more personalised medicine mean that hospitals and regulators are under pressure to do more with less and here AI is playing a huge role.

www.computerweekly.com

Idenhaus @idenhaus.bsky.social · 9d

In response to the global cybersecurity talent shortage, companies are increasingly training non-technical employees to lead internal security assessments using structured frameworks, cutting costs and improving efficiency.

Businesses Revolutionize Cybersecurity by Empowering Non-Technical Staff to Lead Security Assessments

In response to the global cybersecurity talent shortage, companies are increasingly training non-technical employees to lead internal security assessments using structured frameworks, cutting costs…

www.barchart.com