by Lisa Munro | Apr 23, 2026 | Blog
HIPAA Security Rule Enforcement: Where Things Stand in 2026 Update · Jul 2026 HHS has pushed final action on the HIPAA Security Rule overhaul to at least July 2027 in its updated federal agenda, moving ahead separately with HIPAA Privacy Rule changes expected...
by Lisa Munro | Apr 22, 2026 | Podcast
AHLA’s Speaking of Health Law | Sponsored by Clearwater The CMS Health Technology Ecosystem Initiative signals a broader shift in how health data is expected to move across providers, payers, networks, and consumer-facing tools. In this episode of AHLA Speaking of...
by Kim Singletary | Apr 15, 2026 | Blog
This post documents a blind time-based SQL injection in the PostCalendar module discoveredin OpenEMR 8.0.0. The SQL Injection is exploitable by an authenticated admin user and illustrates how a single determined attacker with a valid session can move from nuisance to...
by Lisa Munro | Apr 2, 2026 | Blog
For years, healthcare cyber risk was framed around the perimeter. Firewalls. Endpoints. Network defenses. The digital equivalent of locked doors and reinforced windows. That model no longer reflects how healthcare operates. Care now runs across cloud platforms, EHRs,...