by Lisa Munro | Oct 2, 2025 | Blog
By: Larry Mraz, CISSP, CRISC, CHPP, CISM, CISA, BCMS vCISO/Principal Consultant Cybersecurity is at a breaking point. Organizations are burdened by two interconnected crises: the unchecked proliferation of security tools and the persistent shortage of skilled...
by Lisa Munro | Sep 11, 2025 | Blog
By Sebastian Pina, OSCP, OASP, PNPT, PWPA, Security+Senior Consultant, Technical Testing Services Introduction Healthcare organizations invest heavily in advanced cybersecurity technologies — firewalls, endpoint protection, and intrusion detection systems. Yet one of...
by Lisa Munro | Sep 11, 2025 | Blog
If you’ve been tracking New York’s hospital cybersecurity rules, you know the clock has already been ticking. Last October (2024), hospitals were forced to tighten their response times with a new 72-hour cyber incident reporting rule. That change is already reshaping...
by Lisa Munro | Aug 28, 2025 | Blog
How clever text inputs can turn your AI assistants into security vulnerabilities By Philip Burnham, PNPTPrincipal Consultant, Technical Testing Services Introduction: Why Prompt Injection Matters in Healthcare Healthcare organizations are rapidly deploying AI chatbots...
by admin | Aug 19, 2025 | Blog
By Porter Throckmorton, CRTO, OSCP, CBBH, PNPT, eWPTSenior Consultant, Technical Testing Services It is likely you have seen the number 1 in an alert box if you have ever had a penetration test performed on your web application. The alerted number is the most common...
by Kim Singletary | Aug 4, 2025 | Blog
A review of OCR Enforcement Findings from 2025 (March-July) OCR’s latest enforcement push is driving healthcare organizations to conduct a thorough review of their HIPAA risk analysis to find any weaknesses or gaps — before the agency does. OCR Risk Analysis update...