Health IT Security April 29, 2021
In response to the supply chain attack against SolarWinds, NIST and DHS CISA released guidance to support entities with defense means, including risks and recommendations.
NIST and the Department of Homeland Security Cybersecurity and Infrastructure Security Agency released guidance to support entities with the defense against supply chain attacks, in the wake of the massive hacking incident against SolarWinds Orion technology.
The release follows a healthcare-specific supply chain risk management guide from H-ISAC and the American Hospital Association.
The Office for Civil Rights first warned healthcare entities of the cyberattacks against government agencies and private sector entities in mid-January. Nation-state attackers trojanized updates to the SolarWinds Orion platform between March 2020 and June 2020.
In doing so, the hackers gained...