Content by Marianne Kolbasuk McGee

Cloud Infrastructure Security: Who's Responsible?

Marianne Kolbasuk McGee  •  September 27, 2017

It's critical for entities to remember that major infrastructure cloud services providers have a very limited responsibility for their customers' data security, says Kevin Flynn of Skybox Security.

Buying Cyber Insurance: Who Should Be Involved?

Marianne Kolbasuk McGee  •  September 25, 2017

All the key players of a company's management group, including the CISO, need to be involved in the decision about whether to invest in cyber insurance, says Greg Markell of Ridge Canada Cyber Solutions, a cyber insurer.

Canada's Tough New Breach Reporting Regulations

Marianne Kolbasuk McGee  •  September 21, 2017

Canada had been lagging behind the U.S. and some other nations in terms of breach notification regulations, but now it's catching up, says attorney Imran Ahmad, who explains new regulations that are going into effect.

Addressing Application Security Vulnerabilities

Marianne Kolbasuk McGee  •  September 19, 2017

Many recent data breaches, including the Equifax incident, show that "applications are really the vulnerable entry point into organizations and ultimately to organizations' data," says Alex Mosher of CA Technologies.

Former Systems Administrator Gets Prison Time

Marianne Kolbasuk McGee  •  September 18, 2017

A former systems administrator who worked at a Pennsylvania clinic group for only about three weeks has been sentenced to 27 months in prison in a case involving wire fraud and hacking computers. The case highlights the importance of managing administrative credentials, especially when employees leave.

Former Anthem Cybersecurity Exec on Protecting Credentials

Marianne Kolbasuk McGee  •  September 13, 2017

A former cybersecurity analytics specialist at health insurer Anthem, which experienced a massive data breach, offers insights on key steps organizations should take to avoid becoming the next breach victim in the headlines.

Could CareFirst Data Breach Case Be Headed to Supreme Court?

Marianne Kolbasuk McGee  •  September 8, 2017

Could the class action lawsuit filed against CareFirst Blue Cross Blue Shield be the first data breach case headed to the Supreme Court? A recent ruling by a federal court makes that a possibility.

An FDA First: Cyber Recall for Implantable Device

Marianne Kolbasuk McGee  •  August 29, 2017

The FDA on Tuesday issued an alert about a voluntary recall by a manufacturer of a network-connected implantable device due to cybersecurity vulnerabilities. Nearly 500,000 of the cardiac pacemakers from St. Jude Medical, now owned by Abbott Laboratories, are in use in the U.S.

Anthem Breach Settlement 1 Step Closer to Final

Marianne Kolbasuk McGee  •  August 28, 2017

A federal judge has granted preliminary approval for an amended $115 million settlement in the class action lawsuit over the 2015 cyberattack on Anthem, which resulted in a breach impacting nearly 79 million individuals. An amendment frees certain others from liability in the case.

Improving the Cybersecurity of IoT, Medical Devices

Marianne Kolbasuk McGee  •  August 15, 2017

How could the private sector benefit from steps federal agencies are taking to improve the cybersecurity of the internet of things and medical devices? In an in-depth interview, two experts at UL who are working closely with the agencies explain the potential impact.

Anthem Breach Lesson: Why Granular Access Control Matters

Marianne Kolbasuk McGee  •  August 14, 2017

Healthcare organizations can learn important lessons - including the need for granular data access control - from the costly proposed settlement of the breach lawsuit against health insurer Anthem, says Bill Fox, a former federal prosecutor.

Texas Physician Gets 35-Year Sentence in Huge Fraud Scheme

Marianne Kolbasuk McGee  •  August 11, 2017

A Dallas physician has been sentenced to 35 years in federal prison and ordered to pay more than $268 million in restitution for his role in a huge Medicare and Medicaid fraud conspiracy involving billing for unnecessary home healthcare services.

Some Siemens Medical Imaging Devices Vulnerable to Hackers

Marianne Kolbasuk McGee  •  August 8, 2017

The Department of Homeland Security has issued an alert warning about cyber vulnerabilities in certain Siemens medical imaging products running Windows 7 that could allow hackers to "remotely execute arbitrary code." How serious are the risks?

Appeals Court Allows CareFirst Breach Class Action Lawsuit to Proceed

Marianne Kolbasuk McGee  •  August 2, 2017

Some experts say a federal appeals court's overturning of a lower court's decision to dismiss a class action lawsuit filed against health insurer CareFirst in the wake of a cyberattack could be precedent-setting.

Anthem's Latest Headache: Business Associate Breach

Marianne Kolbasuk McGee  •  July 27, 2017

Health insurer Anthem Inc., still dealing with the aftermath of a 2015 cyberattack that impacted nearly 79 million individuals, now is coping with another - albeit smaller - breach incident. This one involves a business associate's former employee who's currently incarcerated.