DATE: January 20, 2026 at 11:08AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

Free HIPAA Compliance Webinar: Thursday, January 22, 2026: 2025 HIPAA Breaches & Fines. Avoid Being the Next Headline https://t.co/eHdJoqcw2f #HIPAA #compliance

Here are any URLs found in the article text:

https://t.co/eHdJoqcw2f

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 20, 2026 at 11:07AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

The Minnesota Department of Human Services has notified approximately 304,000 individuals about unauthorized access to their demographic records by a user affiliated with a licensed healthcare provider.
https://t.co/3HMmjO3OxW

Here are any URLs found in the article text:

https://t.co/3HMmjO3OxW

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 20, 2026 at 11:08AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

Free HIPAA Compliance Webinar: Thursday, January 22, 2026: 2025 HIPAA Breaches & Fines. Avoid Being the Next Headline https://t.co/eHdJoqcw2f #HIPAA #compliance

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 20, 2026 at 11:07AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

The Minnesota Department of Human Services has notified approximately 304,000 individuals about unauthorized access to their demographic records by a user affiliated with a licensed healthcare provider.
https://t.co/3HMmjO3OxW

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 20, 2026 at 10:51AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

The healthcare technology company Veradigm has agreed to pay $10.5 million to settle class action data breach litigation stemming from a 2024 data breach that affected more than two million patients of its healthcare clients.
https://t.co/smeOmRJZDu

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 20, 2026 at 10:51AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

The healthcare technology company Veradigm has agreed to pay $10.5 million to settle class action data breach litigation stemming from a 2024 data breach that affected more than two million patients of its healthcare clients.
https://t.co/smeOmRJZDu

Here are any URLs found in the article text:

https://t.co/smeOmRJZDu

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

Sicherheitsforscher entdecken neue Malware "PDFSider". Die Schadsoftware kombiniert technische Raffinesse mit #SocialEngineering für langfristigen Systemzugriff. https://winfuture.de/news,156290.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

DATE: January 19, 2026 at 04:58PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

HHS Urges Health Sector to Harden Security of PHI, Devices https://t.co/ut5NsFFdne

Here are any URLs found in the article text:

https://t.co/ut5NsFFdne

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

DATE: January 19, 2026 at 04:50PM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

@HHSOCR Urges #Healthcare Sector to Harden #Security of PHI, Devices https://t.co/ut5NsFFdne

Here are any URLs found in the article text:

https://t.co/ut5NsFFdne

Articles can be found by scrolling down the page at https://www.healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

DATE: January 19, 2026 at 03:18PM
SOURCE: HIPAA Watch from JD Supra

Direct article link at end of text block below.

OpenAI Unveils ChatGPT Health, Connecting Medical Records to Conversational AI https://t.co/s0SdR0tKFS

Here are any URLs found in the article text:

https://t.co/s0SdR0tKFS

Articles can be found by scrolling down the page at https://www.jdsupra.com/ under the title "Latest Updates".

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 19, 2026 at 01:15PM
SOURCE: HIPAA Watch from JD Supra

Direct article link at end of text block below.

The Hidden Legal Minefield: Compliance Concerns with AI Smart Glasses, Part 4: Data Security, Breach Notification, and Third-Party AI Processing Risks https://t.co/2YE6apkPiF

Here are any URLs found in the article text:

https://t.co/2YE6apkPiF

Articles can be found by scrolling down the page at https://www.jdsupra.com/ under the title "Latest Updates".

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 19, 2026 at 11:53AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

Monroe University Confirms 320,000 Individuals Affected by December 2024 Cyberattack https://t.co/ASaNKqZz2p

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 19, 2026 at 11:52AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

A data breach at the revenue cycle management company Mid Michigan Medical Billing Service exposed the data of more than 28,000 patients. VillageCareMax has confirmed that patient data was compromised in an attack on its service provider, TMG Health.
https://t.co/FeRWuktXOI

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 19, 2026 at 11:53AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

Monroe University Confirms 320,000 Individuals Affected by December 2024 Cyberattack https://t.co/ASaNKqZz2p

Here are any URLs found in the article text:

https://t.co/ASaNKqZz2p

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

DATE: January 19, 2026 at 11:52AM
SOURCE: HIPAA JOURNAL

Direct article link at end of text block below.

A data breach at the revenue cycle management company Mid Michigan Medical Billing Service exposed the data of more than 28,000 patients. VillageCareMax has confirmed that patient data was compromised in an attack on its service provider, TMG Health.
https://t.co/FeRWuktXOI

Here are any URLs found in the article text:

https://t.co/FeRWuktXOI

Articles can be found by scrolling down the page at https://www.hipaajournal.com/ .

-------------------------------------------------

Private, vetted email list for mental health professionals: https://www.clinicians-exchange.org

Most healthcare security and privacy posts related to IT or infosec are at @rsstosecurity

-------------------------------------------------

#security #healthcare #doctors #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #HIPAA #privacy #healthcaresecurity #BAA #patientrecords #telehealth #socialengineering

How crypto criminals stole $700 million from people - often using age-old tricks.

As crypto wealth continues to grow, criminals are mixing sophisticated hacks with deception, and in some cases, real life violence.

https://mediafaro.org/article/20260119-how-crypto-criminals-stole-700-million-from-people-often-using-age-old-tricks?mf_channel=mastodon&action=forward

#CryptoCurrencies #Scam #Crime #SocialEngineering #CyberSecurity #DataBreach #Crypto #Tech

Physical penetration testing highlights a growing overlap between human behavior, AI capabilities, and access control weaknesses.

A seasoned pentester explains how publicly available audio, voice cloning tools, and social engineering can bypass service desks and building security - often without exploiting software vulnerabilities.

The discussion raises an important question for defenders: are awareness programs designed to be memorable and practical, or simply compliant?

Source: https://cybernews.com/ai-news/physical-hacker-ai-is-making-job-easier/

Follow TechNadu for continued cybersecurity reporting and practitioner insights.

Engage in the discussion below.

#InfoSec #Pentesting #AIThreats #SocialEngineering #SecurityTraining #PhysicalSecurity #CyberDefense

Dissecting CrashFix: A New Toy

KongTuke, a threat actor tracked since 2025, has launched a new campaign using a malicious browser extension called NexShield that impersonates uBlock Origin Lite. The extension causes browser crashes and displays fake security warnings to trick users into executing malicious commands. The campaign targets both home and corporate users, with domain-joined machines receiving a more sophisticated Python-based RAT named ModeloRAT. The attack chain involves multiple stages of obfuscation, anti-analysis techniques, and a Domain Generation Algorithm (DGA) for C2 communication. KongTuke employs extensive fingerprinting to avoid detection in analysis environments. The campaign demonstrates evolving social engineering tactics and a focus on infiltrating enterprise networks for potential lateral movement and data exfiltration.

Pulse ID: 696b8bd510774c3939103737
Pulse Link: https://otx.alienvault.com/pulse/696b8bd510774c3939103737
Pulse Author: AlienVault
Created: 2026-01-17 13:17:09

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #ICS #InfoSec #Mac #OTX #OpenThreatExchange #Python #RAT #SocialEngineering #UK #bot #AlienVault

Operation Poseidon: Spear-Phishing Attacks Abusing Google Ads Redirection Mechanisms

Operation Poseidon is a sophisticated spear-phishing campaign attributed to the Konni APT group. The attackers exploit Google Ads redirection mechanisms to bypass security filters and user awareness. They compromise poorly secured WordPress sites for malware distribution and C2 infrastructure. The campaign uses social engineering tactics, impersonating North Korean human rights organizations and financial institutions. Malware is delivered through LNK files disguised as PDF documents, executing AutoIt scripts that load EndRAT variants. The attackers employ advanced evasion techniques, including email content padding and abuse of legitimate advertising URLs. The campaign demonstrates evolving tactics and infrastructure reuse consistent with previous Konni activities.

Pulse ID: 696d289962926b96a6584416
Pulse Link: https://otx.alienvault.com/pulse/696d289962926b96a6584416
Pulse Author: AlienVault
Created: 2026-01-18 18:38:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Autoit #CyberSecurity #DRat #Email #Google #GoogleAds #ICS #InfoSec #Konni #Korea #LNK #Malware #NorthKorea #OTX #OpenThreatExchange #PDF #Phishing #RAT #RDP #SMS #SocialEngineering #SpearPhishing #Word #Wordpress #bot #AlienVault

Phone-based tax impersonation scams continue to rely on classic social engineering techniques: urgency, authority, and fabricated programs.

Key observations:
- Initial contact is unsolicited
- Attackers request sensitive identifiers
- Verification paths are deliberately discouraged

While technically simple, these scams remain effective due to human factors rather than technical weaknesses. Education and repeat exposure to warning signs are still critical mitigation strategies.

How do you approach awareness training for non-technical users around phone-based fraud?

Source: https://consumer.ftc.gov/consumer-alerts/2026/01/hang-unexpected-calls-saying-you-owe-back-taxes-those-are-scams

Follow @technadu for measured reporting on cybercrime and consumer threats.

#SocialEngineering #FraudAwareness #ScamPrevention #HumanRisk #InfoSec #TechNadu