-

Digital Health Laws and Regulations
I would love to see the Federal government enact some legislation for the Provinces to follow around minimum standards for cybersecurity – above just ensuring data privacy. The jurisdictional issues aside –
-

NIST releases CSF 2.0
NIST’s updated CSF aims to help organizations of all sizes improve their cyber-posture. Providing new documentation and resources and adding some additional focus on governance and supply chains.
-

Medical Device vulnerabilities actively exploited in the wild.
I came across an insightful article from 2022 during the holiday break, revealing that vulnerabilities in medical technology are actively exploited by advanced persistent threats (APTs). Our database highlights over 190 known vulnerabilities in medical devices, challenging the belief that our niche field in Biomedical Engineering is immune to cyber threats. This underscores the necessity…
-

CISA Urges End of Default Passwords
CISA urges technology manufacturers to eliminate usage of default password. Implementation proactively eliminates known path of exploitation.
-

Canadian Healthcare Cybersecurity in the news – Regularly Updated
News stories spotlighting cybersecurity in Canadian healthcare. Ongoing and constantly updated post to aggregate news stories in Canadian media.
-

Canadian Center for Cyber Security – National Threat Assessment for 2023-24
The Canadian government has released its cyber threat assessment for the coming year and likely impacts to Canadians.
-

The Challenges Series – Part 1: Different Perspectives = Different Priorities
Introduction In an earlier post, we discussed some of the challenges facing Biomedical Engineering departments when dealing with cybersecurity. In a series of posts, starting with this one, we’ll delve deeper into the challenges faced by clinical engineering departments when addressing cybersecurity for medical devices. Hopefully, by identifying some of the issues, we can move
-

Another Banner Year
Cyberattacks and data breaches are on the rise and healthcare is a prime target.
-

Ontario Hospitals suffer Cyberattack – Updated
A group of hospitals in southwestern Ontario have suffered an interruption of service due to a cybersecurity attack. Their IT-service provider is investigating if any data has been compromised. Member hospitals shutdown some key systems and are using manual methods to keep services flowing for patients. The cyberattack vector, full extent of the outage, or
-

Canadian Governments hit by Cyberattack
Numerous Provincial and Territorial governments impacted by DDoS cyberattack.
-

Cybersecurity and Negative Impacts to Patient Care
An intriguing infographic arrived in my inbox today. Originating from a U.S. company, it showcased the usual graphs and charts illustrating the effects of cybersecurity breaches on healthcare organizations, along with their financial consequences. However, here in Canada, the outcomes of cyber events seldom revolve around monetary losses or reputational damage. As public institutions, our
-

Recent Data Breach Raises Concerns in BC
In a recent cyberattack, cybercriminals targeted the Health Employers Association of BC (HEABC), exposing personal data of healthcare workers in British Columbia (BC). This incident highlights the critical importance of cybersecurity in the public sector. The BC government reported that three of their websites fell victim to the attack, leading to a significant breach of

