Welcome to HealthcareInfoSecurity's HIPAA Omnibus Resource Center!

The latest news, views and education on the HIPAA Omnibus Rule, including insights on complying with modifications to the HIPAA privacy, security and breach notifications rules.

View the Full Text of Final Rule

Ransomware Demands Fall but Endpoint Attacks Escalate

Brian Pereira • August 11, 2025

Ransomware operators are increasingly abandoning encryption-only tactics in favor of stealing and compromising data integrity. Aaron Bugal, field CISO for APJ at Sophos, shares how ransomware groups are moving from pure encryption to stealing sensitive data and exploiting remote endpoints.

Data Breach Notification

Agentic AI Tackles Network Outage Prevention Challenges

Unlocking Data and AI to Digitally Transform Manufacturing

Artificial Intelligence & Machine Learning

Why Better Security in AI Use Will Fuel Wider Adoption

Latest

Events

Securing AI Models Against Unpredictability and Exploitation

Michael Novinson • April 29, 2025

AI is transforming cybersecurity from the ground up. Security teams battle skills shortages, alert fatigue and bloated technology stacks. Jeetu Patel, Executive Vice President and Chief Product Officer at Cisco, said AI can augment capacity and simplify defenses when applied thoughtfully.

Events

AI vs. AI: The New Cybersecurity Battlefield

Tom Field • April 29, 2025

Offensive cybersecurity is gaining momentum, driven by frameworks such as Gartner's Continuous Threat Exposure Management and advancements in generative AI. Organizations are increasingly adopting proactive strategies to secure their digital assets, said BreachLock CEO Seemant Sehgal.

Events

The Importance of Quantifying Security Risk for the Board

Michael Novinson • April 29, 2025

Quantifying the potential cost impact of a cyberattack on a critical business operation and demonstrating how to reduce that risk to a more acceptable level is crucial for CISOs gaining cybersecurity budget buy-in from the CFO, board and others, said Sumedh Thakar, president and CEO of Qualys.

Cyberwarfare / Nation-State Attacks

Ukrainian Signal Users Fall to Russian Social Engineering

Akshaya Asokan • February 19, 2025

Russian nation-state hackers are using phishing attacks to target Ukrainian users of the chat app Signal, say security researchers. Rather than circumventing Signal's end-to-end encryption via a cryptographic attack, attackers use malicious prompting to prod victims into exposing messages.

Data Masking & Information Archiving

Top 10 Technical Predictions for 2025

Druva • February 13, 2025

Join data experts as they talk about their technical predictions for this year and look back on how well they did last year. The discussion will involve hot topics such as data security in the age of AI and AI-driven simplification of product usability

Data Privacy

5 Successful Strategies to Overhaul Your Data Security

Druva • February 13, 2025

IT and security teams spend countless hours and dollars managing and maintaining infrastructure and storage to protect their data. So, what does it take to build stronger data security and resiliency? Watch this webinar to learn how 5 different organizations found a path to better security.

Cloud Security

From Data Security Blind Spots to Recovery: Close Your Cyber Resilience Gaps

Druva • February 13, 2025

Traditional cybersecurity defenses alone won’t cut it anymore. Organizations need a resilient, well-rounded strategy for fast, clean recovery and continuity. Watch now to learn how to enhance data immutability, security, and cyber remediation to reduce business impact.

AI-Powered SASE

AI Access: Get Visibility Into What's Being Used and How

Tom Field • February 6, 2025

Visibility into access - it's been the bane of many organizations' efforts to understand where and how generative AI is being used throughout the extended enterprise. Jason Georgi of Palo Alto Networks, shared insights into new strategies and tools that overcome the risks of mismanaged access.

Data Breach Notification

HIPAA Omnibus: 5 Compliance Tips

Christopher Paidhrin • June 24, 2024

Healthcare organizations need to implement a five-step plan to launch their efforts to comply with the HIPAA Omnibus Rule on a tight deadline, says security specialist Christopher Paidhrin.

Events

Proactive Defense Dominates Discussions at ISMG Fraud Summit

Pooja Tikekar • May 27, 2024

Information Security Media Group's Fraud, Security and Risk Management Summit brought together a diverse group of cybersecurity leaders and experts in New York City for a comprehensive day of education and collaboration on payment fraud, identity theft and third-party risk management.

Cyber Insurance

Cyber Insurers Pledge to Help Reduce Ransom Payments

Mathew J. Schwartz • May 14, 2024

A coalition of cyber insurance associations has pledged to back fresh government cybersecurity guidance designed to help victims avoid ever paying a ransom as part of an ongoing push to reduce ransomware's profitability for criminals, in part by improving organizations' resilience and recovery.