2019 Health Care Data Breaches Setting Records
by Janel Miller – September 26, 2019
~ Courtesy of Healio Primary Care
The article also said that more than 35 million individuals are known to have had their health care records “compromised, exposed, or impermissibly disclosed” thus far in 2019, which is more than the previous 3 full years combined.
A record-breaking 50 health care data breaches involving more than 500 records each were reported to HHS this past July, according to a report published in HIPAA Journal.
(more…)UCI Cybersecurity Group Will Simulate Attacks
By Kevin Costelloe
Monday, August 26, 2019
A University of California-Irvine cybersecurity effort is planning a “test range” to simulate and evaluate various types of cyberattacks, the group’s executive director said.
UCI Cybersecurity Policy & Research Institute’s Bryan Cunningham said the effort will let the group “pretend we’re all different kinds of attacker groups” targeting electronic victims.
(more…)Record-breaking year: UC Irvine nets $441 million in research funding
The earliest development of computers, servers and the internet didn’t factor in security from outside attacks, and “we’ve made the exact same mistake again with internet-connected devices that are not information-handling computers,” said Bryan Cunningham, executive director of UCI’s Cybersecurity Policy & Research Institute.
He’s overseeing a $1.4 million grant from the Herman P. & Sophia Taubman Foundation that’s taking a three-pronged approach to vulnerabilities in the Internet of Things, which includes all kinds of gadgets that can connect to the internet – from pacemakers and exercise trackers to smart speakers and apps that let you adjust the thermostat when you’re not home.
Read the full story at The Orange County Register.
Avast Blog: “Avast CEO Vince Steckler Gives a Q&A on His Ten Years at the Top”
Q: What does being a UC Irvine alum mean to you?
Read the full story on the Avast Blog.
IoT Security & Privacy Conference 2019
This event was sponsored by UCI’s Cybersecurity Policy and Research Institute (cpri.uci.edu) and UCI’s Institute for Software Research (isr.uci.edu) features a special keynote by Professor Kevin Fu from the University of Michigan, followed by faculty presentations, a panel discussion and a research showcase.
Watch the VideosUCI Advances in Collegiate Cyber Defense Competition
In only its second year competing in the Collegiate Cyber Defense Competition (CCDC), UCI advanced to the Western Regional Championship (WRCCDC), which will be held March 1-2. The UCI team, led by senior Orbel Golanians, placed fourth out of 21 teams at the WRCCDC qualifier, earning the top spot of the UC schools competing.
ABC: “Australian citizens are unwitting ‘combatants’ in cyberspace, Defence boss says”
The cybersecurity threat could come to resemble the Dunkirk evacuation of World War II, suggested Bryan Cunningham, executive director of the Cybersecurity Policy and Research Institute at the University of California, Irvine. … “If there’s a significant cyber conflict, a ‘Cyber World War’ if you will — we’re going to be in that same situation [as Dunkirk],” Mr Cunningham told the ABC. At least in the beginning stages of an online conflict, he suggested, it will be civilians and civilian infrastructure under attack and by necessity it will be civilians that defend it.
Read the full story at the ABC.
CPRI Receives $1.4M Gift for Securing the Seams of the Internet of Everything
The Herman P. & Sophia Taubman Foundation has provided a generous gift of $1.4 million to UCI’s Cybersecurity Policy & Research Institute (CPRI), led by Executive Director Bryan Cunningham. Founded in the 1960s by the six children of Herman and Sophia Taubman, the foundation aims to promote the advancement of scientific research, higher education and community philanthropy. Six Taubman cousins manage the foundation, including attorney Perry Taubman, currently a visiting scholar at UC San Diego researching autonomous agents for medical diagnosis and insurance coding. Taubman and his cousins understand the crucial need for research focused on cybersecurity and the emerging Internet of Everything (IoE) — that is, the interaction between the traditional internet and the hundreds of millions of connected Internet of Things (IoT) devices.
(more…)A Buckeye Bounce? New Ohio Approach Might Just Catch On
National Cybersecurity Month 2018 has been, appropriately, an active time in cybersecurity law and regulation. Our state of California has passed a first-of-its-kind law to begin to regulate Internet of Things (IoT) devices – smart thermostats, implantable medical devices, etc. Watch this space for much more on this important development. California is often the first state out of the blocks with landmark innovations in cybersecurity and privacy regulation.
Often, but not always.
On November 2nd 2018, a groundbreaking new cybersecurity law will go into effect in Ohio of all places. Ohio’s new approach hopefully will serve as a bellwether for cybersecurity law and data breach liability legislation across the country.
Ohio Senate Bill 220, grants “safe harbor” to companies taking reasonable measures to implement a standards-based cybersecurity program. Not to be confused with the US-EU data transfer agreement of the same name that was struck down by Europe’s highest court, the Ohio “safe harbor” law provides significant protection from legal liability for companies that implement a reasonable written cybersecurity plan.
CPRI Cyber Crisis Simulation: Understanding the Rules and Risks of Cyber Conflicts
UCI’s Cybersecurity Policy & Research Institute (CPRI) recently partnered with the Atlantic Council and the Marine Corps University Foundation (MCUF) to provide a half-day cyber simulation event, approximating adership decision-making during a crisis with cyber actions. Event participants were notified of cyber activity related to an “escalating crisis” with a rival nation. They had to choose between a number of options to de-escalate the crisis, conduct a proportionate response or escalate the situation. They then had to recommend a coordinated response, ranging from “publicly call for third-party mediation” to “use exploit chains to erode rival military navigation.”
“Having participated in a number of actual national security crisis meetings,” said CPRI Executive Director Bryan Cunningham, welcoming everyone to the event, “I can tell you that the [scenario] is pretty accurate.” The former White House lawyer and adviser warned the participants prior to the exercise, “You will find that you have not anywhere near enough information and not anywhere near enough time, and that is how reality works in many crisis situations.”