Drex covers major developments in cybersecurity including significant staffing changes at CISA, where the DOJ has laid off 130 employees and controversially granted facility access to 19-year-old Edward Korrestien. We also discuss a critical vulnerability (CVE-2025-0111) discovered in Palo Alto firewalls that requires immediate attention. The episode concludes with news of HealthNet Federal Services receiving an $11.2M fine for falsely certifying cybersecurity compliance in their TRICARE program administration.
Remember, Stay a Little Paranoid
Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer
This transcription is provided by artificial intelligence. We believe in technology but understand that even the smartest robots can sometimes get speech recognition wrong.
Hey everyone, I'm Drex, and this is The Two Minute Drill, where I cover three hot security stories twice a week. All part of the cyber and risk community here at This Week Health and the 229 Project. Today's two minute drill is brought to you by Intraprise Health, a health catalyst company. With Blueprint, you can pull risk data from all of your tools into a single, unified risk management platform.
ome get a demo at HIMSS booth:That's happened just in recent days, and it's being reported that Edward Korrestien, a 19 year old staffer in Elon Musk's Dogecrew, has been given physical access to CISA facilities and has been given a DHS email address. It's unclear at this point what systems Coristine has access to. It's concerning because Brian Krebs from Krebs on Security has reported that Coristine has a history of interaction with cybercriminals and CISA, as you know, is the agency that holds U.
your immediate attention. CVE:And finally today, Managed Care Contractor HealthNet Federal Services has been fined 11. 2 million According to prosecutors, the organization who administers the TRICARE healthcare program in 22 states, falsely certified compliance with cybersecurity controls required in their contract. The Justice Department also accused the company of ignoring internal and third party reports about risks on its network related to patch management, password policies, and end of life hardware and software.
That story, and a bunch of others, Alright, healthcare's fastest growing news site. ThisWeekHealth. com slash news. Today's two minute drill was brought to you by Intraprise Health, a health catalyst company. You need to get all your leaders on the same page when prioritizing risk. With Blueprint, you'll be able to prioritize and visualize the data and build real accountability.
eam in person at HIMSS. Booth: