Drex covers three key security stories: Secretary of Defense Pete Hegseth's alleged sharing of classified information via Signal, resulting in a 13% increase in Signal usage; CISA recommendations following two Oracle breaches affecting healthcare customers and Cloud login data; and crosswalk buttons being hacked to play AI-spoofed voices of tech executives due to unchanged default passwords.
Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer
This transcription is provided by artificial intelligence. We believe in technology but understand that even the smartest robots can sometimes get speech recognition wrong.
Hey everyone. I'm Drex and this is the two minute drill where I cover three hot security stories twice a week, all part of the 2 29 project. Cyber and Risk community, I try to keep the podcast mostly plain English and mostly non-technical, so it's easy for everyone in the organization to consume so that everyone can do their part, to keep patients, families, and the whole health system safe.
Today's episode is brought to you by Google. Healthcare Systems are lowering costs and boosting endpoint security with Chrome OS devices paired with Chrome Enterprise, a secure browser that's trusted by billions of users. So now there's a better way for healthcare teams to work safely on the web. Learn more or schedule some time with the Google Healthcare team at this week, health.com/chromeos.
Good to see everyone here today. Here's some stuff you might wanna know about. Another day at the White House, another Signal Gate, secretary of Defense, Pete Hegseth, has allegedly been caught again, sharing classified information via signal. This time, the chat included his wife, his brother, and his personal lawyer on the.
One of the side effects of Signal Gate is that signal use is up 13% in just the last month. That means lots of folks have decided to move their chats to signal right or wrong, and politics and risk to the nation's. Security aside, it's a good reminder to talk to your teams and your peers about how they should or shouldn't be communicating sensitive business, clinical and research information on the internet.
This is one of those things I feel like we've talked about several times, but you know, reminders are always good and sometimes just raising the reminder will be enough to have teammates shine a light on a broken workflow process or something else that's kind of outside your expected communication channels.
Better to find out before you're exposed than have to deal with another emergency. I've talked about the Oracle breaches in the past couple of weeks. There's been two of them, one that affected Oracle Health customers and another that exploited Oracle Cloud login data. Well, now CISA has issued recommendations to organizations using Oracle, including resetting passwords and monitoring logs for odd activity and doubling down on MFA multifactor authentication.
You can find out more@cisa.gov and the story is on the website. Today's final story, you know those crosswalk buttons you press as you wait to cross the street? Well, it turns out those buttons are being hacked in several cities often. To add in the AI spoofed voices of Jeff Bezos or Elon Musk or Mark Zuckerberg in Seattle this week, one button was hacked so that when you push the button a fake, Jeff Bezos introduced himself and announced that the crosswalk was being sponsored by Amazon Prime.
Obviously not true. It turns out those buttons are pretty easy to hack. The software to communicate with the devices was available on iOS and Android App Store. It's since been taken down. Anyone could download it, and since most of those crosswalks were programmable via Bluetooth. The default password was 1, 2, 3, 4, and that was never changed.
The joke was pretty easy to pull off, not just in Seattle, but cities across the country. So maybe another good reminder here, make sure that you're changing all those default passwords. You can read all those stories and all the latest healthcare innovation, tech and security news at the industry's fastest growing news site this week.
health.com/news. Today's episode is brought to you by Google. You can keep patient data safe and reduce the burden for IT operations staff, and create a better clinician experience. All with one platform. Google Chrome OS with Chrome Enterprise. Find out how by scheduling a chat today. Go to this week, health.com/chromeos.
By the way, you can get all the past episodes of the two minute drill at this week. health.com/unh hack. That's it for today's two minute drill. Thanks for being here. Stay a little paranoid and I'll see you around campus.