Limiting Cyberattack Blast Radius for Healthcare SaaS

Johns Hopkins University and its health system were sued over data breach due to inadequate IT security, implicating the MOVEit file transfer system. Other healthcare systems like Harris Health also affected. The breach led to increased SaaS adoption by healthcare providers, yet attackers already exploit SaaS vulnerabilities, as shown by the Jumpcloud incident. Enhanced security for healthcare SaaS services necessitates Zero Trust architectures, security-focused UX, user control over security policies, data segmentation and multi-tenancy, and accessible security event analysis for institutional customers.

Opens on MedCity News