Researchers at Leviathan Security Group have uncovered an unpatchable vulnerability in virtual private networks (VPNs) known as TunnelVision. This flaw allows attackers to redirect VPN traffic and snoop on data in clear text while remaining undetected, as VPNs inherently lack the ability to protect data at entry and exit points, serving only as encrypted tunnels. The experts emphasize that VPNs are often inaccurately portrayed as comprehensive security solutions when in reality, they are primarily meant for connectivity. This misconception, alongside the difficulty in patching or replacing numerous operational VPNs in enterprises, poses significant security challenges that require a more layered approach to cybersecurity, known as defense in depth.

Massive security hole in VPNs shows their shortcomings as a defensive measure CSO Online

The recent article explores how generative AI is altering the trajectory of Google search, spotlighting the company's most extensive algorithm update to safeguard its search rankings from AI-driven SEO spam. Despite ongoing efforts, industry experts express concerns over the prominence of low-quality content in search results, raising doubts about Google's capability to maintain trustworthy search outputs in an AI-dominated era. The update serves as a response to competition from platforms like ChatGPT and Bing, aiming to preserve Google's advert revenue by enhancing user trust and experience. However, the challenge remains acute as generative AI enables the rapid creation of spam, complicating Google's task of distinguishing between human and AI-generated content.

How generative AI is clouding the future of Google search publication

At the RSA Conference, White House official Anne Neuberger announced impending cybersecurity regulations for the healthcare sector, amid concerns over industry pushback following high-profile cyber incidents that could have been mitigated with basic protections. Despite over a decade of urging for the adoption of multi-factor authentication, offline backups, and data encryption, these practices have largely been ignored by the sector, prompting the need for regulatory action. Neuberger criticized the healthcare industry for negligence, particularly highlighting the failure of UnitedHealth Group to encrypt patient data in its Change Healthcare unit prior to a ransomware attack. She disclosed the plan to introduce minimum cybersecurity requirements for hospitals and a free cybersecurity program for the country's rural healthcare networks. The announcement comes in the wake of the Change Healthcare ransomware attack that significantly impacted the healthcare industry, with lawmakers now showing interest in establishing a cybersecurity baseline for healthcare firms. However, opposition from industry groups like the American Hospital Association underscores the challenge of balancing regulatory measures with the pursuit of proactive cybersecurity strategies.

As White House preps new cyber rules for healthcare, Neuberger says backlash is unwarranted The Record

Kaiser Permanente, based in Oakland, California, reported a significant increase in its operating income for the first quarter, rising to $935 million from $233 million in the same period last year. This growth reflects an improvement in its operating margin from 0.9% to 3.4%. Despite operating revenues increasing to $27.4 billion and expenses to $26.5 billion, the company noted that its operating income remains below pre-COVID-19 pandemic levels due to ongoing cost pressures across the health sector, including high utilization and care acuity, as well as rising costs of goods and services. Kaiser's net income, excluding the impact from the acquisition of Geisinger, stood at $2.7 billion, a significant jump from the previous year's $1.2 billion, benefiting from a one-time gain related to the acquisition. Membership also grew, reaching 12.6 million with an increase of 66,000 members from the end of the previous year. CEO Greg Adams highlighted Kaiser's dedication to providing high-quality, affordable healthcare amidst these challenges.

Kaiser posts $935M operating profit in Q1 Becker's Hospital Review