| The problem Software patches — updates, bug fixes — are meant to address security vulnerabilities but the truth is that we're losing the patching battle and therefore the ransomware war. In October, Sophos revealed that exploited vulnerabilities – known endpoint backdoors for which a fix exists but has yet to be applied – are the leading technical cause of healthcare ransomware. This is a big problem as successful attacks can disrupt patient care and the average cost of recovery exceeds $1 million. Many healthcare organizations run critical systems on older hardware that wasn't designed for frequent updates. When these systems are tightly integrated with electronic health records and other clinical workflows, admins worry that a patch could break something essential. Yes, but … There are real dangers of not patching. Ransomware causes financial, reputational, and service-delivery damage, as evidenced last year when attackers exploited basic endpoint security failures to launch a successful attack against Change Healthcare. The result? Data theft, the cancellation of urgent surgeries, and an estimated $800 million in losses. How to defeat ransomware The good news is that healthcare can nip this in the bud with just a few simple technical shifts. First, automate patching during off-peak hours. This goes a long way to minimizing disruptions and maximizing troubleshooting time if something goes wrong. Modern unified endpoint management (UEM) platforms solve this by scheduling automatic updates during nights, weekends, or other low-activity windows. — By MedCity Influencer Apu Pavithran |
No comments