FortiBleed Remains Active as Help Net Security Reviews Recent Security News
Help Net Security reports that the FortiBleed vulnerability remains active while highlighting a healthcare fintech security interview.
Key points
- FortiBleed vulnerability remains active according to Help Net Security.
- Drew McCombs discusses balancing CTO and CISO roles at Cylerity.
- Security tasks are scheduled into every development sprint at the firm.
FortiBleed remains an active threat according to a recent weekly review published by Help Net Security. The outlet highlighted this ongoing vulnerability alongside other significant security developments from the previous week. This report serves as a summary of notable news articles, interviews, and video content released during that period.
The review also featured an interview with Drew McCombs, the CTO and CISO at Cylerity. He explained how he manages the dual responsibilities of his executive roles within the healthcare fintech sector. McCombs detailed the specific strategies his organization uses to maintain security standards while driving technical innovation.
Context and Background
Help Net Security provided an overview of last week’s most interesting security news and interviews. The publication aimed to give readers a concise summary of recent industry developments. Among the topics covered was the continued relevance of the FortiBleed vulnerability in the current threat landscape.
The outlet also focused on operational security within healthcare technology firms. The interview with McCombs offered insights into how companies handle sensitive data. This context is critical for understanding the broader security challenges facing fintech providers today.
Who Is Affected
Cylerity, a healthcare fintech vendor, was the primary subject of the featured interview. The company deals with patient health information and funds disbursement processes. These operations require strict security measures to protect sensitive data from potential breaches.
Hospital CISOs are also affected by these developments, as they must vet vendors carefully. McCombs addressed the specific questions these security leaders should ask when evaluating partners. The focus was on ensuring that security protocols are robust and compliant.
What should you do?
Security professionals should monitor vendor security practices closely. They need to verify that security is integrated into development cycles. Organizations handling patient data must ensure strict separation of sensitive information.
What to do and how to stay safe: FortiBleed
- Review vendor security protocols for handling patient health information.
- Ensure security tasks are integrated into every development sprint.
- Verify that sensitive data is kept separate from bank partners.
- Ask healthcare fintech vendors about their data protection strategies.
Step-by-step guide: Risk Based Vulnerability Management: Prioritize Fixes by Actual Threat
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Is FortiBleed still a threat?
Yes, Help Net Security reported that FortiBleed is still active in their weekly review.
Who is Drew McCombs?
He is the CTO and CISO at Cylerity, a healthcare fintech vendor.
How does Cylerity handle security?
Security work is scheduled into every sprint, with patient data issues prioritized.
