New federal grant launches specialized mHealth cybersecurity training


 Mobile health (mHealth) apps are booming, helping patients manage everything from diabetes to heart conditions on their phones. However, this convenience creates a massive security risk, as hackers increasingly target these apps to steal sensitive data. To fight this, the National Science Foundation has awarded a $400,000 grant to Dr. Honggang Wang at Yeshiva University’s Katz School. This funding will launch a specialized educational program designed to teach the next generation of cyber-defenders how to protect mobile health systems.

The program includes a new course with seven detailed modules covering critical topics like wearable device security and biometric protection. Beyond just theory, the project will build an experimental platform where students can practice fighting off cyberattacks in realistic scenarios. This hands-on training is vital because a breach in mHealth isn't just about data privacy; it can be life-threatening. For example, if a hacker compromises an automated insulin pump, they could alter dosages. This initiative aims to build a workforce capable of securing the future of digital medicine.

Read the original article at: https://www.yu.edu/news/katz/ai-expert-awarded-400000-nsf-grant-cybersecurity-research-mobile-health


Follow us on Instagram, Twitter, and Facebook to stay up to date with what's new in healthcare all around the world.

Comments

Post a Comment

Popular posts from this blog

South African pathology giant Lancet Laboratories fined R100,000 for failing to adequately report multiple data breaches

Image
  The Information Regulator of South Africa has issued an enforcement notice and a fine of R100,000 against Lancet Laboratories for its failure to adhere to the Protection of Personal Information Act (POPIA). The regulator cited the pathology group for neglecting to notify both the regulatory body and the affected data subjects in a timely manner following multiple security compromises. This enforcement action highlights a growing global trend where regulators are moving beyond penalizing the breach itself to strictly punishing failures in transparency and incident response protocols. For international health organizations operating in multi-jurisdictional environments, this serves as a reminder of the strict liability associated with breach notification timelines. The regulator explicitly criticized Lancet’s lack of urgency, noting that the delay in notification denied patients the opportunity to take protective measures against identity fraud. The penalty underscores that effecti...
Read more

Clinicians using public AI tools without approval—cyber risks ahead

Image
A growing trend reveals that clinicians are turning to readily available, public-facing AI tools and Large Language Models (LLMs) (such as general-purpose chatbots) for clinical assistance without formal institutional approval. This phenomenon, known as "Shadow AI," poses immediate and severe cybersecurity and compliance risks . When patient data is copied or pasted into a public LLM, that data is transferred to a third-party server that is not covered by a Business Associate Agreement (BAA) and is not HIPAA-compliant. This practice results in an instant HIPAA violation and leads to accidental data exposure without triggering firewalls or alerts. Experts warn that Shadow AI has quickly become the most overlooked threat in digital health. Health systems must urgently implement clear governance policies to restrict the use of non-approved AI tools and instead offer validated, secure, and institutionally monitored LLM resources. The solution lies not in banning AI, but in i...
Read more

Cybersecurity in Healthcare insights: 27th Nov- 3rd Dec 2025

Image
  New US federal security standards prompt healthcare cybersecurity overhaul Proposed updates to federal healthcare cybersecurity standards, introduced in late 2024, represent the first major overhaul of the HIPAA Security Rule in decades. These changes, aimed at addressing modern threats like AI and quantum computing, mandate that HIPAA-covered entities implement rigorous measures such as data encryption, multifactor authentication, and regular security audits. Crucially, they also require written procedures to restore critical systems within 72 hours of an incident. While necessary, compliance comes with a steep price tag, HHS estimates first-year costs at approximately $9 billion. This financial burden poses a significant challenge for smaller hospitals lacking the resources of large health systems. To bridge this gap, experts suggest leveraging staff augmentation through managed service providers (MSPs) and adopting AI-driven threat detection tools to enhance security without e...
Read more