February 18, 2026
Webinar – Building Resilience: Practical Steps for Healthcare Leaders to Mitigate Cyber Risk
Cyber risk is no longer just an IT issue—it’s a business, financial, and reputational risk…
Read More 
December 5, 2025
MHS Association: The Gathering 2026
BlueOrange Compliance will participate in MHS Association’s The Gathering 2026, a conference of faith-based human…
Read More 
December 5, 2025
American Health Law Association: 2026 Long Term and Post-Acute Care Law and Compliance Conference
BlueOrange Compliance will attend the American Health Law Association’s 2026 Long Term and Post-Acute Care…
Read More 
December 5, 2025
Lutheran Services in America: The Summit 2026
BlueOrange Compliance will attend The Summit 2026, Lutheran Services in America’s national gathering of senior…
Read More 
December 12, 2024
More HIPAA audits on the way, HHS official warns
HHS OCR has announced plans for new HIPAA compliance audits, last conducted in 2017, to…
Read More 
November 24, 2024
Webinar — Three AI Trends in Healthcare Cyber Security & Compliance
Developed specifically for healthcare cyber security professionals and teams, this webinar features an in-depth look…
Read More 
There has been a proof-of-concept (PoC) exploit for the CVE-2024-49113/CVE-2024-49112 vulnerabilities (the latter being rated critical). This vulnerability can crash any unpatched Windows Servers with Internet connectivity. This PoC was devised by SafeBreach…
Palo Alto has released a patch for the zero-day vulnerability CVE-2024-0012. This vulnerability can allow "an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network…
CISA released an alert last week regarding a "foreign threat actor conducting a large-scale spear-phishing campaign with RDP attachments." The threat actors seem to be targeting those in IT and…
There has been talk of a zero-day Fortinet vulnerability (CVE-2024-47575) this week and those rumors have been confirmed. Fortinet released (LINK) a statement regarding the critical vulnerability in which threat actors…
Veeam recently acknowledged a critical vulnerability (CVE-2024-40711) which can allow remote code execution. A patch has been released, so it is critical any impacted systems are updated as soon as…