# hipaa security (audio feeds) — RSS Amplifier Recent posts from the 2 feeds in the RSS Amplifier directory that cover hipaa security. Page: Feed: --- ## [The New HIPAA Security Rule Is Delayed to 2027 — What Healthcare Orgs Should Do Now](https://basicsarehard.substack.com/p/the-new-hipaa-security-rule-is-delayed) _2026-07-30 · Drew Hjelm · Basics Are Hard_ HHS pushed the updated HIPAA Security Rule back to at least July 2027 after comments called it too costly. The 2013 rule still applies — here's what to do now. ## [The First 24 Hours After a Business Email Compromise](https://basicsarehard.substack.com/p/the-first-24-hours-after-a-business) _2026-07-28 · Drew Hjelm · Basics Are Hard_ Fraudulent wire or compromised inbox? What to do in the first 24 hours of a business email compromise — the bank call, the evidence, and evicting the attacker ## [The worms will continue until the ecosystem improves](https://basicsarehard.substack.com/p/the-worms-will-continue-until-the) _2026-05-20 · Drew Hjelm · Basics Are Hard_ 458 packages. 5 ship to production. The rest are attack surface. ## [Building an AI App on Azure: What I Actually Learned](https://basicsarehard.substack.com/p/building-an-ai-app-on-azure-what) _2026-04-30 · Drew Hjelm · Basics Are Hard_ A serverless pipeline that watches RSS feeds, summarizes new posts with an LLM, and emails subscribers, built entirely with Azure Logic Apps, Terraform, and no long-lived secrets. ## [Mythos Zero Days Aren't the Real Problem](https://basicsarehard.substack.com/p/mythos-zero-days-arent-the-real-problem) _2026-04-22 · Drew Hjelm · Basics Are Hard_ Vulnerability management hinges on good architecture practices. AI-powered vulnerability discovery doesn't solve for this in any meaningful way. ## [Your Google Workspace Has Hundreds of OAuth Grants. Do You Know What They Can Do?](https://basicsarehard.substack.com/p/your-google-workspace-has-hundreds) _2026-04-20 · Drew Hjelm · Basics Are Hard_ The Vercel incident is a good reminder: do you actually control what OAuth apps can access your Google Workspace? ## [Supply chain attack alert: LiteLLM 1.82.8 is compromised.](https://basicsarehard.substack.com/p/supply-chain-attack-alert-litellm) _2026-03-24 · Drew Hjelm · Basics Are Hard_ Textbook PyPI supply chain attack, now targeting AI infrastructure. Treat your LLM stack like any other production dependency. ## [CIRCIA and the HIPAA Security Rule: A Regulatory Inflection Point for EMS](https://emscyber360.substack.com/p/circia-and-the-hipaa-security-rule) _2026-03-06 · EMS Cyber 360, LLC · EMS Cyber 360_ How emerging federal cyber rules are shifting EMS from compliance posture to operational accountability ## [The Connected Ambulance 2025-2030 Podcast](https://emscyber360.substack.com/p/the-connected-ambulance-2025-2030) _2026-02-18 · EMS Cyber 360, LLC · EMS Cyber 360_ A conversation about future ambulance technology based upon the Whitepaper ## [Hacking the Ambulance - Podcast](https://emscyber360.substack.com/p/hacking-the-ambulance) _2026-02-17 · EMS Cyber 360, LLC · EMS Cyber 360_ EMSCyber360 (c) 2026 All rights reserved [Listen](https://api.substack.com/feed/podcast/188298702/f419c86b677dad327aca1d7f961037b2.mp3) ## [Daily plans, scheduled by AI (Sponsored)](https://crawlproof.com/a/Hj4SbFdy6hf9) _2026-02-17 · **Sponsored**_ AI-made daily plans that schedule tasks and protect focus time. ## [Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)](https://emscyber360.substack.com/p/cyber-incident-reporting-for-critical) _2026-02-17 · EMS Cyber 360, LLC · EMS Cyber 360_ Impact Brief for Emergency Services Leadership ## [You’re invited at SAFE-D, Friday January 30th](https://emscyber360.substack.com/p/youre-invited-at-safe-d-friday-january) _2026-01-20 · EMS Cyber 360, LLC · EMS Cyber 360_ Cybersecurity for EMS: Today and the Future - 2:15-3:15 Room 007C/D ## [Join us at SAFE-D - Jan 29th thru 30th](https://emscyber360.substack.com/p/join-us-at-safe-d-jan-29th-thru-30th) _2026-01-15 · EMS Cyber 360, LLC · EMS Cyber 360_ EMSCyber360 booth #516 ## [Bipartisan CARE Act would test letting Medicare pay EMS to treat patients on scene](https://emscyber360.substack.com/p/bipartisan-care-act-would-test-letting) _2025-11-12 · EMS Cyber 360, LLC · EMS Cyber 360_ Senators Susan Collins and Peter Welch propose a five-year CMS pilot to reimburse “treat-in-place” care, building on pandemic-era savings of $500+ per encounter ## [🕵️Article 5: The Human Hack in Uniform](https://emscyber360.substack.com/p/article-5-the-human-hack-in-uniform) _2025-09-05 · EMS Cyber 360, LLC · EMS Cyber 360_ “I’m with IT. What’s your login again?” ## [🧬Article 4: USB = “Unseen System Breach”](https://emscyber360.substack.com/p/article-4-usb-unseen-system-breach) _2025-09-04 · EMS Cyber 360, LLC · EMS Cyber 360_ That Flash Drive? It Just Locked Your System ## [🌐Article 3: Wi-Fi = Wide-Open for Interception](https://emscyber360.substack.com/p/article-3-wi-fi-wide-open-for-interception) _2025-09-03 · EMS Cyber 360, LLC · EMS Cyber 360_ The ER Wi-Fi Just Compromised Your Report ## [Your Free Email Might Be Pretty Expensive in a Data Breach](https://basicsarehard.substack.com/p/your-free-email-might-be-pretty-expensive) _2025-03-04 · Drew Hjelm · Basics Are Hard_ Since the widespread adoption of the Internet in the 1990s, many internet providers and online companies have offered free email to anyone able to come up with a username. ## [Easy Playbooks to Make Ransomware Criminals Cry](https://basicsarehard.substack.com/p/easy-playbooks-to-make-ransomware) _2025-03-04 · Drew Hjelm · Basics Are Hard_ Here are the slides and playbooks discussed in the BlueTeamCon presentation, "Easy Playbooks to Make Ransomware Criminals Cry" on August 28, 2022. ## [You’ve got Mail (and Misdirected Funds): A live demo of email hacking](https://basicsarehard.substack.com/p/youve-got-mail-and-misdirected-funds) _2025-03-04 · Drew Hjelm · Basics Are Hard_ Presentation given at CypherCon, March 31, 2023 ## [CLI-first decentralized GPU compute (Sponsored)](https://crawlproof.com/a/vzUQCN7UQkSh) _2025-03-04 · **Sponsored**_ Pay workers or run your GPU for FFmpeg transcode and AI inference. ## [Threat Alert! How to Check and Secure your Google, Microsoft, and Apple Accounts](https://basicsarehard.substack.com/p/threat-alert-how-to-check-and-secure) _2025-03-04 · Drew Hjelm · Basics Are Hard_ Have you ever felt that unsettling moment when you suspect your online accounts have been breached?