# hipaa — RSS Amplifier Recent posts from the 5 feeds in the RSS Amplifier directory that cover hipaa. Page: Feed: --- ## [JSON-schema-coerced tool dispatch: catching prompt injection at the boundary](https://sentinelden.com/blog/json-schema-coerced-tool-dispatch) _2026-08-17 · Sentinel Den · Engineering blog_ Compile-time-checked tool shapes. JSON-schema validation between SLM output and Swift function dispatch. Why this is the right prompt-injection layer. ## Come build your first form with us at Paubox Forms office hours _2026-08-14 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, Alex and Jen discuss the latest healthcare cybersecurity threats including a major data extortion claim against NYC Health + Hospitals, sophisticated phishing campaigns using fake font files, and an in-flight Wi-Fi attack targeting travelers. They also cover the $650,000 settlement by Highland Health Systems following a 2023 breach and emphasize that most security incidents stem… [Listen](https://www.buzzsprout.com/696055/episodes/19647231-come-build-your-first-form-with-us-at-paubox-forms-office-hours.mp3) ## [Bayesian fusion across motion, vision, audio: when one modality lies](https://sentinelden.com/blog/bayesian-fusion-motion-vision-audio-when-one-lies) _2026-08-13 · Sentinel Den · Engineering blog_ Multi-modal presence verification. Inverse-variance weighting, when one channel goes adversarial, and why the fused metric refuses to flap. ## [AnomalyKit + RuntimeGuard + BehaviorGuard: layered tamper detection](https://sentinelden.com/blog/anomalykit-runtimeguard-behaviorguard-layered-tamper) _2026-08-10 · Sentinel Den · Engineering blog_ Why no single-signal detector catches a real attack. Statistical anomalies + hard-edge runtime indicators + behavioral drift, fused with a sliding-window consensus policy. ## Aitkin County Health reports 83k breach after email phishing incident _2026-08-07 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, we break down recent healthcare data breaches including an 83,000-record phishing incident at Aitkin County Health and a nine-year undetected email forwarding leak at Child Care Resource Center. We also cover the HHS 2026 Unified Agenda timeline, the Health-ISAC warning on ShinyHunters threat actors targeting cloud identity infrastructure, and key takeaways for strengthening your… [Listen](https://www.buzzsprout.com/696055/episodes/19614908-aitkin-county-health-reports-83k-breach-after-email-phishing-incident.mp3) ## [Shipping a clean App Store privacy review: ScreenGuard + RedactKit + ManifestGuard + EnclaveVault](https://sentinelden.com/blog/clean-app-store-privacy-review-four-sdk-checklist) _2026-08-06 · Sentinel Den · Engineering blog_ Apple's privacy review asks four questions. Four SDKs answer them at code level. PrivacyInfo.xcprivacy, on-device PII, capture protection, enclave storage. ## [AgenticGuard + IntentKit + RuntimeGuard: the verify-classify-defend stack](https://sentinelden.com/blog/agenticguard-intentkit-runtimeguard-verify-classify-defend) _2026-08-03 · Sentinel Den · Engineering blog_ Three layers for an iOS LLM-agent app. RuntimeGuard is the floor, IntentKit classifies the input, AgenticGuard scopes the tool dispatch. Order matters. ## Preview quarantined attachments without downloading the email _2026-07-31 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, Jen and Alex cover new Paubox features including attachment preview for quarantined messages and dark mode, then discuss the alleged Abbott Laboratories data breach, emerging threats from malicious AI skills and ClickFix attacks, and privacy implications of ChatGPT Health's nationwide launch. The hosts emphasize actionable steps including vendor audits, user training, and… [Listen](https://www.buzzsprout.com/696055/episodes/19580959-preview-quarantined-attachments-without-downloading-the-email.mp3) ## [BehaviorGuard + PresenceKit: composing risk-engine input with NPU verification](https://sentinelden.com/blog/behaviorguard-presencekit-composing-risk-engine) _2026-07-30 · Sentinel Den · Engineering blog_ Wiring PresenceKit's PresenceMetrics stream into BehaviorGuard's hysteretic 4-band risk engine. The integration loop, the back-pressure design, the math. ## Craneware healthcare billing software investigates major attack _2026-07-27 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, we break down four major healthcare cybersecurity incidents: the Craneware billing platform attack, a nonprofit breach affecting 75,000 individuals, Medtronic's exposure of nearly 370,000 patient records, and ApolloMD's $4.02 million settlement following a ransomware attack. These cases underscore critical lessons for healthcare organizations on vendor management, network… [Listen](https://www.buzzsprout.com/696055/episodes/19543857-craneware-healthcare-billing-software-investigates-major-attack.mp3) ## [Ask the crowd: AI or not (Sponsored)](https://crawlproof.com/a/BfOpyI0Ucdy7) _2026-07-27 · **Sponsored**_ Get a transparent verdict from verified humans via web, RSS, or API. ## [On-device PII redaction across visual, audio, text in one policy](https://sentinelden.com/blog/on-device-pii-redaction-visual-audio-text-one-policy) _2026-07-27 · Sentinel Den · Engineering blog_ Three modalities, one declarative RedactionPolicy. Why a single allow/block surface beats hand-rolling per-engine code. ## [Detection is not defense: we measured our own injection classifier on novel attacks](https://sentinelden.com/blog/detection-is-not-defense-injection-benchmark) _2026-07-26 · Sentinel Den · Engineering blog_ Everyone quotes a prompt-injection benchmark number. We ran ours against attacks it had never seen (40% recall on the held-out set) and we're publishing it, because the authorization layer is what actually stops the attack. ## [Catching hidden Required-Reason API calls in vendor SDKs](https://sentinelden.com/blog/catching-hidden-required-reason-api-calls) _2026-07-23 · Sentinel Den · Engineering blog_ Your privacy manifest declares what your code reads. What about the analytics SDK quietly polling SystemBootTime? Debug-time auditing for vendor dependencies. ## [Telemetry-anomaly detection on-device with explicit\_bzero hygiene](https://sentinelden.com/blog/telemetry-anomaly-detection-explicit-bzero) _2026-07-20 · Sentinel Den · Engineering blog_ Detecting anomalies in app telemetry without ever sending raw logs off-device. mlock'd buffers, explicit\_bzero, INT4 inference. ## Start from a template gallery in the Paubox Email API _2026-07-17 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, Alex and Jen discuss a major breach affecting 542,000 individuals at Centers Laboratory, a $500,000+ ransomware settlement involving a Pennsylvania treatment facility, and the HHS delay of the final HIPAA Security Rule update to 2027. They also cover practical tools like the new Paubox Email API template gallery and emphasize how consistent security fundamentals can prevent costly… [Listen](https://www.buzzsprout.com/696055/episodes/19508650-start-from-a-template-gallery-in-the-paubox-email-api.mp3) ## [Medicare Advantage in the Crosshairs: Risk Adjustment, the False Claims Act, and AI](https://1sthcc.com/medicare-advantage-in-the-crosshairs-risk-adjustment-the-false-claims-act-and-ai/) _2026-07-16 · 1st Talk Compliance_ Fraud risks in Medicare Advantage, which now covers more than half of all Medicare beneficiaries, have been flagged as a top priority for government agencies. With that in mind, Rachel Rose, JD, MBA, joins the 1st Talk Compliance podcast to bring her expertise in False Claims Act litigation to the discussion on how best to avoid these risks, or run afoul of the DOJ or CMS. Listen now for firsthand… [Listen](https://media.blubrry.com/1sttalkcompliance/1sthcc.com/wp-content/uploads/2026/07/Medicare-Advantage-in-the-Crosshairs.mp3) ## [Offline SLM intent extraction without the cloud round-trip](https://sentinelden.com/blog/offline-slm-intent-extraction-no-cloud) _2026-07-16 · Sentinel Den · Engineering blog_ On-device small language models for natural-language intent classification. Latency, energy, privacy. The case for on-device + the cost. ## [NPU-pinned continuous presence verification on iPhone 17 Pro](https://sentinelden.com/blog/npu-pinned-continuous-presence-iphone-17-pro) _2026-07-13 · Sentinel Den · Engineering blog_ Anchoring vision inference to the Apple Neural Engine on iPhone 17 Pro. Latency, energy, thermal throttling, and why ANE-first dispatch matters. ## Attackers abuse Microsoft 365 Groups to create phishing invitations _2026-07-10 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ This episode examines three emerging cybersecurity threats affecting healthcare organizations: Microsoft 365 Groups being exploited for calendar-based phishing attacks, newly discovered vulnerabilities in the widely used DICOM Toolkit that could impact medical imaging systems, and a data breach that originated through social engineering targeting third-party applications. The hosts provide… [Listen](https://www.buzzsprout.com/696055/episodes/19475291-attackers-abuse-microsoft-365-groups-to-create-phishing-invitations.mp3) ## [Training a per-app behavioral biometrics model on-device with Core ML](https://sentinelden.com/blog/core-ml-behavioral-biometrics-private-training) _2026-07-09 · Sentinel Den · Engineering blog_ BehaviorGuard ships a baseline ensemble that works day one. How to train a per-customer model on your app's real user population, on-device, no upload. ## [Stream Torrents & IPTV Instantly (Sponsored)](https://crawlproof.com/a/nmi8I7uGFRIL) _2026-07-08 · **Sponsored**_ Search magnet links and stream movies, music, books, and live TV in-browser ## [OAuth 2.0 for iOS in 2026: PKCE, PAR, DPoP, and JAR](https://sentinelden.com/blog/oauth-pkce-par-dpop-jar-ios-2026) _2026-07-06 · Sentinel Den · Engineering blog_ PKCE was 2015's OAuth hardening for mobile. PAR, DPoP, and JAR are 2026's. What each fixes, when to use which, and how they compose for regulated iOS apps. ## More ways to sign in securely with multi-factor authentication _2026-07-03 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, Jen and Alex discuss Paubox's new MFA options, the ShinyHunters breach involving legacy Iora Health data, World Cup-related phishing scams, and a Senate bill addressing cybersecurity risks in Chinese-made medical devices. The hosts emphasize the importance of addressing legacy systems, conducting thorough asset inventories, and implementing foundational security controls to… [Listen](https://www.buzzsprout.com/696055/episodes/19441414-more-ways-to-sign-in-securely-with-multi-factor-authentication.mp3) ## [Memory analysis of iOS apps via Studio: what page tables tell you](https://sentinelden.com/blog/memory-analysis-ios-studio-page-tables) _2026-07-02 · Sentinel Den · Engineering blog_ Static analysis tells you what an app could do; memory analysis tells you what it's doing now. The workflow for inspecting a running iOS app in Studio. ## [Lockdown Mode and your security SDK: detecting + responding](https://sentinelden.com/blog/lockdown-mode-and-your-security-sdk) _2026-06-29 · Sentinel Den · Engineering blog_ Lockdown Mode is user opt-in but it shifts your app's runtime profile in ways your SDK must detect and adapt to. Treating Lockdown users the same is a failure. ## Attackers impersonate ChatGPT, Claude, and DeepSeek to deliver malware _2026-06-26 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, we cover emerging threats targeting healthcare and enterprise organizations, including AI platform impersonation scams, the ShinyHunters attacks on Oracle PeopleSoft systems, and research showing AI email agents are vulnerable to phishing. We also discuss Paubox joining LegitScript's Compliance Collective and the Novo Nordisk clinical trial data breach investigation. Key takeaways… [Listen](https://www.buzzsprout.com/696055/episodes/19407285-attackers-impersonate-chatgpt-claude-and-deepseek-to-deliver-malware.mp3) ## [iOS background-location threat model: the surface nobody documents](https://sentinelden.com/blog/ios-background-location-threat-model) _2026-06-25 · Sentinel Den · Engineering blog_ Background location is treated as a UX concern. It's also an attack surface; the threat model for Always authorization is more elaborate than most ship. ## [macOS Sequoia 15 and Studio's audit pipeline: what survives SIP](https://sentinelden.com/blog/macos-sequoia-sip-studio-pipeline) _2026-06-22 · Sentinel Den · Engineering blog_ macOS Sequoia tightened SIP on inter-process calls. For SentinelDen Studio Frida-based instrumentation, that changes which parts need entitlements. ## Conditional logic comes to Paubox Forms _2026-06-19 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, we discuss Paubox Forms' new conditional logic feature, the Conduent breach affecting 62 million people, and critical findings from controlled tests revealing Amazon SES may transmit PHI in plaintext despite documentation claims. We also cover recent ransomware incidents at Mt. Baker, Northwest Radiologists, and Singing River Health System, along with key takeaways from the June… [Listen](https://www.buzzsprout.com/696055/episodes/19372432-conditional-logic-comes-to-paubox-forms.mp3) ## [mTLS revocation done right: when CRL is too slow](https://sentinelden.com/blog/mtls-revocation-when-crl-too-slow) _2026-06-18 · Sentinel Den · Engineering blog_ Client mTLS revocation isn't solved by CRLs or OCSP; both bake in latency that doesn't match how compromised mobile credentials get used. The alternative. ## [The Importance of the OIG’s Exclusions List](https://1sthcc.com/the-importance-of-the-oigs-exclusions-list/) _2026-06-16 · 1st Talk Compliance_ In this episode of 1st Talk Compliance, Kevin Chmura is joined by Mike Herold to discuss the crucially important LEIE. The LEIE, or List of Excluded Individuals or Entities, also known as the OIG Exclusions List, is a fundamental piece of any medical practice’s compliance program. Yet so few people working in the healthcare space, even some compliance specialists, have never even heard of the… [Listen](https://media.blubrry.com/1sttalkcompliance/1sthcc.com/wp-content/uploads/2026/06/The-Importance-of-the-OIGs-Exclusions-List.mp3) ## [Get started with Turso (Sponsored)](https://crawlproof.com/a/w54wuaGZZVBD) _2026-06-16 · **Sponsored**_ Create your Turso account to access the app. ## [Tamper-evident logging on iOS: hash-chained, HMAC-signed audit ledgers](https://sentinelden.com/blog/tamper-evident-logging-ios-2026) _2026-06-15 · Sentinel Den · Engineering blog_ An audit log editable by the host app or anyone with jailbreak filesystem access isn't an audit log. The hash-chain plus HMAC-signature plus off-device-replication pattern, and the real BehaviorGuard AuditLog that implements it. ## IBJI agrees to $4 million settlement after breach _2026-06-12 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ This episode examines recent healthcare data breaches and settlements, including the $4 million IBJI case involving extended attacker dwell time, Mission Community Hospital's $1.5 million RansomHouse extortion settlement, and third-party vendor risks exposed by the La Perouse billing breach. We also discuss Rutgers University research showing hospitals using third-party tracking pixels are 46… [Listen](https://www.buzzsprout.com/696055/episodes/19336414-ibji-agrees-to-4-million-settlement-after-breach.mp3) ## [codesign -dvv and the resource directory: what your signature claims](https://sentinelden.com/blog/codesign-resource-directory-what-signature-claims) _2026-06-11 · Sentinel Den · Engineering blog_ \`codesign -dvv\` is the canonical "is this app properly signed" check. It is also the most-misread output in iOS forensics. ## [The iOS 17/18/19 security-API deprecation matrix](https://sentinelden.com/blog/ios-security-api-deprecation-matrix) _2026-06-08 · Sentinel Den · Engineering blog_ Apple deprecates security APIs every release. Three iOS versions of accumulated deprecations means most pre-2024 codebases ship silent App Review rejections. ## Paubox Forms now includes a library of pre-built templates _2026-06-05 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, Alex and Jen discuss new Paubox product updates including a Forms template library and API dashboard improvements, then analyze recent healthcare data breaches affecting Esse Health, Gandara Mental Health Center, and NYC Health + Hospitals. The conversation highlights common security gaps, the growing risk of third-party vendor breaches, and practical steps organizations can take… [Listen](https://www.buzzsprout.com/696055/episodes/19301636-paubox-forms-now-includes-a-library-of-pre-built-templates.mp3) ## [Making behavioral biometrics observable: BehaviorGuard telemetry](https://sentinelden.com/blog/observable-behavioral-biometrics-telemetry) _2026-06-04 · Sentinel Den · Engineering blog_ Behavioral biometrics SDKs default to a black-box risk score. Triage, drift detection, and forensics need structured telemetry. The schema and metric surface. ## [Apple Private Cloud Compute: rethinking your AgenticGuard threat model](https://sentinelden.com/blog/apple-intelligence-private-cloud-compute-agenticguard) _2026-06-01 · Sentinel Den · Engineering blog_ When an on-device LLM agent hands off a prompt to Private Cloud Compute, AgenticGuard tool-permissioning and audit trail span two trust domains. What changes. ## Paubox CLI adds forms support: HIPAA compliant email and data collection in one tool _2026-05-29 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ This episode covers the new Paubox CLI support for Forms, the LockBit 5.0 ransomware attack on Mt. Spokane Pediatrics affecting over 32,000 patients, a CISA-flagged vulnerability in medical imaging software, and the FBI warning about the Kali365 phishing-as-a-service platform targeting Microsoft 365 credentials. The hosts discuss the security gaps facing small clinics and emphasize actionable… [Listen](https://www.buzzsprout.com/696055/episodes/19259688-paubox-cli-adds-forms-support-hipaa-compliant-email-and-data-collection-in-one-tool.mp3) ## [Self-custody wallets on iOS: secure-input plus Secure-Enclave](https://sentinelden.com/blog/self-custody-wallets-secure-input-enclave) _2026-05-28 · Sentinel Den · Engineering blog_ Self-custody wallets need two rare things: every seed-phrase keystroke in a protected buffer, and the signing key non-extractable even on compromise. ## [xcprivacy-lint: declaring required-reason APIs your SDK is calling](https://sentinelden.com/blog/xcprivacy-lint-required-reason-apis) _2026-05-25 · Sentinel Den · Engineering blog_ App Store review rejects iOS 17+ apps whose PrivacyInfo.xcprivacy misses any required-reason API. The hard part is finding the ones your dependencies hide. ## Send HIPAA compliant email from the terminal, or your agent _2026-05-22 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, Jen and Alex break down the surge in QR code phishing attacks, the cautionary tale of a ransomware negotiator who defrauded healthcare clients, and practical strategies for reducing security friction. They also cover new tools for HIPAA-compliant email automation and self-service archive exports that streamline compliance workflows. [Listen](https://www.buzzsprout.com/696055/episodes/19223347-send-hipaa-compliant-email-from-the-terminal-or-your-agent.mp3) ## [Auditing an .xcarchive you didn't build: forensic patterns](https://sentinelden.com/blog/auditing-xcarchive-incident-response) _2026-05-21 · Sentinel Den · Engineering blog_ When a customer ships an .xcarchive after an incident, the build environment is gone but the artifact is rich. A defensible audit without a rebuild. ## [Beyond Frida: detecting the long-tail injection toolchain in 2026](https://sentinelden.com/blog/beyond-frida-long-tail-injection) _2026-05-18 · Sentinel Den · Engineering blog_ Most iOS injection checks in 2026 are scoped to Frida and miss Theos hooks, dyld interposing, ObjC swizzling, and runtime-hopping bypass kits. ## SAG-AFTRA Health Plan settles phishing breach class action for $950,000 _2026-05-15 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, we break down the SAG-AFTRA Health Plan's $950,000 phishing settlement, Medtronic's nine-million-record breach, and the Inc Ransom attack on Sandhills Medical Foundation. We also highlight Henderson Behavioral Health's patient-centered approach and discuss practical takeaways for strengthening your organization's security posture through staff training, system patching, and… [Listen](https://www.buzzsprout.com/696055/episodes/19184685-sag-aftra-health-plan-settles-phishing-breach-class-action-for-950-000.mp3) ## [PCI-DSS 4.0 mobile on iOS: mapping requirements to ScreenGuard](https://sentinelden.com/blog/pci-dss-mobile-controls-screenguard) _2026-05-14 · Sentinel Den · Engineering blog_ PCI-DSS 4.0 added explicit mobile requirements in 6.2 and 8.6. The line-by-line mapping from each screen-layer requirement to an iOS control via ScreenGuard. ## [App Attest plus DeviceCheck: iOS identity for revocable enrollment](https://sentinelden.com/blog/app-attest-devicecheck-combined-2026) _2026-05-11 · Sentinel Den · Engineering blog_ App Attest proves the binary, DeviceCheck persists two bits across reinstalls. How EnclaveVault wires them together for revocable enrollment. ## Microsoft warns of a phishing campaign bypassing MFA protections _2026-05-08 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, we examine a Microsoft-flagged phishing campaign that bypassed MFA across 13,000 organizations, analyze Saint Anthony Hospital's breach notification that expanded from 6,500 to 146,000 affected individuals, and discuss the ransomware attack impacting 92,000 patients at a Puerto Rico community hospital. Key takeaways include the importance of layered email security, thorough… [Listen](https://www.buzzsprout.com/696055/episodes/19146587-microsoft-warns-of-a-phishing-campaign-bypassing-mfa-protections.mp3) ## [Verifying an on-device agent's audit chain off-device: the CI replay](https://sentinelden.com/blog/audit-chain-verification-off-device) _2026-05-07 · Sentinel Den · Engineering blog_ The agent emits a hash-chained, Secure-Enclave-signed audit log. The CI-side verification protocol and Swift CLI for regulators and incident responders. ## [Face ID isn't a liveness check: behavioral signals as companion](https://sentinelden.com/blog/liveness-detection-faceid-companion) _2026-05-04 · Sentinel Den · Engineering blog_ Face ID matches a template; it doesn't verify the face is conscious or driving the session. How BehaviorGuard composes with biometrics, not against them. ## FBI names healthcare the most targeted sector for ransomware _2026-05-01 · Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast_ In this episode, we break down the FBI's latest Internet Crime Report naming healthcare as the top ransomware target, OCR's four new HIPAA settlements totaling over $1 million, and the Medtronic data extortion incident affecting millions of records. We also examine findings from Paubox's Healthcare Email Security Maturity Index, which reveals critical gaps in AI-based defenses despite rising… [Listen](https://www.buzzsprout.com/696055/episodes/19109136-fbi-names-healthcare-the-most-targeted-sector-for-ransomware.mp3)