The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. 

In this episode, our host Brian Selfridge highlights the following topics trending in healthcare cybersecurity this week: 

• Microsoft issues updates on the critical Apache Log4j vulnerability and active exploits 
• HR and payroll giant Kronos experiences weeks-long ransomware outage 
• EHR vendor QRS has been sued for insufficient cybersecurity protections in the wake of a major breach 
• Healthcare provider settles for $425,000 cybersecurity enforcement from NJ state attorney general 
• OCR issues guidance on Extreme Risk Protection Orders 
• HIPAA Privacy Rule and OCR enforcement changes due to come into effect in 2022 
• EHR giant Cerner is acquired by Oracle; implications for healthcare organizations 
• NIST launches new international cybersecurity and privacy resources website 
• Norton antivirus discovered to be pre-loaded with crypto mining software