The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. 

In this episode, our host Britton Burton highlights the following topics trending in healthcare cybersecurity this month: 

• New FDA authority granted by December’s omnibus bill is a big step towards better medical device security 
• HITRUST teases their new CSF v11 release 
• CommonSpirit Health class action lawsuit 
• The fallout from the LastPass follow-on breach 
• The possibly similar situation that might be occurring at Okta  
• JAMA Health Forum’s outstanding metrics study on ransomware attacks in healthcare from 2016 – 2021 
• The nefarious use cases of OpenAI’s ChatGPT 
• Clop ransomware group’s tactics for taking advantage of Telehealth appointments to deploy malware 
• An apology from LockBit ransomware group for an attack on a children’s hospital (really!) 
• Healthcare CISOs collaborating thru Healthe3PT to solve the third-party risk problem 
• A major precedent-setting breach settlement order from FTC against Drizly and its CEO