Come build your first form with us at Paubox Forms office hours

In this episode, Alex and Jen discuss the latest healthcare cybersecurity threats including a major data extortion claim against NYC Health + Hospitals, sophisticated phishing campaigns using fake font files, and an in-flight Wi-Fi attack targeting travelers. They also cover the $650,000 settlement by Highland Health Systems following a 2023 breach and emphasize that most security incidents stem from preventable gaps rather than sophisticated attacks.

Episode Transcript

SPEAKER_01 (00:00):
You're listening to Pow Box Weekly Fully Automated.

SPEAKER_00 (00:02):
And I'm Jen, cybersecurity person,
perpetually caffeinated,slightly paranoid about Wi-Fi
networks.

SPEAKER_01 (00:08):
I'm Alex, Healthcare IT.
And after this week's news, I'mstarting to share that paranoia.
Let's get into it.

SPEAKER_00 (00:16):
Okay, so we have to start with LeakNet.
A data extortion group claimingthey have 11 terabytes from NYC
health in hospitals.
12 million people potentiallyaffected.

SPEAKER_01 (00:26):
12 million.
That's not a typo.
And Senator Cassidy said itplainly.

SPEAKER_00 (00:36):
He's not wrong.
And Leaknet isn't just sittingon data, they're busy.
They've been planting fakeCAPTCHA prompts on hacked
websites.

SPEAKER_01 (00:44):
Wait, the click here to prove your human thing?

SPEAKER_00 (00:47):
Exactly.
You think you're verifyingyou're not a bot, but you're
actually triggering a malwaredownload.
It's clever and infuriating.
So now I can't even trust aCAPTCHA.
Trust nothing.
Question everything.
That's the 2026 motto.

SPEAKER_01 (01:04):
Speaking of trust, there is also a phishing
campaign hiding malware in fakefont files.
Attackers posing as FedEx, othershipping companies.

SPEAKER_00 (01:13):
Classic business email compromise setup.
The message looks like routinecorrespondence.
Here's info about your shipment.
And the attachment kicks off aremote access trojan.

SPEAKER_01 (01:24):
Which means someone else can control your computer
from anywhere.

SPEAKER_00 (01:28):
Yep.
And once they're in, they're in.
Healthcare orgs deal withlogistics companies constantly.
This is targeted.
The takeaway here is what?
Train your staff again?
Train them.
But also, email security thatcatches this stuff before it
lands in an inbox.
Prevention beats detection everytime.

SPEAKER_01 (01:48):
Alright, this next one is wild.
A passenger on a Delta flightallegedly set up a rogue Wi-Fi
network to steal data from otherpassengers.
An evil twin attack.
At 30,000 feet.
And this was right after DEF CONwrapped up in Vegas.

SPEAKER_00 (02:05):
Of course it was.
Plane full of securityresearchers, someone decides to
show off.
Or test limits.
Either way, Delta'sinvestigating.
Is there a healthcare anglehere?
Absolutely.
How many of your staff travelfor conferences?
Connect to hotel Wi-Fi, airportWi-Fi, in-flight Wi-Fi.
If it can happen on a plane fullof people who should know

(02:26):
better, it can happen anywhere.

SPEAKER_01 (02:29):
So, VPNs?

SPEAKER_00 (02:31):
VPNs, cellular hotspots, healthy skepticism,
all of the above.

SPEAKER_01 (02:36):
Let's talk settlements.
Highland Health Systems, anonprofit focused on mental
health and developmentaldisabilities, agreed to pay
$650,000 to settle a data breachlawsuit.

SPEAKER_00 (02:48):
The 2023 breach affected about 83,000 people.
The lawsuit claimed negligence,failure to prevent something
that could have been prevented.

SPEAKER_01 (02:57):
And that's the part that stings.
It wasn't some sophisticatednation-state attack.
It was gaps.

SPEAKER_00 (03:05):
Gaps that cost $650,000, plus reputational
damage, plus the actual harm topatients.
Mental health records are deeplysensitive.
This matters.
Okay.

SPEAKER_01 (03:17):
On a lighter note, Powbox Forms office hours.

SPEAKER_00 (03:21):
Yes, we ran our first session this week.
Two more coming up, August 20thand August 27th.

SPEAKER_01 (03:27):
These are 30-minute open sessions.
No set agenda.
You can watch, ask questions, orshare your screen and build a
form live with the team.

SPEAKER_00 (03:37):
It's basically one-on-one help without the
formal support ticket.
Want to troubleshoot something?
Great.
Want to build from scratch?
Also great.
Want to give us feedback?
We actually want that too.

SPEAKER_01 (03:48):
Links in the show notes.
Save your seat.
Do it.
We don't bite.
So what's the thread connectingall of this?

SPEAKER_00 (03:56):
It's not that healthcare is unlucky.
It's that most of these problemsare fixable.
Fake CAPTCHAS, phishing emails,rogue Wi-Fi, insufficient
safeguards.
These aren't mysteries.
They're misconfigurations, blindspots, things we can address.

SPEAKER_01 (04:13):
The breach at Highland wasn't inevitable.
The malware in the fake fontfile can be stopped before it
arrives.
The evil twin attack worksbecause people connect without
thinking.

SPEAKER_00 (04:24):
Awareness plus the right tools.
That's the formula.
It's not glamorous, but itworks.

SPEAKER_01 (04:30):
That's the show for this week.
Thanks for listening.

SPEAKER_00 (04:33):
Stay safe out there.
And maybe don't connect to freeunderscore delta underscore Wi
Fi underscore totally underscorelegit.

SPEAKER_01 (04:40):
We'll see you next time.