This post is aimed at our smaller clients or those without a dedicated IT security contract or team. DHS released a notice that compels all Windows 10 and Server 2012, 2016 and 2019 to apply patches to close a vulnerability that could cause a criminal to gain unauthorized access to information. Rather than turning this into a long post, we'll link to the original content so our partner-clients can evaluate their risk and perform the necessary work to protect their ePHI.
Link to DHS announcement: https://cyber.dhs.gov/ed/20-02/
Link to Microsoft security update notes: https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Jan
Stay (HIPAA) safe,