Cybersecurity
Cyber Threat Intelligence, Alerts and Reports
As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.
You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.
Cybersecurity & Risk Advisory
Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.
Automation and hacking potential impacts on healthcare.
In November 2022, vulnerabilities to the health sector have been released that require attention.
Royal is a human-operated ransomware that was first observed in 2022 and has increased in appearance. It has demanded ransoms up to millions of dollars. Since its appearance, HC3 is aware of attacks against
the Healthcare and Public Healthcare (HPH) sector.
In this episode we are joined by Ed Gaudet, founder of Censinet, one of the AHA’s carefully vetted Preferred Cybersecurity Providers. Gaudet is an expert of many years in the field.
Summary:
Eclypsium Research has discovered and reported 3 vulnerabilities in American Megatrends, Inc. (AMI) MegaRAC Baseboard Management Controller (BMC) software. Eclypsium is referring to the vulnerabilities collectively as BMC&C.
A daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.
On November 30, 2022, Anonymous announced the start of Operation White Paper, a hacktivist crusade against China, in protest to the censorship of its citizens.
The FBI and CISA have released a joint security advisory to disseminate known Indicators of Compromise (IOC) and Tactics, Techniques, and Procedures (TTPs) that have been associated with the Cuba Ransomware actor.
Alerts published on December 2, 2022.
AHA sent a letter to Sen. Mark Warner, co-chair of the Senate Cybersecurity Caucus, responding to his recent report on policy options to address cybersecurity challenges in the health care field.