Cybersecurity
Cyber Threat Intelligence, Alerts and Reports
As part of the AHA鈥檚 commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.
You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.
Cybersecurity & Risk Advisory
Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA鈥檚 National Advisor for Cybersecurity and Risk.
H-ISAC TLP Green Daily Cyber Headlines for November 2, 2022.
A daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.
This week, Hacking Healthcare dives into a recent regulatory fine against a large UK organization for General Data Protection Regulation (鈥淕DPR鈥) violations.
The Department of Health and Human Services鈥 Office for Civil Rights yesterday released a video on recognized security practices under the HIPAA security rule and how covered entities may demonstrate implementation.
OpenSSL has released a security advisory to address two vulnerabilities, CVE-2022-3602 and CVE-2022-3786, affecting OpenSSL versions 3.0.0 through 3.0.6.
On October 31, 2022, the Cybersecurity Infrastructure Security Agency (CISA) released two fact sheets highlighting threats against accounts and systems using certain forms of multifactor authentication (MFA).
A daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.
The Department of Health and Human Services鈥 Health Sector Cybersecurity Coordination Center highly recommends all health sector organizations immediately test and deploy a critical OpenSSL patch when it becomes available Nov. 1, because many of the most common operating systems and applications鈥
this daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.
This week, Hacking Healthcare focuses its attention on what the outcome of the Joseph Sullivan
court case might mean for executive liability, the use of bug bounty programs, payments to
malicious actors, and incident reporting.