Cybersecurity

Cyber Threat Intelligence, Alerts and Reports

As part of the AHA鈥檚 commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.

You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.

Cybersecurity & Risk Advisory

Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA鈥檚 National Advisor for Cybersecurity and Risk.

Learn More

The information provided in the report is pulled from threat actor data leak sites 鈥榓s is,鈥 meaning, it is shared as it has been posted by the threat group.
The FBI, Cybersecurity and Infrastructure Security Agency, Department of the Treasury, and Financial Crimes Enforcement Network today urged organizations to take certain actions to protect their networks from MedusaLocker ransomware, which uses vulnerabilities in the Remote Desktop Protocol to鈥
The information provided in the report is pulled from threat actor data leak sites 鈥榓s is,鈥 meaning, it is shared as it has been posted by the threat group.
Note: this joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors.
This week, Hacking Healthcare鈥檚 鈥淵es, This Is Still a Thing鈥 department focuses on a new bill attempting to create a 鈥渃omprehensive鈥 federal data privacy law for the United States.
In response to Norway restricting Russian economic trade with primarily Russian settlements on the archipelago, Svalbard, Russia-sympathetic cybercriminals have launched a distributed denial of service (DDOS) attack against Norwegian domains.
The information provided in the report is pulled from threat actor data leak sites 鈥榓s is,鈥 meaning, it is shared as it has been posted by the threat group. They have been known to make mistakes, have typos, mis-name victims, or use other language aside from the victim name.
Meta, formally Facebook, products have been allegedly stealing medical information to sell to advertising companies.
The information provided in the report is pulled from threat actor data leak sites 鈥榓s is,鈥 meaning, it is shared as it has been posted by the threat group. They have been known to make mistakes, have typos, mis-name victims, or use other language aside from the victim name.
 AHA Friday voiced support for the Protecting and Transforming Cyber Health Care Act, legislation that would require medical device manufacturers to meet certain cybersecurity requirements when seeking approval for devices that are internet connected or include software