Cybersecurity

Cyber Threat Intelligence, Alerts and Reports

As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.

You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.

Cybersecurity & Risk Advisory

Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.

Learn More

A daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.
January News Items of Interest to the Health Sector FBI: Hackers target US defense firms with malicious USB packages The FBI released a flash alert warning US companies that the cybercriminal group FIN7 targeted the US defense industry with infected USB devices to deploy ransomware.
Health-ISAC is issuing a vulnerability bulletin regarding multiple security vulnerabilities in the Windows/Linux interoperability suite Samba that if exploited, could allow remote attackers to execute arbitrary code with the highest privileges on affected installations.  
LockBit 2.0 operates as an affiliate-based Ransomware-as-a-Service (RaaS) and employs a wide variety of tactics, techniques, and procedures (TTPs), creating significant challenges for defense and mitigation. LockBit 2.0 ransomware compromises victim networks through a variety of techniques,…
The Government Accountability Office today extended to Feb. 11 its survey for HIPAA-covered health care entities and business associates on their experiences complying with the Department of Health and Human Services’ data breach reporting requirements and HHS efforts to improve the data breach…
H-ISAC TLP Green Daily Alert Report for February 04, 2022.
A ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.
A daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.