Cybersecurity

Cyber Threat Intelligence, Alerts and Reports

As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.

You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.

Cybersecurity & Risk Advisory

Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.

Learn More

A daily ransomware tracker at TLP:GREEN for the purpose of increasing ransomware threat awareness.
On February 5, 2025, Cisco released a security advisory addressing two critical vulnerabilities in its Identity Services Engine (ISE) tracked as CVE-2025-20124 and CVE-2025-20125.
H-ISAC TLP Green Daily Cyber Headlines for February 6, 2025.
daily ransomware tracker at TLP:GREEN for the purpose of increasing ransomware threat awareness.
A daily ransomware tracker at TLP:GREEN for the purpose of increasing ransomware threat awareness.
The Cybersecurity and Infrastructure Security Agency and Food and Drug Administration Jan. 30 released notices warning of vulnerabilities found in the Contec CMS8000, a patient monitoring device used to display patient vital signs. The vulnerabilities also apply to Epsimed MN-120 patient monitors,…
On January 28, 2025, TeamViewer released an advisory to address a high-severity vulnerability affecting its remote access solution for Windows.
The AHA yesterday released an advisory alerting members that the association and the Health Information Sharing and Analysis Center have identified attempted and ongoing ransomware attacks potentially due to SimpleHelp remote access software vulnerabilities. Health care organizations are advised to…
A daily ransomware tracker at TLP:GREEN for the purpose of increasing ransomware threat awareness.
The AHA in collaboration with Health-ISAC and the field identified attempted and ongoing ransomware attacks potentially due to SimpleHelp remote monitoring and management (RMM) software vulnerabilities.