Cybersecurity

Cyber Threat Intelligence, Alerts and Reports

As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.

You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.

Cybersecurity & Risk Advisory

Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.

Learn More

John Riggi, Senior Advisor of Cybersecurity and Risk Advisory Services at the ºÚÁÏÕýÄÜÁ¿ Association discusses the increased risk of cyber-attacks due to the recent escalating friction with Iran and how hospitals and health systems can protect themselves.
The Department of Health and Human Services’ Office of the Assistant Secretary for Preparedness and Response strongly recommends that all health care and public health entities consider patching several new critical vulnerabilities affecting Microsoft Windows operating systems as soon as possible.
A U.S.-led airstrike Jan. 3 in Iraq eliminated Qassem Soleimani, the head of the Iranian Revolutionary Guard Corps (IRGC)-Quds Force, a U.S.-designated Foreign Terrorist Organization. Although the U.S. government has not identified a specific threat from Iran targeting U.S. health care, the public…
Following last week’s US airstrikes against Iranian military leadership, the FBI observed increased reporting of website defacement activity disseminating Pro-Iranian messages. The FBI believes several of the website defacements were the result of cyber actors exploiting known vulnerabilities in…
In this edition of Hacking Healthcare, we begin the new year with a brief explanation of the increased nation state threat stemming from the killing of Iranian Gen. Soleimani. We then briefly review Mastercard’s most recent cybersecurity acquisition and what it might mean for them and their…
    Since at least 2016, an ongoing campaign using the Kwampirs Remote Access Trojan (RAT) targeted several global industries, including the software supply chain, healthcare, energy, and financial sectors. The FBI assesses software supply chain companies are a key interest and target…
Certainly, healthcare providers understand the critical nature of data, perhaps better than anyone. Having access to the right data at the right time can literally save lives.
Increased geopolitical tensions and threats of aggression may result in cyber and physical attacks against the Homeland and also destructive hybrid attacks by proxies against U.S. targets and interests abroad. Knowing how you, your organization, and your personnel may be exposed or targeted during…
The Cybersecurity and Infrastructure Security Agency (CISA) is sharing the following information with the cybersecurity community as a primer for assisting in the protection of our Nation’s critical infrastructure in light of the current tensions between the Islamic Republic of Iran and the United…