The Cybersecurity and Infrastructure Security Agency, FBI and Multi-State Information Sharing and Analysis Center this week alerted organizations to a critical vulnerability affecting certain versions of the Atlassian Confluence Data Center and Server that enables malicious actors to obtain access to victim systems and continue active exploitation post-patch. The agencies strongly encourage network administrators to immediately apply the recommended upgrades and recommended responses to indicators of compromise. The FBI and CISA also recently released updated recommendations to protect against AvosLocker ransomware. 
 
In other cyber news, federal agencies this week released guidance to help organizations reduce the risk of ransomware incidents and phishing attacks, and updated guidance to help software manufacturers demonstrate their commitment to secure by design principles and customers ask for products that are secure by design.
 
“In the past two weeks government agencies have not only been very pro-active in warning us of the latest cyber threats, but have also issued very useful resources to help us counter those threats,” said John Riggi, AHA’s national advisor for cybersecurity and risk. “The AvosLocker threat operates as a ransomware-as-a-service and exploits unsecured remote desktop tools on premises. Unrelated but highly advanced and persistent actors are targeting the Confluence Data Center and Sever through an Atlassian Confluence vulnerability, once again demonstrating that cyberthreat actors are aggressively and equally targeting our on-premises and hosted technology. On the positive side, agencies have concurrently issued very useful and detailed guides to help prevent ransomware and phishing attacks and better secure our technology. The premise of ‘secure by design’ is to shift the primary responsibility for cybersecurity from end users to technology developers at the design phase of the technology.”
 
For more information on cyber and risk issues, contact Riggi at jriggi@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity.

Related News Articles

Headline
Microsoft July 22 released an update on the ongoing cyberattacks to SharePoint servers used within organizations, attributing the incidents to China-based…
Headline
The FBI, Cybersecurity and Infrastructure Security Agency, Department of Health and Human Services, and Multi-State Information Sharing and Analysis Center…
Headline
Microsoft July 19 issued an alert about active attacks from vulnerabilities targeting SharePoint servers used within organizations. The incidents have not…
Headline
In his latest AHA Cyber and Risk Intel blog, Scott Gee, AHA deputy national advisor for cybersecurity and risk, explains how hospitals can prepare for and…
AHA Cyber Intel
In today’s heightened threat environment, driven by domestic and geopolitical issues, it is more critical than ever for hospitals to prepare for and mitigate…
Headline
In a statement submitted to the Senate Health, Education, Labor and Pensions Committee for a hearing today on health care cybersecurity and patient privacy,…