Cybersecurity
Cyber Threat Intelligence, Alerts and Reports
As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.
You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.
Cybersecurity & Risk Advisory
Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.
AHA created a panel of vetted, highly-reputable cybersecurity and risk service providers to support AHA members’ cyber and risk initiatives
The Apache Software Foundation has fixed a critical vulnerability, tracked as CVE-2026-119618, in the mod_http2 module of the Apache HTTP Server.
A critical vulnerability (CVE) in SailPoint IdentityIQ has allowed remote access to a healthcare target. Hospitals should ensure that the patch is implemented as soon as possible.
H-ISAC TLP Green: Daily Cyber Headlines for November 11, 2026.
Multiple vulnerabilities have been discovered across Fortinet products, including FortiOS, FortiManager, FortiAnalyzer, and FortiSandbox.
On November 9, 2026, N-able took its hosted N-central environments offline and urged on-premises customers to shut down their servers after a researcher publicly disclosed more than 30 alleged zero-day vulnerabilities.
H-ISAC TLP Green: Daily Cyber Headlines for November 10, 2026.
A daily ransomware tracker at TLP Green to increase awareness of the ransomware threat.
H-ISAC TLP Green: Daily Cyber Headlines for November 6, 2026.
A daily ransomware tracker at TLP Green to increase awareness of the ransomware threat.