Cybersecurity

Cyber Threat Intelligence, Alerts and Reports
As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.
You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.
Cybersecurity & Risk Advisory
Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.
The United States Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and the National Security Agency
A report by the United Kingdom’s National Health Service is warning of threats leveraging Log4Shell vulnerability in VMware Horizon servers by an unknown cyber actor.
Health and Human Services Secretary Xavier Becerra today in a letter to health care and public health leaders urged vigilance against cyber threats posed by a vulnerability within the Apache Log4j software. Exploitation of the software, which exists in thousands of applications, including control…
December News of Interest to the Health Sector.
On January 10, 2022, the Health Sector Cybersecurity Coordination Center (HC3) shared a report "December 2021 Vulnerability Bulletin" regarding vulnerabilities impacting information systems relevant to the health sector.
A list of H-ISAC reports distributed today.
H-ISAC TLP Green Daily Cyber Headlines for January 10, 2022.
A daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.
On January 6, 2021, the FBI released an update regarding the Flash report “FIN7 Cyber Actors Targeting Businesses Through USB Keystroke Injection Attacks” (Alert Number MI-000120-MW) previously released on March 26, 2020
Analyst Note from the HHS Health Sector Cybersecurity Coordination Center (HC3).