Cybersecurity

Cyber Threat Intelligence, Alerts and Reports

As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.

You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.

Cybersecurity & Risk Advisory

Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.

Learn More

The American Hospital Association statement before the Senate Subcommittee on Disaster Management, District of Columbia and Census regarding Rogue AI: Securing the Homeland Against AI Agent Attacks.
The FBI Sept. 29 announced an arrest of one of the alleged leaders of ShinyHunters, a cybercriminal group linked to cyberattacks in the U.S. and internationally on more than 140 organizations, including healthcare, with at least $70 million taken in extortion payments.
H-ISAC TLP Green: Daily Cyber Headlines - September 9, 2026.
A daily ransomware tracker at TLP Green to increase awareness of the ransomware threat.
The FBI prepared this Liaison Information Report (LIR) to update private sector partners on how the Democratic People’s Republic of Korea actions.
H-ISAC TLP Green: Daily Cyber Headlines for September 28, 2026.
A daily ransomware tracker at TLP Green to increase awareness of the ransomware threat.
JetBrains has released security fixes for an unauthenticated remote code execution vulnerability (CVE-2026-63077) affecting all customer-managed TeamCity On-Premises installations.
Within the last 24 hours, according to reporting by multiple credible sources, two high risk vulnerabilities have been discovered in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway appliances.
The FBI and the Cybersecurity and Infrastructure Security Agency have released a fact sheet for critical infrastructure organizations on ways to reduce risk and minimize vulnerabilities when working with third-party hardware and software networks designed to monitor and automate physical processes…