Cybersecurity Government Intelligence Reports
The American Hospital Association (AHA) Cybersecurity and Risk Advisory Service share cybersecurity government intelligence reports that are vital to the security of hospitals and health systems.
Cyber actors routinely exploit poor security configurations (either misconfigured or left unsecured), weak controls, and other poor cyber hygiene practices to gain initial access or as part of other tactics to compromise a victim’s system.
As of January 2022, unidentified cyber actors unlawfully scraped credit card data from a US business by injecting malicious PHP Hypertext Preprocessor (PHP) code into the business’ online checkout page and sending the scraped data to an actor-controlled server that spoofed a legitimate card…
The cybersecurity authorities of the United Kingdom (NCSC-UK), Australia (ACSC), Canada (CCCS), New Zealand (NCSC-NZ), and the United States (CISA), (NSA), (FBI) are aware of recent reports that observe an increase in malicious cyber activity targeting managed service providers (MSPs) and expect…
In April 2022, vulnerabilities in common information systems relevant to the health sector have been
released that require attention.
In April 2022, vulnerabilities in common information systems relevant to the health sector have been released that require attention.
Ransomware Trends in the HPH Sector Q1 2022
Weekly threat brief from the HHS Health Sector Cybersecurity Coordination Center (HC3).
This is a revision of FLASH CP-000165-TT, originally published 18 March 2022 and titled “Cyber Actors Perform Increased Reconnaissance of US Energy Sector Networks from Russia-Based IP Addresses.”
Leading up to Russia’s unprovoked attack against Ukraine, threat actors deployed destructive malware against organizations in Ukraine to destroy computer systems and render them inoperable.
U.S., Australian, Canadian, New Zealand, and UK cybersecurity authorities assess, in 2021, malicious
cyber actors aggressively targeted newly disclosed critical software vulnerabilities against broad target
sets, including public and private sector organizations worldwide.