Cybersecurity
Cyber Threat Intelligence, Alerts and Reports
As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.
You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.
Cybersecurity & Risk Advisory
Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.
Microsoft issues security update addressing critical vulnerability impacting Windows server services
Microsoft has released a security update to address a critical remote code execution vulnerability impacting multiple versions of Windows Server Update Services that was not fully eradicated by a previous update, according to the Cybersecurity and Infrastructure Security Agency.
H-ISAC TLP White: Daily Cyber Headlines for October 30, 2025
A daily ransomware tracker at TLP:GREEN to increase awareness of the ransomware threat.
H-ISAC TLP White: Daily Cyber Headlines - October 29, 2025.
A daily ransomware tracker at TLP:GREEN to increase awareness of the ransomware threat.
A daily ransomware tracker at TLP:GREEN to increase awareness of the ransomware threat.
In part two of a recent blog, AHA National Advisor for Cybersecurity and Risk John Riggi and AHA Deputy National Advisor for Cybersecurity and Risk Scott Gee highlight three trends that shaped 2025’s health care cybersecurity risk landscape, focusing on third-party cyber risk, clinical continuity…
On October 24, 2025, QNAP issued a security advisory regarding a critical vulnerability, CVE-2025-55315, in the Microsoft ASP .NET Core component installed by and utilized within its NetBak PC Agent application.
H-ISAC TLP White: Daily Cyber Headlines for October 24, 2025
This week, Health-ISAC®'s Hacking Healthcare® provides an update on the continuing U.S. government shutdown and negotiations around reauthorization of the Cybersecurity Information Sharing Act of 2015 (“CISA 2015”).