H-ISAC TLP White Finished Intelligence HC3 Sector Alert: HiveNightmare/SeriousSAM Potential HPH Impact

Microsoft has identified a vulnerability which can allow an attacker to gain administrative privileges or execute code of their choice on certain Windows systems, including many Windows client and server versions released since October 2018. HC3 recommends that healthcare organizations ensure they review the list of recommended mitigations in the document attached and apply them appropriately for all impacted systems in their infrastructure.

For additional details, please see the full report below.

For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:

John Riggi

Senior Advisor for Cybersecurity and Risk, AHA

jriggi@aha.org

(O) +1 202 626 2272