Cybersecurity
Cyber Threat Intelligence, Alerts and Reports
As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.
You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.
Cybersecurity & Risk Advisory
Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.
The Philips Vue PACS (Picture Archiving and Communication System) is an image-management software platform that enables hospitals to archive, distribute, display and retrieve images and data from all hospital modalities and information systems
Overview of Phobos Ransomware
Executive Summary
Phobos ransomware first surfaced in late 2017 with many researchers quickly discovering links between Phobos and the Dharma and CrySiS ransomware variants. The Phobos ransomware operators are known to primarily target small- to medium-sized…
Cyber criminals are targeting cryptocurrency users, exchanges, and third party payment platforms in the virtual asset industry, resulting in large amounts of financial loss to victims.
The Cybersecurity and Infrastructure Security Agency (CISA) released a new report,
H-ISAC TLP Green Daily Cyber Headlines for July 8, 2021.
major Headlines, the “Good Stuff”, US Snapshots, US Vaccinations, US Variant Cases, Highlights, as well as key Statistics, Vaccine and Treatment information, US Restrictions and the Back to Normal Index related to the novel coronavirus pandemic.
Agenda
Recent Ransomware Activity
Overview of Conti Ransomware
Conti vs. Healthcare
FBI Alert on Conti
Example of a Conti Infection
Real-world Conti Attacks
Conti Mapper to MITRE ATT&CK
Conti Mitigation Practices
References
Questions
View the entire report below.
Microsoft has released out-of-band security updates to address a remote code execution vulnerability — known as PrintNightmare (CVE-2021-34527) — in the Windows Print spooler service. The Computer Emergency Response Team Coordination Center (CERT/CC), part of the Software Engineering Institute at…
Microsoft has released out-of-band security updates to address a remote code execution (RCE) vulnerability — known as PrintNightmare (CVE-2021-34527) — in the Windows Print spooler service.
Hospitals and health systems have frequently been the target of high-impact ransomware attacks. In this podcast, John Riggi, AHA senior advisor for cybersecurity and risk advisory services, speaks with John Delano, regional chief information officer at AdventHealth, and Michael Hamilton, chief…