Cybersecurity

Cyber Threat Intelligence, Alerts and Reports

As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.

You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.

Cybersecurity & Risk Advisory

Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.

Learn More

In March 2021 the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) observed Advanced Persistent Threat (APT) actors scanning devices on ports 4443, 8443, and 10443 for CVE-2018-13379, and enumerated devices for CVE-2020-12812 and CVE-2019-5591.…
The U.S. Department of Health and Human Services’ (HHS) Health Sector Cybersecurity Coordination Center (HC3) invites you to join us in one week, at the first of our bi-monthly cybersecurity threat briefings in April. The topic will be "Ryuk Ransomware Variants".
H-ISAC TLP Green Daily Cyber Headlines for April 1, 2021.
The major Headlines, the “Good Stuff”, US Snapshots, US Vaccinations, US Variant Cases, key Highlights, as well as key Statistics, Vaccine and Treatment information, US Restrictions and the Back to Normal Index related to the novel coronavirus pandemic.
The National Counterintelligence and Security Center (NCSC) and its partners in government and industry today launched the 4th annual “National Supply Chain Integrity Month” with a call to action for organizations across the country to strengthen their supply chains against foreign adversaries and…
On 14 April 2020, the Nemty ransomware actors announced a shutdown of Nemty’s Ransomware-as-a-Service operations. At the same time, Nefilim, which first appeared in March 2020, launched a public leaking website called corpleaks.net.
On March 16, 2021, public health services in Victoria, Australia known as Eastern Health were impacted by a cyber incident. Public statements can be viewed here. Preliminary investigation confirmed Ryuk ransomware had impacted some hosts, and an investigation into the incident determined that two…