H-ISAC: White Reports

H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP Clear Threat Briefing Protecting Against Malicious Use of Remote Monitoring and Management Software

On January 25, 2023, the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) (hereafter referred to as the “authoring organizations”) released this joint Cybersecurity Advisory (CSA) to warn…
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White: Informational: HC3: Monthly Cybersecurity Vulnerability Bulletin Jan 20, 2023
On January 19, 2022, the Health Sector Cybersecurity Coordination Center (HC3) shared a report "December 2022 Vulnerability Bulletin" regarding vulnerabilities impacting information systems relevant to the health sector.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Indicator Sharing: Threat Actor Selling Cobalt Strike Cryptor, Claims Will Bypass Most Security Sensors
Recently, DeepSeas Darkweb team discovered a post from a credible XSS crime forum account selling access to a cryptor for a cracked version of Cobalt Strike 4.7.2 and claims it will bypass several popular security sensors.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Weekly Blog -- Hacking Healthcare - January 10, 2023
To kick off 2023, Hacking Healthcare begins by examining an end of year ransomware attack against a Canadian children’s hospital. Beyond assessing the unique aspects of the attack, such as why a notorious ransomware group apologized and offered a free decryptor to its victim, we take a broader…
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat: APT5: Citrix Application Delivery Controller (ADC) Threat Hunting Guidance
On December 13, 2022, the National Security Agency (NSA) released a Cybersecurity Advisory (CSA) to provide threat hunting guidance for Citrix Application Delivery Controller (ADC) deployments.
H-ISAC: White Reports
H-ISAC: White Reports

HC3 TLP Clear: November 2022 Vulnerability Bulletin

In November 2022, vulnerabilities to the health sector have been released that require attention.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Vulnerability Bulletins: AMI MegaRAC BMC&C Vulnerabilities – December 5, 2022
Summary: Eclypsium Research has discovered and reported 3 vulnerabilities in American Megatrends, Inc. (AMI) MegaRAC Baseboard Management Controller (BMC) software. Eclypsium is referring to the vulnerabilities collectively as BMC&C.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Hacking Healthcare - November 9, 2022
This week, Hacking Healthcare examines what to make of the White House’s second annual summit on combating ransomware.
H-ISAC: White Reports
H-ISAC: White Reports

Health-ISAC TLP White Hacking Healthcare - November 1, 2022
This week, Hacking Healthcare dives into a recent regulatory fine against a large UK organization for General Data Protection Regulation (“GDPR”) violations.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC Finished Report CISA TLP White: Guidance on Phishing-Resistant and Numbers Matching Multifactor Authentication
On October 31, 2022, the Cybersecurity Infrastructure Security Agency (CISA) released two fact sheets highlighting threats against accounts and systems using certain forms of multifactor authentication (MFA).
Subscribe to H-ISAC: White Reports