H-ISAC: White Reports

This edition of Hacking Healthcare includes examining a new Department of Homeland Security Report that tasks the Cybersecurity and Infrastructure Security Agency (CISA) with doing more to improve their cyber information sharing with private sector partners.
This edition of Hacking Healthcare begins by examining recent steps that the U.S. is taking to increase international cooperation around cybersecurity threat information sharing, and we discuss how that might flow down to private sector partners.
On August 16, 2022, the Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information and Analysis Center (MS-I
This edition of Hacking Healthcare begins by examining a new draft publication from the National Institute of Science and Technology (NIST) that is meant to help organizations comply with the HIPAA Security Rule.
On August 4, 2022, malware researcher firm Reversing Labs released an in-depth blog post about the discovery of a new ransomware family, GwisinLocker ransomware, that has been observed targeting Linux-based systems in South Korean industrial and pharmaceutical companies.
On August 1, 2022, United States Speaker of the House Nancy Pelosi announced that she had touched down in Singapore, the first stop of her tour of the Indo-Pacific region.
On July 28, 2022, the Cybersecurity and Infrastructure Security Agency (CISA) issued a Malware Analysis Report (MAR), MAR-10386789, regarding their response to an organization that was compromised by exploitation of an unpatched and unmitigated Log4Shell vulnerability in a VMware Horizon server.
Physical and cybersecurity risks continue to rise amid Russia's invasion of Ukraine, COVID-19 mandates, and other forms of social discord.
In response to a detailed investigation into the IconBurst supply chain attack campaign conducted by Reversing Labs, Health-ISAC is releasing this brief overview of the IconBurst campaign.
This week, Hacking Healthcare begins by examining a court case in Illinois, where an insurance provider has taken a client to court to nullify a cyber insurance policy over the client’s misrepresentation of the security controls they claimed to have had in place.