Health-ISAC✓

Enjoy some photos from last week’s regional workshop and tabletop exercise in St. Paul, Minnesota. Here’s what attendees had to say: 🔹 "Excellent facility, outstanding host, amazing TTX participation. An excellent event. Thank you." 🔹 "Great mix of involvement, scenarios, and learning content. A lot of good conversation." 🔹 "Enjoyed this experience and feel the [intimate] size helped facilitate communication." 🔹 "I liked that this table included a physical disaster." 🔹 "Health-ISAC does a great job with hosting these, looking forward to the next one." 🔹 "Great participation and sharing." Thank you to #C2ASecurity and #BishopFox for sponsoring this event, allowing participants to attend free of charge, and for contributing to the security sessions: “What is a governed Workflow?” and “Patched, Isolated, Proven?”

Score It, Prove It, Clear It: Medical Device Security in the Enforcement Era webinar by @MedCrypt on Monday, November 16th at 2 PM ET. Cybersecurity has gone from a footnote to nearly half of FDA’s deficiencies. Yet many teams are still debating how to score vulnerabilities instead of proving they’ve controlled them. Join Medcrypt’s Seth Carmody and Axel Wirth for a look at the current enforcement landscape. They’ll cover where CVSS helps and where it leaves you exposed, and what separated cleared submissions from refused ones in recent anonymized 510(k) reviews. Register Here:

Exclusive EUROPEAN Monthly Threat Briefings for Health-ISAC Members! TODAY AT 3 PM CET. Stay ahead of the latest threats with these power-packed, insider-only briefings led by the Health-ISAC Threat Operations Center team. Presentation Topics: 🔹 Silent Ransom Fallout Shifts Russian Actor Focus to PHI 🔹 ClickFix to C2: Emerging Loader Threats 🔹 Your SBOM Won't Catch a Worm 🔹 El Nino Winter: How Record Pacific Temperatures Will Impact the Upcoming Winter 🔹 Legal & Regulatory Update 🔹 Monthly Awareness 🔹 Health-ISAC Product Spotlight Members will receive instructions on how to register via email.

Today, October 28, Health-ISAC President and CEO Denise Anderson speaks at the Cyber Patient Safety Symposium 2026 (#CPSS2026), hosted by the UC San Diego Center for Healthcare Cybersecurity. Session title: Health-ISAC Update and Global Threat Landscape Learn more here.

The Video That Plays You: Fake MP4 File Carries Malicious Payload. Read the blog by @censysio, a Health-ISAC Community Services Champion.

Exclusive AMERICAS Monthly Threat Briefings for Health-ISAC Members! TODAY AT 12 PM ET. Stay ahead of the latest threats with these power-packed, insider-only briefings led by the Health-ISAC Threat Operations Center team. Presentation Topics: 🔹 Silent Ransom Fallout Shifts Russian Actor Focus to PHI 🔹 ClickFix to C2: Emerging Loader Threats 🔹 Your SBOM Won't Catch a Worm 🔹 El Nino Winter: How Record Pacific Temperatures Will Impact the Upcoming Winter 🔹 Legal & Regulatory Update 🔹 Monthly Awareness 🔹 Health-ISAC Product Spotlight Members will receive instructions on how to register via email.

Protecting patient care begins with securing the systems behind it. Join industry leaders, practitioners, and peers for the upcoming Health Sector Security Workshop hosted at @Humana in Louisville, Kentucky, on Wednesday, November 4th. Sponsored by @AcalvioTech and 360 Privacy. Seats are limited. Reserve your spot today: #HealthcareSecurity #Cybersecurity #HealthIT

In a major coordinated offensive against transnational cybercrime, #Microsoft and Health-ISAC seized and redirected online infrastructure powering three Chinese-language cybercrime stores known as YAM Store, CoGui, and IronMan. Read more in The Times of India. #healthcaresecurity #CyberCrime

As part of Cybersecurity Awareness Month, Health-ISAC has opened our Daily Cyber Headlines to public access, available Monday through Friday. Read the news summaries covering the most critical developments in health sector security from the week here: The Resources and News page on Health-ISAC’s website also has plenty of cybersecurity resources, from the latest medical device security and Identity Management white papers to Health-ISAC’s Hacking Healthcare blog. #CybersecurityAwarenessMonth #InformationSharing

Missed this week's Quarterly Threat Insights webinar? View the recording. This quarterly webinar offers updates and expert analysis to help the health sector stay informed and prepared. TOPICS COVERED: 🔹 The Q3 Health Sector Wakeup Call: Inside the ShinyHunters Threat Wave 🔹 Securing Medical Devices and Reporting Metrics 🔹 Global Risk Outlook 🔹 El Niño Winter Impacts 🔹 L&R Update: CIRCIA & HIPAA Security Rule Get caught up here: #ThreatIntelligence #healthcaresecurity #HealthTech

Healthcare Security at Machine Speed: $17M Ransomware & AI Adversaries webinar with @bishopfox on Tuesday, November 10th at 3 PM ET! AI is changing how healthcare operates and how adversaries attack it. With average healthcare ransomware demands approaching $17 million, can healthcare security teams detect and respond to attacks as quickly as AI-enabled adversaries can carry them out? Join us for a virtual session on how AI is changing healthcare security and what it takes to protect patient care and operations, featuring: 🔹 Farzan Karimi, Deputy CISO, Executive Director at Moderna 🔹 Matthew B. Welling, Partner at Holland & Knight 🔹 Zach Moreno, AVP Consulting at Bishop Fox This session connects healthcare security strategy to these operational decisions: how to evaluate response assumptions, assign ownership across departments, and prioritize investments that support continuity of care. Register Here:

Man Against PowerPoint: How Cybersecurity Confused Discussion With Readiness Most organizations have an incident response plan. Far fewer have tested whether their people can execute it while facts, systems, and stakeholder expectations change underneath them. Read this white paper by Reflex Security, a Health-ISAC Community Services Champion.

TODAY AT 1 PM ET! The Moving Target: 64% of Today's Riskiest Users Weren't There Last Year webinar by @Living_Security. Registration Link:

Cyber threats do not stop at industry boundaries. An attack vector tested on energy, finance, or IT systems today can easily target healthcare tomorrow. By sharing intelligence across sectors, critical insights gained in one industry sector can instantly strengthen defenses of all critical infrastructure. 🌐 Learn more about cross-sector collaboration with the (US) National Council of ISACs: 🌐 Learn more about cross-sector collaboration with the European Council of ISACs: #NCI #CrossSector #HealthISAC #CSAM #ENISA #CybersecurityAwarenessMonth #CriticalInfrastructuer

Join Health-ISAC's VP of Medical Device Security, Phil Englert, at the 16th Annual Cyber Security Summit in Minneapolis next Wednesday, October 28th. Health-ISAC members may register using this discount code: IP_HISAC_16 Session title: From Algorithms to AI Accountability: Upskilling, Governance, and Ethics of the Modern Workforce #CSS16 #medicaldevicesecuri

Beyond the Hype: What Mythos Actually Means for Security Teams Capable models and meaningful security outcomes are not the same thing. This session brings together leaders who have spent time with Mythos to examine where it fits in the SDLC, what it actually costs at scale, and whether it delivers real value or still requires seasoned expertise to use well. Watch this on-demand session by @bishopfox, a Health-ISAC Community Services Champion.

TODAY AT 12 PM ET! Join the Health-ISAC Threat Operations Center for Quarterly Threat Insights. This quarterly webinar is open to members and other organizations in the health sector considering membership. Register here:

Why Incident Response Plans Fail Under Pressure webinar with Reflex Security on Thursday, November 5th at 12 PM ET! Why do well-documented incident response plans fall apart when they're needed most? Are your teams truly prepared to make critical decisions when the facts are incomplete, leadership is demanding answers, and every minute counts? ​Join this thought-provoking session to explore why even mature security programs struggle during real incidents and what it takes to build a response capability that performs under pressure. #reflexsecurity #howareyourreflexes #incidentreadiness Register Here: