2025 Newsletter – February
February’s newsletter features the following:
- APAC Summit Keynote Speakers
- Spring Americas Summit one-day SummitPalooza sale date
- The Annual Threat Report
- Member input request regarding HIPAA Proposed Rules
- New working group –Financial Fraud Detection and Intelligence Sharing
- New Community Services Provider – Silobreaker
- Upcoming events
Read or download the PDF – Click Here
2025 February Newsletter Final
Size : 2.5 MB Format : PDF
Text:
Six Weeks Away! The APAC Summit offers two exciting keynote speakers.
Wednesday – Wan Roshaimi Wan Abdullah, CTO, CyberSecurity Malaysia
Thursday – Dr. Muralitharan A/L Paramasua, CEO, Medical Device Authority Malaysia.
Read their bios on the APAC website page.
On Wednesday evening, Rise Above the heart of Kuala Lumpur with an exclusive guided tour of the world’s tallest twin skyscrapers, Petronas Towers. Enjoy amazing views and an exquisite private dinner of Cantonese and Szechuan delicacies at Seligi Pavilion, located on the 41st floor of the Malaysian Petroleum Club.
Register with early bird pricing until February 14.
https://web.cvent.com/event/09b95cb7-a179-480e-a7ce-adfc7ab5ba87/regProcessStep1?rp=b6776eed-c0e4-48b1-b49d-8f7c42364f64
The Saujana Hotel Kuala Lumpur – Book your on-site accommodations
https://health-isac.org/summit-meeting/2025-apac/2025-apac-the-saujana-hotel/
The Spring Americas Summit
Location: Naples Grande Beach Resort
Mark your calendars – Monday, February 24—Registration opens with a ONE-DAY sale exclusively for Members. Register on SummitPalooza Day at a price of USD $99.
Watch the teaser video on Vimeo to view the Summit’s coastal location
Health Sector Cyber Threat Landscape – Health-ISAC’s Annual Threat Report 2025
Key findings include a surge in ransomware attacks, with increasingly sophisticated techniques employed by threat actors.
Members can access the full report in the Threat Intelligence Portal (HTIP). It will be released for public use in mid-February. CISOs will find it useful for Board meetings and budget planning.
Seeking Member Comments on HIPAA’s New Proposed Cybersecurity Rules
On January 6, The Department of Health and Human Services (HHS), a United States Government Agency, published a notice to update the Health Insurance Portability and Accountability Act (HIPAA) and improve the cybersecurity protection of electronic protected health information (ePHI). The proposed rules include requiring written procedures to restore IT systems and data within 72 hours of a loss, encrypting all ePHI at rest and in transit, use of MFA, vulnerability scanning twice a year, penetration testing once a year, network segmentation, anti-malware protection, and much more.
HHS is accepting public comments on the proposed rules. Health-ISAC will submit comments on behalf of the health industry. Organizations can submit their comments directly to HHS by following the instructions in the Fact Sheet provided in the PDF above.
If you would like Health-ISAC to submit your comments as part of the overall industry voice, please send them to membership@h-isac.org. Member inputs will be accepted until February 21st so that comments can be consolidated and submitted in aggregate by the HHS deadline in early March.
New Working Group – Financial Fraud Detection and Intelligence Sharing
Call for Participation – This new working group discusses financial fraud incidents and collaborates on detection tools and technologies that can be used to enhance the monitoring and prevention of financial fraud in the health sector.
Topics will include business email compromise (BEC), incentive program theft, and insurance fraud.
Members interested in actively participating in and contributing to this working group may email membership@h-isac.org.
New Community Services Provider
Silobreaker offers a threat intelligence platform that transforms vast amounts of data into actionable intelligence. This platform supports various use cases, including cyber threat intelligence, supply chain disruption, and threat landscape monitoring.
To learn more about Silobreaker and other Community Services Providers please visit:
https://health-isac.org/community-services/
OR in the Member Portal:
Home → Discover Community Services.
- Related Resources & News
- Impacts of Proposed US Import Tariffs on the Global Health Sector
- DeepSeek’s Security Risk Is A Critical Reminder For CIOs
- Threat Bulletin: SimpleHelp RMM Software Leveraged in Exploitation Attempt to Breach Networks
- EU Commission Calls for Health Sector ‘Cyber Action Plan’
- How to Manage Cyber Risk of Medical Devices – for Life
- Health-ISAC Hacking Healthcare 1-24-2025
- Behavioral Incident Response Strategies in Clinical Settings
- Cyber Threat Alliance Publishes 2025 Cybersecurity in the Age of AI
- AI, Ransomware, and Medical Devices: Safeguarding Healthcare
- Securing Health Data in 2025: The Rising Cybersecurity Challenges