Monthly Newsletter – October 2020
October’s Newsletter features:
- Fall Summit Registration Now Open (Attend in-person or virtual)
- H-ISAC Diversity and Inclusion Committee — Call for Members
- Cyware — Upcoming member webinar 10/16 (check member list server for registration link)
- Product and Services — PERCH update and upcoming webinar
- Upcoming Virtual Events/Webinars
Pdf version:
Text version:
Top 10 Health Related Events for October
Death Reported Following Ransomware Attack on a German Hospital
Researchers Find Mozi Botnet Continues to Grow
Just 44% of Healthcare Providers Meet NIST Cybersecurity Standards
Personal Data of 18,105 Wales COVID-19 Positive Residents Uploaded on Public Server
Microsoft Confirms Chinese, Iranian, and Russian Cyber-Attacks on Biden and Trump Campaigns
Palo Alto Networks Fixes Critical Flaw in PAN-OS Firewall Software
Ransomware Accounted for 41% of All Cyber insurance Claims in H1 2020
Healthcare Key Target of Hacker Selling Access to Compromised RDP
Iranian Hackers Selling Access to Compromised Companies on Underground Forum
European ISPs Report Mysterious Wave of DDoS Attacks
REGISTRATION IS OPEN!
H-ISAC Hybrid Fall Summit The HYBRID format will allow everyone to attend – whether in person or virtually.
IN PERSON ATTENDANCE:
Enjoy outdoor meals and activities in the delightful Phoenix fresh air with extra safety
precautions in place. There is no registration fee for members attending in person.
VIRTUAL ATTENDANCE:
Experience our new platform with plenty of networking and learning experiences for virtual
attendees and access to all live and on-demand sessions. There will be a small registration fee to attend virtually.
All attendees will be able to visit sponsors’ virtual booths and partake in other activities to receive points to cash in for some really cool prizes.
Health-ISAC is seeking members interested to join our
DIVERSITY & INCLUSION COMMITTEE
The D&I Committee has formed to bring together H-ISAC Members and staff to generate and pursue
ideas for:
~ Improving D&I within H-ISAC operations
~ Assist Members looking to improve D&I within the cybersecurity
programs of their organizations
Participants will provide feedback and help to implement ideas and/or author agreed upon products. Below is a sample of things we can continue to do together, as a community that cares:
~ Offer leadership opportunities
~ Expand summit scholarship program
~ Establish Internship programs
~ Host webinars / events
~ Foster diversity in speakers at events
~ Hold talks & roundtables on Diversity & Inclusion
~ Create access to diversity resources
The Committee will build upon this list as we go and looks forward to Member input to help shape it. We will share information, updates, and resources via our Member Portal. If interested, please reach out to us at contact@h-isac.org. We are looking to host our first meeting soon.
TOC UPDATE Fewer Emails / More Control
Health-ISAC has nearly 600 members on-boarded onto “Cyware” – our collaborative situational awareness and information sharing system that delivers cyber and physical threat intelligence to you and your co-workers. Cyware allows you to customize exactly what information you receive and how it’s delivered from Health-ISAC — through email, an easy-to-use mobile app and a web portal.
After December 2020, Threat Operations Center (TOC) products will no longer be sent via email distribution lists. Cyware will become the primary method of delivery for cyber and physical threat intelligence reports.
Cyware has other neat capabilities as well – including a Member Directory, Alert Repository, Document Library, Quick Polling and Incident Submissions. Watch for Health-ISAC announcements about live webinars where we will demo the product and answer your questions.
To get set up on Cyware, please contact Health-ISAC Membership Services — contact@h-isac.org.
HSCC Cybersecurity Working Group
Kudos to all in the HSCC and the Health-ISAC for your commitment to protecting the tools, the data, and the IT systems that support our health providers and a well-functioning
healthcare infrastructure.
Read the article by Executive Director, of the Health Sector Coordinating Council Cybersecurity Working Group, Greg Garcia, here
https://h-isac.org/hscc-cyberworking-group/
UPCOMING WORKSHOPS AND WEBINARS
Find registration links here https://h-isac.org/events/
H-ISAC CTIA Training Course by R9B:
Analyzing the Threat
October 14th-15th 10am-4pm ET
A 2-day virtual Cyber Threat Intelligence Analysis course. https://h-isac.org/hisacevents/analyzing-the-threat-cyber-threat-intelligence-analysis-course/
H-ISAC Virtual Workshop: Medical Device Security
October 29 at 10am ET
Agenda includes the lifecycle of risk management for medical devices, an MDM panel, and a Q & A with researchers.
https://h-isac.org/hisacevents/h-isac-virtual-medical-device-security-workshop/
H-ISAC Navigator webinar
Tacking Healthcare Cyber Risk in the Post COVID World by QOMPLX
October 13 at 1pm EST
https://h-isac.org/hisacevents/tackling-healthcare-cyber-risk-in-the-post-covid-world-by-qomplx/
H-ISAC Navigator webinar
Securing R&D Innovation by Booz Allen Hamilton
October 6 at 1pm EST
Learn how to build a cohesive
strategy around R&D Security.
https://h-isac.org/hisacevents/securing-rd-innovation-by-booz-allen-hamilton/
H-ISAC Navigator webinar
HackerOne’s 4th Annual Security Conference
October 20-22
This is a global virtual conference.
https://h-isac.org/hisacevents/hackerones-4th-annual-security-conference-y-hackerone/
OCTOBER PARTNERED EVENTS
October 5-23: The MedTech Conference
October 8: Healthcare Cybersecurity Forum, Texas
October 26: Cyber Security Healthcare & Medical Device Seminar
October 28: Healthcare Cybersecurity Forum, Pacific Northwest
- Related Resources & News
- Leveraging ISO 81001-5-1 Amid Medical Device Procurement
- Mitigating risk as healthcare supply chain attacks prevail
- Enhancing Cybersecurity in Rural Hospitals
- Health-ISAC Hacking Healthcare 11-15-2024
- Cyber Incident Response: Playbook for Medical Product Makers
- Feds Warn of Godzilla Webshell Threats to Health Sector
- Trump’s Return: Impact on Health Sector Cyber, HIPAA Regs
- Health-ISAC Hacking Healthcare 11-7-2024
- Protecting the Healthcare Supply Chain Against Russian Ransomware Attacks
- All hospitals should be concerned about cyberattacks. Here’s why