Skip to main content

Monthly Newsletter – October 2026

Health-ISAC Monthly Newsletter graphic showing stacked preview pages.

Key Highlights for October Include:

  • European Summit – Last chance deadlines
  • CISO Summit – Photos
  • Cybersecurity Awareness Month – Resources
  • Fall Americas Summit – Price increase approaching
  • APAC Summit 2027 – Registration opens this month
  • New Working Group – California Consumer Privacy Act Audit
  • Health-ISAC Medical Device Security White Paper – Metrics to Meaning
  • Community Services Resources – Bishop Fox and Living Security papers, Booz Allen report, and Doppel blog
  • Trailblazer Special Interest Group for SMB Members webinar – CISA’s toolkit
  • Highlighted US Workshops – St Paul, MN and Louisville, KY
  • October Events

Top Health-Related Cyber and Physical Headlines

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks 

AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials 

North Korean Threat Actors Deploy New Linux Espionage Toolkit

French Hospital Fined €500,000 After Breach Exposes Data of 727,000

Threat Actors Target US and EU Firms with Microsoft 365 Session Hijacking and RMM Abuse

AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials

Hawaii Braces For Potential Direct Impacts From Major Hurricane Lowell As The Pacific Remains Busy

Patient Count In Cyclospora Outbreak In Michigan At More Than 14,700

Indonesia: Volcano Eruption In The Country Leaves 170,000 Travellers Stranded As Seven Airports Remain Closed

Kenya: Doctors’ Union Gives Government Seven Days To End Nurses’ Strike

 

2026 European Summit in Crete, Greece – Security Cove

October 12-16, 2026

Less than two weeks away! View the speaker and session lineup in the agenda. Plan to arrive on Tuesday for morning working groups, the European Hobby Exercise, the Medical Device Council meeting, and Round Table discussions. Stay through Friday for a tour of Knossos Palace and an authentic Cretan-cuisine seaside lunch. A few seats remain available; sign up within Summit registration.

There are still a few more days to register. Jump on the opportunity today to join these interactive discussion sessions.

 

PHOTOS FROM THE THIRD ANNUAL CISO SUMMIT – Moving Mountains

This is the second year the CISO Summit hit capacity, underscoring the demand for an intimate, trusted forum where health security leaders tackle high-priority challenges. Mark your calendar for the next CISO Summit in La Jolla, California, September 14–17, 2027.

“Great opportunity to connect and learn with fellow health CISOs and security leaders at Health-ISAC CISO summit.”
Attendee on LinkedIn

 

OCTOBER IS CYBERSECURITY AWARENESS MONTH

Health-ISAC’s 10th year participating in Cybersecurity Awareness Month

Share Resilience with Family and Friends

Throughout the month, Health-ISAC has opened access to exclusive member resiliency materials—including Daily Cyber Headlines—available every Monday, Wednesday, and Friday on the Health-ISAC website.

  • Boost Home Defense: Download and share the [Cyber Safe at Home Infographic] to learn five immediate actions anyone can take to increase personal cyber resilience.
  • Stay Informed: Follow Health-ISAC on LinkedIn for continuous tips, updates, and community resources throughout October.
  • Spread the Word: Share these materials with family, friends, and colleagues to help foster a safer digital environment.

 

UPCOMING SUMMITS

Fall Americas Summit – November 30-December 4, 2026, Tucson, Arizona

Early Bird Pricing ends October 31st. Register

2027 APAC Summit – March 15-19, 2027, Gold Coast, Australia

Registration opens October 12th. Learn More

 

NEW WORKING GROUP – CCPA CYBERSECURITY AUDIT WORKING GROUP

Health-ISAC has recently launched the California Consumer Privacy Act (CCPA) Cybersecurity Audit Working Group for

organizations preparing for evolving cybersecurity audit expectations under the CCPA. The group offers a space to compare approaches, share lessons learned, and discuss practical considerations around audit readiness, making it especially valuable for those working in cybersecurity, privacy, risk, compliance, and governance.

Members may join the CCPA Cybersecurity Audit Working Group via the Health-ISAC Member Portal or by emailing membership@h-isac.org to request access.

 

MEDICAL DEVICE SECURITY – HEALTH-ISAC WHITE PAPER

Cybersecurity metrics are not just measurements of activity—they are the mechanism by which an organization explains how it protects patients, manages risk, and earns trust.

The Metrics to Meaning white paper offers an industry-written practical shared framework for medical device manufacturers and health delivery organizations to address the current gap.

Written by a work group of Health-ISAC’s Medical Device Security Council.

 

COMMUNITY SERVICES RESOURCES

The Smash and Grab Era – Bishop Fox white paper

What’s in America’s Code? – Booz Allen report

The Human Risk Layer of AI – Living Security white paper

How to Protect Healthcare Front Lines and IT Help Desks – Doppel blog

 

MEMBERS ONLY WEBINAR

Trailblazer Special Interest Group (T-SIG) for SMB Members

October 8 from 11:30 am-12 pm

CISA’s toolkit for healthcare cybersecurity and patient safety

 

HIGHLIGHTED WORKSHOPS

Health Sector Security Workshops with Tabletop Exercises

October 22 – St. Paul, Minnesota | Hosted at Boston Scientific | Sponsored by C2A Security and Bishop Fox

November 4 – Louisville, Kentucky | Hosted at Humana | Sponsored by Acalvio and 360 Privacy

 

CTEM 101: Moving from Spreadsheets to Continuous Risk Reduction
OpenAI pledges $1B to provide resources, training for frontline cyber defenders