In the News

Rady Children’s CISO Sahan Fernando explains why understanding hospital operations is the real foundation of lasting cyber resilience and continuity.  Cyber resilience in healthcare depends less on technology than on whethe…

Cyberwarfare knows no borders. Hospitals and other healthcare organizations are on the front line. Pulled quote: “Healthcare is a perfect target for cyberattacks. They’ve got life-critical systems, highly-sensitive patient…

Experts: If Implemented Effectively, Directive Could Help Health Organizations Although President Donald Trump’s executive order this week on artificial intelligence barely mentions healthcare, some experts said the directi…

Health-ISAC Warns About Weak Governance and Credential Misuse   Humans make mistakes. They fall for phishing scams and click on malicious links. Machines aren’t necessarily better: Delegating decisions to agentic ar…

Health-ISAC’s Medical Device Security Analyst, Taylor Porter, was interviewed at AAMI eXchange in Denver.   Topics include: Health-ISAC and AAMI partnership to conduct the annual threat report with Health Deliver…

In April 2026, CISO Series brought together six security leaders from across the healthcare industry for a week-long Reddit AMA on r/cybersecurity. The stakes of a security failure in healthcare aren’t measured solely by do…

Health-ISAC’s Englert Says Device Inventory and PHI Mapping Will Be the Heaviest Lifts When New HIPAA Drops Two likely HIPAA mandates will challenge healthcare CISOs the most: device inventory and PHI mapping. Both come wit…

Ransomware and vendor breaches persist. The “2026 Data Breach Investigations Report” (DBIR) highlights how evolving social engineering tactics make the sector more vulnerable. Pulled quotes from Health-ISAC The Health Inf…

Déjà Vu: Is Mythos in Hands of Bad Actors Akin to Cobalt Strike, Brute Ratel Abuse? Anthropic’s Claude Mythos and similarly powerful artificial intelligence tools pose elevated cyber risk to the healthcare sector, warns a n…

Operation Vital Signs, the national healthcare cybersecurity exercise first announced in March, has drawn more than 300 organizational registrations since enrollment opened in May. In addition, the sponsors have released new…

In April, Anthropic made the announcement that it would not release its new frontier model, Claude Mythos, to the public. The model has the ability to “surpass all but the most skilled humans at finding and exploiting softwa…

A large Pennsylvania pharmaceutical company said a ransomware attack has impacted critical systems used to ship, receive and manufacture products. Errol Weiss, chief security officer at healthcare information sharing organi…