Threat Intelligence

On June 11, 2026, Health-ISAC observed an emerging and highly evasive social engineering threat known as CalPhishing (Calendar Phishing). Summary: Threat actors are exploiting the automatic processing features of enterpris…

TLP: WHITE Threat Bulletin Published On: May 12, 2026, 11:24 AM Health-ISAC has partnered with Quest Diagnostics to conduct joint research into the implications of autonomous vulnerability-discovery AI technologies for the…

TLP: WHITE  |   Alert ID: 371c31ef     |    March 17, 2026, 04:23 PM On March 17, 2026, Health-ISAC aggregated resources for configuring Microsoft Intune to prevent accidental device wipes. These resources were shared by he…

Members of the National Council of ISACs (NCI) have collaborated on this joint bulletin to raise awareness across the critical infrastructure community of this common threat to critical infrastructure and global business mor…

Vulnerable devices are susceptible to attacks. Read and share the following Dos and Don’ts for Protecting Picture Archiving Communication Systems (PACS)    

Health-ISAC is tracking an emerging fraud pattern where threat actors exploit SMS and voice One-Time Password (OTP) mechanisms used in account sign-up, patient portal enrollment, telehealth registration, and MFA flows. Attac…

Microsoft’s Digital Crimes Unit (DCU) has disrupted RaccoonO365, the fastest-growing tool used by cybercriminals to steal Microsoft 365 usernames and passwords (“credentials”). Using a court order granted by the Southern Dis…

Cybersecurity Trends and Threats to the Health Sector TLP: WHITE Health-ISAC’s 2025 Q2 Health-ISAC Heartbeat provides observations of ransomware, cybercrime trends, and malicious actor forum postings that could potential…

Guidance for Proactive Defense Produced by Financial Services ISAC, Information Technology ISAC, Food and Agriculture ISAC, Health ISAC, Aviation ISAC, Automotive ISAC, Retail and Hospitality ISAC, the Maritime Transportati…

Health-ISAC published this bulletin at TLP:WHITE to spread awareness within the health sector.   Update June 23:   On June 23, 2025, Qatari missile defense sys…

Update: On March 26, 2025, the FBI advised that, after extensive investigation and intelligence review, they have not identified any specific credible threat targeted against hospitals in any U.S. city. The FBI advised if…

TLP WHITE – Update January 30, 2025 Health-ISAC, in collaboration with AHA, has identified attempted and ongoing ransomware attacks potentially due to SimpleHelp remote monitoring and management (RMM) software vulnerabilit…