Cyber threats do not stop at industry boundaries. An attack vector tested on energy, finance, or IT systems today can easily target healthcare tomorrow. By sharing intelligence across sectors, critical insights gained in one industry sector can instantly strengthen defenses of all critical infrastructure. 🌐 Learn more about cross-sector collaboration with the (US) National Council of ISACs: nationalisacs.org/ 🌐 Learn more about cross-sector collaboration with the European Council of ISACs: enisa.europa.eu/topics/cyber… #NCI #CrossSector #HealthISAC #CSAM #ENISA #CybersecurityAwarenessMonth #CriticalInfrastructuer

Join Health-ISAC's VP of Medical Device Security, Phil Englert, at the 16th Annual Cyber Security Summit in Minneapolis next Wednesday, October 28th. Health-ISAC members may register using this discount code: IP_HISAC_16 Session title: From Algorithms to AI Accountability: Upskilling, Governance, and Ethics of the Modern Workforce #CSS16 #medicaldevicesecuri

Beyond the Hype: What Mythos Actually Means for Security Teams Capable models and meaningful security outcomes are not the same thing. This session brings together leaders who have spent time with Mythos to examine where it fits in the SDLC, what it actually costs at scale, and whether it delivers real value or still requires seasoned expertise to use well. Watch this on-demand session by @bishopfox, a Health-ISAC Community Services Champion. health-isac.org/beyond-the-h…

TODAY AT 12 PM ET! Join the Health-ISAC Threat Operations Center for Quarterly Threat Insights. This quarterly webinar is open to members and other organizations in the health sector considering membership. Register here: register.gotowebinar.com/rt/…

Why Incident Response Plans Fail Under Pressure webinar with Reflex Security on Thursday, November 5th at 12 PM ET! Why do well-documented incident response plans fall apart when they're needed most? Are your teams truly prepared to make critical decisions when the facts are incomplete, leadership is demanding answers, and every minute counts? ​Join this thought-provoking session to explore why even mature security programs struggle during real incidents and what it takes to build a response capability that performs under pressure. #reflexsecurity #howareyourreflexes #incidentreadiness Register Here: luma.com/zrmbogmf

Exclusive Monthly Threat Briefings for Health-ISAC Members! Stay ahead of the latest threats with these power-packed, insider-only briefings led by the Health-ISAC Threat Operations Center team. Taking place on the last Tuesday, Wednesday, and Friday of this month, you get to choose between: ➡️ Americas MTB – Tuesday, October 27th at 12 PM ET ➡️ European MTB - Wednesday, October 28th at 3:00 PM CET ➡️ APAC MTB - Friday, October 30th at 11:00 AM GMT+8 Presentation Topics: 🔹 Silent Ransom Fallout Shifts Russian Actor Focus to PHI 🔹 ClickFix to C2: Emerging Loader Threats 🔹 Your SBOM Won't Catch a Worm 🔹 El Nino Winter: How Record Pacific Temperatures Will Impact the Upcoming Winter 🔹 Legal & Regulatory Update 🔹 Monthly Awareness 🔹 Health-ISAC Product Spotlight Members will receive instructions on how to register via email.

Join the Health-ISAC Threat Operations Center for Quarterly Threat Insights on Wednesday, October 21, at 12:00 PM ET. This quarterly webinar is open to members and other organizations in the health sector considering membership. Key Topics Covered: 🔹 Monthly Cyber Threat Level 🔹 The Q3 Health Sector Wake-Up Call: Inside the ShinyHunters Threat Wave 🔹 Securing Medical Devices and Reporting Metrics 🔹 Global Risk Outlook 🔹 El Nino Winter: How Record Pacific Temperatures Will Impact the Upcoming Winter 🔹 Legal and Regulatory Update 🔹 Global Ransomware Trends 🔹 Monthly Awareness Register Here: register.gotowebinar.com/rt/…

Often, hospitals have to wait on a device manufacturer to first verify the patch to ensure patient safety for any change, and must then find a window to take the device out of service to perform a patch. Phil Englert, Health-ISAC VP of Medical Device Security, talks about backup plans for hospitals. health-isac.org/op-ed-when-a… #HealthISAC #MedDevSec #biomedicalengineering #biotech #healthtech

Join us at the Health-ISAC Fall Americas Summit to connect with industry peers, explore cross-functional security strategies, and participate in hands-on physical security sessions. Early Bird Pricing for Members ends October 31st. Register here: web.cvent.com/event/01dd4c64… For the first time, physical security members can attend the summit for a special discounted price of $99. 🔸 TUESDAY WORKSHOP/EXERCISE - From Threat Environment to Doorstep: Managing a Healthcare Executive Protection Program December 1, 2026 | 1:00 PM – 4:00 PM MT #HealthISAC #IncidentResponse

The Moving Target: 64% of Today's Riskiest Users Weren't There Last Year webinar by Living Security on Thursday, October 22nd at 1 PM ET. Registration Link: livingsecurity.com/human-ris…

CTEM 101: Moving from Spreadsheets to Continuous Risk Reduction Vulnerability backlogs pile up across spreadsheets faster than teams can clear them, and a CVSS score alone doesn't flag whether a finding threatens a system holding patient records or impacts care delivery. Bishop Fox breaks down the five-stage Continuous Threat Exposure Management (CTEM) cycle for continuous, prioritized risk reduction. Read the blog by @bishopfox, a Health-ISAC Community Services Champion, here: health-isac.org/ctem-101-mov…

Day 1 of the Health-ISAC European Summit is officially underway! 🚀 From the European Hobby Exercise and working groups to candid roundtables and the Welcome Reception—our member community brought incredible energy today. 📸 Check out Tuesday highlights below! 👇 #HealthISAC #Cybersecurity

This week, Health-ISAC®'s Hacking Healthcare® begins by laying out what to expect from the final stages of the long-overdue Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) final rule, including when it is actually likely to be published. Then, we break down what to make of the apparent silent removal of the HIPAA Security Rule entry from the Department of Health and Human Services’ (HHS) current Unified Agenda of Regulatory and Deregulatory Actions.  health-isac.org/health-isac-… #HHS #CIRCIA #HIPAA

Cybercriminals don't stop at the hospital doors—and cybersecurity doesn't end when you leave the office. A compromised personal account, home Wi-Fi network, or outdated device can lead to identity theft and create pathways into critical workplace systems, putting patient care at risk. Because today’s cyber threats reach far beyond the workplace, safeguarding healthcare begins with protecting our homes. Please download and share this Cyber Safe at Home infographic. It breaks down five essential, practical actions you and your loved ones can take immediately. Access more resources on Health-ISAC's website here: health-isac.org/cybersecurit… #CybersecurityAwarenessMonth #CyberSafeAtHome #HealthISAC #HealthcareCybersecurity #PatientSafety #InfoSec

🚨 MAJOR TAKEDOWN: Health-ISAC teamed up with @Microsoft DCU, Japan’s NPA, and global partners to disrupt a sprawling cybercrime marketplace responsible for over 1 BILLION malicious phishing messages since Jan 2026. The aim is to dismantle YAM Store, CoGUI, and Iron Man—phishing kits that provided criminals with ready-made tools to impersonate trusted brands and target 75,000+ organizations worldwide, including the health sector. Learn more: 🔗 health-isac.org/disrupting-t… #Cybersecurity #Phishing #HealthISAC #ThreatIntel #InfoSec

Join the Health-ISAC Threat Operations Center for Quarterly Threat Insights on Wednesday, October 21, at 12:00 PM ET. This quarterly webinar is open to members and other organizations in the health sector considering membership. Key Topics Covered: 🔹 Monthly Cyber Threat Level 🔹 The Q3 Health Sector Wake-Up Call: Inside the ShinyHunters Threat Wave 🔹 Securing Medical Devices and Reporting Metrics 🔹 Global Risk Outlook 🔹 El Nino Winter: How Record Pacific Temperatures Will Impact the Upcoming Winter 🔹 Legal and Regulatory Update 🔹 Global Ransomware Trends 🔹 Monthly Awareness Register Here: register.gotowebinar.com/rt/…

More than a dozen member organizations have been hit by social-engineering attacks over the past couple of months, Errol Weiss, chief security officer at Health-ISAC, told Cybersecurity Dive. The actors involved are using aggressive tactics to try to compromise targeted companies. health-isac.org/threat-group…

🚨 Attention Healthcare Cybersecurity & IT Leaders! Join us on Wednesday, November 4th, in Louisville, Kentucky, at @Humana for an immersive Health Sector Security Workshop & Tabletop Exercise. This high-impact session is designed to bring healthcare and cybersecurity professionals together to discuss emerging threat landscapes, exchange industry best practices, and walk through hands-on tabletop scenarios to test incident response readiness. Proudly Sponsored By: @AcalvioTech & 360 Privacy ➡️ Register today to reserve your spot! portal.h-isac.org/s/communit… #HealthcareCybersecurity #CyberSecurity #CyberRes