Why Incident Response Plans Fail Under Pressure webinar with Reflex Security on Thursday, November 5th at 12 PM ET! Why do well-documented incident response plans fall apart when they're needed most? Are your teams truly prepared to make critical decisions when the facts are incomplete, leadership is demanding answers, and every minute counts? ​Join this thought-provoking session to explore why even mature security programs struggle during real incidents and what it takes to build a response capability that performs under pressure. #reflexsecurity #howareyourreflexes #incidentreadiness Register Here: luma.com/zrmbogmf

Exclusive Monthly Threat Briefings for Health-ISAC Members! Stay ahead of the latest threats with these power-packed, insider-only briefings led by the Health-ISAC Threat Operations Center team. Taking place on the last Tuesday, Wednesday, and Friday of this month, you get to choose between: ➡️ Americas MTB – Tuesday, October 27th at 12 PM ET ➡️ European MTB - Wednesday, October 28th at 3:00 PM CET ➡️ APAC MTB - Friday, October 30th at 11:00 AM GMT+8 Presentation Topics: 🔹 Silent Ransom Fallout Shifts Russian Actor Focus to PHI 🔹 ClickFix to C2: Emerging Loader Threats 🔹 Your SBOM Won't Catch a Worm 🔹 El Nino Winter: How Record Pacific Temperatures Will Impact the Upcoming Winter 🔹 Legal & Regulatory Update 🔹 Monthly Awareness 🔹 Health-ISAC Product Spotlight Members will receive instructions on how to register via email.

Join the Health-ISAC Threat Operations Center for Quarterly Threat Insights on Wednesday, October 21, at 12:00 PM ET. This quarterly webinar is open to members and other organizations in the health sector considering membership. Key Topics Covered: 🔹 Monthly Cyber Threat Level 🔹 The Q3 Health Sector Wake-Up Call: Inside the ShinyHunters Threat Wave 🔹 Securing Medical Devices and Reporting Metrics 🔹 Global Risk Outlook 🔹 El Nino Winter: How Record Pacific Temperatures Will Impact the Upcoming Winter 🔹 Legal and Regulatory Update 🔹 Global Ransomware Trends 🔹 Monthly Awareness Register Here: register.gotowebinar.com/rt/…

Often, hospitals have to wait on a device manufacturer to first verify the patch to ensure patient safety for any change, and must then find a window to take the device out of service to perform a patch. Phil Englert, Health-ISAC VP of Medical Device Security, talks about backup plans for hospitals. health-isac.org/op-ed-when-a… #HealthISAC #MedDevSec #biomedicalengineering #biotech #healthtech

Join us at the Health-ISAC Fall Americas Summit to connect with industry peers, explore cross-functional security strategies, and participate in hands-on physical security sessions. Early Bird Pricing for Members ends October 31st. Register here: web.cvent.com/event/01dd4c64… For the first time, physical security members can attend the summit for a special discounted price of $99. 🔸 TUESDAY WORKSHOP/EXERCISE - From Threat Environment to Doorstep: Managing a Healthcare Executive Protection Program December 1, 2026 | 1:00 PM – 4:00 PM MT #HealthISAC #IncidentResponse

The Moving Target: 64% of Today's Riskiest Users Weren't There Last Year webinar by Living Security on Thursday, October 22nd at 1 PM ET. Registration Link: livingsecurity.com/human-ris…

CTEM 101: Moving from Spreadsheets to Continuous Risk Reduction Vulnerability backlogs pile up across spreadsheets faster than teams can clear them, and a CVSS score alone doesn't flag whether a finding threatens a system holding patient records or impacts care delivery. Bishop Fox breaks down the five-stage Continuous Threat Exposure Management (CTEM) cycle for continuous, prioritized risk reduction. Read the blog by @bishopfox, a Health-ISAC Community Services Champion, here: health-isac.org/ctem-101-mov…

Day 1 of the Health-ISAC European Summit is officially underway! 🚀 From the European Hobby Exercise and working groups to candid roundtables and the Welcome Reception—our member community brought incredible energy today. 📸 Check out Tuesday highlights below! 👇 #HealthISAC #Cybersecurity

This week, Health-ISAC®'s Hacking Healthcare® begins by laying out what to expect from the final stages of the long-overdue Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) final rule, including when it is actually likely to be published. Then, we break down what to make of the apparent silent removal of the HIPAA Security Rule entry from the Department of Health and Human Services’ (HHS) current Unified Agenda of Regulatory and Deregulatory Actions.  health-isac.org/health-isac-… #HHS #CIRCIA #HIPAA

That suspicious message may be just the tip of the iceberg. Microsoft and @HealthISAC are disrupting YAM Store, CoGUI, and Iron Man, cybercrime services that enabled 1B+ malicious messages targeting 75K+ organizations worldwide. Read more: msft.it/6019asX75

Cybercriminals don't stop at the hospital doors—and cybersecurity doesn't end when you leave the office. A compromised personal account, home Wi-Fi network, or outdated device can lead to identity theft and create pathways into critical workplace systems, putting patient care at risk. Because today’s cyber threats reach far beyond the workplace, safeguarding healthcare begins with protecting our homes. Please download and share this Cyber Safe at Home infographic. It breaks down five essential, practical actions you and your loved ones can take immediately. Access more resources on Health-ISAC's website here: health-isac.org/cybersecurit… #CybersecurityAwarenessMonth #CyberSafeAtHome #HealthISAC #HealthcareCybersecurity #PatientSafety #InfoSec

🚨 MAJOR TAKEDOWN: Health-ISAC teamed up with @Microsoft DCU, Japan’s NPA, and global partners to disrupt a sprawling cybercrime marketplace responsible for over 1 BILLION malicious phishing messages since Jan 2026. The aim is to dismantle YAM Store, CoGUI, and Iron Man—phishing kits that provided criminals with ready-made tools to impersonate trusted brands and target 75,000+ organizations worldwide, including the health sector. Learn more: 🔗 health-isac.org/disrupting-t… #Cybersecurity #Phishing #HealthISAC #ThreatIntel #InfoSec

Join the Health-ISAC Threat Operations Center for Quarterly Threat Insights on Wednesday, October 21, at 12:00 PM ET. This quarterly webinar is open to members and other organizations in the health sector considering membership. Key Topics Covered: 🔹 Monthly Cyber Threat Level 🔹 The Q3 Health Sector Wake-Up Call: Inside the ShinyHunters Threat Wave 🔹 Securing Medical Devices and Reporting Metrics 🔹 Global Risk Outlook 🔹 El Nino Winter: How Record Pacific Temperatures Will Impact the Upcoming Winter 🔹 Legal and Regulatory Update 🔹 Global Ransomware Trends 🔹 Monthly Awareness Register Here: register.gotowebinar.com/rt/…

More than a dozen member organizations have been hit by social-engineering attacks over the past couple of months, Errol Weiss, chief security officer at Health-ISAC, told Cybersecurity Dive. The actors involved are using aggressive tactics to try to compromise targeted companies. health-isac.org/threat-group…

🚨 Attention Healthcare Cybersecurity & IT Leaders! Join us on Wednesday, November 4th, in Louisville, Kentucky, at @Humana for an immersive Health Sector Security Workshop & Tabletop Exercise. This high-impact session is designed to bring healthcare and cybersecurity professionals together to discuss emerging threat landscapes, exchange industry best practices, and walk through hands-on tabletop scenarios to test incident response readiness. Proudly Sponsored By: @AcalvioTech & 360 Privacy ➡️ Register today to reserve your spot! portal.h-isac.org/s/communit… #HealthcareCybersecurity #CyberSecurity #CyberRes

🏥 This week at CyberCon 2026, Health-ISAC's Simon Cowley will lead a session exploring the critical intersection where healthcare security directly impacts clinical care and human lives. lnkd.in/gJrN-Vcx 📌 Session Title: When patient safety meets incident response - medical device cyber incidents 🗓️ Date: Thursday, October 15 at 1:30 PM #CyberCon2026 #HealthISAC #HealthcareSecurity #MedicalDeviceSecurity #CyberSecurity #APAC #IncidentResponse #PatientSafety

Healthcare Security at Machine Speed: $17M Ransomware & AI Adversaries webinar with @bishopfox on Tuesday, November 10th at 3 PM ET! This session connects healthcare security strategy to these operational decisions: how to evaluate response assumptions, assign ownership across departments, and prioritize investments that support continuity of care. Register Here: bishopfox.com/resources/heal…

Enjoy some photos from last week's Workshop and Exercise in Seattle, Washington. During the tabletop exercise, attendees identified organizational strengths as well as areas for improvement. As one attendee commented, "I really enjoyed the exercise and was happy that I could participate in discussions." Hosted at @fredhutch and sponsored by Doppel and @Netskope. Upcoming workshop locations include: 🔹 October 22 - St Paul, Minnesota, US 🔹November 3 - Bangalore, India 🔹November 4 - Louisville, Kentucky, US 🔹November 5 - Hyderabad, India Register for a regional workshop here: portal.h-isac.org/s/events#/… #HealthIT #CTI #IncidentResponse #InformationSharing

Registration is officially open for the 2027 Health-ISAC APAC Summit! Get ready to connect, collaborate, and elevate your cybersecurity strategy on Australia’s stunning Gold Coast. This year's theme, "Living Sanctuary," brings together regional and global leaders in health cybersecurity to tackle pressing threats, share actionable intelligence, and strengthen the resilience of the global health sector. Dates: March 15th – March 19th, 2027 Location: Gold Coast, Australia Register Today cvent.me/v28xmy Don't wait—secure your US $99 rate before December 11th and claim your spot on the Gold Coast.

Read about how the different critical infrastructure sectors have boosted security over twenty-five years, including Errol Weiss discussing health sector changes. health-isac.org/25-years-aft… #criticalinfrastructure #informationsharing #threatintelligence