Pro-Russian Hacktivist DDoS Campaign Targeting Healthcare
TLP WHITE Health-ISAC Threat Bulletin - February 6, 2023 On January 27, pro-Russian hacktivists operating on cybercriminal forums threatened to demolish attack the networks of medical institutions in the United States, United Kingdom, and abroad. The threats were purported to be a...
Notorious Cybercrime Botnet Disrupted
From Microsoft's blog: https://blogs.microsoft.com/on-the-issues/2022/04/13/zloader-botnet-disrupted-malware-ukraine/ Notorious cybercrime gang’s botnet disrupted Apr 13, 2022 | Amy Hogan-Burney - General Manager, Digital Crimes Unit Today we’re announcing that Microsoft’s Digital...
Executive Summary to Health-ISAC’s Current and Emerging Healthcare Cyber Threat Landscape
This is the Executive Summary to Health-ISAC's First Annual Current and Emerging Healthcare Cyber Threat Landscape Executive Summary 2021 posed a challenging year for healthcare cybersecurity with the continuing COVID-19 pandemic at the forefront of everyone’s minds. In this first annual...
Health-ISAC and HC3 Joint Bulletin: Potential Malicious Cyber Attacks from Russia
Credible Threats to US Critical Infrastructure Sectors Threat Bulletins -- TLP:WHITE -- Alert ID : b4e3eb9d -- Mar 22, 2022, 09:17 AM Pdf version: [pdf-embedder...
Log4j Vulnerability Affects Multiple Apache and Legacy Services
Log4j Vulnerability Affects Multiple Apache and Legacy Services Exploit Code Publicly Released Vulnerability Bulletin Alert # ea51506b PDF Version Proof-of-concept exploit code for a critical zero-day vulnerability, designated CVE-2021-44228, in the Apache Log4j Java-based logging library has...
FBI, Health-ISAC Discuss Latest Ransomware Attacks on Hospitals
Link to this podcast and other resources on the American Hospital Association website: https://www.aha.org/advancing-health-podcast/2021-11-22-fbi-h-isac-discuss-latest-ransomware-attacks-hospitals PUBLIC / PRIVATE INFORMATION SHARING In this podcast John Riggi, AHA’s senior advisor...
Cyber Threat Actors Leveraging Right-to-Left Override (RTLO) in Recent Attacks
TLP WHITE: Threat Bulletins Aug 09, 2021, 12:57 PM TTPs: Cyber security researchers are aware of malicious actors leveraging masquerade and obfuscation techniques to deliver harmful files via email to healthcare organizations. The threat actors are using a legitimate feature of Right-to-Left...
Armis Discovers 9 Vulnerabilities in Infrastructure Used by 80% of Major Hospitals in North America
H-ISAC Vulnerability Bulletins -- Aug 02, 2021, 10:13 AM Armis researchers have identified nine critical vulnerabilities in one of the leading providers for pneumatic tube systems (PTS) in North America, the Translogic PTS system developed by Swisslog Healthcare. This Translogic PTS system is...
Microsoft Guidance for Mitigating PetitPotam NTLM Relay Attacks
MS Alert KB5005413 Microsoft has publicly released an alert, KB5005413: Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS), to address a NTLM Relay Attack, designated PetitPotam. The alert is supplied with active mitigation strategies and recommendations for...
Dell Boot Recovery Remote Code Execution (RCE)
TLP White Dell Boot Recovery Remote Code Execution (RCE) Vulnerability Impacts Millions of Devices Finished Intelligence Reports Jun 24, 2021, 09:19 AM Eclypsium security researchers have discovered a vulnerability in the Dell BIOSConnect feature available on at least 180 models of consumer and...