HC3 Products

Threat Briefs

October 17, 2024 – Living Off the Land Attacks, opens in a new tab [PDF, 1.81 MB]
September 19, 2024 – Healthcare Technology Security, opens in a new tab [PDF, 3.05 MB]
August 15, 2024 – Privileged User Compromise, opens in a new tab [PDF, 2.55 MB]
June 13, 2024 – Cloud Security for the HPH, opens in a new tab [PDF, 1.86 MB]
May 16, 2024 – Business Email Compromise (BEC) & Healthcare, opens in a new tab [PDF, 1.59 MB]
April 11, 2024 – Social Engineering Targeting the HPH Sector, opens in a new tab [PDF, 2.26 MB]
February 15, 2024 – Russian Threat Actors Targeting the HPH Sector, opens in a new tab [PDF, 5.71 MB]*
January 18, 2024 - Ransomware & Healthcare, opens in a new tab [PDF, 2.64 MB]*
December 7, 2023 - Open-Source Software Risks in the Health Sector, opens in a new tab [PDF, 2.72 MB]*
November 16, 2023 - Emotet: The Enduring and Persistent Threat to the HPH, opens in a new tab [PDF, 5.22 MB]*
October 12, 2023 - Cybersecurity Incident Response Plans, opens in a new tab [PDF, 2.89 MB]
September 21, 2023 - DPRK and Chinese Cyber Crime Threats to the U.S. HPH, opens in a new tab [PDF, 5.73 MB]*
August 10, 2023 - Multi-Factor Authentication & Smishing, opens in a new tab [PDF, 2.15 MB]
July 13, 2023 - AI, Cybersecurity and the Health Sector, opens in a new tab [PDF, 6.82 MB]*
June 8, 2023 - Types of Threat Actors That Threaten Healthcare, opens in a new tab [PDF, 3.00 MB]*
April 6, 2023 - EMRs A Top Target for Cyber Threat Actors, opens in a new tab [PDF, 3.08 MB]*
March 9, 2023 - Data Exfiltration Trends in Healthcare, opens in a new tab [PDF, 2.65 MB]
February 9, 2023 - 2022 Retrospective & 2023 Look Ahead, opens in a new tab [PDF, 8.31 MB]*
January 12, 2023 - Royal & BlackCat Ransomware, opens in a new tab [PDF, 3.83 MB]*
December 8, 2022 - Automation and Hacking in Healthcare, opens in a new tab [PDF, 2.02 MB]*
November 3, 2022 - Iranian Threat Actors and Healthcare, opens in a new tab [PDF, 3.09 MB]
October 6, 2022 - Abuse of Legitimate Security Tools and the HPH, opens in a new tab [PDF, 4.40 MB]
September 22, 2022 - APT41 and Recent Activity, opens in a new tab [PDF, 2.13 MB]
September 8, 2022 - Emerging Technology and Security for the HPH, opens in a new tab [PDF, 2.23 MB]
August 18, 2022 - The Impact of Social Engineering On Healthcare, opens in a new tab [PDF, 2.88 MB]
August 4, 2022 - The OWASP Top 10, opens in a new tab [PDF, 1.35 MB]
July 21, 2022 - Web Application Attacks in Healthcare, opens in a new tab [PDF, 2.01 MB]
July 7, 2022 - Quantum Cryptography and the Health Sector, opens in a new tab [PDF, 2.30 MB]
June 16, 2022 - Strengthening Cyber Posture in Healthcare, opens in a new tab [PDF, 1.73 MB]
June 2, 2022 - The Return of Emotet, opens in a new tab [PDF, 3.65 MB]
May 19, 2022 - Major Cyber Orgs of Russian Intelligence Services, opens in a new tab [PDF, 3.34 MB]
May 5, 2022 - Ransomware Trends in Q1 2022, opens in a new tab [PDF, 2.11 MB]
April 21, 2022 - Insider Threats in Healthcare, opens in a new tab [PDF, 2.15 MB]
April 7, 2022 - Lapsus$ and the Health Sector, opens in a new tab [PDF, 2.08 MB]*
March 17, 2022 - An Analysis of the Russia-Ukraine Conflict, opens in a new tab [PDF, 3.34 MB]*
March 3, 2022 - Health Sector Cyber Security: 2021 Retrospective and 2022 Look Ahead, opens in a new tab [PDF, 5.48 MB]*
February 17, 2022 - EMR in Healthcare, opens in a new tab [PDF, 2.92 MB]*
February 3, 2022 - Lessons Learned from the HSE Attack, opens in a new tab [PDF, 3.78 MB]
January 20, 2022 - Log4j Vulnerabilities and the Health Sector, opens in a new tab [PDF, 2.71 MB]

Sector Alerts

Other Products

Archive of Resources

*This content is in the process of Section 508 review. If you need immediate assistance accessing this content, please submit a request to HC3@hhs.gov, opens in a new window. Content will be updated pending the outcome of the Section 508 review.

HC3 Products

Threat Briefs

Highlights relevant cybersecurity topics and raises the HPH sector's situational awareness of current cyber threats, threat actors, best practices, and mitigation tactics.

Sector Alerts

Provides high-level, situational background information and context for technical and executive audiences. Designed to assist the sector with defense of large scale and high level vulnerabilities.

Other Products

Includes quick information Analyst Notes, Alerts, and in-depth White Papers, which increase comprehensive cybersecurity situational awareness and provide recommendations to a wide audience.

Archive of Resources

An archive of resources.

Subscribe to Email Updates