Loading story…
The Health Sector Coordinating Council (HSCC) has announced the upcoming release of a series of guidance documents aimed at helping healthcare organizations address the cybersecurity risks associated with artificial intelligence deployments. These materials will focus on five critical risk areas, including education and enablement, cyber operations and defense, and best practices for clinical, administrative, and financial applications of AI in the health sector. The guidance is intended to improve awareness, preparedness, and response capabilities as healthcare entities increasingly adopt AI technologies.
The documents, previewed in November 2025, are scheduled for release beginning in the first quarter of 2026 and will provide playbooks and white papers to assist organizations in understanding and mitigating AI-related cyber threats. The initiative underscores the growing complexity of AI risk management in healthcare and the need for sector-specific strategies to ensure safe and secure AI integration across diverse operational domains.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
On 2026-04-28, Health-ISAC published 'Policies and Safeguards for the Safe Use of AI,' a white paper from its Artificial Intelligence Working Group outlining AI governance frameworks, acceptable-use policies, and safeguards for generative AI and large language models. The guidance includes restrictions on exposing PHI, PII, and confidential data to public AI tools, plus recommendations on oversight, vendor due diligence, red teaming, SBOMs, and shadow AI detection.
On 2026-04-15, the Health Sector Coordinating Council Cybersecurity Working Group released the 'Health Industry Third-Party AI Risk and Supply Chain Transparency Guide' to help healthcare organizations manage cybersecurity risks from AI-driven supply chains. The HSCC AI Task Group also published an AI Cyber Glossary to standardize healthcare-specific AI terminology across stakeholders.
HSCC said it will begin issuing the healthcare AI cybersecurity guidance materials in the first quarter of 2026 and continue releasing them throughout the year. The documents are intended to address risks across clinical, administrative, and financial healthcare applications.
On November 12, 2025, HSCC previewed a forthcoming series of best-practices and white-paper documents to help healthcare organizations manage cybersecurity risks tied to AI deployments. The planned guidance covers five areas: education and enablement, cyber operations and defense, governance, secure-by-design principles, and third-party AI/vendor risk.
The Health Sector Coordinating Council's cybersecurity working group launched an AI task group in October 2024 to develop guidance on managing AI and machine learning cyber risks in healthcare. The group includes leaders from 115 healthcare organizations.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
health-isac.org
Open sourcehipaajournal.com
Open sourcehealthsectorcouncil.org
Open sourcebankinfosecurity.com
Open sourcegovinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Artificial intelligence is increasingly influencing the healthcare sector's cyber threat landscape, with both attackers and defenders leveraging AI tools. Experts warn that as larger healthcare organizations strengthen their defenses, cybercriminals are shifting focus to smaller medical practices, insurers, and third-party vendors, which often lack the resources and sophistication to counter advanced AI-driven attacks. The complexity of the healthcare ecosystem, with frequent data exchanges among various entities, further amplifies the risk of breaches, particularly among less mature organizations. In response to the surge in healthcare cyberattacks and data breaches, the US Department of Health and Human Services (HHS) proposed updates to the HIPAA Security Rule aimed at bolstering cybersecurity requirements. However, these proposed changes have faced significant pushback from industry groups, who argue that the new rules impose unrealistic financial and operational burdens, especially given the short implementation timelines. A coalition of over 100 healthcare organizations has called for the immediate withdrawal of the proposed rule, highlighting the tension between regulatory efforts to address AI-driven threats and the industry's capacity to comply.
Jun 29, 2026
Recent developments highlight the growing security risks associated with the integration of artificial intelligence (AI) into enterprise and operational technology (OT) environments. The U.S. Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with several international partners, has released new guidance outlining key principles for the secure deployment of AI in OT systems, emphasizing the need for critical infrastructure operators to address unique risks such as process model drift and safety-process bypasses. This guidance is expected to influence regulatory approaches as organizations rapidly adopt AI technologies, often without sufficient security rigor. Concurrently, research from NVIDIA and Lakera AI has introduced a comprehensive framework for evaluating the safety and security of agentic AI systems, which autonomously plan and make decisions, revealing new classes of risks including prompt injection, memory poisoning, and tool misuse that can lead to harmful outcomes even when underlying models function as intended. Industry leaders and CISOs are increasingly recognizing the necessity of offensive security strategies and holistic approaches to address the evolving threat landscape, particularly as AI-driven attacks become more sophisticated. The energy sector, for example, faces heightened threats due to geopolitical tensions and the proliferation of AI-enabled attack tools, prompting calls for multilayered security concepts and proactive measures. As enterprises and critical infrastructure operators accelerate AI adoption, the convergence of new technical frameworks, regulatory guidance, and evolving security practices underscores the urgent need for robust, adaptive defenses against emerging AI-related threats.
Jun 29, 2026
Security leaders in both the financial and enterprise sectors are prioritizing the secure adoption and management of artificial intelligence (AI) technologies, as well as addressing the associated risks and operational challenges. CISOs are focusing on building resilience, integrating AI into security operations, and ensuring that AI-driven tools are used safely and effectively within their organizations. Key concerns include the emergence of new attack surfaces due to AI, the need for robust governance and visibility over AI tool usage, and the importance of balancing productivity with intellectual property protection. In the financial sector, companies like Advisor360 are implementing automation to control the proliferation of unsanctioned AI tools, known as "shadow AI," to maintain compliance and security in a highly regulated environment. Security leaders are also preparing for future threats such as quantum computing and the increasing sophistication of AI-driven attacks, including automated social engineering campaigns. The emphasis is on proactive strategies—such as embedding security controls early in AI adoption, standardizing enterprise-grade AI solutions, and educating employees on safe AI usage—to prevent burnout and ensure long-term business continuity. These efforts reflect a broader industry trend toward leveraging AI for both defensive and operational improvements, while remaining vigilant about the unique risks AI introduces to cybersecurity and regulatory compliance.
Jun 29, 2026