CISO Brief, March 2026: Geopolitical Tensions and Cyber Vigilance
Operational resilience is being tested at the seams. As we head into March, we continue to see the risk environment being defined through AI adoption pressures, emergency patching realities, and nation-state–aligned actors targeting critical infrastructure. Under the backdrop of increased geopolitical tensions with Iran, this month’s brief will discuss improving resilience through cyber vigilance and […]
AI Governance: The Only Realistic Solution to Shadow AI
You’ve likely heard it from your executives, in the forums, and even from television ads. With AI products like ChatGPT and Claude advancing in leaps and bounds, people in all fields should take advantage of AI’s productivity-boosting capabilities. And many in the healthcare industry are. Here are two examples of what well-meaning clinicians did on […]
Why Healthcare Third-Party Risk Management (TPRM) Must Change
Healthcare organizations are on the front line of protecting some of the most sensitive data in the world. Patients’ health information, treatment records, insurance details, and identifiers must be safeguarded at all times. But as we have seen over the past year, that responsibility does not stop at your firewall. It extends outward into a […]
February 2026 CISO Brief: Privacy Deadlines, Clinical Impact, and Persistent Attack Paths
As healthcare organizations move closer to the February 16, 2026, compliance deadline for the updated 42 CFR Part 2 requirements, they are doing so in an environment defined by persistent ransomware activity, slow remediation of known exploited vulnerabilities, expanding clinical attack surfaces, and growing use of unmanaged technologies. This month’s Brief focuses on how these […]
Preparation Changes Outcomes In Ransomware Attacks
In our latest webinar, we conducted a Red Team/Blue Team post-mortem on a real ransomware attack that occurred last year at Frederick Health Medical Group in Maryland. The system has more than 4,000 clinicians and staff across 25 locations. The Frederick Health attack exposed more than 900,000 patient records and hampered operations for a number […]
Healthcare Data Privacy: What Industry Signals Reveal About Deeper Cybersecurity Risk
During Data Privacy Week, healthcare leaders have the chance to go beyond awareness messaging. They can closely examine how patient data is accessed, shared, and protected. Healthcare data privacy often focuses on compliance through policies, training, and regulations. However, the real risk comes from how data flows across systems, vendors, and people in the interconnected […]
2026 Horizon Report: The New Reality of Healthcare Cybersecurity
Healthcare cybersecurity has entered a new phase. The era of isolated, headline-grabbing mega-breaches is giving way to something more demanding and more dangerous: constant disruption. In 2025, healthcare organizations experienced significantly more cyber incidents than the year before, yet those breaches affected fewer patient records overall. On the surface, that might sound like progress. In […]
CISO Brief: 7 Healthcare Cybersecurity Predictions for 2026
In 2026, healthcare cybersecurity is shifting from reacting to crises toward building resilience that endures. Innovation, regulation, and collaboration are accelerating, and healthcare leaders across the sector are meeting this moment with renewed clarity and purpose. These seven healthcare cybersecurity predictions reflect how our industry is defending smarter, working together more intentionally, and rethinking what […]
Why Healthcare Vulnerability Threat Management Breaks Down and How to Fix It
Fortified has a new webinar that explores why Vulnerability Threat Management (VTM) in the healthcare space is too important to be conducted haphazardly. It’s critical to find a tool that lets you prioritize vulnerabilities, spot trends instantly, and quickly filter by vulnerability type and severity. The Reality of Vulnerability Overload Without such a tool, managing […]
The Reality of Incident Response Readiness in Healthcare
Incident response should never be reactive. Incident Response readiness must be proactive and measurable, driven by a real commitment to continuous improvement. As management guru Peter Drucker famously said, “If you can measure it, you can improve it.” Yet at many healthcare organizations, Incident Response is static and disorganized: plans that have never been adequately […]