FBI reminds of potentially malicious activity by Iranian cyber actors | AHA News - American Hospital Association

Mar 03, 2026 - 04:00 PM The FBI is reminding critical infrastructure organizations to implement mitigations from a June 2025 fact sheet on potential actions by Iranian-affiliated cyber actors who may target U.S. devices and networks due to geopolitical tensions. The fact sheet explains how cyber actors often exploit targets with unpatched or outdated software with known common vulnerabilities or passwords.   “In the context of the ongoing conflict with Iran, it is particularly important to ensure that we are implementing cybersecurity measures to defend against the known tactics used by Iranian state-sponsored hackers or pro-Iranian hackers acting independently,” said John Riggi, AHA national advisor for cybersecurity and risk. “Besides seeking to exploit common vulnerabilities and default passwords, they also target internet-connected operational technology and industrial control systems. These systems may be present in hospitals in the form of HVAC, water, life-safety and building automation systems. It is recommended that cyber teams closely coordinate with facilities and building engineers to identify internet-facing OT and ICS systems, assess the need for internet connectivity and ensure they are patched and secure.”   For more information on this or other cyber and risk issues, contact Riggi at jriggi@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity. Cybersecurity HEADLINE CISA issues revised virtual town hall schedule for input on proposed cyber incident reporting The Cybersecurity and Infrastructure Security Agency May 26 announced a revised schedule for its series of virtual town hall meetings for public input on… HEADLINE Microsoft disrupts Fox Tempest malware attacking health care, other sectors  Microsoft announced May 19 that it disrupted operations of Fox Tempest, a threat actor operating as a malware-signing-as-a-service used by cybercriminals to… HEADLINE Blog highlights top 3 cyber risks for health care in 2026 An AHA Cyber & Risk Intel blog by John Riggi, AHA national advisor for cybersecurity and risk, explores what health care leaders need to consider to reduce… AHA CYBER INTEL Health Care Cybersecurity Considerations for 2026: This Year’s Top 3 Cyber Risks Cyberattacks against hospitals, health systems and mission-critical health care third-party providers have surged in recent years. While these attacks often… HEADLINE Microsoft warns of sophisticated phishing campaign heavily targeting health care organizations Microsoft Threat Intelligence is warning of a large scale, multistage phishing campaign that disproportionately targeted the health care sector, sending “code… HEADLINE CISA announces initiative to bolster critical infrastructure against nation-state cyberattacks The Cybersecurity and Infrastructure Security Agency has launched a new initiative for critical infrastructure to defend against cyberattacks through proactive…