The Attack Surface of the Healthcare Industry
summary
Healthcare organizations expose surprisingly large public fleets — UnitedHealth ~108,000 and HCA ~104,000 internet-connected assets, median hospital networks ~2,000 — and inventories change 1–5% monthly. Breaches come mostly from phishing/ email (about 54%) and remote access/RDP (about 29%); ransomware and fund-transfer attacks spike recovery costs. Simple mitigations matter: multi-factor authentication cuts breaches, Microsoft 365 users show ~3x higher BEC risk versus Google Workspace, and WordPress plugin vulnerabilities remain a common foothold. TLS 1.3 rollouts and certificate hygiene (HCA had ~97 expired certs) reduce risk.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 7:35Breaches
- 13:52Equifax
- 16:09Data
- 17:54Margin of Error
- 18:06Total Assets
- 19:45Domain Names
- 21:03Cloud
- 22:51CDNs
- 26:59Hosting Systems
- 28:24DNS Admin Mistakes
- 30:14WordPress
- 35:02Where it comes down to
- 38:29Cloud vs onpremise
related talks
28mHealthcare and IoT cybersecurity in the new age
40mPublic Health Cyber War Games: How Hackers are Exploiting Healthcare
40mOne Step Ahead: Keeping Security at the Forefront
28mFrom a Hospital into the Realm of Hades
58mMedical Device Security
22mSecurity and Risks
27mProtecting Businesses from Breaches: Simple Lessons Still Unlearned
51mSecuring Medical Devices—When Cyber Really Is a Life and Death Issue