Agenda

This presentation will provide insight into the current cyber threat landscape affecting healthcare organizations, powered by Google’s leading visibility across a range of industries and regions. It will outline trends and operations by notable adversaries such as China and Russia, and the threat they pose to organizations, including critical enterprise deployments such as cloud platforms. It will also feature analysis of artificial intelligence (AI), and the challenges and opportunities its maturation poses to healthcare organizations. The presentation will conclude with practical guidance healthcare organizations can use to improve their cyber defenses and enterprise resiliency.

Healthcare is under siege. In 2024 alone, the U.S. Department of Health and Human Services reported 598 major breaches due to cyberattacks—and 2025 is on track to be just as severe. The rapid expansion of connected devices—spanning traditional IT, IoT, and IoMT—has dramatically increased the attack surface, leaving healthcare organizations vulnerable to ransomware, data exfiltration, and disruptions that can impact patient care and erode public trust.

DNS is a critical yet often overlooked security control to preemptively stop cyberattacks. But what are the considerations? What does success look like? Join this fireside chat with Krishna Tangirala from Temple University Health System and Tom Grimes from Infoblox to gain insights into best practices to secure healthcare systems.

We’ll explore:

• Preemptively Thwart Threat Actors: Detect and block ransomware, phishing, and C2 communications using DNS
• Identify Compromised Devices: Identify devices and users that are the source of malicious activity to reduce Mean Time to Response (MTTR).
• Block Data Exfiltration: Prevent sensitive information from being siphoned off by cybercriminals via DNS tunneling.
• Protect Brand and Reputation: Detect and take down lookalike domains to safeguard reputation.
• See and Secure Everything, Everywhere: Comprehensive DNS-layer security to protect every device—PCs, servers, printers, healthcare IoT/OT machines, mobile devices—regardless of hardware, OS, or location.

* Reference: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf

This session will provide an in-depth analysis of the current landscape of medical device exposures, leveraging insights from global scans and data trends. Attendees will explore the evolving attack surface in the healthcare sector, gain visibility into prevalent vulnerability trends, and uncover actionable strategies to enhance their cybersecurity posture. Designed for healthcare security executives, this session equips organizations to identify and prioritize exposure risks, ensuring patient safety and organizational resilience in the face of emerging threats.

Neurodiversity. What is it, what are the traits, and why are people with these traits attracted to the cybersecurity fields?

Rick Doten has managed technical cybersecurity staff for more than 25 years. He’s observed how we have special skills and abilities to perform the work we do; things like identifying patterns, spotting anomalies, learning new information quickly, troubleshooting, and being able to hyperfocus on a tasks until they’re resolved. Rick highlights how some traits help you naturally be good at some cybersecurity roles.

This has been a special interest of Rick’s for the last couple years, and he have taken dozens of hours of clinical training to become a certified clinical specialist in Autism and ADHD. He discusses topics such as executive functions, which are the cognitive skills that regulate emotions, impulse control, attention, time management and others, how to manage focus and distractions, and what motivates people.

He’ll talk about accommodating these executive functions, how to better gain motivation and focus, and even how people with neurodiversity can be better in interviews.

Rick provides techniques, tools, and even apps to help people with neurodiversity be more productive and successful. He lists apps and life hacks to help initiate tasks, manage time, working memory, and reduce procrastination.

Rick’s goal is to celebrate how it’s okay that we are different, because the cybersecurity community is a tribe of neurodivergent people who accept, support, and encourage each other.

The human element of security is one of the most difficult to predictand therefore to secure. Additionally, one of our biggest challenges is building a security awareness program for those who may have never been subjected to one by understanding the aversion to buying into the security program. We have great written resources and guidance from things like NIST 800-53, but it’s much more challenging to overcome the sociological elements of the human factor that prevent success of security-aware cultures, such as aversion to technology, fear, uncertainty, doubt, and simply non-malicious human error. As security professionals, we may lose sight of the fact that the professionals we support also have other jobs. So learning and focusing on security controls can be stressful and daunting.

Incorporating change management methodologies rooted in the psychology of human behavior, such as ADKAR (Awareness, Desire, Knowledge, Ability, and Reinforcement), can assist us as security professionals in facilitating more impactful cultural change through understanding why employees we support act and react the way they do and what other environmental or social factors may influence their decision-making and thought processes. It can also help us gain buy-in from our leadership, nudging from the bottom up, while leading by example from the top down.

The ADKAR change model has been proven to help individuals understand and accept change so companies can successfully innovate and become more efficient. As security professionals, we have to be conscious that security program costs contribute to the rising costs of healthcare, goods, and services. And we often have to find unique and strategic ways to ingrain ownership of security functions within other departments to augment our limited resources. Building a security ambassador program using these change facilitation concepts will help drive cost-effective ownership of the security program throughout the entire organization, creating a deeper business resilience, reducing risk, and truly leading by example—proving we are stronger together.

Join us as we dive into several of the top concerns in Healthcare. From deep web cards to BECs, ransomware, and more! Bring your questions for the panel.

Healthcare information security leadership faces a dynamic and intensifying threat landscape. This panel of experts will address critical challenges, including escalating ransomware attacks, stringent privacy regulations, and the complexities of managing insider threats. Discussions will explore strategies for mitigating risks associated with third-party vendors, addressing staffing shortages in cybersecurity, and finding downtime to recharge. Panelists will share insights on balancing patient safety with data protection, navigating compliance requirements, and building resilient security programs in an increasingly interconnected healthcare environment.

How to get remote healthcare workers back online from any outage in minutes. Healthcare is under assault from ransomware and other AI-enhanced threats. Healthcare IT leaders especially struggle to get large populations of remote workers back online in the wake of a cyberattack or other downtime event. A slow recovery of the remote workforce can expose your institution to crippling revenue losses, compliance penalties, and loss of productivity. How valuable would it be to empower your remote workers to get themselves back online after a cyberattack or other outage, without IT intervention, in a matter of minutes?

That kind of cyber resilience is exactly what leading healthcare institutions are deploying for their remote workers: the ability for any employee to restore their computer from a ransomware attack or other outage with push-button simplicity in a few minutes.

In this session, we will:

• Examine the range of cyberthreats confronting the healthcare industry, including new AI-enhanced ransomware attacks
• Provide a practical, real-time demonstration of how Acronis Cyber Protect enables One-Click Recovery for remote healthcare workers, enabling them to recover their own computers from any outage in a matter of minutes without IT intervention
• Examine how Acronis can provide additional cyber resilience across your institution with EDR, Active Protection against ransomware, HIPAA-compliant disaster recovery and more

Cybercriminals understand the life-and-death pressures on healthcare organizations to protect uptime and sensitive data, which makes the industry one of their favorite ransomware targets. Generative AI tools like ChatGPT are further improving the ingenuity and scale of these attacks. The probability of a successful ransomware or other cyberattack against your institution is only going up. Get ahead of this threat today by strengthening the cyber resilience of your remote workforce.

Join this session to learn how you can enable remote healthcare workers to quickly, reliably and simply restore their computers in minutes after any outage.