HIMSS25 Urges Urgent Action: Reinforce Healthcare Cybersecurity Now

By Frank Jones, CISSP   Published: 03/05/25   Updated: 10/19/26   3 min read

Summary

Healthcare stays a top target

Healthcare is on the front line of the fight against cyberattacks. Hospitals hold huge amounts of patient data and run critical services. Criminals know it. Experts at the HIMSS25 conference said attacks on healthcare facilities have reached worrying levels of frequency and sophistication and call for an immediate, strong response.

What HIMSS25 speakers asked for

The HIMSS25 conference stressed the urgent need for stronger security strategies across healthcare. Speakers framed it as something to do now, not advice to consider. They said the industry has been slow to adopt modern security protocols. That leaves serious gaps. In the worst case, those gaps could endanger patient lives.

Three recommendations

Security policies built for healthcare

Experts want security built into how healthcare runs. Policies need to be thorough and written for the specifics of healthcare operations. Built into the core of an institution, they become its first line of defense against intrusions.

Regular Training and Awareness

Healthcare staff and IT teams need ongoing training to stay ahead of threats. Attacks keep changing. Staff have to get ahead of them, not just react. As HIMSS25 points out, healthcare providers must make real investments in education and awareness.

Investment in Advanced Technology Solutions

HIMSS25 also stressed investment in current technology. Advanced security tools, including artificial intelligence and machine learning algorithms, can detect and stop threats before they grow. But these tools cost a lot of money, and many healthcare providers struggle to pay for them.

Challenges in Implementation

The need is clear, but healthcare institutions face real obstacles. The two biggest are limited resources and a lack of specialized expertise. Many facilities run on tight budgets, which makes paying for full security programs brutal. There is also a shortage of security professionals who understand healthcare-specific threats, and that slows progress.

A joint effort across healthcare

The need to act is plain. HIMSS25 made the case for healthcare organizations, government agencies and private industry to work together on stronger defenses. The stakes are high. The time to act is now. As healthcare runs more of its work online, strong security is a requirement.

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Monday’s brief: ConnectWise Cloud Backup comes back, then Aruba Wi-Fi fixes, a Brotli update and Nextcloud’s KEV deadline

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.