Join the MHA Forum: Mastering Cybersecurity Strategy and Attack Response
Summary
- Registration is open for the Michigan Health & Hospital Association (MHA) virtual member forum, Cybersecurity and Cyberattack Response.
- The forum runs from 9:30 to 11 a.m. on May 9, 2025.
- Leaders from six healthcare systems that have led cyberattack incident response will share lessons learned.
- The members-only forum is free.
The Michigan Health & Hospital Association is hosting a free virtual forum for its members on handling cyberattacks. It is organized with the MHA’s statewide Health Information Technology Strategy Committee, and registration opened March 21, 2025.
Why Michigan Hospitals Are Focusing on Cyberattacks
Hospitals are a favorite target. They hold valuable patient data, and they cannot afford downtime, which makes them more likely to pay. Ransomware attacks on health systems have disrupted care across the country in recent years. The MHA says Michigan hospitals are working with policy leaders and stakeholders to secure resources and dismantle criminal groups that disrupt care.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Learning from Real Incidents
The forum’s draw is first-hand experience. Leaders from six healthcare systems that have led cyberattack incident response will talk through what they learned, from the first alert to the day systems came back.
Forum Date and Format
It’s a 90-minute webinar, from 9:30 to 11 a.m. on May 9. Only MHA members can attend, and there is no fee.
Topics on the Agenda
Speakers will cover:
- Detection and containment: How teams spotted attacks and stopped them from spreading.
- Eradication and recovery: Removing attackers and bringing systems back.
- Crisis communication: Keeping staff and patients informed while systems are down.
Who Should Attend
The MHA wants senior leaders from across the hospital in the room. Its invitation lists chief executive officers and chief information officers first, followed by security chiefs, finance chiefs, medical officers and nursing officers. Data leaders and communications directors are invited as well.
That mix reflects how a cyberattack plays out in a hospital. IT can’t handle it alone.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
How to Register
Registration is open to MHA members now. Questions about membership or registration go to Brenda Carr at the MHA.
For hospital leaders who have not yet faced a major attack, hearing from peers who have is one of the cheapest ways to prepare.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.