A Closer Look at Healthcare Cybersecurity Trends: New Research Shared at Health-ISAC Fall Americas Summit

Censys analyzed internet-facing assets across a dozen U.S. healthcare organizations and found systemic cyber hygiene failures — widespread service exposures (RDP/SMB/TELNET/SNMP), expired/revoked certificates, misconfigurations, unpatched and end-of-life software, and multiple instances of critical CVEs (including a KEV-listed Jenkins flaw and numerous Ivanti Connect exposures). The research also notes continued MOVEit exposures tied to CL0P exploitation, over 100 publicly exposed medical devices (largely from a single vendor), and recommends improved asset inventory, patch management, network segmentation, and stronger authentication to protect patient data.