What it’s about: Forrester’s analysis of two landmark healthcare attacks and where the attack surface is expanding next. The session opens with why both breaches were endpoint failures, not perimeter failures, and what the data shows about the growing exposure.
Key takeaways:
- A layered defense model for IT endpoints, IoMT-adjacent perimeters, and the extended care environment, covering patching and visibility against the HIPAA security rule’s proposed 15-day critical CVE mandate, and more.
- A look at two emerging threat vectors: open source supply chain attacks targeting EHR integrations and patient apps built on Node and Python.
- Mythos and Frontier AI-based exploits that discover and weaponize vulnerabilities before a CVE is assigned, collapsing exploit windows from months to hours.
- A live CISO dashboard demo: one console covering asset enrollment, HIPAA patching SLA, EDR detections, BYOD posture, and supply-chain package telemetry.
Speakers:
Paddy Harrington, Senior Analyst, Forrester, and Romanus Raymond, Director of Technology, ManageEngine
Browse Operational Technology webinars
