{"id":196316,"date":"2026-03-16T08:14:00","date_gmt":"2026-03-16T12:14:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/03\/16\/why-cybersecurity-is-now-critical-care-intelligent-ciso\/"},"modified":"2026-03-16T08:25:08","modified_gmt":"2026-03-16T12:25:08","slug":"why-cybersecurity-is-now-critical-care-intelligent-ciso","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/03\/16\/why-cybersecurity-is-now-critical-care-intelligent-ciso\/","title":{"rendered":"why cybersecurity is now critical care \u2013 Intelligent CISO"},"content":{"rendered":"

why cybersecurity is now critical care \u2013 Intelligent CISO<\/a><\/p>\n

https:\/\/www.intelligentciso.com\/2026\/03\/16\/healthcare-under-attack-why-cybersecurity-is-now-critical-care\/<\/a><\/p>\n

Publish Date: 2026-03-16 08:14:00<\/a><\/p>\n

Source Domain: www.intelligentciso.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

Africa\u2019s healthcare sector is facing a silent emergency. Many healthcare operators, facilities and doctors across Africa already grapple with the challenges of under-resourced environments, an uneven distribution of resources and massive demand for services.<\/p>\n

Kerissa Varma, Microsoft\u2019s Chief Security Advisor for Africa, explains how healthcare administrators must turn their attention to a relatively new and extremely urgent concern. While doctors fight to save lives, cybercriminals are infiltrating hospitals, laboratories and clinics, turning life-saving environments into digital battlegrounds.<\/p>\n

Kerissa Varma, Microsoft\u2019s Chief Security Advisor for Africa<\/p>\n

A growing epidemic\u00a0<\/p>\n

Recent attacks have exposed the fragility of Africa\u2019s medical infrastructure. In May\u00a02025\u00a0Mediclinic Southern Africa was hit by a cyber extortion cyberattack compromising sensitive HR data. Later in 2025 Lancet Laboratories faced a regulatory penalty for\u00a0failing to notify\u00a0patients about data breaches under South Africa\u2019s POPIA law, while a ransomware strike on the National Health Laboratory Service disrupted blood test processing nationwide, delaying critical care for millions.\u00a0<\/p>\n

M-Tiba, a Kenyan digital health platform managed by\u00a0CarePay\u00a0and backed by Safaricom, suffered a significant cyberattack and data breach in late 2025, while earlier this year Pharmacie.ma, a Moroccan pharmaceutical platform, was reportedly the target of an alleged data leak incident involving the\u00a0unauthorised\u00a0export of a customer database. Recent research\u00a0indicates\u00a0that Nigeria\u2019s private healthcare sector is now one of the most targeted on the African continent with attacks increasing at an alarming rate.\u00a0<\/p>\n

Many incidents also go unreported as hospitals and healthcare facilities rarely\u00a0disclose\u00a0them publicly. These incidents are not isolated, with ransomware dominating the\u00a0threat\u00a0landscape. Africa\u2019s healthcare sector is heavily targeted by cybercriminals with healthcare\u00a0organisations\u00a0facing an average of 3,575 weekly cyberattacks in 2025, a 38% surge from the previous year. Encryption of patient data, temporary loss of access to hospital\u00a0systems\u00a0and the risk of data appearing on the dark web are among the potential impacts.\u00a0<\/p>\n

Why healthcare is a prime target\u00a0<\/p>\n

The healthcare industry in Africa, particularly in the public sector, is working with legacy systems, fragmented\u00a0infrastructure\u00a0and underfunded IT teams, all of which combine to make the sector an easy target for cybercriminals.\u00a0<\/p>\n

Many medical institutions are adopting open-source AI tools for diagnostics and patient management. While cost-effective,\u00a0these platforms often lack enterprise-grade security, leaving sensitive data exposed. Combined with fragmented storage of paper and electronic patient records, often unencrypted and scattered across multiple systems, the risk of breaches multiplies.\u00a0<\/p>\n

Hospitals and healthcare facilities cannot\u00a0afford\u00a0downtime.\u00a0Every minute offline risks lives, making them more likely to pay ransoms in an attempt to regain control of their systems.\u00a0Cyber insurers\u00a0indicate\u00a0that in 2 of 5 cases of a ransom being paid data and operations still cannot be recovered. Additionally, in instances where some or\u00a0all of\u00a0the seized data is recovered after paying a\u00a0ransom,\u00a0the attacker goes on to request further payments.\u00a0<\/p>\n

Medical records are also a premium target for cybercriminals. In the\u00a0US\u00a0researchers found that patient records, insurance\u00a0details\u00a0and research data fetch premium prices on the dark web, up to 10 times higher than financial\u00a0data,\u00a0according to cybersecurity analysts. A single stolen medical record can sell for $260\u2013$310 compared to $30\u2013$50 for a credit card because unlike credit cards medical records never\u00a0expire,\u00a0and medical information cannot be easily changed. Medical records frequently include personal identifiers, insurance\u00a0details\u00a0and sometimes biometric data enabling identity theft and fraud. Criminals also use medical data for fake insurance claims, prescription\u00a0fraud\u00a0and targeted\u00a0scams. Microsoft believes cybersecurity needs to be embedded into every technology\u00a0implementation,\u00a0and this should be a key priority especially when handling sensitive medical data and operations.\u00a0<\/p>\n

How healthcare can use modern technology safely\u00a0<\/p>\n

As Africa\u2019s healthcare systems\u00a0digitise\u00a0and\u00a0embrace\u00a0AI,\u00a0protecting the digital lifeline must become as critical as protecting the physical one. Key steps can secure healthcare\u00a0organisations\u00a0and facilities such as laboratories and diagnostic services.\u00a0<\/p>\n

Include cybersecurity in your resilience planning\u00a0<\/p>\n

Medical professionals and healthcare facilities often\u00a0prioritise\u00a0the resilience of physical capabilities. Power backups, multiple devices should equipment\u00a0fail\u00a0and standby staff\u00a0in the event of\u00a0a practitioner being unavailable are all practices that save lives.\u00a0<\/p>\n

Equally,\u00a0cybersecurity and safeguarding online systems must be built into the overall resilience planning of medical facilities and services.\u00a0<\/p>\n

Investing in cybersecurity technology that can quickly\u00a0identify\u00a0and\u00a0contain\u00a0attacker activity before it leads to system downtime or data theft can save lives. Having a response plan that is\u00a0practised\u00a0and\u00a0maintained\u00a0in the event of\u00a0a cyber breach and ensuring strong data backups could mean the difference between a total failure of health services or a minor incident. Ensuring incident response plans are aligned with local compliance laws such as South Africa\u2019s POPIA and Kenya and Nigeria\u2019s Data Protection Acts is critical for healthcare providers.\u00a0<\/p>\n

Prepare for AI-driven attacks that are going to increase attacker speed and success\u00a0<\/p>\n

Threat actors are increasingly exploiting the interconnectedness of modern software ecosystems and operational structures to conduct malicious activity, so regular auditing of third-party integrations, especially those involving AI or cloud services, is critical.\u00a0<\/p>\n

Adversaries are using AI to scale and tailor operations with AI-driven phishing being 4.5x more effective than traditional phishing. However,\u00a0AI is also transforming cyber\u00a0defence\u00a0by automating response and containment, detecting threats faster and more\u00a0accurately\u00a0and\u00a0identifying\u00a0detection gaps while adapting to attacker\u00a0behaviour. Healthcare\u00a0organisations\u00a0should invest in AI-driven threat detection for faster response and anomaly detection and must also secure AI models and data pipelines through robust access controls, vulnerability scanning and regular patching for open-source tools.\u00a0<\/p>\n

Remote and wider access to patient records requires strong identity practices\u00a0<\/p>\n

As both patients and medical professionals begin accessing patient\u00a0records\u00a0digitally strong identification, verification and authentication processes are critical. The Microsoft Digital Defense Report 2025 notes that the abuse of valid accounts is a frequent occurrence with attackers gaining access to usernames and passwords and using them to infiltrate systems without triggering traditional security alerts.\u00a0Organisations\u00a0must deploy phishing-resistant multifactor authentication and conditional access to strengthen user\u00a0defences.\u00a0<\/p>\n

Invest in people and skills\u00a0<\/p>\n

People are at the heart of robust cybersecurity measures. Healthcare\u00a0organisations\u00a0must train staff against common tactics such as phishing, the most common entry point for\u00a0attackers\u00a0and apply role-based access controls for both clinical and research data to prevent privilege misuse.\u00a0<\/p>\n

Cybersecurity is no longer an IT\u00a0issue it\u00a0is a patient safety issue. Healthcare providers must treat digital resilience with the same urgency as infection control. By investing in comprehensive cybersecurity strategies and\u00a0leveraging\u00a0AI-powered\u00a0defences\u00a0Africa\u2019s healthcare sector can strengthen its ability to withstand emerging threats and build more resilient digital ecosystems.\u00a0<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

why cybersecurity is now critical care \u2013 Intelligent CISO https:\/\/www.intelligentciso.com\/2026\/03\/16\/healthcare-under-attack-why-cybersecurity-is-now-critical-care\/ Publish Date: 2026-03-16 08:14:00 Source…<\/p>\n","protected":false},"author":1,"featured_media":196317,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.intelligentciso.com\/wp-content\/uploads\/sites\/6\/2026\/03\/Untitled.webp","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,30,24,25,27],"class_list":["post-196316","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-breach","tag-cybersecurity","tag-phishing","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/196316"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=196316"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/196316\/revisions"}],"predecessor-version":[{"id":196318,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/196316\/revisions\/196318"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/196317"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=196316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=196316"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=196316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}