Loading story…
The U.S. Department of Health and Human Services (HHS) has released the first version of its artificial intelligence (AI) strategy, aiming to modernize internal workflows, enhance collaboration across agencies, and improve cybersecurity. The "OneHHS" approach is designed to break down silos between divisions such as the CDC, CMS, FDA, and NIH, enabling the development of a unified AI infrastructure that streamlines operations and bolsters cyber defenses. The initial focus is on leveraging AI to improve internal efficiency and federal use, with a longer-term goal of engaging private sector partners to maximize AI's potential.
HHS's strategy emphasizes the creation of a robust, department-wide AI framework that supports both operational improvements and enhanced security. By fostering collaboration among its various agencies, HHS aims to set a foundation for future innovation and public-private partnerships in AI, ultimately strengthening the department's ability to respond to evolving technological and cybersecurity challenges.
Track how attackers are adapting to this technology.
7 events from the most recent confirmed update back to the earliest known activity.
Following its December 2025 Request for Information on artificial intelligence in healthcare, HHS said it received more than 7,000 comments and identified strong demand for cross-agency coordination, implementation support, governance structures, and guidance for evaluating AI tools. The update said HHS is refining plans to accelerate AI adoption in clinical care and other healthcare settings while addressing privacy, security, accuracy, bias, and model degradation risks.
HHS said it expects a 70% increase in new AI use cases in 2025. The projection indicates planned expansion of AI deployment following the initial strategy rollout.
HHS released the first version of its departmentwide AI implementation strategy, branded as the 'OneHHS' approach. The plan aims to unify AI infrastructure, improve operations and workflows, and enhance cybersecurity through five pillars covering governance, infrastructure, workforce, research, and care delivery.
President Donald Trump issued an executive order prioritizing federal artificial intelligence policy. HHS's AI strategy was described as coming after this order.
HHS underwent a major departmental overhaul that reduced its workforce by 20,000 employees. The later AI strategy was described as following this restructuring.
Before releasing its formal strategy, HHS made ChatGPT available to all employees and established an AI governance board to oversee AI adoption. These steps signaled early internal rollout and governance of departmentwide AI use.
HHS reported that it had already implemented or planned 271 artificial intelligence projects during fiscal 2024 across the department and its agencies. The activity formed the operational backdrop for a broader departmentwide AI strategy.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
hipaajournal.com
Open sourcebankinfosecurity.com
Open sourcegovinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Health Sector Coordinating Council (HSCC) has announced the upcoming release of a series of guidance documents aimed at helping healthcare organizations address the cybersecurity risks associated with artificial intelligence deployments. These materials will focus on five critical risk areas, including education and enablement, cyber operations and defense, and best practices for clinical, administrative, and financial applications of AI in the health sector. The guidance is intended to improve awareness, preparedness, and response capabilities as healthcare entities increasingly adopt AI technologies. The documents, previewed in November 2025, are scheduled for release beginning in the first quarter of 2026 and will provide playbooks and white papers to assist organizations in understanding and mitigating AI-related cyber threats. The initiative underscores the growing complexity of AI risk management in healthcare and the need for sector-specific strategies to ensure safe and secure AI integration across diverse operational domains.
Jun 29, 2026
Artificial intelligence is increasingly influencing the healthcare sector's cyber threat landscape, with both attackers and defenders leveraging AI tools. Experts warn that as larger healthcare organizations strengthen their defenses, cybercriminals are shifting focus to smaller medical practices, insurers, and third-party vendors, which often lack the resources and sophistication to counter advanced AI-driven attacks. The complexity of the healthcare ecosystem, with frequent data exchanges among various entities, further amplifies the risk of breaches, particularly among less mature organizations. In response to the surge in healthcare cyberattacks and data breaches, the US Department of Health and Human Services (HHS) proposed updates to the HIPAA Security Rule aimed at bolstering cybersecurity requirements. However, these proposed changes have faced significant pushback from industry groups, who argue that the new rules impose unrealistic financial and operational burdens, especially given the short implementation timelines. A coalition of over 100 healthcare organizations has called for the immediate withdrawal of the proposed rule, highlighting the tension between regulatory efforts to address AI-driven threats and the industry's capacity to comply.
Jun 29, 2026Federal agencies are rapidly integrating artificial intelligence into their cyber defense strategies, with a focus on scaling vulnerability identification and operational resilience. Acting Federal CISO Michael Duffy highlighted the need to update the Office of Management and Budget Circular A-130 to reflect the new AI-driven landscape. The government is also reviewing AI's strengths and limitations to ensure secure and efficient public interactions.
Jun 29, 2026