The Coalition for Health AI (CHAI) has formed a Health AI Cybersecurity Work Group to create what it calls the healthcare sector's first practical, peer-developed guidance on frontier model cyber risk and readiness. The group plans to release a series of playbooks at the end of this year.
Frontier AI models, such as Anthropic's Mythos-class systems released this year, introduced a changed threat and defense landscape, the group said. Those models shorten attack timelines and can make the theft of protected health information and ransomware deployment faster to carry out, while also giving defenders new capabilities for vulnerability management and incident response.
"Health systems have always faced cybersecurity challenges, but today's advancements in AI fundamentally change our threat level," said John Flores, chief information systems officer (CISO) for the University of Texas Medical Branch and a steering group member. "With these unprecedented capabilities, it's key that industry leaders work together to develop a real toolkit for hospitals, health systems and beyond."
Flores said he applauds CHAI for gathering the work group quickly, "as hospitals of all sizes are seeking resources to combat risks associated with new complex technologies."
AI cybersecurity for healthcare systems
The group also includes steering member Isaiah Nathaniel, CISO for Delaware Valley Community Health. "As AI rapidly transforms our industry, it also brings new speed, scale, and sophistication to cyberthreats," Nathaniel said. for training in this area,
"On the ground in a health system -- particularly in underserved communities -- it suggests a new playbook is needed. We need to ensure different parts of healthcare, including systems of all sizes, are equipped to handle these changes," Nathaniel said.
Professionals working in healthcare can consider the AI for Cybersecurity Analysts Learning Path to get familiar with the specific skills used for AI-related threat detection and risk monitoring.
AI's ongoing performance in clinical settings
AI in healthcare does not behave like a traditional medical device. Performance can evolve along with patient demographics, data inputs, and software changes. "For hospitals, purchasing an AI tool creates an obligation to govern it throughout its life cycle," according to recent industry reporting.
Health systems must assess not only whether a product works at acquisition but whether it continues to perform safely across different populations and clinical environments. This is a core part of the challenge the new work group for healthcare AI and cybersecurity aims to address.
Why this matters for healthcare professionals
For people working in healthcare jobs, the arrival of AI models that industrialize data exfiltration and ransomware isn't hypothetical. The cybersecurity skills in your organization, from frontline clinical staff to IT teams the routine ability to handle these new threats. The CHAI work group's playbooks will offer a specific toolkit that health systems of all sizes can use, but staying current with AI cybersecurity tools and practices is something each team member can start now, through programs like AI for Healthcare training and guidance.
Your membership also unlocks:
