How do cyberattackers gain access to health systems? Often via smaller hospitals

That's one finding from new research from cybersecurity firm CyCognito, whose CEO discusses that danger and describes some risk-mitigation strategies.

Smaller hospitals are often how cyberattackers and nation states gain access to health system networks to steal IP, deploy ransomware or scour data to sell on the dark web, according to new research from cybersecurity firm CyCognito.

The firm's latest research studied health systems with more than $1 billion in revenue and more than 19 hospitals.

Healthcare IT News interviewed Rob Gurzeev, CEO and founder of CyCognito, to discuss the results of his firm's latest research, including why smaller hospitals are entry points for bad actors, how health systems are increasing risk by not paying their smaller entities enough attention, exactly how threat actors are using these points for entry, and how health systems can get a handle on extended attack surfaces.