Healthcare Security in Focus: Applying Lessons from a Real-World Hospital Penetration Test

BreakPoint Labs presents a technical briefing that distills lessons learned from numerous large-scale cybersecurity assessments across U.S. hospitals. These engagements reflect the challenges healthcare organizations face as the threat landscape evolves and regulatory scrutiny tightens.

Join BreakPoint Labs' CTO, Andrew McNicol, for an inside look at how real-world penetration tests reveal the technical gaps that compliance audits often miss. You’ll explore common vulnerabilities, such as flawed password recovery mechanisms and misconfigured public-facing systems, that are regularly identified in large hospital environments.

Attendees will walk away with five actionable recommendations drawn from repeated assessment findings—focused on helping organizations move beyond checkbox compliance toward true cyber resilience.

By the end of this session, attendees will be able to:

• Identify recurring security weaknesses across large hospital environments, including authentication, default configurations, and exposed internal data.
• Understand the anatomy of a full-scope, audit-ready penetration test grounded in real-world attacker tactics.
• Apply the key takeaways from these assessments to build a more resilient, audit-ready security posture.