Navigating Cybersecurity in an AI-Driven Healthcare Landscape

Cybersecurity has always been a top priority for healthcare institutions. However, the landscape is evolving rapidly as artificial intelligence (AI), biometric authentication, and digital identity tools become integral parts of care delivery. The challenge now extends beyond just keeping hackers out; it involves ensuring that clinicians can quickly access necessary tools while safeguarding against new threats, such as AI agents that can navigate systems at unprecedented speeds.

In a recent episode of the "Podnosis" podcast, Senior Writer Anastassia Gliadkovskaya sat down with Sean Kelly, M.D., Chief Medical Officer of Imprivata, a leading digital identity security company. Their discussion highlighted the critical need for hospitals to rethink access management and treat AI as a high-risk third party.

The Evolving Threat Landscape

One of the most pressing concerns is the rise of vishing, or voice phishing, which involves attackers using AI-powered tools to impersonate trusted individuals and gain unauthorized access to systems. According to Imprivata's research, this form of cyberattack has become increasingly sophisticated, making it harder for healthcare providers to detect and prevent.

Another significant risk comes from the misuse of AI chatbots. The ECRI Institute, a nonprofit organization that studies patient safety, recently flagged the potential dangers of AI chatbots as one of the top health tech hazards for 2026. These chatbots, if not properly managed, can lead to misdiagnoses, incorrect treatment recommendations, and even data breaches.

Dr. Kelly emphasized that hospitals must treat AI systems with the same level of scrutiny they apply to third-party vendors. "AI agents are essentially new employees in the digital space," he explained. "They need to be vetted, monitored, and controlled just like any other user or application."

To address these challenges, healthcare organizations are turning to advanced access management solutions. Imprivata, for instance, offers a range of tools designed to secure digital identities while ensuring seamless clinician workflows. These solutions include biometric authentication, single sign-on capabilities, and multi-factor authentication (MFA) to enhance security without compromising usability.

What Comes Next

The future of healthcare cybersecurity will likely see a greater emphasis on integrating AI-driven security measures. Machine learning algorithms can help detect and respond to threats in real time, providing an additional layer of protection. However, this also means that hospitals must invest in training their staff to understand and manage these technologies effectively.

Dr. Kelly stressed the importance of building stronger guardrails around vendors and tools connecting to hospital systems. "We need to establish clear guidelines and standards for how third-party applications can interact with our networks," he said. "This includes regular audits, continuous monitoring, and robust incident response plans."

As healthcare continues to embrace digital transformation, the balance between innovation and security will be crucial. By staying vigilant and proactive, hospitals can harness the power of AI and other advanced technologies while keeping patient data safe and secure.

The evolving threat landscape in healthcare cybersecurity is a complex issue that requires ongoing attention and collaboration among all stakeholders. As new technologies emerge, it is essential for healthcare providers to stay informed and adaptive, ensuring that they can provide the best possible care without compromising patient safety.