Healthcare organizations are facing a new breed of identity-based attack that requires no malware, bypasses traditional defenses, leaves victims unaware, and defeats advanced detections. 

Adversary-in-the-middle (AiTM) techniques now factor into many CrowdStrike incident response engagements — attackers are harvesting valid session tokens to silently pivot into SaaS applications like Workday, ADP, and Microsoft 365, rerouting direct deposits and exfiltrating data before anyone notices. AI has made phishing faster and more convincing than ever before, and with the average data breach costing $4.8M in 2025,¹ healthcare security teams can't afford to rely on yesterday's defenses.

Join CrowdStrike threat intelligence and identity security experts as we break down these endemic attack chains — from AI-generated lures to multi-phase interactions — and demonstrate how to detect, disrupt, and shut them down in real time. Using live demos and current CrowdStrike Falcon® Adversary Intelligence data, we'll show exactly how attackers are targeting healthcare employees today and what a modern platform response looks like across the browser, identity, and SaaS application layers.

Learning Objectives

• Understand the threat: Learn how AiTM attacks work, why healthcare is a target, and how AI has accelerated adversary capabilities with zero malware required
• Know who's most at risk: Discover why high-access, high-pressure employees like executive assistants, HR teams, and clinical staff represent your greatest identity exposure
• See the attack in action: Recognize browser-in-browser, CAPTCHA/ClickFix, device code phishing, and malicious single sign-on (SSO) portal techniques before they reach your users
• Learn how to respond: Watch a live demonstration of automated single log-off (SLO) revoking compromised sessions across all browsers and devices simultaneously
• Build a platform defense: Understand how unified visibility across browser, SaaS, and identity telemetry enables faster detection, response, and managed threat hunting

1. IBM Cost of a Data Breach Report 2025: The AI Oversight Gap