Foreign nation-state hackers exploited vulnerabilities in Ivanti edge devices to gain extensive access to MITRE Corp.'s unclassified network for three months. MITRE, known for its ATT&CK glossary on cyberattack techniques, faced its first major incident in 15 years due to these exploits. The breach targeted the NERVE network, used for research and development, whose extent of damage is still under assessment. The attackers bypassed multifactor authentication and utilized various techniques to infiltrate and persist within MITRE's VMware infrastructure, ultimately exfiltrating data to a command-and-control server. Despite following recommended best practices for securing the compromised Ivanti system, MITRE was unable to detect the breach until three months later, highlighting the sophistication of the attack and the need for improved detection and mitigation strategies.

MITRE ATT&CKED: InfoSec's Most Trusted Name Falls to Ivanti Bugs Dark Reading

The U.S. House of Representatives has passed legislation that could lead to a ban on TikTok unless its Chinese parent company, ByteDance Ltd., sells its stake within a year. Though initially part of a larger foreign aid package, the measure saw bipartisan support due to national security concerns about Chinese influence and potential data privacy issues. The bill, which passed by a significant majority, could face legal challenges from the company, claiming it infringes on First Amendment rights. TikTok has actively opposed the legislation, urging its significant U.S. user base to lobby against the ban. The Senate will now consider the bill, which includes provisions for the sale deadline to be extended if a sale is already underway.

The House votes for possible TikTok ban in the US, but don't expect the app to go away anytime soon Associated Press

The article titled "Patient Portal — When Patients Take AI into Their Own Hands" discusses the proactive use of generative AI by patients for medical diagnostics and other functions, even as the medical community remains cautious about the implementation of AI in clinical settings. The author, Carey Goldberg, argues that these patient-led "DIY" approaches to using AI in healthcare should not only be monitored but integrated into formal medical advice to ensure safe and effective practices.

Patient Portal — When Patients Take AI into Their Own Hands NEJM AI

The article discusses the financial investments eight hospitals and health systems are making in electronic health record (EHR) systems. It details the expenses ranging from Health First's planned $160 million for an Epic EHR system to AdventHealth's $660 million recently completed Epic implementation. Additionally, various hospitals like Kona Community and Kohala Hospital received federal funding worth $2.5 million for their EHR systems, while systems like MultiCare Health System are planning to spend around $50 million for upgrading EHR at newly acquired facilities. The report emphasizes the significant financial commitments involved in either upgrading or installing new EHR systems to enhance operational efficiency and patient care.

How much 8 health systems are paying for EHRs publication

Foreign nation-state hackers exploited vulnerabilities in Ivanti edge devices to gain extensive access to MITRE Corp.'s unclassified network for three months. MITRE, known for its ATT&CK glossary on cyberattack techniques, faced its first major incident in 15 years due to these exploits. The breach targeted the NERVE network, used for research and development, whose extent of damage is still under assessment. The attackers bypassed multifactor authentication and utilized various techniques to infiltrate and persist within MITRE's VMware infrastructure, ultimately exfiltrating data to a command-and-control server. Despite following recommended best practices for securing the compromised Ivanti system, MITRE was unable to detect the breach until three months later, highlighting the sophistication of the attack and the need for improved detection and mitigation strategies.

MITRE ATT&CKED: InfoSec's Most Trusted Name Falls to Ivanti Bugs Dark Reading

The U.S. House of Representatives has passed legislation that could lead to a ban on TikTok unless its Chinese parent company, ByteDance Ltd., sells its stake within a year. Though initially part of a larger foreign aid package, the measure saw bipartisan support due to national security concerns about Chinese influence and potential data privacy issues. The bill, which passed by a significant majority, could face legal challenges from the company, claiming it infringes on First Amendment rights. TikTok has actively opposed the legislation, urging its significant U.S. user base to lobby against the ban. The Senate will now consider the bill, which includes provisions for the sale deadline to be extended if a sale is already underway.

The House votes for possible TikTok ban in the US, but don't expect the app to go away anytime soon Associated Press

The article titled "Patient Portal — When Patients Take AI into Their Own Hands" discusses the proactive use of generative AI by patients for medical diagnostics and other functions, even as the medical community remains cautious about the implementation of AI in clinical settings. The author, Carey Goldberg, argues that these patient-led "DIY" approaches to using AI in healthcare should not only be monitored but integrated into formal medical advice to ensure safe and effective practices.

Patient Portal — When Patients Take AI into Their Own Hands NEJM AI

The article discusses the financial investments eight hospitals and health systems are making in electronic health record (EHR) systems. It details the expenses ranging from Health First's planned $160 million for an Epic EHR system to AdventHealth's $660 million recently completed Epic implementation. Additionally, various hospitals like Kona Community and Kohala Hospital received federal funding worth $2.5 million for their EHR systems, while systems like MultiCare Health System are planning to spend around $50 million for upgrading EHR at newly acquired facilities. The report emphasizes the significant financial commitments involved in either upgrading or installing new EHR systems to enhance operational efficiency and patient care.

How much 8 health systems are paying for EHRs publication