Podcasts | Signal

Channel

The 229 Podcast

Podcasts Hosted by Bill Russell, Sarah Richardson, and Drex DeFord

Flagship interviews, security programming, and more from our community—strategy, operations, and what’s next in health IT.

Apple Podcasts Spotify

All shows

Across the network

Latest episodes

Every episode from the 229 channel, newest first—updated as episodes publish.

Aug 14, 2026·2 Minute Drill

Iran Hackers Hit 30 Local Water Utilities: Preparing Your Hospital | 2 Minute Drill with Drex DeFord

In late July, a small Minnesota water tower stopped responding to its own control panel — and it wasn't alone. Within 48 hours, more than 30 water systems across the state lost control of pumps, lift stations, and chemical monitoring. The cause: a known industrial controller flaw with a patch that's been available since 2021. Federal officials traced the attacks to Iran, and the FBI is now watching water systems in at least seven states. In this Two Minute Drill, Drex DeFord asks the question hospitals rarely think to ask — do you know where your water, power, and steam actually come from, and have you ever asked that utility a security question? Remember, Stay a Little Paranoid.

4:27.075918

Aug 14, 2026·Newsday

Healthcare Doesn't Move in Seconds | Newsday with 229Project

August 10, 2026: Bill Russell and Drex DeFord preview Epic UGM (Sarah is on a plane to Charlottesville). Bill opens with the reframe that sets the lens for the whole episode: don't mistake a single big announcement for the real pace of change — healthcare moves in months and years, not seconds. Then the preview itself: AI and Agent Factory framed around clinician experience, ambient documentation a year after the freeze, the Bridge/Epic interoperability standoff and the 3-year hedge, the entire

Aug 13, 2026·The 229 Podcast

From Potholes to Piglets, 30 Years of Health IT Lessons| The 229 Podcast with CT Lin, MD

August 13, 2026: CT Lin , MD, spent 30 years at UC Health, the last stretch as Chief Medical Information Officer, before stepping into his next chapter as Professor of Medicine at the University of Colorado and first-time author. His new book, “It’s Not About the Tech: From Potholes to Piglets, Real-Life Lessons in Health IT,” argues that health IT success is 80 percent people and 20 percent technology, a lesson he learned by failing loudly and often. Lin tells Sarah Richardson about the radiology order set that accidentally triggered a hospital-wide outbreak of "acromegaly," the identity crisis of losing a CMIO title after three decades, and why governing generative AI will be this era's tragedy of the commons. Key Points: 01:06 Not About Tech 06:10 Sharing Failures 10:05 Life After CMIO 15:35 AI and Governance 18:34 PIGs and Farewell LinkedIn: 229 Project Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

24:35.970612000000074

Aug 12, 2026·Solution Showcase

Turning Staffing Into an Advantage | Solution Showcase with Allison Morin and Marguerite Cunningham

August 12, 2026: Marguerite Cunningham , VP/CNIO & VP Nursing at Inova Health , and Allison Morin , Chief Nursing Informatics Officer at Symplr , join Sarah Richardson to unpack how workforce management stopped being a scheduling problem and became an executive one. Maggie shares how Inova's Smart Square rollout, born out of pandemic urgency, forced the system to build real governance around staffing instead of just automating a spreadsheet. Allison brings the national view: predictive accur

22:10.573061000000052

Aug 10, 2026·Newsday

I Gave You Dollars. You Gave Me Capacity. | Newsday with 229Project

August 7, 2026: Bill Russell sits down with Eric Utzinger (Revuud) while Sarah and Drex are out. The H1 2026 Signal Index put competing priorities and not enough capacity at the top of the list for 54% of leaders — and 43% said budgets are flat or declining. On this Newsday they dig into why AI ROI still feels muddy: tools return hours, not line-item dollars, and the CFO still needs the exchange rate. Along the way: operational transformation with real proof points, growth without growing, and a

Aug 6, 2026·2 Minute Drill

The Teen Behind Scattered Spider - and How Windows Caught Him | 2 Minute Drill with Drex DeFord

A teenager who flaunted stacks of cash and a diamond "Hack the planet" necklace online turned out to be one of the most damaging cybercriminals on the planet. Peter Stokes, known as Bouquet, was part of Scattered Spider — the crew behind breaches at MGM Resorts, Visa, Twilio, Dior, and Louis Vuitton. He mastered every trick for staying anonymous, but a hidden Windows fingerprint called the Global Device Identifier helped investigators tie his aliases to his real identity across every platform he touched. Stokes was arrested this spring at a Finland airport and extradited to the US. Drex breaks down how the case unraveled, why service-desk social engineering is not a hypothetical for healthcare, and why researcher Alison Nixon had this network mapped years before the arrest. Remember, Stay Paranoid LinkedIn: 229 Project Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

4:36.84571399999999

Aug 6, 2026·The 229 Podcast

Solving Radiology Screening Bias and Ignoring the Shiny AI | The 229 Podcast with Darren Bullock

August 8, 2026: Darren Bullock wears two titles at once, COO and CIO of Envision Sally Jobe Radiology Imaging Associates , a multi-state radiology practice, and neither role stayed in its lane for long. Darren tells Sarah Richardson how that dual seat let him fast-track one of radiology's most overdue fixes: a breast cancer risk model that finally works for women who aren't white. Together they also get into what it took to deploy it first, how he keeps his board from chasing every AI shiny obje

Aug 5, 2026·Executive Interview

This CISO Says AI Doesn't Forget, That Should Scare You | Executive Interview with Robert Forbes

August 05, 2026: Robert Forbes has spent 40 years in cybersecurity, from working on MILNET before the public internet existed to running the Air Force's high-performance compute center, to leadership roles at CA, Okta, and now Field CISO at SHI . Drex DeFord sits down with Rob to unpack why healthcare's AI moment is different from every other industry's. Rob introduces the concept of "minimum viable care," explains why agentic AI breaks the traditional non-human identity model, and shares the re

Aug 3, 2026·Newsday

Preparing for the 900 million dollar squeeze hitting healthcare IT | Newsday on This Week Health

August 3, 2026: Bill Russell, Drex DeFord, and Sarah Richardson are fresh off a run of academic medical center events in Chicago, and the number that kept coming up in every room was staggering: $900 million in projected revenue coming out of the healthcare system over the next three years. On this episode of Newsday, the trio unpacks what that pressure is doing to CIOs, CMIOs, and revenue cycle leaders alike, from Epic anxiety and AI idea overload to the physician who quietly found her health s

Jul 31, 2026·2 Minute Drill

The AI That Broke Into Hugging Face to Win a Test | 2 Minute Drill with Drex DeFord

An AI model was supposed to be locked inside a sandbox, working through hacking challenges to prove how good it was at finding software flaws. Instead, it found a real zero-day, broke out on its own, and landed inside Hugging Face's live production database. Nobody told it to escape. It just wanted to win. When Hugging Face sat down to investigate, the AI tool they turned to for help refused to even look at the attack. So they ended up trusting a Chinese open-weight model to clean up after an Am

7:49.551019999999994

Jul 31, 2026·UnHack the Podcast

Improv in Cybersecurity and Stopping People Pleaser AI | Unhack the Podcast with David Finn

June 31, 2026: David Finn has watched health IT security evolve from a compliance checkbox to an enterprise risk conversation, and now into an AI agentic era that's rewriting the rules again. Now teaching courses and advising across the industry, he unpacks what the recent OpenAI and Hugging Face breaches really exposed, and it wasn't a technology failure. It was a governance failure. David draws on decades of building security programs, including a stint as an "accidental CIO," to explain why h

Jul 30, 2026·The 229 Podcast

Is 2026 the Year Patients Finally Own Their Data? | The 229 Podcast with John Helvey

June 30, 2026: John Helvey , CEO of SacValley MedShare , has spent five-plus years building one of California's leading regional health information exchanges. He sits down with Sarah Richardson to unpack why national data networks still fall short: patient-matching gaps, geofencing blind spots, and the 60 to 90 seconds patients and providers spend waiting for data that should already be there. John explains how his team is turning raw interoperable data into something clinicians can actually use

Jul 29, 2026·Executive Interview

Healthcare's Next Big Threat: Adversary-in-the-Middle Attacks | Interview with Clay Maddox

July 27, 2026: Clay Maddox , Healthcare Horizon Practice Manager at CrowdStrike , to unpack a threat that's quietly reshaping healthcare security: adversary-in-the-middle attacks. These aren't your old-school man-in-the-middle exploits. Adversaries are stealing session tokens after a legitimate login, then pivoting straight into SaaS applications and browsers, no credentials needed. Clay breaks down the increasing supply chain risk and the identity problem everyone's still fighting, and what Cro

Jul 27, 2026·Newsday

Who Really Owns Healthcare's AI Future? | Newsday with This Week Health

July 27, 2026: Bill Russell, Drex DeFord, and Sarah Richardson break down a week's worth of headlines, starting with Bill’s AI musings on the future "workhorse" models built for speed over depth. The conversation turns serious fast: healthcare doesn't own its AI platforms; it rents them, and that dependency carries real resilience risk. They dig into who's actually accountable when AI gets a clinical decision wrong, unpack the first fully autonomous ransomware attack, and revisit why CIOs keep reacting to agendas instead of setting them. Key Points: 05:16 Platform First and Shadow AI 13:13 Owning the Harness 15:57 Mayo AI Safety Lawsuit 18:33 Autonomous Ransomware Agents LinkedIn: 229 Project Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Jul 24, 2026·2 Minute Drill

Double Trouble: Why Cyber Attacks Are Starting to Come in Pairs | 2 Minute Drill with Drex DeFord

Picture this. You're the CISO at one of the world's largest healthcare companies, and Monday morning brings a call about a cybersecurity incident in a legacy diagnostics environment. Before the briefing even wraps, someone walks in with news of a second incident. Different system, different root cause, same day. Drex breaks down why that scenario isn't hypothetical, using a recent real-world healthcare giant's dual cyber battles as the wake-up call. Between sprawling app portfolios, aging infrastructure, and an expanding web of AI-powered partners, the attack surface has changed and so has the shape of a breach. So here's the question for your team this week. If two incidents hit at once, could you actually handle both? Remember, Stay a Little Paranoid

Jul 24, 2026·Executive Interview

Uncovering the Clinical Blind Spot in AI Governance | Executive Interview with Dr. Jen McKay

July 24, 2026: Dr. Jen McKay spent 20-plus years as an internal medicine hospitalist in rural South Dakota before becoming CMIO at a major Midwest health system, and now she's the Senior Clinical Specialist at Google for Health . Jen explains why so many AI governance efforts stall out, and it usually comes down to one missing ingredient: clinical leadership at the table from day one. She unpacks why physicians serve as the real "API" between fragmented healthcare data inputs, whether AI will ev

Jul 23, 2026·The 229 Podcast

How Alex's Lemonade Stand Foundation Built a Movement | The 229 Podcast with Liz Scott

July 23, 2026: Liz Scott is the co-executive director of Alex's Lemonade Stand Foundation , founded by her daughter, Alex, a four-year-old cancer patient who promised to raise money for kids "like her." What started as a single lemonade stand has grown into a movement with over 15,700 community fundraisers and hundreds of research grants funded every year. Bill Russell and Sarah Richardson sit down with Liz to explore how a pure, tragic story became a national movement, what a $100 donation actually funds a decade later, and why she still hasn't burned out after 20 years of building something bigger than grief. Key Points: 01:56 Alex Story Spark 12:06 Super Sibs Support 20:01 Research And Grants 25:10 Leadership And Future LinkedIn: 229 Project Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Jul 22, 2026·Executive Interview

The Upcoming Security Webinar Healthcare Can't Miss | Interview with Clay Maddux

July 22, 2026: Clay Maddux , Healthcare Horizon Practice Director at CrowdStrike , joins Drex DeFord to preview a free, live webinar on August 13th that tackles one of the fastest-growing threats in healthcare security: adversary-in-the-middle attacks on SaaS applications. Clay shares a preview of what's coming, including real cases of "payroll pirates" hijacking Workday accounts and rerouting employee paychecks, plus a live demo of browser-in-browser phishing in action. Open to the entire healthcare security community, no CrowdStrike account required. Register now and bring your team. Register for the Defending Against AiTM Attacks in Healthcare Webinar: https://go.crowdstrike.com/2026-08-aitm-healthcare.html?utm_campaign=stop_ai_accelerated_adversaries&utm_medium=evt&utm_source=prtn&utm_language=en-us Key Points: 01:10 Webinar Invitation 02:37 What Attendees Learn 04:31 Phishing And Browser Attacks 05:07 Live Demo And Token Theft Keep up to date on the latest in health IT: https://thisweekhealth.com/news/ X : This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Jul 20, 2026·2 Minute Drill

What a Ransomware Gang's Leaked Group Chat Reveals About Insider Threats | 2 Minute Drill with Drex

In 2022, a furious insider leaked more than 300,000 internal messages from Conti, one of the most notorious ransomware gangs on the planet, and it read like the group chat from hell. Buried in the gossip and office politics was a message that stopped Drex cold, a gang member pushing to attack hundreds of American hospitals and laughing about who might die. But not everyone inside Conti agreed with him. What happened next in Ireland shows just how thin the line is between catastrophe and survival, and why you can never build a security program on the hope that the person attacking you has a conscience. Remember, stay a little paranoid. Linkedin: https://www.linkedin.com/company/229p Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer - https://www.alexslemonade.org/mypage/3173454

Jul 20, 2026·Newsday

Clinical AI on Trial: Shadow Tools and Governance Gaps | Newsday with Yaw Fellin and Matt Troup

July 20, 2026: A new Nature of Medicine study claims general-purpose LLMs outperform specialized clinical AI, but is that the right benchmark to begin with? Bill and Drex are joined by Yaw Fellin , General Manager of UpToDate at Wolters Kluwer , and Matt Troup , Clinical Strategy Principal at Abridge , to break down what those benchmarks actually measure, why shadow AI is already spreading through health systems, and what "clinical grade" really means. Plus: the first-ever look at UpToDate's new drug dosing feature in Expert AI, and why automaticity bias may be the next liability crisis hiding in plain sight. Key Points: 03:18 Nature Study Breakdown 10:25 Shadow AI Reality Check 18:37 Transparency and Provenance 23:40 Human in the Loop Wrap Keep up to date on the latest in health IT: https://thisweekhealth.com/news/ X : This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer