Stay ahead of the headlines

Nov 13, 2024·Forbes

Amazon has confirmed a significant data breach involving 2.8 million lines of employee data, attributed to a vulnerability in the MOVEit Transfer software used by a third-party property management vendor. The breach, disclosed by a cybercriminal known as "Nam3L3ss," highlights ongoing security risks in supply chain relationships, particularly due to weaknesses in third-party systems. The vulnerability, CVE-2023-34362, permitted unauthorized access via a SQL injection flaw. Nam3L3ss has published Amazon's employee data on BreachForums and claims to possess large amounts of data from various organizations, raising concerns about future disclosures. Compromised information includes employee work contact details, although Amazon maintains that its primary systems, including AWS, remain secure.

Nov 13, 2024·Healthcare Dive

A recent report from the Office of Inspector General (OIG) indicates that many hospitals are not complying with price transparency regulations designed to provide patients with better access to healthcare costs. Out of 100 hospitals surveyed, 34 did not publish machine-readable files of their charges, and 14 failed to provide a consumer-friendly list of services. The report underscores the ongoing compliance challenges, particularly as the Centers for Medicare & Medicaid Services (CMS) lacks adequate resources for enforcing these rules. Despite the implementation of the price transparency rule in 2021, only 46% of the 5,800 hospitals required to comply have done so, with providers citing confusion over the requirements as a barrier, especially among smaller hospitals.

Nov 13, 2024·eHealthcare Awards

The 25th anniversary of the eHealthcare Leadership Awards was marked by a ceremony on November 10 at the Healthcare Internet Conference, recognizing over 200 organizations for their outstanding digital initiatives across 30 categories, including Best Digital Front Door and Best Overall Internet. The awards aim to underscore the significance of digital communications in meeting healthcare organizations' business goals, with notable winners like Hackensack Meridian Health and Intermountain Health receiving the top Mark Gothberg eHealthcare Organizational Commitment Award. The event was supported by various industry sponsors, reflecting the ongoing advancements in healthcare marketing and technology.

Nov 13, 2024·BIPC

Healthcare organizations are confronting a challenging decision regarding whether to pay ransomware demands after cyberattacks that risk sensitive patient data and critical services. The urgency to restore operations must be weighed against ethical and financial ramifications, as paying a ransom does not guarantee data recovery or future protection. Many providers experience severe operational disruptions and financial burdens from such incidents, prompting a search for best practices in cybersecurity. Experts recommend proactive strategies, including strong cybersecurity measures, staff training, and regular data backups, to minimize risks and reduce the likelihood of facing ransom demands in the first place. Collaborating with law enforcement and cybersecurity experts is also suggested to navigate the complexities associated with these attacks.

Nov 12, 2024·BleepingComputer

CISA has issued a warning about a critical vulnerability, CVE-2024-5910, in Palo Alto Networks Expedition, a tool for migrating firewall configurations. This flaw allows attackers to remotely reset admin credentials on internet-exposed servers, potentially granting unauthorized access to sensitive information. Although a patch was released in July, ongoing exploits have been reported, with a vulnerability researcher demonstrating a proof-of-concept that combines this issue with another vulnerability, leading to unauthorized command execution. CISA advises administrators to limit network access to authorized users and to rotate credentials after applying the patch, highlighting the urgency due to a lack of updated security advisories from Palo Alto Networks.

Nov 12, 2024·The Hacker News

INTERPOL's Operation Synergia II, conducted from April to August 2024, led to the disruption of over 22,000 malicious servers and targeted various cyber threats including phishing and ransomware. The operation resulted in nearly 30,000 suspicious IP addresses being identified, with 76% taken down, alongside the seizure of 43 electronic devices and 41 arrests. Significant actions took place across multiple countries, including over 1,000 server disruptions in Hong Kong and additional cyber activity in Mongolia and Madagascar. Private sector partners like Group-IB and Kaspersky supported these efforts, highlighting the collaborative approach to tackling global cybercrime.

Nov 12, 2024·St. Luke's

St. Luke’s Health System has established its first employee resource group (ERG) for veterans, aimed at fostering community among the organization’s approximately 600 veteran employees. Launched in October, the Veterans ERG quickly grew to 160 members, demonstrating significant interest and need for peer support. The group focuses on recruitment, engagement, and community service, already participating in initiatives like a suicide awareness event in Magic Valley. Led by Austin Overacre, a veteran with 12 years of Army service, the ERG is designed to facilitate social events and enhance community involvement based on members' geographical locations.

Nov 12, 2024·MedCity News

Maternal mental health poses a substantial economic burden, estimated at $14 billion annually, particularly during pregnancy and the postpartum period. In response, the Massachusetts Child Psychiatry Access Program (MCPAP) for Moms was created to assist healthcare providers in addressing the mental health needs of mothers. Established in 2014 by Nancy Byatt, the program trains obstetricians to screen for maternal mental health issues and provides support for those who need further care. Recent discussions at the Behavioral Health Tech conference highlighted its growth and influence, with over 30 similar initiatives launched nationwide, largely driven by advocates like Jamie Zahlaway Belsito.

Nov 12, 2024·Healthcare IT News

The American Telemedicine Association (ATA) is calling on Congress to extend telehealth flexibilities before the end of 2024, highlighting their importance for maintaining access to virtual care for Medicare and private insurance patients. ATA's senior vice president, Kyle Zebley, stressed the need for urgent legislative action to avoid disruptions in care as the healthcare environment transitions with the upcoming administration. The ATA has previously engaged with the Centers for Medicare and Medicaid Services (CMS) to secure permanent telehealth allowances, warning that reverting to previous regulations would significantly hinder patient access to needed services.

Nov 12, 2024·CSO

Cybersecurity associations are essential for supporting Chief Information Security Officers (CISOs) by offering professional development resources, networking opportunities, and industry certifications. Notable organizations like ISC2, ISACA, ISSA, and the Cloud Security Alliance (CSA) play significant roles in the cybersecurity community. ISC2, for instance, has about 664,000 members and provides prestigious certifications such as the CISSP. ISACA, with around 180,000 members, focuses on IT governance, while ISSA promotes networking among its 7,500 members. The CSA addresses cloud security concerns with over 126,000 volunteers globally, fostering collaboration and education in tackling cloud vulnerabilities.

Nov 12, 2024·JAMA Network Open

A study published in JAMA Network Open analyzed data from over 10,000 family physicians to assess the connection between team structure, electronic health record (EHR) experiences, and burnout from 2017 to 2023. The research found a sustained burnout prevalence, peaking at 42.8% in 2022, and identified that proper allocation of EHR time at home and high team efficiency correlated with reduced burnout odds. The study emphasized the need for improvements in EHR workflows and team dynamics to enhance physician well-being and specifically noted modifiable practice structure factors impacting team efficiency and EHR experiences.

Nov 12, 2024·HealthLeaders Media

AI in healthcare, Jim Blum, CMIO at University of Iowa Health Care, stresses the need for a balanced approach in its integration. In a recent HealthLeaders podcast, he advocates for implementing AI as a tool to solve specific clinical issues rather than as an isolated solution, emphasizing that it should enhance workflows without adding complexity. UI Health Care has introduced two AI tools—an ambient transcription platform and a chart mining platform—that have gained traction among physicians, illustrating the effectiveness of involving clinicians and IT staff in evaluating AI technologies. Blum proposes simplified training for these tools to promote intuitive use, allowing clinicians to adapt at their own pace while ensuring access to support when needed.

Nov 11, 2024·CSO Online

A significant number of organizations face difficulties in identifying the sources of their data security incidents, with one-third unaware of the causes behind breaches in the past year. According to the Foundry/CSO Security Priorities Study 2024, only 67% of security leaders can identify breach causes, complicated further by lengthy detection times and the sophistication of modern attacks. Additionally, financial constraints and a shortage of skilled professionals hinder effective investigations. The reliance on outsourced security operations and the absence of robust monitoring systems contribute to challenges in understanding and responding to incidents, often resulting in inadequate follow-up and root cause analysis.

Nov 11, 2024·Norton Healthcare

Norton West Louisville Hospital has officially opened, enhancing healthcare access for residents in a historically underserved area of Louisville. This $90 million facility offers outpatient, hospital, and emergency services, along with primary and specialty care, addressing long-standing health disparities highlighted in a recent report showing significant mortality rates and lower life expectancy in the region. Key local leaders praised the hospital's potential to provide necessary medical care and improve health equity, featuring amenities such as a 24/7 emergency department, inpatient facilities, and diagnostic services to support community health needs.

Nov 11, 2024·LinkedIn

Jesse Folds, Director of IT Operations and Cybersecurity at Opelousas General Health System, critiques the portrayal of IT leaders as solitary figures handling crises alone, arguing that this view overlooks the intense pressure and responsibility they face. In this piece, he humorously highlights the absurdities of their roles, illustrating how the urgency for quick fixes can lead to inadequate solutions. Folds advocates for a collaborative approach to IT leadership, promoting team involvement and decision-making to enhance resilience and reduce the risks of relying solely on one person's expertise.

Nov 11, 2024·Becker's Hospital Review

Two healthcare systems, the Mayo Clinic and UW Health, are implementing programs to address workforce shortages by integrating veterans into civilian medical careers. The Mayo Clinic has launched a military medicine fellowship in Phoenix, offering veterans hands-on healthcare experience and preparing them for further medical training or educational roles. Meanwhile, UW Health is fostering a supportive environment for military-trained personnel, collaborating with organizations to ease their transition into civilian healthcare. This includes awarding college credits for military service and legislative support to allow certain military members to practice healthcare without immediate licensure, all aimed at creating a smoother transition for veterans.

Nov 11, 2024·MedCity News

Trust in healthcare is built on a workforce that reflects the diversity of the patient population, yet current statistics show a significant lack of representation among healthcare professionals, with only 38% of physicians being female and even fewer identifying as non-White. Addressing this disparity requires organizations to invest in diverse talent pipelines and consider a contingent workforce model, which can improve access to local talent and enhance patient care. To effectively implement this model, healthcare organizations should develop strategies that promote collaboration between contingent and full-time employees while leveraging talent intelligence metrics to identify areas for workforce improvement.

Nov 11, 2024·BleepingComputer

Cisco has released a security update to address a serious vulnerability, CVE-2024-20418, affecting its Ultra-Reliable Wireless Backhaul (URWB) access points, which are critical for industrial wireless automation. The flaw, located in the web-based management interface of Cisco's Unified Industrial Wireless Software, allows unauthenticated attackers to execute commands with root privileges through command injection attacks without user interaction. This vulnerability affects specific models, including the Catalyst IW9165D, IW9165E, and IW9167E access points, only when running vulnerable software in URWB mode. While there is no evidence of active exploitation or publicly available exploit code, administrators are advised to check their devices for risk using the "show mpls-config" command.

Nov 11, 2024·ExecutiveGov

The Department of Veterans Affairs has named Kim Stevens as its new Chief Health Informatics Officer, leveraging over ten years of experience in healthcare and digital technology. In her role, Stevens will lead efforts to enhance patient care and organizational performance through informatics solutions. Her previous positions include mentoring doctoral nursing candidates at Walden University and working as an associate manager at Accenture, where she focused on improving scientific data management in healthcare. With a background in nursing and informatics from notable organizations and universities, Stevens is well-prepared to address the challenges in health informatics for veterans. She holds a bachelor's degree in nursing as well as a master's and doctorate in nursing informatics.

Nov 11, 2024·Healthcare IT News

Beth Israel Deaconess Medical Center's OpenNotes Lab is launching a project in collaboration with AI developer Abridge to assess the effectiveness of AI in creating patient visit summaries. This initiative aims to improve the communication between patients and clinicians, ensuring greater transparency and health equity. Abridge's technology will generate structured clinical notes at an 8th-grade reading level, covering crucial aspects such as diagnoses and medications. Patient feedback on the AI-generated notes will be collected through focus groups while maintaining patient privacy. Since its inception in 2010, OpenNotes has enhanced patient engagement and is now a significant movement supported by the 21st Century Cures Act, requiring healthcare providers to share clinical notes with patients.