Stay ahead of the headlines

Oct 9, 2024·The Hacker News

Microsoft has raised concerns about the growing use of legitimate file hosting services like SharePoint, OneDrive, and Dropbox in cyber attack strategies, particularly in business email compromise (BEC) schemes. This technique, referred to as living-off-trusted-sites (LOTS), enables threat actors to mask malicious activities within trusted network traffic, complicating efforts to detect and trace these attacks. Recent observations indicate an uptick in phishing campaigns leveraging restricted access files shared through these platforms, often initiated by compromising trusted vendor users. Targeted individuals receive phishing emails with links requiring one-time password authentication, leading them to pages aimed at stealing credentials and two-factor authentication tokens.

Oct 9, 2024·UC Davis Health

A study conducted by researchers at UC Davis Children’s Hospital demonstrates that virtual family-centered rounds can significantly enhance family involvement in neonatal intensive care units (NICU), particularly benefiting minority families and those without college degrees. Published in Telemedicine and e-Health, the research indicates that this virtual format improves attendance and engagement, allowing families to better communicate with medical teams about their child’s condition. Led by associate professor Jennifer Rosenthal, the study involved 110 families and found that virtual participation notably increased among those who typically face challenges with in-person attendance, suggesting that virtual rounds may help address healthcare access disparities.

Oct 9, 2024·LinkedIn

A recent study examining the time spent by physicians using electronic health records (EHRs) found that doctors average 5.8 hours of EHR work for every 8 hours of patient care, with 42% of this time occurring outside clinic hours. The research, which analyzed data from over 200,000 physicians, identified documentation as the most time-consuming task and highlighted that primary care and cognitive specialists utilize EHRs more than procedural specialists. While the findings may elicit criticism of EHR systems, Spencer Dorn, a medical professor, underscores the importance of acknowledging other influences on physician workflow and advocates for recognizing the advantages EHRs offer, such as enhanced communication and improved access to patient information.

Oct 9, 2024·CSO Online

CISOs are recognizing the need for effective risk storytelling to engage stakeholders and drive action in cybersecurity. Given the complexity of cybersecurity risks, traditional technical presentations are inadequate; instead, CISOs must frame risks in business-related terms, such as brand or regulatory implications. By incorporating relevant news stories and quantifying potential financial impacts, they can craft compelling narratives that highlight the necessity of robust security programs. However, challenges like inconsistent data on cyber threats complicate risk assessment, underscoring the need for a standardized risk management process. Building credibility with executives involves focusing on material risks that connect to business objectives rather than technical jargon.

Oct 9, 2024·LinkedIn

Spencer Dorn, a Vice Chair and Professor of Medicine at UNC, examines the complex role of Epic in the healthcare technology sector, which serves a significant portion of U.S. hospitals. He references articles with divergent opinions, including Robert Kuttner's critique of Epic as a monopolistic entity focused on profit over patient care, and Katie Jennings' portrayal of founder Judy Faulkner as dedicated to independence and philanthropy. Dorn also highlights Brendan Keeler's argument that Epic's strategy of integrated systems contributes to its success, setting it apart from competitors despite some valid criticisms regarding market dominance. He notes that much of the clinician dissatisfaction with electronic health records often relates to organizational challenges rather than the technology itself.

Oct 9, 2024·HealthLeaders

The Change Healthcare ransomware attack earlier this year disrupted operations at Moffitt Cancer Center by rendering critical systems inoperable, affecting claims processing and patient payments. Vice President Lynn Ansley highlighted the urgent need for accurate information to assess the situation and emphasized maintaining payroll for their staff of 9,500 while seeking alternative cash flow solutions. During the three-week outage, the team adapted by using an alternate clearinghouse and relied on manual data entry for claims, necessitating a re-familiarization with outdated systems.

Oct 9, 2024·CIO

New research suggests that IT organizations have suffered a reputational hit. According to the IBM Institute for Business Value survey indicates a troubling decline in confidence among C-suite executives in their IT teams, with only 36% of CEOs stating they trust their IT departments to deliver essential services. This reflects a broader trend of waning confidence among IT leaders themselves. The findings suggest that increasing expectations, coupled with the rapid adoption of advanced technologies, are challenging IT professionals who are struggling with legacy systems and a talent shortage. As a result, IT departments are often seen as slow and less integral to strategic business functions, potentially hindering future investment and collaboration.

Oct 8, 2024·Becker's Hospital Review

University Hospitals in Cleveland transitioned to a new EHR system, Epic, after determining that their previous systems, including Allscripts and Cerner, were unsustainable. The decision was made about five years ago, with a focus on avoiding market pressure-driven changes. To support the $400 million investment, CIO Robert Eardley and former CFO Michael Szubski presented a business case to the board that highlighted potential financial benefits of around $120 million and projected payback periods of 2.5 to 4.9 years. The planning phase began in early 2020, involving evaluations of the major EHR vendors and a detailed analysis encompassing 15 benefit categories.

Oct 8, 2024·HealthIT.gov

Significant investments have improved the digital infrastructure of the U.S. healthcare system, particularly in EHRs and interoperability, writes Micky Tripathi, Acting Chief Artificial Intelligence Officer at the HHS. However, reports of potential legal violations related to information sharing raise concerns about data exchange efficacy. The 21st Century Cures Act mandates the use of application programming interfaces (APIs) for certified EHRs to enhance data accessibility. While more than 96% of hospitals and 78% of physician offices utilize certified EHRs with standardized FHIR APIs, challenges remain, including difficulties in accessing API documentation, high fees from certified developers, and hurdles in connecting with providers. The primary barriers to progress seem to be behavioral rather than technological, highlighting the need for better support and resources for API users.

Oct 8, 2024·HealthLeaders

During the HFMA Annual Conference, Rod Hanners, CEO of Keck Medicine of USC, highlighted the need for a people-first approach to address workforce challenges in healthcare. He emphasized that while traditional metrics like turnover rates are important, prioritizing employee satisfaction can lead to better clinical and financial outcomes. Keck Medicine has initiated programs that emphasize professionalism and well-being, such as the Daily Incident Reporting System, which encourages open communication about workplace concerns. Hanners also pointed out the vital role of middle management in cultural change, advocating for support systems to help these leaders navigate their responsibilities effectively.

Oct 8, 2024·The Record

The U.S. Department of Health and Human Services has alerted the healthcare industry about Trinity ransomware, a new strain detected in May 2024 that has already affected multiple victims, including healthcare providers in the U.S. and the U.K. Trinity ransomware encrypts files with a “trinitylock” extension and poses significant data theft risks, as illustrated by one gastroenterology provider's loss of 330 GB of data. The ransomware exploits system vulnerabilities and spreads laterally within networks, with victims facing an urgent demand for payment in cryptocurrency to prevent data leaks. Experts have noted similarities between Trinity and previous ransomware strains, indicating possible links among the attackers.

Oct 8, 2024·MedCity News

Access to healthcare in rural America is hindered by numerous barriers, impacting around 60 million residents. Limited provider availability, higher rates of chronic health issues, and the closure of rural hospitals contribute to poorer health outcomes, evidenced by elevated mortality rates compared to urban areas. Financial challenges are exacerbated by a higher uninsured rate and long travel distances to care facilities, while inadequate internet access restricts the effectiveness of telehealth services. To overcome these challenges, a multifaceted approach is needed, including the expansion of broadband and the integration of various healthcare technologies.

Oct 8, 2024·Cyberscoop

UnitedHealth Group's recovery from a significant ransomware attack on its Change Healthcare subsidiary is ongoing, requiring a complete overhaul of its computer systems, according to Chief Information Security Officer Steven Martin. Speaking at the Mandiant Worldwide Information Security Exchange, Martin revealed that only the cables were retained from the previous infrastructure, as the company replaced all routers, switches, and computing systems to enhance security. The attack, linked to the ALPHV group and occurring in February, resulted in profound disruptions for healthcare providers and ransom payments estimated at $22 million. After months of intensive effort and collaboration with Mandiant's incident response team, the restoration process is nearing completion, with Martin describing the recovery as a long-term commitment akin to running a marathon.

Oct 8, 2024·Ars Technica

The Federal Communications Commission (FCC) has authorized Starlink and T-Mobile to provide satellite-to-phone services in Hurricane Helene-affected areas, specifically enabling emergency alerts and basic texting capabilities for T-Mobile users in North Carolina. While SpaceX is currently operational in the region, they caution that the service is not ready for full commercial availability and will be offered on a best-effort basis due to the incomplete satellite constellation. The FCC's approval is part of a broader strategy to ensure communication during emergencies and includes temporary measures for other providers. Elon Musk has acknowledged the FCC's quick approval but criticized the agency for denying Starlink's request for $885 million in broadband funding, which he believes could have further supported recovery efforts in North Carolina.

Oct 8, 2024·American Medical Association

A recent AMA study reveals that office-based physicians spend over five hours on electronic health record (EHR) tasks for every eight hours spent with patients, highlighting a significant contributor to physician burnout. In response, the AMA has allocated nearly $250,000 in grants to five organizations to improve EHR workflows and enhance physician well-being and patient care. Since 2019, the AMA's EHR Use Research Grant Program has funded over $2.25 million to 28 organizations to explore EHR-related challenges. Notable 2024 grant recipients, including Stanford University and Yale University School of Medicine, will research various critical EHR issues, such as improving problem list accuracy in federally qualified health centers.

Oct 7, 2024·Hit Consultant

A report by Trilliant Health outlines concerning trends in the U.S. healthcare system, indicating that rising expenditures are not translating into improved health outcomes. The "2024 Trends Shaping the Health Economy Report" warns of an unsustainable trajectory, noting that national health spending has increased dramatically from $2.8 trillion in 2012 to $4.5 trillion in 2022, with projections of $7.7 trillion by 2032. Despite these financial investments, life expectancy has stagnated and is below that of other OECD nations, while mortality rates and health issues among younger Americans are on the rise, particularly with the emergence of early-onset cancers.

Oct 7, 2024·Becker's Hospital Review

During a panel at the Becker’s Health IT Digital Health and Revenue Cycle Conference, Daniel Barchi, CIO of CommonSpirit Health, discussed the integration of artificial intelligence (AI) in healthcare, emphasizing the importance of strategic planning to realize its benefits. He likened AI investments to tuition—requiring thoughtful consideration—while contrasting them with cybersecurity expenses, which are essential for operational stability. Barchi noted that many health systems have been using AI tools for years, often without recognizing them as such, and highlighted the existing applications in clinical systems like sepsis management and radiology. He cautioned against the hype surrounding AI, urging healthcare leaders to concentrate on practical applications that deliver measurable outcomes.

Oct 7, 2024·Apple News

A teenage hacker gained fame in the underground hacking community for his high-profile attacks on various organizations, showcasing his technical skills. However, his notoriety attracted unwanted attention from rival hackers, leading to increased scrutiny and hostility against him. This shift in dynamics underlines the precarious nature of the hacker world, where former allies can quickly turn into adversaries. His experience serves as a cautionary tale about the risks of fame in this competitive environment, illustrating the balance between opportunity and threat in the digital underworld.

Oct 7, 2024·TeamBlind

A recent survey by Blind indicates that 91% of Amazon corporate employees are unhappy with CEO Andy Jassy's decision to require a full return to the office by January 2025, reversing the current three-day in-office attendance policy. Many employees expressed concerns regarding the impact on their morale and work-life balance, with 73% considering job changes and 80% knowing others who are thinking of leaving. The policy has drawn criticism, particularly from those with family responsibilities, as it diminishes their ability to balance work and personal obligations.

Oct 7, 2024·TechRadar

C-suite executives are increasingly seen as a key vulnerability in organizational cybersecurity due to their access to sensitive data and frequent use of personal devices for work purposes. A GetApp survey indicated that 72% of U.S. senior executives experienced cyberattacks in the past 18 months, with notable increases in various types of fraud, including a 29% rise in scams and piracy and a 26% rise in impersonation scams. The use of deepfake technology in 27% of these incidents has further exacerbated risks, leading to significant financial losses. Cybersecurity experts advocate for enhanced training and awareness for top executives, highlighting the need for proactive measures to safeguard organizational leadership against these targeted threats.