Stay ahead of the headlines

Aug 22, 2024·StackAware

The author expresses skepticism about the value of cyber insurance after engaging in a frustrating process with their carrier to establish a response plan. Despite purchasing the insurance for contractual reasons, the carrier showed little proactive interest in preparing the client for incidents. Challenges included delays in securing a non-disclosure agreement (NDA) and business associate agreement (BAA), inadequate onboarding support, and the need to manually remove former employees from communication channels. The author also questions the efficacy of cyber insurance, citing instances of low claims payouts and industry struggles to quantify cyber risk, suggesting some organizations might be better off investing in improved preventative controls rather than insurance premiums.

Aug 22, 2024·wsj.com

The article discusses the growing threat of cyberattacks on hospitals and the broader healthcare industry. It highlights various incidents of security breaches, explores the consequences these attacks have on medical facilities and patient care, and emphasizes the urgent need for improved cybersecurity measures. Strategies such as adopting comprehensive security frameworks, investing in advanced technology, and conducting regular training for healthcare staff are recommended to mitigate these risks and protect sensitive health information from cyber threats.

Aug 22, 2024·defensescoop.com

The article advocates for the establishment of an independent U.S. Cyber Force, emphasizing that current distributed cyber defense efforts are insufficient in facing the sophisticated and frequent cyber threats from adversaries like China, Russia, and Iran. It argues that a dedicated cyber force would fill gaps in capabilities, training, and innovation, while providing streamlined command, specialized recruitment, and enhanced adaptability. Comparisons to the recently established U.S. Space Force are made to illustrate the need for specialized military branches to address unique operational challenges. The article counters concerns about redundancy and cost by noting potential efficiencies and long-term benefits, asserting the necessity of a robust cyber force to safeguard national security.

Aug 22, 2024·YouGov

A recent YouGov poll explores Americans' perspectives on the U.S. healthcare system, revealing widespread dissatisfaction, with only 40% having a favorable opinion compared to 53% who view it unfavorably. The survey also highlights demographic variations, noting that older adults and Black Americans tend to have more favorable views. Despite dissatisfaction with the system, medical professionals like doctors and nurses are viewed favorably by a majority. The poll addresses the complexities of medical malpractice and discrimination, where many Americans reported experiencing negative treatment based on factors like weight, insurance status, or identity. The data suggests that a significant number of Americans avoid medical care due to negative past experiences, emphasizing the importance of effective communication and respect from healthcare providers to improve patient comfort and trust. The poll methodology is based on a diverse sample aimed to represent U.S. adult citizens.

Aug 22, 2024·Healthcare IT News

AllianceChicago is a network of over 76 community health centers across 23 states, focusing on improving health equity through collaboration and health information technology (HIT). With a history spanning more than 25 years, the organization supports community-based research, innovative partnerships, and the development of tools like PRAPARE to address social determinants of health. Andrew Hamilton, RN, CIO, and deputy director, discusses how HIT supports equitable care, enhances public health surveillance through standardized EHR systems, and integrates social care needs data to foster a more inclusive healthcare system. The emphasis is on collaborative efforts, data interoperability, and addressing social needs at both individual and population levels to optimize health outcomes and equity.

Aug 22, 2024·HealthTech Magazine

Improving the customer experience (CX) is vital for healthcare organizations, who often view it as a cost center rather than an opportunity. Only 6% of brands improved their CX quality significantly, according to Forrester Research. Key strategies include enhancing contact center solutions with CPaaS platforms and AI, which offer tools like voice bots and contextual data analytics to personalize interactions. Automation and AI can streamline workflows, reduce errors, and support agents in delivering efficient, empathetic service. While bots can alleviate some tasks, there will always be a role for human agents, with AI tools offering support to make interactions more effective and satisfying.

Aug 22, 2024·crn

CrowdStrike executive Gur Talpaz has dismissed claims that the cybersecurity firm is planning to acquire patch management company Action1 for nearly $1 billion, calling these reports "outrageous." Despite a single, brief meeting between the two companies following the RSA Conference, Talpaz clarified that no senior CrowdStrike leaders were involved, no non-disclosure agreements were signed, and discussions did not progress beyond a surface level. Action1 issued a statement confirming multiple acquisition inquiries but emphasized its decision to remain independent. These claims emerge amid CrowdStrike's reputational challenges following a defective update that caused significant disruptions, including a costly outage for Delta Airlines. CrowdStrike is now committing to more rigorous testing and staged updates to prevent future issues.

Aug 22, 2024·CIO

A recent Pluralsight survey reveals that 74% of IT professionals fear AI could render their skills obsolete, with 69% concerned about being replaced by AI altogether. As AI adoption accelerates, the IT industry faces a significant shift in required skillsets, yet 90% of executives admit they lack a clear understanding of their teams’ AI proficiency. While there is widespread recognition of AI’s potential to eliminate positions, 96% of IT workers are prioritizing learning AI skills to secure their roles. Despite these concerns, 81% of IT pros remain confident they can adapt to AI, highlighting the urgent need for organizations to invest in upskilling to navigate the AI-driven future.

Aug 21, 2024·FedTech Magazine

The U.S. Department of Veterans Affairs (VA) is increasingly incorporating Internet of Medical Things (IoMT) devices into its healthcare delivery system to enhance patient data collection and streamline clinical operations. These connected medical devices present significant benefits but also pose cybersecurity risks such as potential data breaches and ransomware attacks. To mitigate these risks, the VA and other federal agencies are adopting zero-trust architectures, emphasizing continuous monitoring, encryption, and segmented network access. Legacy devices with outdated security controls further complicate the landscape, prompting the FDA to advocate for stronger collaboration and updated regulatory measures among manufacturers and healthcare providers. Organizations are advised to employ comprehensive security solutions and proactive management strategies to safeguard these critical devices in the complex healthcare environment.

Aug 21, 2024·KrebsOnSecurity

A recent breach at National Public Data (NPD) has exposed the personal information, including Social Security Numbers, addresses, and phone numbers, of hundreds of millions of Americans. The exposure was exacerbated by a related data broker inadvertently publishing database passwords online. The breach, initially sold by a cybercriminal in April, became public in July, compromising information of over 272 million people. Additionally, it was discovered that credentials for users of NPD’s sister site recordscheck.net were exposed via an accessible archive. This breach highlights the importance of credit file freezes, as detailed personal information is now more accessible to identity thieves.

Aug 21, 2024·The HIPAA Journal

The editorial by Josh Ablett emphasizes the critical need for healthcare organizations to conduct cyber fire drills to effectively handle breaches. Despite significant investments in preventive measures, breaches continue to occur, causing severe operational disruptions and financial consequences. Ablett explains the concept of "dwell time" and argues that early detection and swift response are crucial to minimizing damage. He advocates for regular, realistic cybersecurity simulations to build employee muscle memory, ensuring they know how to act promptly and appropriately during an attack. Implementing these drills can mean the difference between a minor incident and a major operational crisis.

Aug 21, 2024·The Wall Street Journal

Health technology companies are increasingly taking legal action against tech firms after experiencing often costly outages, but these lawsuits face significant challenges. Proving direct damages and the responsibility of tech providers can be arduous due to complex service level agreements and potential loopholes. Companies must navigate the intricacies of proving financial loss directly resulting from these disruptions, which adds to the difficulty of achieving successful legal outcomes.

Aug 21, 2024·Healthcare IT News

As interest in AI grows within healthcare, its implementation has shown success predominantly in administrative tasks with fewer clinical applications due to concerns about model transparency and explainability. Neeraj Mainkar, a software engineering expert at Proprio, discusses the critical need for understanding AI decision-making processes in the healthcare sector to ensure patient safety and foster trust. Explainable AI is necessary to trace decision paths, identify and rectify errors, mitigate bias, maintain regulatory compliance, and uphold ethical standards. This approach ensures AI systems are transparent, reliable, and compliant with healthcare regulations like HIPAA, thereby promoting fair and effective patient care.

Aug 21, 2024·azure.microsoft.com

Microsoft is introducing mandatory multifactor authentication (MFA) for all Azure sign-ins starting in the second half of 2024. This move is part of its $20 billion investment in security and the Secure Future Initiative to protect identities and digital assets from increasingly sophisticated cyberattacks. The phased rollout aims to provide customers with time to implement the changes and will involve notifications via email, Azure portals, and the Microsoft 365 message center. Customers will also have various MFA options, including Microsoft Authenticator, FIDO2 security keys, and certificate-based authentication, with extended timeframes available for complex environments. More details can be found in Microsoft's documentation.

Aug 21, 2024·Becker's Hospital Review

Epic Systems will transition its customers to the Trusted Exchange Framework and Common Agreement (TEFCA), an initiative mandated by the 21st Century Cures Act to enhance nationwide health information interoperability, by the end of 2024. TEFCA offers a unified governance and technical standard framework, and Epic Nexus has been designated as a Qualified Health Information Network to facilitate this transition. Carequality, which currently connects a vast network of healthcare providers and is used by Epic’s community, has also announced plans to align with TEFCA. Despite past controversies over record requests, Epic assures continued support for Carequality during the transition to ensure successful interoperability.

Aug 21, 2024·TechCrunch

Earlier this year, Change Healthcare, a UnitedHealth-owned health tech company, suffered a significant ransomware attack, resulting in what is likely one of the largest data breaches of U.S. health and medical data. The attack, attributed to the ALPHV/BlackCat ransomware gang, caused widespread outages across the healthcare sector, disrupting billing and prescription services. Although UnitedHealth paid a $22 million ransom for a "safe" copy of the stolen data, issues persisted as affected individuals began receiving breach notifications. UnitedHealth confirmed the breach impacted a substantial portion of the U.S. population, with potentially over 100 million individuals affected. The incident, rooted in compromised security protocols, highlights vulnerabilities in handling sensitive healthcare data and has prompted increased bounty efforts from the U.S. government to locate those responsible.

Aug 21, 2024·BankInfoSecurity

Action1, a patch management and vulnerability remediation startup, has declined a $1 billion acquisition offer from CrowdStrike to remain independent. Co-founder and President Mike Walters believes that staying independent allows the company to capitalize on its unique technology and dedication to patch management, projecting that Action1 can grow into a multibillion-dollar business. The founders' previous success with Netwrix and the company's financial independence contribute to this decision, allowing them to prioritize long-term growth. Customer sentiment also played a role, with many expressing concerns that an acquisition might negatively impact Action1's existing offerings.

Aug 20, 2024·HealthCare Dive

Employer healthcare costs are projected to rise by 9% in 2025, pushing the average plan cost per employee over $16,000, according to Aon. This increase, driven by inflation, higher prices for specialty drugs, and growing demand for glucagon-like peptide 1 (GLP-1) medications, follows a 6.4% rise in 2024. As most non-elderly Americans get their insurance from employers who cover about 81% of costs, the burden is increasingly being passed to employees through higher premiums and deductibles. Despite plans to maintain health benefits, nearly half of employers may shift more costs onto workers, exacerbating affordability issues.

Aug 20, 2024·Computerworld

Research firm IDC projects that global spending on artificial intelligence (AI) will grow at an annual rate of 29% through 2028, reaching $632 billion. Key drivers for this increase include the integration of AI, especially generative AI (genAI), into various products. Financial services, banking, software, information services, and retail sectors are set to account for 45% of total AI expenditure. While genAI's share will be one-third of overall AI spending, its growth rate is expected to outpace the broader AI market. The U.S. will lead in AI investments, with anticipated spending of $336 billion by 2028. IDC also notes a significant rise in AI software demand, which will comprise more than half of total AI technology spending.

Aug 20, 2024·McKinsey & Company

Health systems worldwide are grappling with challenges like rising costs, workforce shortages, and aging populations while facing increased consumer demands for digital services such as telemedicine. To address these issues, many health systems are prioritizing digital and AI transformation. However, a recent survey of 200 global health system executives revealed that while 75% acknowledge the importance of these transformations, they feel their current investments are insufficient. The survey highlights budget constraints, legacy systems, and a lack of resources as significant barriers. Despite these challenges, executives report high satisfaction in areas where digital investments have been made, indicating potential for substantial benefits if barriers are overcome with strategic investments and partnerships.