Stay ahead of the headlines

Aug 2, 2024·Becker's Hospital Review

Health systems in the U.S. are integrating artificial intelligence (AI) into their clinical and administrative functions. Some systems have created new roles such as Chief AI Officer to oversee this integration, with significant appointments at Cleveland Clinic, VCU Health, and Mayo Clinic Arizona. However, the necessity of a dedicated AI role is debated. Experts like Anthony Chang of CHOC and Kathy Azeez-Narain of Hoag question if such roles are required, suggesting AI should be embedded across all C-suite functions. The prevailing view is that AI literacy is essential for all senior leaders, as AI will become a pervasive tool in healthcare operations.

Aug 2, 2024·Chief Healthcare Executive

The recent worldwide computer outages, caused by a faulty software update from cybersecurity firm CrowdStrike, starkly highlighted the vulnerabilities in hospital systems. The impact disrupted access to electronic health records and led to postponed medical procedures. Experts underscored the need for robust response plans for such cyber incidents, emphasizing that these plans must be comprehensive, regularly tested, and updated to account for various scenarios, including long-term outages and key personnel unavailability. The Joint Commission advised hospitals to be prepared for critical systems being offline for extended periods and to involve multidisciplinary teams in the planning process. Hospitals must also be vigilant about their vendors' vulnerabilities and ensure they have contingency plans in place for vendor-related disruptions.

Aug 2, 2024·CNBC

Epic Systems, a health-care software vendor, announced that individuals will now have the capability to release their health data to various apps of their choice, giving them more control over their medical information. This development is a significant technological advancement in the health-care sector. Epic has been instrumental in helping the federal government establish the Trust Exchange Framework and Common Agreement (TEFCA), which sets the legal and technical guidelines for sharing patient data on a large scale. This initiative aims to make it easier for U.S. patients to access their medical records.

Aug 1, 2024·Automation.com

The use of surgical robots has significantly advanced modern healthcare by providing precision, reducing recovery times, and improving patient outcomes. However, these benefits come with increased cybersecurity risks. Ransomware and DDoS attacks can disrupt hospital operations, while unauthorized access can lead to harmful manipulations during surgeries. Data breaches pose substantial threats by exposing sensitive patient information. To mitigate these risks, healthcare organizations should implement multi-factor authentication, regular software updates, encryption, and strong access controls. Proactive and layered defense strategies are essential to ensure the safety and reliability of robotic surgical systems.

Aug 1, 2024·Windows Central

Intel has identified the root cause of instability issues in its 13th and 14th Gen desktop CPUs, attributing it to a microcode-induced elevated operating voltage. A microcode fix is expected by mid-August, aimed at preventing further occurrences of the issue, although it will not repair already affected CPUs. Intel has urged users experiencing instability to contact customer support and remains committed to addressing these problems. The instability affects a broader range of CPUs than initially thought, including K, KS, KF, and non-K 65W (and higher) variants. Meanwhile, AMD has also faced delays in the release of its Ryzen 9000 CPUs due to a branding error but expects only a short delay.

Aug 1, 2024·Forbes

The article explores the parallels between the shakeout in the early automotive industry and the emerging market for ambient scribe technology in healthcare. Highlighting how technological advancements and increased efficiency led to a significant reduction in automotive manufacturers while benefiting consumers and society, the piece posits that ambient scribe technology could similarly reduce the burden of electronic health record (EHR) documentation on clinicians. Leveraging AI, these tools capture and summarize physician-patient interactions, potentially reducing burnout and enhancing patient care. With growing competition among various tech companies, the article suggests that the market is heading towards a shakeout, with the most efficient and integrated solutions likely to prevail, ultimately benefiting healthcare professionals and patients alike.

Aug 1, 2024·HealthExec

A recent IBM report reveals that healthcare remains the hardest-hit industry by cybercrime, seeing data breach costs of $9.77 million between March 2023 and February 2024. This represents a 10.6% drop from the previous year, yet healthcare still far surpasses the financial sector at $6.08 million. The report underscores that legacy technologies and high disruption vulnerability make healthcare a prime target. Additionally, the study observed a 10% increase in the global cost of data breaches, reaching $4.88 million, largely driven by business disruptions and customer support post-breach. Security AI and automation have proven effective in reducing breach costs by an average of $2.2 million. However, a significant gap in skilled cybersecurity staff persists, exacerbated by growing threats and the rapid adoption of generative AI technologies.

Aug 1, 2024·insurancebusinessmag.com

The article discusses the growing cybersecurity threats to medical devices and healthcare systems due to the increased connectivity brought about by the Internet of Things (IoT). These threats can jeopardize patient safety and compromise sensitive health data, as evidenced by instances like the FDA's recall of pacemakers and the significant data breach experienced by Change Healthcare. The risks are exacerbated by aging hospital infrastructure, particularly outdated MRI machines. Kirstin Simonson and Jennifer Ampulski from Travelers emphasize the importance of cyber insurance and robust cybersecurity practices throughout the supply chain, advising hospitals and healthcare providers to evaluate their partners' security protocols and leverage available resources to strengthen their defenses. Additionally, adhering to FDA guidelines and addressing misconceptions about cyber insurance coverage are crucial steps in mitigating these vulnerabilities.

Aug 1, 2024·bbc.com

Microsoft experienced a global outage affecting key products, including Outlook and Minecraft, caused by a DDoS attack compounded by inadequate defense implementation. The incident lasted nearly 10 hours, disrupting multiple services and causing widespread user complaints. The firm issued an apology and implemented a fix, committing to monitoring for full recovery. This event follows a recent major outage linked to CrowdStrike's flawed update. Services relying on Microsoft's platforms, such as Cambridge Water, HM Courts and Tribunals Service, and NatWest, were also impacted. The outages coincided with Microsoft's financial update, reporting weaker-than-expected growth in its Azure cloud services and a subsequent 2.7% share drop.

Aug 1, 2024·CNBC

Delta Air Lines has enlisted attorney David Boies to seek damages from CrowdStrike and Microsoft following a significant software outage that led to mass flight cancellations. The incident, stemming from a CrowdStrike software update, resulted in extensive disruptions across multiple industries, with Delta being particularly affected. CrowdStrike's shares plummeted by up to 5% in extended trading as a result, and the Department of Transportation is investigating Delta's failures. The outages caused Delta to incur estimated losses between $350 million to $500 million and generated over 176,000 refund requests. Insurance startup Parametrix estimated the total loss for Fortune 500 companies, excluding Microsoft, at $5.4 billion.

Aug 1, 2024·KrebsOnSecurity

New research reveals that over a million domain names, including those registered by major Fortune 100 firms, are susceptible to being hijacked due to weak authentication methods employed by various web hosting providers and domain registrars. The issue stems from "lame" DNS records, which happen when a domain's authoritative name server lacks sufficient information to resolve queries. This vulnerability allows cybercriminals to assume control of these domains without accessing the legitimate owner’s account, a method previously exploited in high-profile cases to send bomb threats and phishing emails. The research, conducted by Infoblox and Eclypsium, notes that this has been an ongoing issue, with numerous DNS providers still failing to implement adequate domain ownership verification. The hijacked domains, termed "Sitting Ducks," are often used for malicious activities, including phishing and malware distribution. Despite some improvements and ongoing efforts by a few providers, more cooperation among all stakeholders and better regulatory measures are necessary to mitigate these risks.

Aug 1, 2024·ZDNet

Meta's new AI Studio allows users to create custom AI-powered chatbots with personalized touches, making it accessible even to those without technical skills. Initially available to Instagram Business accounts in the US, it will soon roll out to all Meta users through Instagram, Messenger, and WhatsApp. The tool enables creators to build chatbots that can interact with followers by answering messages and stories. Customization options include naming the AI, setting its personality, tone, avatar, and tagline. Users can manage auto-replies via Instagram’s professional dashboard, ensuring transparent interactions with followers. Additionally, AI Studio chatbots can be tailored to answer questions or simulate social scenarios.

Aug 1, 2024·wired

OpenAI has released its latest AI model, GPT-4o, to power the ChatGPT chatbot, highlighting its advanced capabilities while raising significant privacy concerns. The model's enhanced functions, like interpreting emotions and performing intricate tasks, amplify the amount of data it can collect, including personal information. Despite OpenAI's assurances through their privacy policy that collected data is anonymized and primarily used for improving services, experts worry about potential data misuse and privacy invasions. The company offers some user controls to limit data usage, but the collection scope remains vast, encompassing everything from user prompts to geolocation data. Users can manage their privacy settings to some extent, though doing so may reduce the chatbot's functionality.

Aug 1, 2024·Nextgov

The Cybersecurity and Infrastructure Security Agency (CISA) is preparing to manage an expected surge in cyber incident reports necessitated by the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). A Government Accountability Office (GAO) audit confirmed that while CISA has met 13 of the 59 required reporting mandates, it still faces challenges handling the influx of reports due to limited technology and staff. CISA plans to develop new technical solutions, including an incident reporting portal and ticketing system, but budget constraints impede these efforts. The agency is also working to streamline reporting requirements and ensure efficient information sharing among federal partners to mitigate cybersecurity risks effectively.

Jul 31, 2024·Becker's Hospital Review

Amazon Health Services is reportedly facing significant financial losses, with leaked documents suggesting a loss exceeding $1 billion in 2024 following a nearly $1.3 billion loss in 2023. Despite these claims, an Amazon spokesperson refuted the accuracy of the figures, attributing them to incomplete draft documents and asserting strong ongoing progress in enhancing cost structure and healthcare accessibility. These developments come amidst Amazon's expanding healthcare ventures, including the acquisitions of PillPack and One Medical, and its continued growth through strategic partnerships and service expansions. The company will report its next quarterly earnings on August 1.

Jul 31, 2024·HealthLeaders Media

A recent survey by Propeller Insights for Carta Healthcare reveals that 45% of consumers have encountered inaccuracies in their medical records, with a significant portion believing that AI could help address these issues. However, despite 60% of respondents confident that AI can improve record accuracy, more than half express concerns about its security and reliability. The survey also highlights generational differences, with younger people more frequently correcting record errors than their elders, and Baby Boomers showing the highest confidence in AI's potential to improve data accuracy. While accessibility of medical records is generally not problematic, the findings suggest that healthcare executives need to address public trust in AI and ensure its accuracy, seeing it as both a solution and a marketing tool.

Jul 31, 2024·cio.com

The article highlights the evolving requirements for modern IT leadership through the career paths of notable figures like Joy Brown, Vikram Nafde, and Annie Baymiller. Joy Brown's journey at Boston Medical Center underlines the importance of holistic tech and business acumen, encompassing digital, AI, and P&L responsibilities. Vikram Nafde's customer-centric approach at Webster Bank emphasizes the necessity of understanding enterprise strategy and relationship-building. Annie Baymiller’s trajectory at Owens Corning demonstrates the value of mentorship and a structured development plan. Additionally, training programs like the CXO Connect Global CIO Certification Program are noted for preparing future CIOs by focusing on strategy, soft skills, and executive management beyond technical expertise. Brown's experience underscores the necessity of networking and clear communication of career goals within and outside organizational leadership to attain top IT roles.

Jul 31, 2024·arstechnica

Microsoft has urged VMware ESXi hypervisor users to address the CVE-2024-37085 vulnerability, which is exploited by ransomware groups to gain full administrative control over servers. Threat groups including Storm-0506 and Octo Tempest have used this flaw in post-compromise attacks to encrypt file systems and disable servers. The vulnerability allows any domain group named "ESX Admins" to automatically receive admin privileges, a flaw recently patched by VMware. Attackers have leveraged this in escalating privileges and deploying ransomware like Black Basta. Administrators are advised to prioritize patching this vulnerability and monitoring for suspicious domain group modifications.

Jul 31, 2024·paulconnelly substack

A cybersecurity leader's effectiveness is closely tied to their relationships with key business leaders such as the CIO, General Counsel, Head of Internal Audit, CFO, and CEO, as well as with the board of directors. The evolution of the role now often requires regular reporting to the board, especially in high-risk industries. Support from the board can influence senior leadership decisions on investment and priorities and establish organizational tone from the top. Key strategies for building a strong board relationship include understanding the board's oversight role, knowing each member's background, speaking their language, providing clear information on risks and actions, and using real examples to build credibility. Regularly updating and seeking feedback from the board, and engaging in activities like tabletop exercises, can deepen this critical relationship and enhance cybersecurity efforts.

Jul 31, 2024·PYMNTS

**Apple Delays AI Features for New iPhone and iPad Software Updates** Apple has delayed the release of its new AI features, Apple Intelligence, for iPhone and iPad software until October, post the September launch of iOS 18 and iPadOS 18. Developers will access early versions via iOS 18.1 and iPadOS 18.1 betas. This delay aims to ensure stability and smooth consumer rollout, especially for advanced features like a revamped Siri. Meanwhile, competitors like Microsoft and OpenAI are advancing their AI capabilities. Regulators globally are scrutinizing AI industry practices to address potential antitrust concerns. **Maverick COO Says Embedded Finance Drives Growth and Personalization in Digital Ecosystems** Ben Griefer, COO of Maverick Payments, highlights the transformative impact of embedding financial services into digital ecosystems. This integration not only adds value to platforms but also boosts revenue. Historically challenging, embedded finance is now more accessible due to advanced technologies, leading to its adoption in various sectors. By leveraging customer data, businesses can offer personalized financial products, enhancing customer loyalty and satisfaction. Scalability remains a key advantage, allowing businesses to use established payment infrastructures while focusing on their core services. Griefer predicts continued growth and integration