Stay ahead of the headlines

Jul 29, 2024·artemis.bm

The recent IT outage linked to CrowdStrike has caused significant concern within the US cyber insurance industry, but losses are expected to be contained below $1 billion, with estimates ranging between $270 million and $960 million. Coalition's CEO Joshua Motta detailed that although such cyber events raise concerns about systemic risks, they do not equate to natural catastrophe losses. Modeling insights and adjustments to cyber insurance policies, including coverage limitations and sub-limits, are being accelerated in response to these events. The evolving landscape emphasizes the need for thoughtful management of cyber perils and acknowledges the benefits of technological diversification and rapid organizational responses.

Jul 26, 2024·AI in Healthcare

The Health Foundation in the U.K. has suggested a comprehensive strategy to maximize the benefits and mitigate the risks of AI in healthcare. They propose six key priorities: engaging the public, patients, and healthcare staff in AI's development; focusing AI efforts on critical NHS needs; enhancing data and digital infrastructure; ensuring rigorous testing and evaluation of AI technologies; establishing clear regulatory guidelines; and equipping the healthcare workforce with necessary AI skills. These priorities aim to address the urgent demand for healthcare services and workforce shortages, ensuring AI's advantages are realized broadly rather than in isolated pockets.

Jul 26, 2024·theguardian

CrowdStrike, a cybersecurity firm, recently offered its employees UberEats vouchers, raising questions about the company's remote work policies and employee benefits. This news highlights the growing trend of companies providing non-traditional perks to support their remote workforce. The move reflects how firms are adapting their incentives to accommodate the changing dynamics of work environments amid ongoing shifts in how and where employees perform their duties.

Jul 26, 2024·Wall Street Journal

CrowdStrike recently experienced a significant global tech outage due to a software bug, impacting various systems and services. The cybersecurity company, known for its cloud-delivered endpoint protection, is addressing the issue and working towards a resolution. The malfunction highlights the vulnerabilities inherent in software dependencies and the widespread effects such disruptions can have on technology ecosystems.

Jul 26, 2024·Becker's Hospital Review

Duke University Health System, along with other healthcare systems globally, experienced a significant IT outage on July 19 due to a faulty update from CrowdStrike, a prominent cybersecurity vendor. The disruption caused tens of thousands of workstations to display blank blue screens, directly impacting hospital operations and patient care systems. By activating incident command protocols and deploying a massive joint effort between IT and operational staff, most affected health systems restored patient services by July 22. The incident highlighted the critical reliance on third-party vendors and underscored the need for rigorous cybersecurity measures, including redundancy, vendor security evaluations, and comprehensive incident response planning. The event's resolution involved detailed manual intervention and coordination to mitigate the impact on healthcare delivery.

Jul 26, 2024·Cybersecurity Dive

The recent congressional testimony by UnitedHealth Group CEO Andrew Witty highlighted the increasing importance of cybersecurity at the executive level following a major cyberattack on Change Healthcare, a UnitedHealth subsidiary. The breach, which impacted millions of Americans, disrupted key healthcare services and exposed the vulnerability of healthcare data systems. This incident underscored that CEOs must play a proactive role in cybersecurity strategy, emphasizing risk mitigation, incident response, and disaster recovery. The implications extend beyond corporate embarrassment; CEOs face potential SEC charges, shareholder lawsuits, and national security concerns. Consequently, executives are urged to deeply engage in their organization's cybersecurity posture to prevent and effectively manage breaches.

Jul 26, 2024·The Virginian-Pilot

Dr. David Wallace and around 200 other primary care physicians at Sentara are testing DAX Copilot, a generative AI that automatically transcribes patient visit notes. The AI technology is designed to alleviate the administrative burden on doctors, thereby reducing burnout and addressing the shortage of primary care physicians. The system, which records conversations via a secure app, has received positive feedback from providers and patients, with only one report of patient objection out of over 20,000 visits. Sentara’s legal and IT teams ensure privacy by routing recordings directly to Nuance Communications' servers instead of storing them on doctors’ phones, and while the AI-generated notes still require doctors' review and signatures, it significantly cuts down on document preparation time. Additionally, the AI has the potential to offer visit highlights and write prescriptions, aiming to further streamline medical workflows.

Jul 26, 2024·Healthcare IT News

A recent advisory from the Cybersecurity and Infrastructure Security Agency (CISA) highlighted a series of remotely exploitable vulnerabilities in Philips' Vue Picture Archiving and Communication Systems (PACS) versions prior to 12.2.8.410. These vulnerabilities could allow unauthorized data access and system modifications, affecting system integrity and availability. Countries like the U.S. and Brazil are particularly at risk. Philips has issued updates to address these vulnerabilities and recommends healthcare organizations perform risk assessments before deploying defensive measures. The advisory underscores the importance of regular software updates to protect patient data and maintain system integrity.

Jul 26, 2024·hcinnovationgroup.com

A global outage caused by a faulty software update from CrowdStrike affected around 8.5 million Windows devices, leading to significant disruptions in health systems worldwide. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of ongoing cyber threats, including phishing attempts exploiting the outage. Health systems, such as RWJBarnabas Health and Providence, reported progress in restoring systems but faced scheduling delays and reverted to paper charting in some cases. Microsoft provided a recovery tool to aid affected systems, while the American Hospital Association (AHA) released guidelines for hospital IT teams to enhance resilience against such incidents. Nurses across the U.S. indicated widespread impacts, with some hospitals having to redirect ambulances.

Jul 26, 2024·Wall Street Journal

A recent article from the Wall Street Journal reports on a software outage experienced by CrowdStrike, a leading cybersecurity firm. The disruption stemmed from a problematic software patch, which impacted the company's Falcon platform and potentially compromised the security operations of multiple clients. The company is working to resolve the issue and has emphasized its commitment to preventing such incidents in the future. Readers are directed to the full story for further details.

Jul 25, 2024·Becker's Hospital Review

On July 19, Penn Medicine experienced a major disruption when a global IT outage from CrowdStrike affected 50,000 of their computers, leaving staff unable to use electronic medical records and greeted with the "blue screen of death." Executives, awakened by early morning calls, held an emergency Zoom meeting to manage the crisis, which led to the cancellation of most nonessential procedures and a switch to paper records for documentation. Critical imaging machines remained operational on a different system. Penn Medicine is extending clinic hours and considering a shift to iOS devices to mitigate future disruptions.

Jul 25, 2024·McKinsey Quarterly

The McKinsey article explores the evolving role of generative AI (gen AI) from providing information to executing complex workflows as "agents," akin to virtual coworkers. These gen AI-powered agents leverage foundation models to adapt to new scenarios, use natural language for task instructions, and integrate seamlessly with digital ecosystems, potentially automating intricate workflows that previously required human intervention. Early investments by tech giants like Google, Microsoft, and OpenAI signal the rise of agentic systems, which could streamline processes such as loan underwriting, code modernization, and online marketing. However, the technology remains nascent, warranting careful strategic planning and human oversight to mitigate risks and maximize its potential in business applications.

Jul 25, 2024·InfoWorld

Meta’s Llama 3.1 family of large language models (LLMs) presents significant advantages for enterprises by offering open weights, improved accuracy, and cost-saving opportunities. Analysts note that these models empower businesses to develop custom AI solutions, avoid vendor lock-in, and leverage high-performance capabilities without expensive proprietary licenses. However, the high deployment costs of the 405 billion-parameter variant might be prohibitive for small to medium enterprises, although cloud-based API solutions could mitigate this. The open nature of Llama 3.1 poses a competitive challenge to proprietary LLM providers, potentially driving down costs and fostering innovation across the AI industry.

Jul 25, 2024·PYMNTS

1. **EU, UK, and US Unite in GenAI Concerns**: Competition authorities from the US, EU, and UK have collectively voiced their worries about potential antitrust issues within the realm of generative AI, such as market concentration and anti-competitive practices. Top officials emphasized the necessity for swift measures to manage the fast-paced developments in AI technology. Highlighted risks include control over critical resources, entrenchment of market power, and potentially harmful partnerships. The collaborative stance indicates a unified approach to oversight, with likely increased scrutiny on AI-related mergers and business practices in the upcoming months. 2. **EU’s AI Regulation Sparks Concern From Meta**: Meta, Facebook's parent company, has expressed concern over the European Union's stringent AI regulations, fearing they might isolate Europe from advanced AI services. Meta's deputy privacy officer, Rob Sherman, emphasized that regulatory clarity is crucial to prevent hindering the deployment of cutting-edge technologies in the EU. This sentiment reflects the broader challenge of balancing innovation with responsible AI governance. Meta's compliance with recent EU requests has already delayed AI assistant rollouts, highlighting potential impacts on Europe's competitive edge in the global AI market. 3. **UK Labour Government Treads Carefully on AI Regulation**: Under Prime Minister

Jul 25, 2024·The Wall Street Journal

The article describes how Amazon's Alexa, despite being present in millions of households, has significantly contributed to the company's financial losses. Alexa's integration into various smart devices has not translated into substantial revenue, and the associated costs of development and maintenance have added to Amazon's burden. The company faces challenges monetizing voice-assisted technology, revealing the discrepancy between widespread adoption and profitability.

Jul 25, 2024·cnbc.com

Wiz, a cloud security startup, has decided to abandon a $23 billion acquisition deal with Google, choosing instead to pursue its original plan of an initial public offering (IPO). Co-founder Assaf Rappaport cited antitrust and investor concerns as reasons for the decision. Wiz aims to achieve $1 billion in annual recurring revenue and has been focusing on rapid growth, having reached $350 million in revenue last year. Google's cloud segment, which would have benefited significantly from Wiz's security products, faces fierce competition from companies like Microsoft and Amazon. The decision marks a notable event for venture backers seeking significant returns amid a challenging market and regulatory environment.

Jul 25, 2024·Insurance Journal

The recent massive technology outage caused by an update from CrowdStrike has raised significant concerns across various industries and the cyber insurance sector. The incident, likened to the NotPetya attack, is expected to lead to substantial business interruption claims due to systems failure from non-malicious acts like human error. Insurers are now reexamining policy wordings and considering tightening their terms, especially around non-malicious events and the extent of business interruption coverage. The event underscores the need for insurers to assess policyholder supply-chain dependencies and manage potential aggregation risks without retracting essential coverage. The widespread impact highlights growing risks associated with single points of failure and the need for redundancy in critical systems.

Jul 24, 2024·CIO

In light of a recent CrowdStrike incident highlighting vulnerabilities in cloud infrastructure, CIOs are reassessing their cloud strategies to mitigate risks associated with single points of failure. This incident has prompted IT leaders to explore multi-cloud and hybrid approaches to enhance resilience and prevent system-wide disruptions.

Jul 24, 2024·cnn

A faulty software update from cybersecurity firm CrowdStrike caused a significant global IT outage, disrupting various industries, including airlines and hospitals, and affecting approximately 8.5 million devices. Although CrowdStrike has apologized, it has not committed to compensating affected customers, who may seek remuneration through lawsuits. Estimates suggest the financial impact could exceed $1 billion. Despite potential legal protections in its contracts, CrowdStrike's reputation has suffered, and its competitors may use this incident to attract its clients. The company's CEO emphasized ongoing efforts to restore systems and maintain customer trust.

Jul 24, 2024·brendangregg.com

The article discusses the importance of eBPF (Extended Berkeley Packet Filter) in preventing catastrophic system crashes caused by problematic software updates, especially those involving kernel code. It follows an incident on July 19th, where a widespread Windows outage affected critical sectors worldwide due to a faulty kernel driver update by a security company. The article highlights how eBPF provides a secure execution environment that mitigates such risks by verifying code before execution, thus preventing system crashes. With Linux systems already leveraging eBPF, upcoming support for Windows is expected to extend these benefits across platforms. The article urges companies to require eBPF-based solutions to enhance system security and reliability.