Stay ahead of the headlines

Jul 24, 2024·Forbes

Microsoft has released a free recovery tool to address a CrowdStrike update issue that caused the "blue screen of death" on 8.5 million Windows machines. The tool offers two repair options and supports various Windows environments, including those hosted on Hyper-V. The first option uses the Windows PE recovery environment and requires a USB drive to delete the corrupt file, although BitLocker users may need to enter recovery keys manually. The second option attempts to recover systems in safe mode and is aimed at specific configurations. Additionally, Fenix24 has developed a set of free, automated recovery scripts for Windows and VMware users to mitigate the issue without manual patching, although drive encryption may still necessitate manual intervention. Full instructions and additional details are available online for both solutions.

Jul 24, 2024·HCINnovationGroup

Health system IT teams are progressively restoring computer systems and EHR access following a global outage caused by a faulty software update by CrowdStrike, which primarily impacted Windows-based computers. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has reported continued malicious activity, including phishing attempts during the outage, and is working closely with CrowdStrike and other partners to monitor threats. Many hospitals, affected in nearly every state, have experienced scheduling delays and reverted to paper charting. Microsoft has released a recovery tool to assist, with endorsements from the American Hospital Association. Health systems and IT teams are praised for their swift and effective response to maintain patient care during the disruption.

Jul 24, 2024·Wired

The article discusses the discovery and implications of FrostyGoop, a new malware that has been identified targeting heating utilities in Ukraine. The malware, likely linked to Russian threat actors, has the potential to disrupt heating services, posing severe risks to public safety, especially during colder months. This development marks an alarming escalation in cyber warfare tactics, highlighting the vulnerabilities in critical infrastructure and the urgent need for improved cybersecurity measures within essential service sectors.

Jul 24, 2024·HealthLeadersMedia

Healthcare faces numerous challenges, including workforce shortages, high costs, and ineffective outcomes, which executives are looking to address through technology such as AI and virtual care. Opinions differ on whether incremental gains or a full system transformation is needed. Arthur Gianelli of Mount Sinai Health System advocates for experimentation and learning through practice. Sachin Jain, president and CEO of SCAN Group and Health Plan, criticizes the lack of substantial change, urging healthcare leaders to shut down ineffective programs and make difficult decisions to define value-based care. Both agree on the transformative potential of AI, with Gianelli emphasizing its role in improving health outcomes and altering workforce needs.

Jul 24, 2024·healthtechmagazine.net

Faced with increasing cybersecurity threats, healthcare IT leaders are adopting zero trust, a framework that mandates authentication, authorization, and continuous validation of all users accessing applications and data. Zero trust assumes that breaches have already occurred, thus preventing internal attacks. A 2023 survey by Okta showed that 61% of organizations had a zero-trust strategy, a significant increase from two years prior. Implementing zero trust in healthcare involves inventorying systems and devices, conducting risk assessments, and applying principles such as least-privileged access, network segmentation, and continuous behavior monitoring. Despite its complexity, zero trust can protect patient data without burdening clinicians, ensuring operational efficacy while mitigating security risks.

Jul 24, 2024·Infosecurity Magazine

The article addresses the increasing responsibilities of corporate boards in handling cybersecurity risks in light of new SEC reporting rules. Despite pushback and misconceptions about the necessity and feasibility of board-level cybersecurity expertise, real-world data and research indicate that the lack of such expertise hampers effective risk management. Misalignments in prioritization and resource allocation exacerbate vulnerabilities exploited by cybercriminals. Additionally, the urgent need for standardized incident response playbooks and improved communication strategies is highlighted. The article also discusses relevant federal regulations and initiatives, emphasizing the importance of board-level prioritization and direct engagement between boards and cybersecurity teams for better risk management and organizational resilience.

Jul 24, 2024·techtarget

The Office of the National Coordinator for Health Information Technology (ONC) has released the final version of United States Core Data for Interoperability Version 5 (USCDI v5), accompanied by a new standards bulletin. The updated USCDI includes standardized data elements for health information exchange, reflecting over 330 comments and 60 new element submissions received from July to September 2023. New data classes, Observations and Orders, have been introduced, featuring elements like Advance Directive Observation and Sex Parameter for Clinical Use (SPCU). The Orders data class now encompasses elements for Medication, Laboratory, Diagnostic Imaging, Clinical Test, and Procedure orders. Updates were also made to existing data classes, adding elements in Clinical Notes, Patient Demographics/Information, Provenance, Immunizations, and Medications, aiming to enhance the clarity and utility of these data standards.

Jul 24, 2024·ciolook

The article discusses the transformative trends and innovations in the healthcare industry driven by technological advancements, demographic shifts, and changing patient expectations. Key focus areas include telemedicine, which has expanded access to care through remote consultations; Artificial Intelligence (AI) and Machine Learning (ML), which enhance diagnostic accuracy and personalized treatment plans; and personalized medicine that customizes treatments based on individual genetic and lifestyle factors. The Internet of Medical Things (IoMT) enables real-time health data monitoring, improving chronic disease management. Additionally, blockchain technology offers secure health data management and improved interoperability. These innovations collectively promise better healthcare delivery, improved patient outcomes, and greater accessibility and efficiency in the industry.

Jul 22, 2024·LinkedIN

On July 19, a major CrowdStrike Falcon update caused unexpected global disruptions due to a compatibility issue with Microsoft Windows, leading to widespread operational issues across various sectors. The outage highlighted the critical need for rigorous software testing, clear communication during crises, and robust contingency planning for IT departments. CrowdStrike responded swiftly by issuing a patch and mobilizing support teams, while also reviewing internal processes to prevent future incidents. This event underscores the interconnected nature of modern digital infrastructure and the importance of preparedness and collaboration in the cybersecurity landscape.

Jul 22, 2024·bleepingcomputer

The recent CrowdStrike update crash affected millions of Windows systems, leading to significant business disruptions globally. Cybercriminals have exploited this chaos by launching phishing campaigns and distributing malware under the guise of CrowdStrike updates, putting companies at further risk. In response, CrowdStrike advises customers to communicate exclusively via official channels for support. Observations by cybersecurity organizations highlight increased phishing attempts and data wiper deployments targeting these vulnerabilities. While CrowdStrike has identified and resolved the bug, the fallout included widespread operational disruptions in various sectors, and guidance has been provided for affected companies to recover their systems.

Jul 22, 2024·The Hill

Rep. Ritchie Torres (D-N.Y.) plans to introduce legislation to formalize the Cyber Safety Review Board (CSRB) following a significant IT failure at cybersecurity firm Crowdstrike. The proposed bill aims to create a structured review process for major cybersecurity incidents to improve responses and mitigate future risks. This move follows disruptions caused by the Crowdstrike meltdown, highlighting the need for enhanced oversight and a coordinated approach to handling such crises.

Jul 22, 2024·Reuters

A software update by CrowdStrike, a major cybersecurity firm, triggered a global technology outage affecting industries such as healthcare, airlines, shipping, and finance. The disruption lasted several hours and grounded flights, delayed medical services, and disrupted financial transactions, raising questions about the resilience and concentration of cybersecurity infrastructure. CrowdStrike's shares dropped significantly while its competitors saw gains. The incident emphasized the vulnerability of interconnected global systems, prompting calls for better contingency planning and multiple redundancies in IT networks.

Jul 22, 2024·Wall Street Journal

A recent article from The Wall Street Journal discusses a global tech outage that highlights the risks associated with rapid IT updates. The incident underscores the tension between the need for speed in deploying new technology and ensuring the safety and stability of IT systems. The outage serves as a reminder for businesses to carefully balance innovation with comprehensive testing and checks to prevent widespread disruptions.

Jul 22, 2024·Forbes Innovation AI

The article examines how the integration of artificial intelligence (AI) is transforming corporate leadership by enhancing decision-making, fostering innovation, and optimizing operations. It highlights examples from IBM, Google, and PepsiCo to show how AI tools like IBM's Watson are aiding leaders with data-driven insights and predictive analytics. While AI offers numerous benefits, such as improved strategic planning and real-time analysis, it also presents challenges, including potential over-reliance on technology, ethical concerns, and skills gaps. The article suggests that a balanced approach, emphasizing continuous learning, ethical use, and maintaining human-centric values, is essential for maximizing AI's potential in corporate leadership.

Jul 22, 2024·Tom's Hardware

Southwest Airlines managed to avoid major disruptions during a global outage caused by a faulty CrowdStrike update because it still relies on Windows 3.1 and Windows 95 operating systems. Other major US airlines faced significant troubles as their newer systems were hit by the Blue Screen of Death (BSoD) due to the update. While Southwest's use of outdated systems has often been criticized, it shielded the airline from chaos, though some issues still impacted airports. The incident raises questions about future system upgrades, as newer yet vulnerable systems present ongoing risks.

Jul 22, 2024·The HIPAA Journal

A faulty software update from CrowdStrike has significantly disrupted U.S. healthcare organizations, causing hospitals to cancel appointments and delay services by rendering Windows devices inoperable. The bug in their Falcon threat detection platform led to system crashes and incapacitated devices with the blue screen of death, affecting around 8.5 million Windows devices globally. Despite the availability of a fix, the resolution process requires manual intervention, imposing a heavy burden on IT teams. The disruption impacted major health systems and other critical services, including flight operations and emergency communications. Additionally, cybercriminals are exploiting the situation by creating fake CrowdStrike-related domains to perpetrate scams, further complicating recovery efforts.

Jul 22, 2024·Becker's Hospital Review

A flawed software update released by CrowdStrike on July 18 disrupted IT systems globally, significantly impacting 8.5 million Microsoft Windows devices, including those in healthcare. Health systems such as Kaiser Permanente, Banner Health, and Mass General Brigham faced unprecedented challenges, leading to postponed surgeries and closed outpatient facilities. The cyber disruption affected major EHR systems like Epic and Meditech, with Providence's 52-hospital system experiencing severe operational breakdowns. CrowdStrike reported that hackers exploited the situation, adding additional malware threats. Microsoft, along with Google Cloud and AWS, is collaborating to ameliorate the situation, while the healthcare community continues to recover, leveraging the incident as a crucial learning experience for future IT resilience.

Jul 22, 2024·The Hacker News

CrowdStrike, reeling from a flawed update that caused IT disruptions worldwide, has alerted that threat actors are exploiting this chaos by distributing Remcos RAT malware to its customers in Latin America. Attackers are using a ZIP file labeled “crowdstrike-hotfix.zip,” which contains a malware loader that installs the Remcos RAT. The archive file includes Spanish instructions, suggesting the campaign targets Latin American users. Malicious actors have also set up fake CrowdStrike domains, offering services for cryptocurrency payments. CrowdStrike advises customers to verify communications with official representatives and follow provided technical guidance.

Jul 22, 2024·Fox News

A UCLA study revealed that artificial intelligence, specifically the Unfold AI software developed by Avenda Health, can detect prostate cancer with 84% accuracy, outperforming doctors who have a 67% detection rate. The AI software, which uses clinical data to create 3D cancer estimation maps, was found to have a significantly higher "negative margin rate," indicating a much lower chance of leaving residual cancer cells behind. This technological advancement, recently approved by the FDA, promises to improve the personalization and effectiveness of prostate cancer treatments, potentially reducing the need for invasive procedures and their associated side effects. However, experts caution that while AI can enhance diagnostic accuracy, it should complement, not replace, clinicians' judgment and patient data privacy must be maintained.

Jul 22, 2024·CBS News

The demand for energy in the U.S. is projected to hit record highs due to the increasing number of data centers and the growing use of artificial intelligence, contributing significantly to planet-warming emissions. Data centers, largely operated by major tech companies like Google, Amazon, and Microsoft, consumed over 4% of U.S. electricity in 2022, a figure expected to more than double by 2030. This surge is straining the aging power grid and complicating efforts to meet climate goals, as tech firms struggle to increase their reliance on renewable energy sources. Google, for instance, is investing heavily in wind, solar, and geothermal energy to reduce its carbon footprint, aiming to run entirely on clean energy by 2030.