Stay ahead of the headlines

Jul 12, 2024·SecurityWeek

In early 2023, OpenAI experienced a security breach where an attacker accessed an employee forum but did not compromise the systems containing AI source code or customer data, according to The New York Times. The company chose not to reveal the incident publicly or inform the FBI, reasoning that the breach posed no significant threat. The breach led to internal debates about OpenAI's commitment to security, culminating in the firing of Technical Program Manager Leopold Aschenbrenner, who had voiced concerns over national security vulnerabilities and potential foreign espionage. This incident highlights ongoing concerns about the preparedness of AI firms in safeguarding against sophisticated cyber threats as they advance towards artificial general intelligence (AGI).

Jul 12, 2024·The Medical Futurist

The article "Augmented Reality In Healthcare: 8 Examples" by Dr. Bertalan Mesko explores the potential transformative impacts of augmented reality (AR) in the medical field. AR applications are currently seen in various areas such as life-saving tutorials for defibrillator usage, improving remote patient visualization, aiding patients in symptom description, assisting nurses in vein location, and motivating exercise through gamification. Additionally, AR can enhance pharmaceutical packaging information, assist surgeons in visualization during operations, and educate children about human anatomy through immersive experiences. Despite these promising applications, AR’s breakthrough in healthcare remains highly anticipated, requiring further innovation to fully transform the industry.

Jul 12, 2024·HealthLeaders Media

Walmart has sold its MeMD virtual care platform to Fabric, a telehealth startup, marking another withdrawal of a major retailer from the primary care space. This follows attempts by Walgreens, CVS Health, Rite Aid, and Amazon to enter and sustain profitability within the healthcare sector. Despite the promise of consumer-facing retail strategies to enhance the healthcare experience, companies have struggled to find a sustainable model. Fabric, supported by healthcare partners and significant funding, aims to expand its virtual care offerings, particularly in behavioral health services. The sale underscores the challenges and complexities of successfully integrating retail and healthcare models.

Jul 12, 2024·Cyberscoop

Public feedback on the proposed cyber incident reporting mandate for critical infrastructure, CIRCIA, highlights a call from the industry for reduced requirements and clearer definitions. The feedback, received by the Cybersecurity and Infrastructure Security Agency (CISA), underscores concerns about the broadly defined scope of a cyber incident, potential overwhelming of CISA’s resources, and the implications of mandatory ransomware payment reporting. Concerns also arise over which organizations should report and the lack of resources for implementation, with suggestions for financial incentives over penalties. Issues of harmonization with existing regulations and the efficacy of information sharing by the federal government further complicate the mandate's acceptance and effectiveness.

Jul 12, 2024·Deloitte Insights

Health care finance leaders are focusing on several key strategies to enhance profitability but may be overlooking more impactful areas such as optimizing product and service mixes, which less than a third prioritize. Health systems can benefit from scaling innovative care models like digital twins and virtual health, while plans should explore growth and diversification beyond traditional business lines. Forming alliances and ecosystems, though underutilized, could boost growth and efficiency, despite regulatory hurdles. Outsourcing and offshoring offer significant cost-saving potential yet remain low priorities. Lastly, although investment in digital and AI technologies is on the rise, particularly among health plan CFOs, leveraging these technologies as immediate margin drivers is viewed with caution due to implementation challenges and skill shortages.

Jul 12, 2024·Thrive Global

The OpenAI Startup Fund and Thrive Global have announced the establishment of Thrive AI Health, a new company tasked with developing a hyper-personalized AI health coach. Spearheaded by DeCarlos Love, a former Google executive, the initiative aims to democratize expert-level health coaching to address chronic diseases and health inequities. Supported by the Alice L. Walton Foundation, Thrive AI Health will leverage generative AI to provide customized coaching across five key health behaviors: sleep, food, fitness, stress management, and connection. The company plans to collaborate with academic and medical institutions like Stanford Medicine and the Rockefeller Neuroscience Institute to expand its impact.

Jul 12, 2024·Cybersecurity Dive

UnitedHealth Group's CEO, Andrew Witty, testified before Congress regarding a cyberattack on its subsidiary, Change Healthcare, which disrupted various services for months and compromised the personal and health information of a significant portion of Americans. The event underscored the increasing importance of CEO involvement in cybersecurity, shifting from a traditional IT concern to a critical business and operational strategy. This breach, caused by insufficient security measures such as the lack of multifactor authentication, led to the company paying a $22 million ransom. The incident highlights the heightened expectations and potential legal liabilities for CEOs in maintaining robust cybersecurity frameworks and their active role in preemptive and reactive measures to protect their organizations.

Jul 12, 2024·cyberscoop

The White House has asked federal agencies to seek increased funding to enhance the nation’s cybersecurity, aligning budget requests with the Biden administration's national cyber strategy and zero-trust architecture goals. A memo from the Office of Management and Budget and the National Cyber Director mandates that agencies update their zero-trust implementation plans and prioritize investments in enterprise-wide cybersecurity solutions. Additionally, agencies must align their budgets with the critical infrastructure national security memorandum, develop minimum cybersecurity requirements, and improve open-source software security. The administration also stresses addressing the government's cyber workforce challenges, advocating for skills-based hiring and removing unnecessary educational barriers.

Jul 11, 2024·chiefhealthcareexecutive

Wes Wright, chief healthcare officer at cybersecurity firm Ordr, discusses the critical gaps in hospitals' cybersecurity practices. With extensive experience in healthcare IT, he emphasizes that many organizations are failing at fundamental practices such as network segmentation and having an accurate inventory of connected devices. Hospitals are suffering from ransom attacks, partly due to flat networks that allow extensive damage from single breaches. Wright highlights the need for multi-factor authentication and federal support to help hospitals meet cybersecurity standards, especially for smaller institutions struggling to cover basic expenses. He advocates for better segmentation of systems to minimize the impact of inevitable human errors.

Jul 11, 2024·Government Technology

A cyber attack on the Florida Department of Health has compromised the state’s ability to issue death and birth certificates, potentially endangering sensitive patient data. The ransomware group RansomHub claimed to have stolen 100 gigabytes of data, which they threatened to release if not paid, though Florida law prohibits such payments. The attack has crippled the department’s Vital Statistics system, forcing funeral directors to manually complete and transport death certificates, subsequently delaying burial permits and access to benefits like social security and insurance claims. This incident follows prior threats by RansomHub against other health-care organizations, including Change Healthcare.

Jul 11, 2024·Cybersecurity Dive

Snowflake has implemented a new security policy requiring multifactor authentication (MFA) for all users or specific roles within its platform, following a series of attacks targeting over 100 customer environments lacking this security measure. MFA will now be the default setting for newly created customer accounts, as stated by CISO Brad Jones. The decision comes after an investigation by CrowdStrike and Mandiant confirmed no vulnerabilities in Snowflake's platform led to the incidents. These breaches involved demo accounts accessed with stolen credentials from a former employee. While existing customer accounts can opt-out of MFA, Snowflake is encouraging adoption through frequent prompts and introducing the Snowflake Trust Center and security scanners to enhance overall compliance and mitigate risks.

Jul 11, 2024·Cybersecurity Dive

Cybersecurity jobs, particularly for Chief Information Security Officers (CISOs), offer lucrative salaries ranging from $400,000 to $1 million annually. Despite the financial incentives, job satisfaction remains low, with three-quarters of CISOs considering a job change in 2023. This dissatisfaction stems from high-pressure responsibilities, personal liability, and insufficient support and understanding from organizational leadership regarding cybersecurity risks. The lack of direct engagement with company boards exacerbates the issue, leading to decreased effectiveness, higher turnover, and weakened security cultures within companies. To improve satisfaction and security outcomes, organizations must integrate CISOs into leadership discussions and adequately invest in proactive cybersecurity measures.

Jul 11, 2024·securityintelligence.com

The debate over banning ransomware payments was a key topic at a recent Oxford Cyber Forum, where CISA Director Jen Easterly expressed skepticism about such a ban being implemented in the U.S. Although some experts, like former UK National Cyber Security Centre head Ciaran Martin, have advocated for a ban, current consensus suggests that it could do more harm than good. A federal ban may drive companies to pay ransoms secretly, undermining accurate threat intelligence and risk management efforts. Furthermore, fake "data recovery" firms could exploit such a ban, increasing fraudulent activities. Instead, the U.S. is focusing on initiatives like improved incident reporting, shared intelligence, law enforcement action, and promoting secure-by-design principles to tackle ransomware threats more effectively.

Jul 11, 2024·healthcaredive.com

Healthcare organizations are urging that a proposed federal cybersecurity reporting rule should explicitly include insurers and third-party vendors due to their significant impact on the industry, as highlighted by a major cyberattack on Change Healthcare. The rule, proposed by the Cybersecurity and Infrastructure Security Agency (CISA), requires critical infrastructure companies to report cyber incidents within 72 hours and ransom payments within 24 hours. While CISA did not initially include sector-specific criteria for insurers or labs, industry groups argue that these entities are interconnected with the healthcare sector and that excluding them could result in unreported significant cyber incidents. Organizations like the American Hospital Association and the College of Healthcare Information Management Executives highlighted challenges such as the tight reporting timelines and potential duplicative reports, advocating for flexibility and financial support, especially for under-resourced hospitals.

Jul 11, 2024·Wall Street Journal

The article discusses recent changes to Medicare health insurance payments, specifically focusing on how the adjustments are tied to patient diagnoses. These changes are designed to incentivize more accurate and comprehensive documentation of patient conditions by healthcare providers. The intention is to ensure fairer distribution of funds and improve the quality of care delivered to Medicare beneficiaries.

Jul 11, 2024·Morning Brew

The article commemorates the 50th anniversary of the barcode, highlighting its evolution from simplifying grocery checkouts in 1974 to the modern-day use of QR codes. Carrie Wilkie of GS1 US discusses how barcodes initiated a revolution in efficiency and error reduction for businesses. Modern 2D barcodes, like QR codes introduced in 1994, have gained widespread adoption, especially post-Covid-19, providing versatility for both consumers and retailers. These codes can convey a wide range of information from nutrition facts to promotion deals while also supporting supply chain logistics. Wilkie envisions a future where today’s barcoding technology is replaced by even more advanced solutions.

Jul 11, 2024·Becker's Hospital Review

A Texas hospital has reverted to using paper records following the expiration of its electronic health record (EHR) contract. This change comes as the facility grapples with financial difficulties, which have also resulted in staff layoffs. The details were reported by D Magazine.

Jul 10, 2024·PYMNTS

### Telehealth Declines as AI and In-Person Visits Rise Post-Pandemic Post-pandemic, the demand for telehealth services has decreased, and healthcare trends are shifting towards Artificial Intelligence (AI) and in-person visits. Oregon Health & Science University recently disbanded a prominent telehealth nursing unit established during the pandemic. According to experts, traditional telehealth models, which focused on transactional interactions without holistic care, are becoming outdated. Companies like Amazon and Walmart have scaled back their telehealth offerings, though startups like Fabric are integrating AI to streamline both virtual and in-person services. Innovations such as holographic consultations are emerging, pointing towards a hybrid future in healthcare. ### Do US Consumers Underestimate the Potential Of Digital Wallets? Despite the widespread use of digital wallets in the U.S., primarily for online shopping and peer-to-peer payments, most consumers are unaware of the broader functionalities these tools offer. A report by PYMNTS and Google Wallet reveals that only a small fraction of users utilize digital wallets for non-transactional purposes like storing credentials or accessing events and rewards programs. The study highlights a significant untapped potential, suggesting that digital wallets could simplify identity verification processes and offer more convenience beyond just financial transactions.

Jul 10, 2024·The Medical Futurist

Technological advancements are poised to significantly alleviate the workload for nurses, who are currently facing a severe global shortage. The integration of robotics and digital health technologies into healthcare practices aims at reducing monotonous tasks, enhancing remote communication, and improving patient care through innovations like automated blood drawing, AI risk assessment, and portable diagnostic tools. Technologies such as 3D printing for better communication and training using VR simulations are also boosting nursing education. While these technologies promise to augment nursing roles and improve healthcare delivery, they are not a replacement for the essential human elements of empathy and care inherent in the nursing profession.

Jul 10, 2024·VentureBeat

The article highlights the transformative potential of AI in healthcare, showcasing its applications in diagnostics, administrative efficiency, and personalized medicine. AI technologies, especially large language models, can assist in tasks such as interpreting medical images, predicting patient outcomes, and aiding drug discovery. However, the integration of AI comes with significant challenges, including concerns about data privacy, ethical considerations, regulatory compliance, and the need for transparency and interoperability with existing systems. While AI can augment medical processes, it must be implemented thoughtfully to retain the essential human element in patient care and decision-making.