Stay ahead of the headlines

Jun 19, 2024·bleepingcomputer

A recent malware campaign employs deceptive Google Chrome, Word, and OneDrive errors to trick users into executing malicious PowerShell scripts. Multiple threat actors, including ClearFake, ClickFix, and TA571, are using these tactics. The attacks involve fake error messages prompting users to copy a PowerShell “fix” and run it, leading to various malware installations such as DarkGate, Matanbuchus, and NetSupport. These campaigns are spread through compromised websites and HTML email attachments, exploiting users' lack of understanding of the dangers associated with running PowerShell commands. Despite the need for significant user interaction, the social engineering techniques used are effective at deceiving individuals into executing harmful actions on their systems.

Jun 19, 2024·itpro

The Black Basta ransomware group exploited a Windows privilege escalation vulnerability (CVE-2024-26169) before Microsoft issued a patch in March 2024. Symantec researchers found that an exploit tool, likely compiled pre-patch, was used in a recent attempted ransomware attack, though no payload was deployed. The tactics closely matched those of Black Basta, which has been active since 2022, targeting over 500 organizations primarily in the healthcare sector. This group evolved from the Conti ransomware and shifted infection vectors from Qakbot to the DarkGate loader after Qakbot was taken down in August 2023. Organizations are urged to patch the flaw immediately to mitigate the ongoing risk.

Jun 19, 2024·siliconangle

Ascension, a major nonprofit health system in the U.S., has revealed new details about a recent cyberattack that occurred last month. The attack disrupted clinical operations and led to data theft, which included protected health information and personally identifiable information. The breach was caused by an employee inadvertently downloading a malicious file, and though the exact extent of compromised data is still unknown, Black Basta ransomware gang is suspected to be behind the attack. Ascension has been actively investigating and addressing the incident, emphasizing the need for robust cybersecurity training to prevent such breaches.

Jun 19, 2024·techradar

Oracle, Microsoft, and OpenAI are collaborating to integrate the Microsoft Azure AI platform with Oracle Cloud Infrastructure (OCI) in response to increased demand for AI solutions. This alliance, partly driven by the integration of Apple Intelligence in new Apple OS updates, aims to extend AI capabilities and handle the expected rise in users. Apple's advancements in on-device processing and Private Cloud Compute are set to increase traffic for ChatGPT, a service used by over 100 million users monthly. Oracle's advanced AI infrastructure, including scalable Nvidia GPU capabilities, will support the development and training of large language models and other AI applications, making it a prime choice for leaders like OpenAI.

Jun 19, 2024·HealthTech Magazine

The article explores the significance of application modernization in the healthcare industry, highlighting the necessity to update and optimize digitally connected services such as electronic health records, telehealth systems, and various operational tools. It emphasizes that modernizing these applications is vital for improving care delivery and operational efficiency, as well as meeting regulatory requirements. Key drivers of this initiative include consumer demand for more streamlined data interactions, the challenges and costs associated with maintaining outdated systems, and the need for adaptable, secure applications. The modernization process generally involves four steps: assessment, migration to the cloud, updating technologies, and ongoing optimization. Unique challenges in healthcare, such as technical debt and application sprawl due to mergers and acquisitions, must also be taken into account during this process. Application rationalization helps identify redundant or inefficient applications, enabling organizations to redirect funding and resources towards more modern and efficient solutions.

Jun 19, 2024·ProPublica

A ProPublica investigation revealed that Microsoft downplayed its role in a significant cyberattack by Russian hackers exploiting a flaw in its Active Directory Federation Services product. Despite repeated warnings from a Microsoft engineer, Andrew Harris, starting in 2016, Microsoft dismissed concerns about the security weakness, arguing that it did not cross a "security boundary." Harris suggested a temporary fix, but Microsoft prioritized business interests and government contracts over addressing the vulnerability. This flaw was ultimately exploited in the 2020 SolarWinds hack, impacting multiple U.S. federal agencies. Microsoft's leadership, including President Brad Smith, faced scrutiny for their inaction and public statements downplaying the issue.

Jun 19, 2024·beckershospitalreview.com

Kaiser Permanente in Oakland, California, leverages electronic health record (EHR) data to monitor and evaluate medical device performance, aiming to enhance patient care quality and safety. Liz Paxton, PhD, head of medical device surveillance, discusses how their EHR tracks over 4.2 million devices, aiding in identifying safety issues and optimizing surgical outcomes. Initially developed as a paper-based system, the registry now integrates directly with EHRs, facilitating comprehensive data collection on patient characteristics and surgical processes. This approach not only helps in identifying high-performing devices but also enables personalized patient care through risk factor analysis. Kaiser Permanente shares its findings with the FDA and the broader medical community, contributing to national and international healthcare improvements. Future plans include evolving from traditional registries to utilizing existing EHR data for a national surveillance system, aiming to enhance patient safety by early detection of device-related issues.

Jun 19, 2024·Becker's Hospital Review

Many nursing homes are facing closures due to financial difficulties, primarily because they rely on fee-for-service payments from Medicare and Medicaid. Rajeev Kumar, MD, president of AMDA-The Society for Post-Acute and Long-Term Care Medicine, suggests that shifting to value-based care models, such as I-SNPs (Institutional Special Needs Plans) and ACOs (Accountable Care Organizations), could enhance their financial stability. These models reward facilities for providing quality care and achieving better outcomes, offering higher reimbursement rates for their efforts.

Jun 17, 2024·iotforall

The adoption of the Internet of Things (IoT) in healthcare has significantly enhanced personalized care delivery, clinical outcomes, and operational efficiency. IoT devices such as wearable health monitors, smart hospital beds, and real-time location systems help healthcare facilities deliver timely and personalized care, improve asset management, and reduce costs. Emergency alert systems, smart pillboxes, and remote monitoring devices play crucial roles in ensuring patient safety and medication adherence. Additionally, IoT-enabled surgical tools and equipment tracking optimize surgical precision and efficiency. Integrating predictive maintenance through IoT data analytics further enhances operational efficiency by anticipating equipment failures and ensuring continuous functionality. Overall, IoT drives high-quality care and improved patient outcomes while streamlining healthcare operations.

Jun 17, 2024·GeekWire

In this week's GeekWire Podcast, Amazon Chief Security Officer Steve Schmidt discusses how generative AI is transforming cybersecurity. Schmidt highlights both the risks and benefits of AI in crafting phishing attacks and assisting security engineers. He underscores the importance of data security and accuracy in leveraging these tools. Schmidt also shares insights from his FBI background and personal fulfillment from his work as an EMT and firefighter. Additionally, the episode covers Microsoft's President Brad Smith's testimony before the U.S. House Homeland Security Committee on Microsoft's security challenges.

Jun 17, 2024·The Health Care Blog

The CMS Innovation Center (CMMI) has proposed its first innovation model incorporating sustainability, named Transforming Episode-Based Accountability (TEAM). The mandatory payment model for acute care organizations includes a voluntary component for emissions reporting, allowing these organizations to receive feedback and technical assistance. This initiative follows an increased focus on the interplay between climate and health, with recent regulatory moves such as the SEC’s carbon emissions disclosure requirements for publicly traded companies and California's stringent emissions reporting mandates. The TEAM model underscores the emerging connection between sustainability and health care delivery, signaling a shift toward integrating climate considerations into health policy and value-based payment strategies.

Jun 17, 2024·VentureBeat

In a recent development, Google’s Personal Health Large Language Model (PH-LLM), a specialized version of its Gemini LLM, has demonstrated superior performance in providing sleep and fitness advice compared to human experts. The PH-LLM, fine-tuned to analyze and interpret time-series data from wearable devices, was tested on its ability to answer health-related questions and make accurate predictions. Researchers found that the model consistently outperformed experienced professionals in the health and fitness domain, showcasing its potential to enhance personal health management through advanced AI technology.

Jun 17, 2024·Medical Economics

### Study: AI-powered Alerts Improve Patient Outcomes (June 14, 2024) A study conducted at Mount Sinai Hospital, published in Critical Care Medicine, revealed that AI-generated alerts significantly enhance patient care and outcomes. Patients whose care teams received real-time AI alerts about health deterioration were 43% more likely to get timely escalated care and had a lower mortality rate within 30 days. The research led by Dr. Matthew Levin demonstrates that AI-driven alerts outperform traditional methods in predicting clinical decline, facilitating earlier interventions and saving lives. Although the study faced interruptions due to the COVID-19 pandemic, the algorithm has been widely implemented across Mount Sinai's stepdown units, aiding clinical decision-making and improving patient safety through continuous data integration and reinforcement learning.

Jun 17, 2024·defensescoop

Both the House and Senate Armed Services Committees have passed measures in their respective versions of the National Defense Authorization Act (NDAA) calling for independent assessments on the potential establishment of a U.S. Cyber Force. This move aims to address the increasing cyber threats and current fragmented approaches within military services, which have led to readiness issues. The Senate had a similar provision last year, but it was removed during reconciliation with the House. The current effort includes an amendment proposed by Rep. Morgan Luttrell, directing the National Academies of Sciences, Engineering, and Medicine to conduct the study. Proponents argue that each service's isolated cyber capacity building is insufficient, and the need for a unified cyber military service is critical. The Department of Defense (DOD) is currently bundling various required studies under the "Cybercom 2.0" effort to address future cyber force structuring, with reports due in June 2025. Despite the push for new assessments, internal resistance within the DOD suggests a challenging path ahead for the proposed independent cyber force.

Jun 17, 2024·Forbes

The article "7 Paradoxes of Artificial Intelligence" by Joe McKendrick explores seven conflicting aspects of AI technology that complicate its implementation for business and IT leaders. These paradoxes include: AI reducing labor needs while increasing skill requirements, being complex yet simplifying application development, incurring high costs but aiding cost management, automating work while demanding creativity, benefiting advanced companies more than struggling ones, requiring large datasets yet alleviating data management, and possessing significant intelligence but failing at simple tasks. These contradictions highlight the nuanced and perplexing nature of AI adoption in the business world.

Jun 17, 2024·CNBC

Edge computing, a technology that brings computation and data storage closer to data sources, is rapidly expanding beyond traditional data centers. This decentralized model helps reduce latency and can enhance application performance by shortening the distance between users and servers. According to IDC, global spending on edge computing is projected to rise to $232 billion in 2024, with sustained growth expected through 2027. Gartner’s Thomas Bittman highlights three primary use cases: low latency requirements, cost-effective local data processing, and unreliable network connections. Industries like manufacturing, energy, retail, and finance are leveraging edge computing for applications ranging from predictive maintenance to high-frequency trading. However, widespread adoption faces challenges, including security risks and vendor market fragmentation. Implementing a zero-trust architecture and fostering collaboration between IT and OT stakeholders are strategies to address these barriers.

Jun 17, 2024·ProPublica

Andrew Harris, a cybersecurity expert, identified a critical flaw in a Microsoft cloud application that allowed attackers to impersonate legitimate users and access sensitive data without detection. Despite Harris' persistent pleas to address the vulnerability, Microsoft prioritized business interests over security, particularly due to its bid for a massive federal cloud computing contract. The flaw eventually became a key vector in the notorious SolarWinds cyberattack, where Russian hackers exploited it to access U.S. government data. Microsoft publicly downplayed its responsibility and instead suggested that customers could have done more to protect themselves. Harris' account and ProPublica's investigation reveal the extent to which profit motives can influence security decisions at major tech companies.

Jun 17, 2024·Cybersecurity Dive

Microsoft's Vice Chair and President, Brad Smith, testified before the U.S. House Committee on Homeland Security, accepting full responsibility for security failures highlighted by the Cyber Safety Review Board related to two significant state-linked cyberattacks. The attacks included a People's Republic of China breach into Microsoft Exchange Online, compromising 22 organizations, and a Russia-linked intrusion targeting senior executives. Criticized for prioritizing market speed over security, Microsoft now plans to enhance security measures, including linking executive compensation to security goals and hosting a CISA briefing. Smith acknowledged the increasing sophistication of nation-state cyber threats and emphasized the company's critical cybersecurity role.

Jun 17, 2024·Axios

The article titled "It's not you, it's us. Something went wrong," appears to be discussing an issue related to website accessibility, specifically pointing out a "500 error" that users have experienced while trying to access content on the site. The assurance is given that if the problem continues, users should contact the site administrators to report the issue. The rest of the page includes standard site information such as links to the app, newsletters, career opportunities, privacy terms, and contact details.

Jun 17, 2024·beckershospitalreview.com

Nurses are raising concerns about the integration of artificial intelligence (AI) into electronic health records (EHRs), arguing that the technology is ineffective and detracts from patient care. They report that AI-driven programs like automated nurse handoffs and patient classification systems frequently fall short of practical needs, citing examples where algorithms misjudge patient acuity or provide inaccurate warnings, like sepsis alerts. While companies like Epic and Oracle Health promote AI as a tool to enhance care and prevent adverse events, nurses insist that these systems fail to account for essential aspects of their workflow, such as patient education and compassionate care. Health systems like Kaiser Permanente and Keck Medicine are attempting to address these concerns by emphasizing that ultimate decisions are made by licensed nurses and that AI should assist rather than replace human judgment.