Stay ahead of the headlines

Jun 17, 2024·The Verge

Apple introduced Apple Intelligence at its WWDC event, a suite of AI tools for iPhone, iPad, and Mac, emphasizing both utility and data privacy. Apple Intelligence is designed to perform common AI tasks on-device, such as email drafting and call transcriptions, to ensure speed and privacy. For more complex tasks, the system reaches out to cloud servers in a secure manner. Notably, Apple uses its own AI models trained on publicly available data and licensed materials, rather than user data. The models are optimized for power efficiency and size to function effectively on Apple's devices. This dual approach aims to provide robust AI features while minimizing privacy concerns by keeping most data processing local and leveraging secure cloud computing for more intensive tasks. The success of this balance will be clearer once Apple Intelligence is fully deployed.

Jun 17, 2024·Cybersecurity Dive

A recent series of attacks targeting databases of over 100 Snowflake customers has highlighted issues surrounding cloud security responsibilities, particularly the use of multifactor authentication (MFA). Snowflake attributed the breaches to customers' failure to implement MFA and manage credentials properly, noting that MFA is not enforced by default. This incident underscores the importance of incorporating secure-by-design principles, as advocated by the Cybersecurity and Infrastructure Security Agency (CISA). Snowflake's current MFA solution is limited and does not allow administrators to enforce it for specific roles. With increasing pressure, Snowflake plans to require advanced security controls but has yet to provide detailed measures. Experts argue that while customers share responsibility in securing their data, MFA should be a baseline security measure to prevent such attacks.

Jun 17, 2024·washingtonpost.com

Following Amazon's acquisition of One Medical, a primary-care service, elderly patients have increasingly been routed to a call center staffed largely by inadequately trained contractors, resulting in concerning lapses in handling urgent medical symptoms. Internal documents reveal multiple instances where urgent cases, such as blood clots and severe pain, were not escalated appropriately. With this new system in place, the frequency of such errors has risen notably, raising alarms about patient safety. Despite Amazon's claims of improving healthcare accessibility and maintaining quality, the transition has led to patient dissatisfaction and significant concerns regarding the adequacy of care provided.

Jun 17, 2024·cloud.google.com

Mandiant has detected a threat campaign, UNC5537, targeting Snowflake database instances with aims of data theft and extortion. Rather than breaching Snowflake's enterprise environment, the attackers leveraged compromised customer credentials, often obtained through infostealer malware, to access and exfiltrate significant volumes of data from affected accounts. These compromised accounts lacked multi-factor authentication and had not updated credentials over years. Mandiant has identified hundreds of affected organizations and, in collaboration with Snowflake, has been notifying potential victims while coordinating with law enforcement. The threat group has used various infostealer malware variants and stored stolen data across several VPS providers and MEGA for further extortion and sale on cybercriminal forums. The campaign highlights crucial gaps in credential security practices and the importance of multi-factor authentication and limiting access to trusted locations.

Jun 14, 2024·publication

Ascension has reported progress in their investigation and recovery efforts following a cybersecurity incident, assisted by third-party experts. Evidence indicates that attackers accessed files from seven of approximately 25,000 file servers used for routine tasks by associates, potentially involving Protected Health Information (PHI) and Personally Identifiable Information (PII) for certain individuals. Access was gained through an inadvertently downloaded malicious file. No data has been taken from Electronic Health Records (EHR) or clinical systems. The investigation is ongoing, and a full review of affected files is required. Ascension is offering complimentary credit monitoring and identity theft protection services to any patient or associate concerned about their data. For more information, call the dedicated call center at 1-888-498-8066. Once the analysis is complete, affected individuals will be notified as per legal requirements. Ascension regrets any inconvenience caused.

Jun 14, 2024·Becker's Hospital Review

**Cone Health's $100 Million Financial Transformation** Cone Health, a North Carolina-based health system, achieved a $100 million financial turnaround by reducing contract labor by 48%, hiring international nurses, and creating a systemwide float pool and internal travel agency. Improvements included addressing workplace safety and establishing a value-based care institute alongside a partnership with Palantir to automate staff scheduling. These changes cut $60 million in spending last year, with another $40 million reduction underway. Cone Health plans to invest $150 million in community health initiatives over the next five years, highlighting its commitment to financial strength and community service.

Jun 14, 2024·time.com

Dr. Joshua D. Schiffman and his colleagues at the Huntsman Cancer Institute have discovered that elephants possess up to 40 copies of the TP53 gene, compared to humans' two. This gene, known for its role in tumor suppression, helps elephants rarely develop cancer despite their large size and long lifespans. Researchers compared elephant cells to human cells, including those with Li-Fraumeni Syndrome, and found that elephant cells are highly efficient in eliminating pre-cancerous cells. This discovery may lead to new cancer prevention strategies in humans by mimicking the cancer-fighting mechanisms of elephants. The study proposes further exploration into drugs or technologies that could enhance the TP53 activity in human cells.

Jun 14, 2024·techtarget.com

Home healthcare offers cost-effective and quality care in patient homes, but home health agencies (HHAs) face unique health IT challenges. Despite an 80% EHR adoption rate among HHAs, they lag behind other providers due to exclusion from federal EHR incentives. Issues include inefficiencies from paper-based documentation, poor data sharing with hospitals, and limited interoperability. The use of mobile devices in the field faces connectivity and security challenges, while telehealth adoption has revealed technical and access barriers. Addressing these issues requires better data exchange mechanisms, robust mobile connectivity solutions, and interoperable technologies, emphasizing the collaboration among policymakers, vendors, and providers.

Jun 14, 2024·csoonline

CISOs face significant pressure due to the complex and expanding threat landscape, understaffed teams, and financial liability concerns. According to a Proofpoint report, 66% of global CISOs worry about personal, financial, and legal repercussions, and many prefer roles offering director and officer insurance. The cybersecurity hiring process is problematic, often requiring unrealistic qualifications that exclude capable candidates. Efforts like the White House’s push for skills-based hiring aim to address these gaps. The focus on skills over traditional degrees and internal hiring could alleviate some pressure on CISOs, allowing for more effective cybersecurity operations.

Jun 14, 2024·ZDNET

This article focuses on the critical role of health technology in modern healthcare, highlighting advancements in telemedicine, wearable devices, and AI-driven diagnostics. It emphasizes the importance of these technologies in improving patient outcomes, reducing healthcare costs, and enhancing the efficiency of medical professionals. Topics such as data security, patient privacy, and the need for regulatory standards are also discussed, underlining the necessity for a balanced approach to the integration of technology in healthcare.

Jun 14, 2024·Forbes

Microsoft has issued warnings urging the majority of Windows 10 users, who comprise about 70% of all Windows installations, to upgrade to Windows 11 before support for Windows 10 ends on October 14, 2025. Users not upgrading will face security vulnerabilities as updates will cease. Compounding concerns are the privacy risks of Microsoft's new Recall feature in Windows, which continuously captures and stores screenshots of user activity, drawing widespread criticism for its potential to compromise sensitive information. Despite opening a beta channel for Windows 10, Microsoft's end-date for support remains unchanged, emphasizing the necessity for users to transition to newer systems to maintain security.

Jun 14, 2024·JMIR AI

The article "Forecasting Artificial Intelligence Trends in Health Care: Systematic International Patent Analysis" by Stan Benjamens, Pranavsingh Dhunnoo, Márton Görög, and Bertalan Mesko provides a comprehensive overview of AI and ML trends in health care through an international patent analysis. The study examined patents from major international patent offices between 2012 and 2022, highlighting a significant annual increase in AI health care patents, primarily from China. Key players identified included Ping An Medical and Healthcare Management Co Ltd and Siemens Healthineers, among others. The article emphasizes the importance of understanding these trends to guide regulators in developing appropriate guidelines for emerging technologies. An open-access database was also created for better accessibility to this information.

Jun 13, 2024·The Wall Street Journal

The cybersecurity job market is increasingly being targeted by fraudsters, hackers, and AI-generated deepfakes posing as legitimate applicants, complicating the hiring process. Companies need to implement rigorous verification protocols, including automated identity checks and skill assessments. North Korean operatives are notably using these tactics to infiltrate firms, particularly in the cryptocurrency sector, posing as IT professionals to steal sensitive information or introduce vulnerabilities. This trend highlights the necessity for diligent vetting of potential hires to safeguard intellectual property and corporate data.

Jun 13, 2024·Apple

At the 2024 Worldwide Developers Conference, Apple introduced Apple Intelligence, a personal intelligence system integrated into iOS 18, iPadOS 18, and macOS Sequoia. Apple Intelligence features generative models designed to enhance everyday tasks, like refining text, summarizing notifications, and creating playful images. Key components include a ~3 billion parameter on-device language model and a larger server-based model leveraging Private Cloud Compute. The development adheres to Responsible AI principles, emphasizing user empowerment, representation, careful design, and privacy protection. Training involves a combination of licensed and public data, with rigorous data quality and safety protocols. Apple’s models outperform many competitors in user preference for helpfulness and safety, facilitated by advanced fine-tuning and optimization techniques.

Jun 13, 2024·Substack

The IT sector is facing signs of a recession with over 129,000 IT professionals unemployed, according to a report by Janco. Adjustments by the Bureau of Labor Statistics (BLS) show a reduction of 14,100 jobs initially reported to have been created in March and April. As of the first five months of 2024, the IT job market saw a net loss of 9,000 jobs, with the unemployment rate for IT professionals now at 4.7%, surpassing the national average.

Jun 13, 2024·businessinsider.com

The article from Business Insider discusses precautions users should take when interacting with AI chatbots like ChatGPT, Gemini, and Claude. It emphasizes the importance of not sharing confidential or sensitive information with these AI models due to privacy and security risks. The piece highlights that although these AI tools can provide valuable assistance, users need to be vigilant about the type of data they input to safeguard their privacy. For further details, you can visit the Apple News website.

Jun 13, 2024·BleepingComputer

Israeli researchers recently demonstrated a significant security vulnerability in the Visual Studio Code (VSCode) Marketplace by creating a trojanized extension mimicking the popular 'Dracula Official' theme. This counterfeit extension, named 'Darcula,' included a script that collected system information and sent it to a remote server without being detected by standard endpoint security tools. The experiment revealed critical gaps in the Marketplace, such as impersonation risks and the presence of many high-risk extensions. The researchers found over 1,200 extensions with malicious code and others exhibiting suspicious behaviors. Despite their responsible disclosure to Microsoft, many malicious extensions remain available. They plan to release a tool named 'ExtensionTotal' to help developers detect potential threats in their environments.

Jun 13, 2024·healthtechmagazine

The U.S. Department of Health and Human Services plans to create a centralized resource to improve healthcare cybersecurity coordination in response to the significant Change Healthcare cyberattack earlier this year, which financially impacted 94% of surveyed hospitals. Understanding the inevitability of breaches, the zero-trust security approach is becoming essential for healthcare organizations. At the recent HIMSS24 conference, leaders like Mark Johnson emphasized the necessity of ongoing cybersecurity evolution. CDW research indicates that demonstrating the financial impact of breaches effectively secures cybersecurity investments. Challenges persist, including integrating legacy tools and addressing cultural resistance, but healthcare organizations are progressively enhancing their cyber resilience.

Jun 13, 2024·Becker's Hospital Review

Massachusetts Senators Elizabeth Warren and Ed Markey have introduced the Corporate Crimes Against Health Care Act of 2024 to combat what they describe as "corporate greed and private equity abuse" in the healthcare sector. The proposed legislation aims to hold private equity executives criminally and financially accountable for actions that harm healthcare organizations, such as hospitals and nursing homes, and result in patient deaths. Key provisions include criminal penalties of up to six years in prison, a clawback of compensation from executives up to ten years before or after financial woes, substantial civil penalties, and additional reporting requirements for healthcare providers receiving federal funding. The act also seeks to limit federal health program payments and repeal certain tax benefits for Real Estate Investment Trusts (REITs). The legislation responds to notable cases like the bankruptcy of Steward Health Care, aiming to prevent similar corporate mismanagement in the future.

Jun 12, 2024·cio.com

John Napoli, head of transformation at Guardian Life, is gearing up the company's AI initiatives by scaling up AI talent. Facing a tough labor market, Napoli is training existing employees and hiring strategically to meet business demand. This includes conventional data skills and the latest AI tools. He emphasizes the importance of a robust AI strategy, balancing building and buying tactics to create a skilled workforce. Orla Daly of Skillsoft adopts a similar approach, focusing on upskilling staff and training workers to integrate AI into workflows. Despite these efforts, AI talent remains scarce, slowing down AI adoption across enterprises. High competition for AI skills means many companies are left to train their own staff to fill critical roles.