Stay ahead of the headlines

Dec 15, 2025·Cybersecurity Dive

The Cybersecurity and Infrastructure Security Agency (CISA) has released Version 2.0 of its Cross-Sector Cybersecurity Performance Goals (CPGs) to enhance protections for critical infrastructure, including healthcare facilities. This updated framework integrates insights from three years of operational experience and emphasizes the importance of business leadership in cybersecurity governance through a new "Govern" category. Key enhancements focus on consolidating information technology (IT) and operational technology (OT) goals, addressing supply-chain risks, and promoting zero-trust architecture. These changes aim to improve risk management and accountability, offering clearer guidance to help organizations tackle evolving cybersecurity threats effectively.

Dec 15, 2025·CNBC

ServiceNow is reportedly in advanced talks to acquire cybersecurity startup Armis, valued at $6.1 billion, in what could become ServiceNow's largest acquisition at up to $7 billion. Armis specializes in protecting internet-connected devices from cyber threats, a growing concern for healthcare organizations increasingly reliant on connected technology. The potential deal illustrates a trend of startups preferring acquisition routes amidst volatile IPO markets and highlights the importance of cybersecurity in healthcare technology as organizations seek to safeguard sensitive patient data. If completed, this acquisition could significantly enhance ServiceNow's offerings and strengthen the cybersecurity posture of its healthcare clients.

Dec 15, 2025·Stanford Medicine

Stanford Health Care is implementing agentic AI, specifically through its NetSmart system, to enhance the management of its network comprising over 200,000 devices across multiple locations. This technology allows for proactive monitoring that identifies potential network issues before they impact patient care, significantly reducing troubleshooting time from hours to minutes. By automating routine tasks and streamlining operations, the integration of AI not only alleviates the workload for engineers but also ensures a more reliable network performance, ultimately benefiting healthcare professionals and improving patient satisfaction. This shift towards proactive technology underscores the growing importance of AI in healthcare infrastructure management.

Dec 14, 2025·technology.org

An IP address, often overlooked as a technical detail, can reveal significant information about an individual's online identity, including their physical location and internet service provider. This data, especially when combined with browser fingerprints, can create detailed user profiles, raising serious privacy concerns in healthcare settings where sensitive information is exchanged. The ease of tracking through public Wi-Fi and shared networks magnifies these risks, potentially exposing healthcare professionals and patients to targeted advertising and even doxxing. As such, healthcare technology must prioritize robust privacy protections to safeguard user data against misuse.

Dec 14, 2025·The Cyber Express

Gartner has raised alarms about the cybersecurity risks posed by AI browsers, emphasizing their capacity for autonomous web navigation and transactions that could undermine traditional security protocols. Analysts cautioned that such browsers might inadvertently leak sensitive information or execute erroneous transactions, particularly if their default settings prioritize user experience over security. The ability of these browsers to autonomously access phishing sites and transfer data to cloud services heightens the urgency for enhanced security measures. This warning urges healthcare professionals and organizations to scrutinize the adoption of AI browsers, ensuring robust security frameworks are in place to mitigate these emerging threats.

Dec 14, 2025·SecureWorld

A recent McKinsey & Company report highlights that while artificial intelligence (AI) is now a critical component of business strategy, a significant governance gap exists, with two-thirds of board members lacking adequate knowledge about AI. This gap poses challenges for organizations looking to effectively integrate AI into their operations, as boards struggle with oversight. Chief Information Security Officers (CISOs) are positioned to address this issue by articulating AI risks within the broader context of business strategy. The report further outlines that companies should tailor their AI strategies based on specific business archetypes, emphasizing the need for targeted risk management approaches.

Dec 12, 2025·TechTarget

Texas Attorney General Ken Paxton has launched a lawsuit against Epic Systems, alleging that the EHR vendor monopolizes the healthcare market while limiting parental access to minors' patient portal accounts. The suit claims Epic's control over health data exchange restricts patient and hospital access to their own information, potentially jeopardizing healthcare quality and contributing to medical errors. Furthermore, allegations include Epic’s practices of limiting interoperability with other EHR systems and penalizing customers who migrate to competitors, raising concerns about overall competition in the EHR space. This legal action may prompt a reevaluation of data access and exchange practices, significantly impacting how healthcare technologies operate and are regulated.

Dec 12, 2025·Healthcare Finance News

A recent Health Affairs report has identified significant overpayments made by the federal government to healthcare providers following a cyberattack on Change Healthcare in February 2024. The Centers for Medicare and Medicaid Services allocated $3.3 billion in relief funds, but the uniform distribution led to excessive payments for many hospitals, while others affected by the attack were excluded from the program. The report calls for more precise design in future relief payments, suggesting adjustments to funding amounts and the introduction of outlier payments for those facing considerable disruptions. This underscores the need for better-tailored financial support mechanisms in healthcare, particularly in response to crises impacting claims processing.

Dec 12, 2025·aha.org

recent efforts to reform healthcare affordability in the U.S. Two Senate bills aimed at this issue have failed to pass, revealing deep divisions in Congress over effective solutions for rising costs. Simultaneously, the Centers for Medicare & Medicaid Services (CMS) has issued guidance on Medicaid reforms, emphasizing its role in shaping federal health policies. Additionally, Aetna's upcoming inpatient payment policy—tying reimbursement to patient severity—may influence how healthcare providers allocate resources and manage care, underscoring the ongoing evolution of healthcare reimbursement models.

Dec 12, 2025·AMA

The One Big Beautiful Bill Act of 2025 (OBBBA), effective in 2026, presents substantial shifts in healthcare policy, including ending fiscal incentives for Medicaid expansion and increasing costs for Affordable Care Act (ACA) marketplace enrollees. The bill could displace 10 million people from health insurance by 2034, with another 14 million at risk of losing coverage if ACA tax credits are not renewed. Key provisions such as more frequent Medicaid eligibility checks, work requirements for enrollees, and shortened ACA enrollment windows are designed to cut federal health program funding but could significantly hinder access to care. Healthcare professionals must prepare for the anticipated challenges in patient coverage and the broader implications for healthcare delivery.

Dec 11, 2025·Healthcare IT News

The U.S. Department of Veterans Affairs (VA) will resume its electronic health record (EHR) modernization efforts in 2026, focusing on expanding the system to sites in several states despite existing issues reported by medical staff. Concerns include data anomalies like disappearing patient notes and incorrect prescription dosages, which pose risks to patient safety. While VA spokesperson Pete Kasperowicz highlighted improvements in clinician satisfaction and a high incident-free rate, the lack of transparency regarding the problematic 3.32% of incidents raises questions about the system's reliability. These developments underscore the critical need for healthcare technology to prioritize patient safety and demonstrate accountability.

Dec 11, 2025·Forbes

Oracle's recent 11% stock decline underscores the challenges CFOs face in navigating a volatile economy marked by inflation and data security concerns. The Forbes Research CxO Growth Study 5.0 highlights that CFOs must now integrate financial management with broader operational areas like sales and supply chain to adapt to these challenges. Hemant Kapadia, CFO at Anaplan, emphasizes that outdated enterprise software hinders efficient decision-making by separating financial consolidation from planning processes. To enhance strategic decisions and operational efficiency, the integration of real-time financial processes is essential in modern healthcare technology implementations.

Dec 11, 2025·The Register

December's Patch Tuesday saw significant updates from top tech firms, notably Microsoft, which addressed 57 critical vulnerabilities (CVEs), including one zero-day exploit that could allow local privilege escalation through the Windows Cloud Files Mini Filter Driver. This poses a serious threat as attackers with existing code execution can escalate their access to system-level controls. Notepad++ also responded to an active security risk that allowed traffic hijacking from its updater, emphasizing the need for stringent validation processes in software updates. These vulnerabilities highlight the ongoing challenges in securing healthcare technology systems, which often rely on software integrations that can be targeted by cyber threats.

Dec 11, 2025·TechRepublic

VITAS Healthcare, the largest for-profit hospice chain in the U.S., recently suffered a cybersecurity breach that compromised the sensitive information of over 319,000 patients, including personal and medical details. The attackers gained access through a third-party vendor's account, remaining undetected for 36 days and emphasizing critical vulnerabilities in healthcare vendor security. This incident reflects a troubling rise in cyberattacks targeting healthcare organizations, which have increasingly become lucrative targets for hackers. For healthcare professionals, this breach underscores the urgent need for enhanced cybersecurity measures to protect patient information, particularly for vulnerable populations in end-of-life care.

Dec 11, 2025·UCLA Health

Researchers at UCLA have created an innovative AI tool to uncover undiagnosed cases of Alzheimer's disease, focusing particularly on underrepresented communities prone to underdiagnosis. Published in npj Digital Medicine, the study shows that African Americans and Hispanic/Latino individuals are frequently diagnosed later than non-Hispanic whites, highlighting existing disparities in Alzheimer’s care. The new model, which employs a semi-supervised positive unlabeled learning approach, achieved sensitivity rates between 77% and 81% across diverse ethnic groups, significantly surpassing traditional methods. This development is crucial for healthcare professionals, as it not only enhances diagnostic accuracy but also aims to reduce racial and ethnic disparities in disease recognition and treatment.

Dec 11, 2025·Healthcare IT News

Microsoft Dragon Copilot will integrate into athenahealth's electronic health records system, athenaOne, by mid-2026, enhancing the Ambient Notes suite designed for ambulatory physicians. This integration allows clinicians to select their preferred AI-powered scribe tool while maintaining a unified contract, emphasizing flexibility in EHR management. The partnership aims to reduce administrative burdens on healthcare providers, redirecting their focus toward patient care. This collaboration underscores the growing trend of utilizing AI to improve healthcare efficiency and streamline clinical workflows.

Dec 11, 2025·healthcare-brew.com

A recent Commonwealth Fund survey reveals that nearly half of US primary care physicians (PCPs) are experiencing burnout, significantly higher than counterparts in New Zealand and Canada. The primary driver of this burnout is excessive administrative work, which not only affects physician well-being but also poses risks to patient safety and incurs an annual cost of approximately $260 million due to turnover. Potential solutions include reducing administrative tasks and leveraging technology, such as artificial intelligence, to streamline workflows and support mental health. Addressing this issue is crucial for improving healthcare delivery and reducing costs in the US healthcare system.

Dec 10, 2025·UC San Diego Health

UC San Diego Health has appointed Alexander Khalessi, MD, MBA, as the chief innovation officer and interim assistant vice chancellor for Health Sciences Innovation and AI, marking a significant step in enhancing the institution's technology strategy. In this role, he will focus on the integration of artificial intelligence and new technologies to improve patient care and operational efficiency while driving the digital transformation of the health system. Khalessi's leadership will play a crucial role in positioning UC San Diego Health at the forefront of healthcare innovation, which is increasingly critical in today's rapidly evolving medical landscape. This appointment reflects a broader trend in healthcare towards embracing technological advancements to better serve patient needs.

Dec 10, 2025·eWEEK

OpenAI is reportedly testing an integration between ChatGPT and Apple Health, following the discovery of a hidden Apple Health icon in the latest iOS app version. If realized, this feature could allow ChatGPT to access valuable user data such as exercise, sleep, and diet, enhancing its ability to deliver personalized health insights. While this represents a significant advancement in AI’s role in healthcare by moving towards tailored advice, it also raises serious data privacy concerns due to the sensitive nature of health information. The outcome of this integration could redefine interaction with AI in daily health management, emphasizing the increasing importance of personalization in healthcare technology.

Dec 10, 2025·news.microsoft.com

GigaTIME, an AI tool from Microsoft Research, is set to transform cancer research by enabling the analysis of tumor microenvironments on a scale previously unattainable. This tool converts standard pathology slides into detailed digital maps, revealing complex interactions between cancer cells and their surroundings, which is critical for understanding tumor behavior and developing targeted therapies. By dramatically reducing the time and costs associated with generating these maps, GigaTIME facilitates the simultaneous analysis of numerous scenarios, potentially leading to more personalized treatment strategies and improved patient outcomes. The implications for healthcare professionals include enhanced ability to identify effective treatments for individual patients based on comprehensive tumor analysis.