A ransomware gang, identified as Rhysida, has claimed to have successfully sold data stolen from Lurie Children's Hospital in Chicago, initially listed for a ransom of $3.4 million or 60 bitcoins on the dark web. The cyberattack, which occurred last month, significantly disrupted the hospital's computer networks and clinical operations, forcing a temporary reliance on manual systems. Despite these challenges, Lurie Children's committed to continuing patient care, albeit with some cancellations of appointments and elective surgeries. The hospital is now in the process of gradually restoring its vital systems, including its electronic health records and phone systems, while cooperating with law enforcement and cyber experts to investigate the breach. This incident is part of a worrying trend of increasing cyber attacks targeting the healthcare sector, with another organization, Change Healthcare, also currently experiencing costly disruptions.

Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets

Mar 9, 2024The Hacker News

In January 2024, Microsoft disclosed a significant security breach by the Kremlin-backed cyber espionage group Midnight Blizzard (also known as APT29 or Cozy Bear), which resulted in unauthorized access to some of Microsoft's source code repositories and internal systems. The attack, initiated through a password spray strategy, exploited a legacy, non-production test account without multi-factor authentication (MFA), revealing the sophistication and resources committed by the threat actor. Despite the breach, Microsoft affirmed that its customer-facing systems remained uncompromised and has since contacted affected customers. The company has announced an increase in its security investments to counter the amplified tactics of Midnight Blizzard, which leverages exfiltrated information for further unauthorized access, marking an escalation in global cybersecurity threats.

CrowdStrike CEO says cybercriminals are leveling up: 'It’s going to be the battle of AI in the future'

Mar 7, 2024CNBC

In a recent discussion with CNBC's Jim Cramer, CrowdStrike CEO George Kurtz emphasized the growing threat posed by cybercriminals who are leveraging advanced generative artificial intelligence to conduct sophisticated attacks, regardless of their own technical expertise. Kurtz highlighted how generative AI is making complex cyberattack techniques accessible to less skilled adversaries, suggesting a future where the fight against cybercrime will increasingly hinge on opposing AI capabilities.

Dexcom's first-ever over-the-counter glucose monitor patch gets FDA clearance

Mar 7, 2024CNBC

Dexcom has received FDA clearance for its first over-the-counter continuous glucose monitor, Stelo, targeting patients with Type 2 diabetes who do not use insulin. This marks the first time a glucose biosensor will be available without a prescription, with sales starting in the summer of 2024. Stelo aims to improve diabetes management by tracking glucose levels in real-time, sending data wirelessly to a smartphone for more effective monitoring of the user's condition.

Microsoft, OpenAI warn nation-state hackers are abusing LLMs | TechTarget

Mar 7, 2024SearchSecurity

Microsoft and OpenAI report nation-state hackers using AI and LLMs like ChatGPT for cyberattacks but don't see an immediate enterprise threat. They emphasize the need for prepared security measures due to this activity. Research identified five groups globally exploiting LLMs for tech vulnerability research, geopolitical intelligence, and enhancing attack methods. Despite the increased use, no significant LLM-based attacks were found yet. The report also discusses AI's potential to enhance social engineering attacks and offers strategies for mitigation, emphasizing AI tool security and responsible use.

2024 Outlook for Health Care

Mar 7, 2024Deloitte

The "2024 Outlook for Health Care Planning for the Future of Health: Top trends for 2024" article by Tina Wheeler and Wendy Gerhardt from Deloitte LLP explores the ongoing challenges and innovations in the health care sector as it undergoes digital transformation and convergence. Amidst the digital revolution, health care executives grapple with which technologies to adopt under financial pressures, with the sector moving from fragmentation to systemic convergence. The outlook highlights the anticipated continuation of trends like mergers and acquisitions, digital transformation including generative AI, and increasing consumer empowerment, all within a framework of financial and operational pressures. Despite a general pessimism among health care executives regarding the sector's future, the piece suggests opportunities for significant innovation and reformation in response to these challenges. Key factors shaping the future include strategic mergers, digital integration, workforce management, outsourcing, and consumer affordability, with a collective emphasis on adapting to a rapidly evolving landscape for sustained success.

Competitive Or Exclusionary? Epic’s Seven Business Practices That Raise Questions

Mar 7, 2024Forbes

Seth Joseph examines the controversial business practices of Epic Systems, a leading electronic health record (EHR) system provider, in his article for Forbes. He discusses how Epic's dominant market stance could potentially stifle healthcare innovation through various strategies, including limiting market visibility for competitors, imposing high third-party developer costs, and enforcing restrictive non-compete agreements. Joseph's analysis is based on conversations with industry insiders, highlighting concerns about Epic's approach to maintaining its market position, possibly at the expense of a more open and competitive landscape for healthcare technology innovation. The article raises questions about whether Epic's practices are merely competitive or cross the line into exclusionary, prompting a broader debate on the implications for the future of healthcare innovation.

Nation states buying hacking tools from underground Russian cyber forums

Mar 7, 2024Computer Weekly

Nation states buy malware on Russian forums for data-wiping attacks, pretending to be cyber criminals for deniability. Russian forums, like Exploit existing since 2000, offer hacking tools and services, including AI and deep fake technologies. Check Point found evidence of nation state interest, particularly for wiper software, suggesting higher budgets and strategic use of cybercrime tools for espionage and sabotage, blending legitimate security tools to avoid detection. Russian cybercriminals, profiting from these forums, enforce strict membership with vetting, showcasing a rich ecosystem of hacking services, including ransomware as a service, while avoiding attacks on Russian-speaking countries to maintain immunity and promote Russian interests.

After Change Healthcare, more effort needed to avoid cyberattack chain reactions

Mar 7, 2024Healthcare IT News

The recent cyberattack on Change Healthcare has exposed significant vulnerabilities within the healthcare sector, particularly highlighting the severe consequences of such attacks on healthcare providers' ability to operate efficiently. This attack, attributed to the ALPHV group and its BlackCat ransomware, has significantly disrupted the processing of prescriptions, patient data sharing, and claims between providers and payers, causing widespread operational difficulties and financial losses. The incident emphasizes the urgency for enhanced cybersecurity measures, transparency in incident reporting, and the development of robust contingency plans to manage the aftermath of cyberattacks effectively. Furthermore, it underscores the need for healthcare organizations to bolster their defenses against potential cyber threats and prepare for the possibility of similar events in the future.

Lawsuits start rolling in over Change Healthcare hack

Mar 7, 2024Becker's Hospital Review

Lawsuits have begun to be filed against Change Healthcare, a subsidiary of UnitedHealth Group, in the wake of a massive cyberattack affecting hospitals, physician offices, and pharmacies across the United States. Court records reveal that at least five federal lawsuits are seeking class-action status, with three lodged in Tennessee and two in Minnesota. These legal actions highlight allegations against the company for failing to maintain adequate security measures, not disclosing weaknesses in their security protocols, and consequently, putting patients' data and financial well-being at risk. In particular, one lawsuit from Minnesota points to the plaintiff's direct experience of inconvenience and potential financial burden due to the cyberattack's impact on Change Healthcare's network. The complaint details the plaintiff's struggle to use health insurance for medication, facing high upfront costs with the promise of later insurance claims processing that remains uncertain. This series of lawsuits underscores the severe consequences of cyberattacks on healthcare infrastructure, not only in operational disruptions but also in the tangible impacts on individuals' lives. UnitedHealth Group has responded to the crisis by focusing on the investigation and recovery of Change Healthcare's operations, amidst predictions that the lawsuit count could rise significantly, marking this as potentially the largest cybersecurity breach in the healthcare industry to date.

Report Uncovers Massive Sale of Compromised ChatGPT Credentials

Mar 7, 2024Hackread

Group-IB report: Dark web sales of ChatGPT credentials expose AI, ransomware, macOS vulnerabilities; Asia-Pacific major target, zero-day exploit sales up 70%, AI misuse rises; 225,000 ChatGPT credentials leaked, 130,000 hosts compromised, North America most ransomware-affected, macOS attacks multiply; emphasizes cybersecurity investment.

Claude 3 Is The Most Human AI Yet

Mar 7, 2024Every

Jim Simons excelled in trading using algorithms; Composer allows easy creation and testing of such strategies for anyone. Claude 3, from Anthropic, praised for its human-like, creative AI, surpasses GPT-4 in nuance despite technical benchmark similarities. Its unique warmth and high token accuracy hint at groundbreaking AI advancements and synthetic data use, challenging conventional model evaluations and AI competition strategies.

I worked exclusively in Vision Pro for a week—here’s how it went

Mar 7, 2024Arstechnica

Using Apple's Vision Pro offers a futuristic, albeit not essential, work experience, struggling with physical meetings and steep price.

HHS Statement Regarding the Cyberattack on Change Healthcare

Mar 7, 2024U.S. Department of Health & Human Services

HHS addresses Change Healthcare cyberattack: coordinating responses, ensuring health care operations continuity, expediting provider support, and strengthening cybersecurity across the health ecosystem.

Mark Cuban’s Cost Plus Drugs will begin manufacturing its own medications this week

Mar 7, 2024Fortune

Mark Cuban's Cost Plus Drugs starts manufacturing its medications in Dallas, aiming for affordable pricing by eliminating middlemen.

Kaiser conducts 2nd IT layoff

Mar 7, 2024Becker's Hospital Review

Kaiser Foundation Hospitals is laying off over 70 IT employees across California, citing the move as difficult but necessary. This follows a previous layoff of 115 IT positions.

Fee-For-Service: Predominant, Winning & Stupid – The Health Care Blog

Mar 7, 2024The Healthcare Blog

Fee-for-service, criticized for inefficiency and greed, plagues U.S. healthcare, affecting insurers, providers, and patients, bolstering systemic problems and resisting value-based care despite alternatives.

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

Mar 7, 2024KrebsonSecurity

Change Healthcare, disoriented by BlackCat's cyberattack, allegedly pays $22m ransom, yet data remains unsecured. Affiliate Notchy claims withholding of ransom share before BlackCat halts operations. Other vulnerable affiliates may leak stolen data. Cited as "exit scam," BlackCat's network 'seizure notice' likely faked. Cybersecurity firm warns crime outfits can't be trusted, alluding to BlackCat's closure following LockBit's inevitable demise.

Healthcare orgs urge federal intervention in the wake of cyberattack

Mar 6, 2024McKnights Senior Living

Change Healthcare cyberattack causing significant billing, claims issues for long-term care providers. Industry seeking federal assistance; AHCA/NCAL urges HHS action for advanced payments and better communication. Cyberattack leading to healthcare system shutdowns, financial concerns.

Millions of Americans Will Soon Lose Internet Access. That’s a Disaster for Rural Health.

Mar 6, 2024Flipboard

Federal Affordable Connectivity Program, helping 20m American households afford internet, set to run out of funds, impacting telehealth access particularly in rural areas. Rural Americans suffer internet access and local doctor shortages, increasing telehealth importance for chronic health conditions management. Telehealth grown during Covid, cuts could intensify healthcare disparities. Better internet access key to telehealth equity.

Stay ahead of the headlines

Trending now

AMA Asking For Stronger Safeguards on AI Mental Health Chatbots

Andrea Daugherty Appointed Chief Information and Digital Transformation Officer at ARMC

Craig Richardville Appointed Chief Digital and Information Officer at UF Health

Former AMA Exec Margaret Lozovatsky Named CDIO At Premier Health

Published this week

Ransomware gang claims to have made $3.4 million after attacking children’s hospital