Stay ahead of the headlines

Mar 25, 2025·HIMSS

Corewell Health has received the 2024 HIMSS Davies Award of Excellence, becoming the first health system in Michigan to earn this distinction since 2018. The award acknowledges the organization's dedication to enhancing patient care, particularly among underserved and chronically ill populations, through the innovative use of clinical informatics. Key initiatives include a high-risk underserved clinic that utilizes electronic health records to manage at-risk patients, resulting in fewer emergency visits and improved chronic disease management. Additionally, a longitudinal care management model addressing clinical and social determinants of health has demonstrated effective outcomes, including reduced A1c levels in diabetic patients and better blood pressure control in those with hypertension.

Mar 25, 2025·Security Affairs

The FBI has alerted the public to a growing trend of scams involving free online document converters, which cybercriminals are using to distribute malware. These seemingly legitimate tools can infect users' systems and steal sensitive information, potentially leading to serious issues like identity theft and ransomware attacks. The FBI advises users to be cautious, keep antivirus software updated, and report any incidents they encounter. If victimized, individuals should secure their accounts and change passwords from a trusted device.

Mar 25, 2025·Google Blog

At the annual "The Check Up" event, Google Health announced several AI advancements designed to improve health outcomes worldwide. A key feature is the upgraded AI Overviews in Google Search, which offers reliable health information and enhances user engagement with complex queries. The new “What People Suggest” feature curates insights from online discussions, helping users connect with relatable experiences regarding health issues. Additionally, Google introduced Medical Records APIs within Health Connect, allowing users to manage their health data securely and integrate it across various health applications. A notable safety feature is the FDA-cleared Loss of Pulse Detection for the Pixel Watch 3, which can alert emergency services during critical situations, currently available in 14 countries.

Mar 25, 2025·LinkedIn

Houston Methodist highlights the importance of information technology in improving patient care and operational efficiency, advocating for a collaborative relationship between IT and hospital operations. The organization follows an innovation-first approach to enhance quality, safety, and compliance with industry standards. As the new Houston Methodist Cypress hospital prepares to open, the IT team focuses on integrating advanced technologies, such as a "device first" strategy and a digital front door for patient engagement. Recent successes include reduced nursing hours through telenursing and increased online scheduling for primary care, reflecting the health system's commitment to advancing digital innovation and enhancing the patient experience.

Mar 24, 2025·Concord Hospital

Concord Hospital Health System has named Jesus Delgado as its new Chief Digital and Information Officer, leveraging his 24 years of experience in healthcare IT management to oversee the system's technology services. Delgado will focus on enhancing patient care, optimizing operations, and implementing digital transformation initiatives while ensuring compliance with industry regulations and data privacy standards. His previous role as system chief information officer at Community Healthcare System involved successful digital transformation projects, improving patient experience and cybersecurity. Delgado holds a master's degree in Information Technology Management and a Doctor of Management in Organizational Leadership, positioning him to lead Concord Hospital’s strategic digital goals effectively.

Mar 24, 2025·HIPAA Journal

On March 17, 2025, Nebraska Governor Jim Pillen enacted Legislative Bill 241, which limits private companies' liability in class action lawsuits stemming from cybersecurity incidents, reflecting a nationwide trend to protect businesses from the financial repercussions of data breaches. The law stipulates that such lawsuits are only permissible if there is evidence of willful or grossly negligent conduct by the company, encouraging organizations to adopt better cybersecurity practices without the fear of excessive legal repercussions. However, this protection does not apply to regulatory actions, such as those related to HIPAA violations, and it defines private companies broadly to include various entities affected by adverse cyber events.

Mar 24, 2025·Apple News

Northeast London hospitals are planning to implement artificial intelligence (AI) technology to reduce the time required to receive cancer scan results from three weeks to three days. This initiative aims to enhance patient care by facilitating quicker diagnoses, which is essential for timely treatment decisions. The AI system will assist radiologists by analyzing medical images, improving the speed and accuracy of detecting potential signs of cancer while alleviating workload pressures on healthcare professionals. Health officials anticipate this technology will foster earlier interventions and better patient outcomes, potentially serving as a model for broader adoption of AI in healthcare.

Mar 24, 2025·CSO Online

A security breach involving Oracle Cloud has exposed sensitive records from over 140,000 enterprise customers due to a vulnerability in Oracle Access Manager. Discovered by CloudSEK's XVigil team, the breach resulted in the theft of six million records, including critical security components like Java KeyStore files and encrypted passwords. The perpetrator, operating under the alias "rose87168," is selling the stolen data on underground forums and demanding ransom payments from affected organizations. While Oracle denies that customer data was compromised, the investigation indicates that the compromised server had not been updated in over a decade, highlighting significant security risks associated with known vulnerabilities. This breach has initiated an extortion campaign, presenting financial and ethical challenges for the impacted companies.

Mar 24, 2025·nj.com

RWJBarnabas Health has initiated a program in New Jersey to provide free transportation to underserved patients through a partnership with Uber Health, addressing significant barriers to accessing healthcare. Launched in November 2023 with $25 million in state funding, the service started at Newark Beth Israel Medical Center and has since grown to include five more facilities within the RWJBarnabas network, now supported by an additional $50 million. By February 2025, the program had facilitated over 47,440 rides, effectively reducing missed appointments and enhancing access to medications and food resources, which is particularly crucial in an area where many households lack reliable transportation.

Mar 24, 2025·BankInfoSecurity

The White House has initiated a shift in cybersecurity responsibilities, as President Donald Trump signed an executive order transferring management from the federal government to state and local agencies. This change aims to enhance state capabilities in managing infrastructure risks, particularly regarding cyberattacks. However, it comes amid federal budget cuts to cybersecurity support, raising concerns about states' ability to cope with growing threats. Experts warn that the reduction of federal services may lead to inconsistencies in cybersecurity readiness, particularly affecting local governments and educational institutions that often lack sufficient resources.

Mar 24, 2025·Dark Reading

Organizations leveraging artificial intelligence in cloud environments are frequently risking their cybersecurity by making significant configuration errors. A Tenable report reveals that 91% of those surveyed had deployed Amazon SageMaker with root access enabled by default, posing serious risks if compromised, as root access can allow manipulation of critical systems. The report highlights the trend of excessive permissions and public exposure as significant vulnerabilities, alongside the "Jenga concept" where each service inherits risks from others, leading to potential cascading failures. To mitigate these risks, organizations need to proactively reassess their security settings rather than relying on default configurations.

Mar 24, 2025·AMA

A recent survey by the American Medical Association reveals a growing optimism among physicians regarding the use of artificial intelligence (AI) to alleviate administrative burdens that contribute to burnout and inefficiency in healthcare. Among nearly 1,200 respondents, 57% identified automating administrative tasks as the most significant opportunity for AI to enhance their practice. The survey highlights specific applications that physicians believe could improve their work processes, with 80% emphasizing the automation of documentation tasks like billing and medical charts. Additionally, 35% of respondents expressed more optimism than concerns about AI's implementation, noting its potential to enhance work efficiency and reduce stress and cognitive overload.

Mar 21, 2025·Time

Elon Musk's Department of Government Efficiency (DOGE) has sparked concerns among cybersecurity experts due to substantial cutbacks in federal programs and key cybersecurity personnel. The dismissal of top officials and cancellation of essential contracts aimed at safeguarding sensitive data have raised alarms about potential hacks, fraud, and privacy violations. Experts specifically criticize DOGE for mishandling personal information and engaging in unauthorized practices, such as insecure server connections and website alterations. These actions not only jeopardize individual privacy, particularly for vulnerable populations, but also threaten national security by undermining protections for critical infrastructure.

Mar 21, 2025·Healthcare IT News

The Department of Health and Human Services (HHS) has proposed new cybersecurity regulations to address rising breaches in the healthcare industry, following the establishment of HHS Cyber Performance Goals in 2023. The notice of proposed rulemaking (NPRM), issued in December 2024, aims to strengthen requirements that were deemed inadequate under the Health Insurance Portability and Accountability Act (HIPAA). Key changes include mandatory encryption, multifactor authentication, and formalized incident response protocols to protect electronic protected health information (ePHI). Healthcare organizations are advised to prepare by conducting gap analyses and engaging leadership to ensure compliance with the forthcoming regulations.

Mar 21, 2025·HealthLeaders

The 2025 HFMA Revenue Cycle Conference underscored the necessity of technology adoption in enhancing revenue cycle operations amid financial pressures on healthcare institutions. Key discussions focused on automation and AI in prior authorizations and claims management, highlighting the hurdles of ROI justification, staff resistance, and interoperability. Mayo Clinic executives Kevin Barnes and Michelle Amos shared strategies for overcoming these barriers, emphasizing the need for stakeholder buy-in and comprehensive roadmaps. They pointed out that while demonstrating ROI is critical, the non-monetary benefits, such as improved patient care, are significant as well. Additionally, the executives discussed staffing strategies, weighing the benefits of in-house staff against contracted resources for effective technology integration.

Mar 21, 2025·HealthSystemCIO

Chief Information and Digital Transformation Officer Joyce Oh is focused on advancing digital innovation at The Christ Hospital Health Network by aligning IT initiatives with strategic business objectives. Under her leadership, the IT governance process has been restructured to prioritize projects that match long-term goals rather than urgency. This includes the creation of an IT steering committee to evaluate projects systematically and improve resource allocation, particularly in areas such as cybersecurity. Oh highlights the necessity for thorough business case development for IT initiatives, ensuring that each project articulates clear benefits to justify funding amid budget constraints. Collaboration across departments is also emphasized to foster a unified approach to digital transformation.

Mar 21, 2025·Cyberscoop

Congress is being urged to reauthorize the Cybersecurity Information Sharing Act (CISA) before its expiration at the end of September. The act offers legal protections for companies sharing cyber threat information, helping to facilitate essential real-time data exchange needed for responding to cyber attacks. Acknowledging bipartisan support, particularly from key leaders in intelligence committees despite some opposition on privacy grounds, advocates stress that renewing CISA is crucial for encouraging critical infrastructure operators to report cyber incidents without fear of legal repercussions. Additionally, there are calls for new legislation to address conflicting cybersecurity regulations and establish an interagency committee to streamline rules.

Mar 21, 2025·Apple News

A federal judge has blocked the Department of Governmental Oversight and Evaluation (DOGE) from accessing Social Security systems containing personal information, citing privacy concerns and potential overreach. The ruling comes after challenges from civil liberties advocates, who argued that DOGE’s efforts to monitor and analyze citizen data lacked sufficient legal safeguards. The decision underscores growing tensions between government surveillance initiatives and data privacy protections, highlighting the need for clearer regulations on access to sensitive information.

Mar 21, 2025·The Atlantic

Library Genesis (LibGen) has become a focal point in discussions about data sources for training artificial intelligence, particularly for companies like Meta, which has utilized the database containing millions of books and scientific papers. The Atlantic's investigation examines LibGen's extensive and controversial collection, highlighting the presence of both legitimate works and pirated content, as well as the imperfections in the database such as inaccurate author listings. Despite confirming Meta's use of LibGen for AI training, the specific materials accessed remain unclear, with changes to the database over time raising ethical questions regarding the inclusion of potentially pirated content.

Mar 21, 2025·CyberNews

Alphabet has announced its acquisition of cybersecurity firm Wiz for $32 billion, marking its largest purchase to date. Founded in 2020, Wiz specializes in cloud security and has collaborated with major tech firms like Amazon and Microsoft to safeguard data in remote centers. Integrating Wiz into Google Cloud aims to enhance security offerings amid a growing focus on artificial intelligence and multicloud capabilities. Despite earlier stalled negotiations when Wiz was valued at $23 billion, this agreement will ensure that Wiz's products remain available across multiple cloud platforms. Google CEO Sundar Pichai emphasized the move's significance in meeting the increased demand for comprehensive cloud security solutions.