Stay ahead of the headlines

Mar 10, 2025·BankInfoSecurity

Anahi Santiago, CISO of ChristianaCare, discussed the dual impact of artificial intelligence on healthcare during an interview at the HIMSS 2025 conference, noting its role in improving cybersecurity and clinical care. While AI enhances productivity, Santiago warned of new risks as cybercriminals adopt AI for malicious activities, such as social engineering. In response, ChristianaCare is updating training programs to prepare staff for evolving threats, including deepfakes. Santiago highlighted the need for cybersecurity professionals to leverage AI effectively in safeguarding sensitive healthcare data while staying ahead of potential attackers.

Mar 10, 2025·The Register

Cybersecurity improvements for rural hospitals in the U.S. are estimated to require over $75 million, as these facilities face heightened risks from cyberattacks, primarily phishing and ransomware, which account for 93% of incidents. Research shows that cyberattacks can lead to increased patient mortality rates, intensifying concerns for already struggling rural hospitals. Implementing essential cybersecurity measures could cost between $30,000 and $40,000 per facility, with a total investment for around 2,100 rural hospitals potentially reaching $45 million. The situation underscores the need for a collaborative effort among healthcare providers, policymakers, and security vendors to enhance cyber defenses, given that rural hospitals cater to about 46 million Americans.

Mar 9, 2025·LinkedIn

Microsoft CEO Satya Nadella has highlighted a shift in the artificial intelligence landscape, noting that powerful AI models like OpenAI's GPT are becoming commoditized. As OpenAI pivots from model creation to product development, the competitive landscape will increasingly focus on delivering practical, user-centric solutions rather than simply advanced technology. Nadella estimates that AI could contribute significantly to global economic growth, but warns that future competition will center around product effectiveness and real-world applications. This evolution emphasizes the need for companies to prioritize practical innovation to thrive in a crowded market.

Mar 9, 2025·BleepingComputer

A critical out-of-bounds write vulnerability, CVE-2025-22224, has been identified in VMware ESXi servers, leaving approximately 37,000 systems exposed to cyberattacks. The flaw has been actively exploited by local attackers with administrative privileges, allowing them to execute code on the host system. While Broadcom, the vendor for VMware, has acknowledged this and two other related vulnerabilities as zero-days, details on the attack origins and specific targets remain undisclosed. The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has mandated that federal and state organizations must apply necessary updates by March 25, 2025, or discontinue the use of vulnerable systems.

Mar 9, 2025·Cyberscoop

Cybercriminals have dramatically improved their attack strategies over the past year, achieving lateral movement within networks and data theft in remarkably short timeframes. Current research indicates that the average time for attackers to move laterally is now just 48 minutes, with some cases as brief as 51 seconds. This increase in speed is attributed to attackers refining their methods, leveraging legitimate tools to avoid detection, and targeting administrative credentials. Furthermore, the time from initial breach to data exfiltration has decreased to roughly two days in 2024, with some incidents occurring in under an hour, underscoring a pressing need for organizations to enhance their cybersecurity measures.

Mar 9, 2025·CNBC

Oracle's federal electronic health record (EHR) system experienced a major outage on Tuesday, affecting multiple agencies including the Department of Veterans Affairs (VA) and the Department of Defense. The disruption impacted several VA facilities and raised concerns about continuity of care for veterans. The outage, which began around 8:37 a.m. and was resolved by 2:05 p.m., led affected sites to implement contingency measures for patient care. Oracle is investigating the cause of the outage, which is part of ongoing challenges associated with the EHR system following its acquisition of Cerner in 2022, with the VA expressing prior concerns about patient safety and system effectiveness.

Mar 9, 2025·X

Users of x.com have reported access issues potentially linked to specific privacy-related browser extensions. The platform recommends disabling these extensions as a troubleshooting measure to restore functionality. While this situation may cause temporary inconvenience, adjusting browser settings is expected to resolve the problems. This incident underscores the tension between online privacy protections and website accessibility. Users are encouraged to follow the guidance and check if their access improves after making the adjustments.

Mar 9, 2025·Tribune

Steve Baker has been named the new president and CEO of Columbus Regional Health (CRH), effective April 1, succeeding Jim Bickel, who is retiring after 17 years in the role. The CRH Board of Trustees established a succession plan separating the president and CEO roles to facilitate the transition, allowing Baker to manage daily operations while Bickel focuses on strategic priorities. Baker, who joined CRH in 1998 and has held various leadership positions, aims to leverage his extensive healthcare management and technology experience to advance the organization’s strategic initiatives. Bickel reflects on his tenure, noting the challenges he faced, including the COVID-19 pandemic and other significant events.

Mar 9, 2025·Apple News

Florida is enhancing its prescription drug monitoring efforts by seeking access to patient prescription data to combat drug misuse and the opioid crisis. This initiative aims to analyze prescribing patterns and identify potential abuse cases, supporting public health strategies and improving patient care. Additionally, the state plans to implement educational programs for healthcare professionals focused on responsible prescribing practices. Stakeholders believe that these measures will foster collaboration among healthcare providers, law enforcement, and public health agencies, contributing to safer prescribing and reduced prescription drug abuse.

Mar 6, 2025·LinkedIn

At the HIMSS25 conference, Bill Russell addressed the intersection of healthcare and technology, emphasizing the impact of an upcoming cybersecurity rule from HHS on reimbursement models and planning for the coming year. He discussed the emerging "hospital of the future," driven by advanced technologies, and stressed the need for healthcare organizations to enhance efficiencies and achieve ROI within a year. Russell also defended the relevance of HIMSS as a key venue for networking and establishing partnerships in the healthcare sector, highlighting its role in facilitating learning and business opportunities.

Mar 6, 2025·This Week Health

Healthcare leadership is evolving as CIOs Chuck Podesta, Jeri Koester, and Chero Goswami discuss the importance of adaptability in facing challenges. Podesta emphasizes leveraging obstacles for growth, while Koester highlights the need for flexibility, particularly during the COVID-19 pandemic, advocating for time management strategies that support both work and personal life. Podesta further stresses the value of focusing on essential tasks and foundational stability within organizations, noting his efforts at Renown Health to improve team morale and implement critical changes for sustainable growth.

Mar 6, 2025·Ars Technica

OpenAI's new AI model, GPT-4.5, has received mixed feedback, particularly regarding its underwhelming performance compared to earlier models. CEO Sam Altman announced that GPT-4.5 represents the final traditional model, with future development shifting towards a hybrid of large language models and simulated reasoning models like o3. Concerns have also arisen over GPT-4.5's pricing, which is significantly higher than GPT-4o, making it less viable for many developers, especially when alternatives like the more affordable o1 pro and o3-mini models offer better performance for certain tasks. This change indicates OpenAI's acknowledgment of the limitations of scaling up LLMs, prioritizing innovative inference methods instead.

Mar 6, 2025·Healthcare IT News

At HIMSS25, General Paul M. Nakasone underscored the critical importance for the healthcare sector to integrate artificial intelligence (AI) technologies to enhance both cybersecurity and patient care. He expressed that generative AI and reasoning models promise significant advancements in healthcare delivery and operations, urging providers to leverage these technologies for improved diagnostics and efficiencies. Drawing a parallel to past technological disruptions, Nakasone characterized the current healthcare landscape as a pivotal moment, emphasizing that adapting to AI could enhance clinician capabilities and patient outcomes. Additionally, he shared insights on the cybersecurity challenges encountered during the COVID-19 pandemic, advocating for collaborative efforts to tackle ransomware and other threats impacting healthcare security.

Mar 6, 2025·Forbes

OpenAI has launched a $50 million investment in the NextGenAI research consortium, which includes 15 leading American universities and institutions, aimed at advancing artificial intelligence across various sectors through collaborative efforts. Founding partners like Caltech, Harvard, and MIT will address specific challenges in their fields, such as digital health, diagnostic improvements, and AI alignment in medical decision-making. The initiative also includes efforts to enhance AI literacy and innovate educational curricula, further reflecting OpenAI's commitment to engaging with higher education and preparing future generations for the evolving AI landscape.

Mar 6, 2025·AHA

Hospitals and health systems in the U.S. have been targeted by fraudulent data extortion letters purportedly from the Russian ransomware group BianLian, raising alarm among healthcare organizations and law enforcement. These letters threaten the disclosure of sensitive patient information unless a ransom is paid, yet they lack evidence of stolen data and reliable contact information. John Riggi from the American Hospital Association highlighted the unusual use of traditional mail for such extortion attempts and suggested these may be hoaxes. He urged recipients to report the letters to the FBI and to preserve them for forensic analysis, while the AHA continues to collaborate with law enforcement to address the ongoing cyber threats facing the healthcare sector.

Mar 6, 2025·West Health

A survey by West Health and Gallup reveals that over 31 million Americans borrowed around $74 billion last year for healthcare costs despite having health insurance, with nearly one-third fearing that significant health events could lead to debt. Younger Americans are particularly impacted, as nearly 20% of those aged 49 and under reported borrowing for medical expenses, a stark contrast to just 9% of individuals aged 50 to 64. Additionally, women in the older demographic were more likely to borrow than men. Racial disparities are evident, with Black (23%) and Hispanic (16%) adults borrowing at higher rates than White adults (9%), especially notable among younger Black adults.

Mar 6, 2025·Becker's Hospital Review

A federal judge in Massachusetts has issued a preliminary injunction to halt a National Institutes of Health (NIH) policy that aimed to cap reimbursements for indirect research costs at 15%. This decision comes amid ongoing lawsuits from 22 states and research organizations that argue such cuts would adversely impact medical research and patient care. The NIH proposal, intended to reduce overhead costs from 27% to 15%, was associated with projected savings exceeding $4 billion annually. The Association of American Medical Colleges welcomed the ruling, asserting that the funding cuts could impede medical progress and threaten lives. Meanwhile, President Trump's recent congressional address focused less on healthcare and more on government spending and military issues.

Mar 5, 2025·Augusta Health

Augusta Health has appointed Leigh Williams as Vice President and Chief Information Officer (CIO), effective January 12, 2025. Williams, who has been with Augusta Health since 2021 and previously served as Assistant CIO, has significantly contributed to the organization’s technology initiatives. She has implemented nearly 200 tech solutions aimed at enhancing system integration and workflow efficiency while prioritizing human-centered design. In her new role, Williams will take on additional responsibilities in clinical engineering, informatics, and information security, joining the executive leadership team. With over 15 years in healthcare IT, she brings extensive experience from prior roles at the University of Virginia Health System and the University of Mississippi Medical Center.

Mar 5, 2025·Ars Technica

Three significant vulnerabilities in VMware's virtual machine products expose customer networks to serious risks, enabling potential hyperjacking attacks that can compromise the hypervisor and allow unauthorized access to multiple virtual machines. This breach dismantles the isolation typically provided by virtual machines, raising concerns about the security of various organizations' internal networks. Security researcher Kevin Beaumont underscored the critical nature of the vulnerabilities, which have been reported to be actively exploited in the wild. Affected products include all versions of VMware's ESXi, Workstation, Fusion, Cloud Foundation, and Telco Cloud Platform, underscoring the extensive impact across different deployments.

Mar 5, 2025·BankInfoSecurity

Seven prominent health industry organizations, including the College of Healthcare Information Management Executives and the Medical Group Management Association, have urged the Trump administration to rescind a proposed update to the HIPAA Security Rule issued at the end of the Biden administration. In a letter dated February 17, 2025, the groups expressed concerns about the substantial costs and regulatory burdens that the proposed changes would impose, arguing that while enhanced cybersecurity is crucial, the new requirements—mandating measures like encryption and multifactor authentication—could hamper innovation and financial sustainability within the healthcare sector. They criticized the removal of previous flexibilities and the need for significant investment to meet the complex new requirements, suggesting that the overall approach could hinder the advancement of vital technologies aimed at improving patient care.