December's Patch Tuesday saw significant updates from top tech firms, notably Microsoft, which addressed 57 critical vulnerabilities (CVEs), including one zero-day exploit that could allow local privilege escalation through the Windows Cloud Files Mini Filter Driver. This poses a serious threat as attackers with existing code execution can escalate their access to system-level controls. Notepad++ also responded to an active security risk that allowed traffic hijacking from its updater, emphasizing the need for stringent validation processes in software updates. These vulnerabilities highlight the ongoing challenges in securing healthcare technology systems, which often rely on software integrations that can be targeted by cyber threats.

December Patch Tuesday: Critical Zero-Day Flaws Fixed by Microsoft, Notepad++ The Register

VITAS Healthcare, the largest for-profit hospice chain in the U.S., recently suffered a cybersecurity breach that compromised the sensitive information of over 319,000 patients, including personal and medical details. The attackers gained access through a third-party vendor's account, remaining undetected for 36 days and emphasizing critical vulnerabilities in healthcare vendor security. This incident reflects a troubling rise in cyberattacks targeting healthcare organizations, which have increasingly become lucrative targets for hackers. For healthcare professionals, this breach underscores the urgent need for enhanced cybersecurity measures to protect patient information, particularly for vulnerable populations in end-of-life care.

Major Cyberattack Exposes Sensitive Data of Over 319,000 VITAS Patients TechRepublic

Researchers at UCLA have created an innovative AI tool to uncover undiagnosed cases of Alzheimer's disease, focusing particularly on underrepresented communities prone to underdiagnosis. Published in npj Digital Medicine, the study shows that African Americans and Hispanic/Latino individuals are frequently diagnosed later than non-Hispanic whites, highlighting existing disparities in Alzheimer’s care. The new model, which employs a semi-supervised positive unlabeled learning approach, achieved sensitivity rates between 77% and 81% across diverse ethnic groups, significantly surpassing traditional methods. This development is crucial for healthcare professionals, as it not only enhances diagnostic accuracy but also aims to reduce racial and ethnic disparities in disease recognition and treatment.

AI Tool Breaks Bias, Elevates Alzheimers Detection in Diverse Communities UCLA Health

Microsoft Dragon Copilot will integrate into athenahealth's electronic health records system, athenaOne, by mid-2026, enhancing the Ambient Notes suite designed for ambulatory physicians. This integration allows clinicians to select their preferred AI-powered scribe tool while maintaining a unified contract, emphasizing flexibility in EHR management. The partnership aims to reduce administrative burdens on healthcare providers, redirecting their focus toward patient care. This collaboration underscores the growing trend of utilizing AI to improve healthcare efficiency and streamline clinical workflows.

Microsoft and athenahealth Boost EHR Efficiency with AI-Powered Medical Scribe Healthcare IT News