Cybersecurity Saturday

David Ermer

I am an attorney who practices law in Washington DC. My practice has involved the Federal Employees Health Benefits Program since 1983.

Cybersecurity Saturday

David Ermer–Agentic & Generative AI, Cybersecurity–

From the renewed war with Iran front,

  • Dark Reading offers an opinion piece explaining that “Iran’s Cyber Crosshairs Focus Beyond Critical Infrastructure.”
    • “Obscurity isn’t a defense. If your company has any Internet-facing vulnerability, you’re at risk from multiple threats.” * * *
    • “The groups behind recent attacks, including Handala, Ababil of Minab, and others operating within Iran’s cyber-influence ecosystem, cloak themselves in the mask of cyber activism, or “hacktivism.” They are largely opportunistic. They aren’t specifically hunting targets; they are on “Shodan Safaris” hunting easily exploited vulnerabilities or insecure systems. A law firm or logistics hub with an exposed programmable logic controller or an unpatched VPN is an easy, appealing target.
    • “Many companies don’t realize how much of their infrastructure is externally accessible, or how little it takes to exploit what’s exposed. Handala, which the US Justice Department has attributed to Iran’s Ministry of Intelligence and Security, remotely wiped over 200,000 hosts in an attack on Stryker, a medical device manufacturer, in March. The incident disrupted manufacturing and impacted their first-quarter earnings. More recently, Ababil of Minab compromised Vyncs, a GPS tracking platform used across the logistics sector, taking systems offline and defacing its website. In the Stryker incident, the attack was likely made possible through credentials stolen via commodity malware and provided for sale via illicit channels — emphasizing the opportunistic nature of these events.”
  • Security Week adds,
    • “An Iran-linked advanced persistent threat (APT) actor has been using a modular command-and-control (C&C) framework in recent attacks targeting organizations in Israel, Check Point reports.
    • “Tracked as Cavern Manticore, the APT focuses on government entities and IT providers, and appears linked to Iran’s MOIS (Ministry of Intelligence and Security), with possible ties to the OilRig subgroup Lyceum (also known as Hexane and SiameseKitten).
    • ‘Cavern Manticore’s C&C framework includes an adaptable toolset built using .NET, with various compilation formats used across components, used as an anti-analysis layer.”

From the Project Glasswing front,

  • Crypto Briefing reports,
    • “The U.S. government has begun utilizing AI technology developed by Anthropic to identify vulnerabilities in its software systems. This initiative, part of Project Glasswing, leverages Anthropic’s Mythos model to detect bugs within hours, a significant improvement over traditional methods. Despite previous concerns over security risks associated with the Mythos model, its deployment underscores the government’s commitment to strengthening cybersecurity measures. The move is seen as a strategic effort to protect critical infrastructure and enhance national security.”
  • Bleeping Computer adds,
    • Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its codebase.
    • In a blog post published today, Microsoft said advances in AI have significantly accelerated vulnerability discovery, allowing engineers to identify more security issues before they can be exploited in zero-day attacks.
    • “The pace of vulnerability discovery is changing with advances in AI making it possible to find more issues, faster, across more code, with new mechanisms that can accelerate both discovery and analysis,”  Microsoft said. * * *
    • “This announcement comes two days [July 8] after Reuters reported that the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has begun using Anthropic’s Fable AI model to scan government software for vulnerabilities that cybercriminals or foreign intelligence services could exploit.
    • “According to the report, the AI-assisted code audits have already uncovered numerous vulnerabilities, though officials did not disclose how many or provide details on their severity.”
  • SC Media lets us know “what our industry learned the past 90 days since the Mythos announcement.”
    • “For years, security leaders have discussed the possibility that AI would eventually accelerate offensive cyber operations. Mythos transformed that discussion from a future-looking hypothesis into an immediate operational concern.
    • “Over the past three months, the industry has begun adjusting to a new reality. We no longer view AI simply as a productivity tool that helps developers write code or assists analysts with investigations. It’s emerged as a force multiplier for vulnerability discovery, capable of identifying weaknesses at a pace that challenges traditional security workflows. As the time between vulnerability discovery and exploitation shrinks, organizations are now forced to rethink long-standing assumptions about patch management, vulnerability prioritization, and cyber defense.
    • “This shift extends well beyond one AI model or one vendor. Whether organizations use commercial frontier models, open-weight alternatives, or internally developed AI systems, the underlying trend remains the same: AI has dramatically compressed the window defenders have to identify, validate, and remediate software flaws before attackers can weaponize them. In many ways, the security industry has entered an era in which the speed of decision-making may become just as important as the quality of detection.”

From the cybersecurity policy and law enforcement front,

  • On July 3, the Office of Management and Budget’s Office for Information and Regulatory Affairs posted the federal government’s 2026 unified regulatory agenda.
    • Fierce Healthcare tells us,
      • “Federal regulators have delayed a major overhaul of the Health Insurance Portability and Accountability Act (HIPAA) Security Rule, pushing back final action on the rule by a year.
      • “The Department of Health and Human Services (HHS) had proposed a May 2026 release for a final rule that makes significant changes to the HIPAA Security Rule and marks the first major update to the 23-year-old rule in more than 10 years.
      • “The U.S. Office of Management and Budget (OMB) website was updated and indicates that the final rule was pushed back to July 2027.”
    • Federal News Network lets us know,
      • “[The unified agenda] shows that the Cybersecurity and Infrastructure Security Agency expects to issue a final rule for the Cyber Incident Reporting for Critical Infrastructure Act in September 2026. Earlier this summer, CISA held a series of townhalls to get some final feedback on the regulations.” * * *
      • “Meanwhile, the Unified Agenda also shows that a federal contracting rule that standardizes cybersecurity requirements for unclassified IT systems will also be finalized in September 2026.
      • “The rule “will ensure federal information systems are better positioned to protect from cybersecurity threats by standardizing common cybersecurity contractual requirements across agencies for unclassified federal information systems,” according to the regulatory preview.
      • “And another federal contracting rule on “cyber threat and incident reporting and information sharing” is also projected to be finalized in September, the Unified Agenda shows.
      • “Both the CUI rule and the incident reporting rule have been long anticipated, with proposed rules dating back to 2023. They each represent landmark rules for the government contracting community, which is also grappling with the roll out of the Defense Department’s Cybersecurity Maturity Model Certification (CMMC) requirements.
      • “The CMMC regulations went into effect late last year, but DoD has been slowly ramping up the requirements for third-party audits. This November, however, the requirement for a third-party CMMC assessment is expected to become standard in all applicable contracts.
      • “DoD also expects to shortly issue more details on how the cybersecurity standards that underpin CMMC will be updated.
      • “The Unified Agenda shows that this month, DoD will adopt an interim final rule for the CMMC program that details the deadline for shifting to the National Institute of Standards and Technology Special Publication 800-171 Revision 3. Currently, CMMC assessments are tied to Revision 2 of the NIST standards.”
  • Fedscoop informs us,
    • “Greg Barbaccia is stepping down as federal CIO and leaving government at the end of August, he said in an email to the CIO Council Tuesday [June 7, 026].
    • “I’m writing to share that I’ve made the difficult decision to leave government, and my time as Federal CIO is coming to an end,” Barbaccia wrote to CIOs on the council in his email, obtained by FedScoop. 
    • “Barbaccia, who joined the Trump administration as its top IT official in January 2025, said his last day in the role will be Aug. 31.
    • “Barbaccia’s departure comes just months after he brought on former Department of Education CIO Thomas Flagg to be his deputy. Flagg would be the default acting official with Barbaccia’s departure, a government chief information officer told FedScoop on the condition of anonymity to be more candid.”
  • Cyberscoop observes,
    • “The AI-focused executive order President Donald Trump signed last monthgave the Treasury Department, the National Security Agency, and the Cybersecurity and Infrastructure Security Agency (CISA) 30 days to establish a new “AI cybersecurity clearinghouse.” The deadline passed last week.
    • “The clearinghouse is meant to coordinate the scanning, discovery, and validation of software vulnerabilities in critical infrastructure, and then prioritize how those vulnerabilities get patched and distributed.
    • “It’s the right problem to solve. The question now is whether what is created will actually solve it.”
  • and
    • “A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive materials, improve how researchers can report agency vulnerabilities and develop plans for similar incidents, the agency said in a forensic report released Thursday.
    • The blog post outlines CISA’s response to the leak that the researcher who discovered it in May called one of the worst he had ever seen, which also drew congressional scrutiny.”
  • Cyberscoop adds,
    • “”A former ransomware negotiator for DigitalMint was sentenced to 70 months in jail for deceiving his employer’s clients and conspiring with ransomware affiliates to extort a combined $75.3 million from five U.S. companies he was entrusted to aid during their moments of extreme crisis, the Justice Department said Thursday. 
    • Angelo John Martino III shared confidential information he gained from his work as a ransomware negotiator, including victim organizations’ negotiating positions and insurance policy limits, to extract the maximum payment for himself and other BlackCat affiliates he colluded with in backchannels.”
  • and
    • “An Armenian national who was extradited from Ukraine to the United States last year pleaded guilty to participating in a series of attacks in 2019 and 2020 involving Ryuk ransomware, the Justice Department said Thursday.
    • “Karen Serobovich Vardanyan pleaded guilty to computer fraud and conspiracy to commit fraud and extortion. He agreed to pay nearly $1.2 million million in restitution and faces up to 15 years in jail.
    • “The 34-year-old admitted to participating in cybercrime from November 2019 to April 2020 when he and his co-conspirators deployed Ryuk ransomware against three U.S.-based organizations while living in Ukraine and Russia.”

From the cybersecurity breaches and vulnerabilities front,

  • Dark Reading reports,
    • “In February, a ransomware attack against the University of Mississippi Medical Center disrupted operations for more than two weeks. In March, a cyberattack on German medical-billing provider Unimed, which services 95% of the nation’s university hospitals and more than half of large clinics, resulted in the theft of sensitive health data for tens of thousands of patients.
    • “In the first half of 2026, cyberattacks on the healthcare sector jumped 14%, slightly more than the overall increase of 11% across all industries, according to data from technology research firm Comparitech. While healthcare providers — such as hospitals and doctors’ offices — saw a moderate rise in attacks, healthcare businesses suffered a significant increase of 35% compared with the second half of 2025 and 110% compared with the same six months from the previous year.
    • “Much of the shift in focus is likely because attackers have recognized that compromising a single provider can provide access to multiple hospitals, says Rebecca Moody, head of data research at Comparitech.”
  • Cybersecurity Dive relates,
    • “A threat actor claims to have stolen a vast trove of sensitive data from the consulting giant Accenture in a recent cyberattack.
    • “The compromised data includes source code, Microsoft Azure personal access tokens, RSA encryption keys and SSH keys, a hacker calling themselves “888” said in a dark-web post shared by Bleeping Computer.
    • “The actor says they hacked roughly 35GB of data from Accenture during the intrusion, which occurred in early July.
    • “Accenture downplayed the incident in a statement to Cybersecurity Dive.
    • “We are aware of this isolated matter and we have remediated its source,” spokesperson Peter Soh said. “There is no impact to Accenture operations and service delivery.”
    • “The stolen data could put Accenture and its clients at significant risk of further attacks. “Source code can help attackers understand internal application logic, identify weak implementation patterns, and search for hardcoded secrets or exploitable paths in custom systems,” the threat intelligence firm SOCRadar said in an analysis of the incident. Meanwhile, the exposed access keys could let hackers roam freely through code repositories and cloud storage services.”
  • and
    • “AssuranceAmerica, a closely held provider of auto and renters insurance, was the target of a cyberattack earlier this year that impacted more than 6.9 million customers, according to state regulatory filings. 
    • “The Atlanta-based firm said the incident was detected on March 17, stemming from an attack that targeted one of its employees a day earlier, according to a filing with the California Attorney General’s office. 
    • “An investigation found an unauthorized party gained access to the company’s IT department and copied a number of data files. The company said it notified law enforcement about the attack. 
    • “According to a filing with the Maine Attorney General’s office, the breach involved more than 6.9 million people. This included nearly 880 people within the state of Maine. The Maine AG discontinued posting new notices on its public site in June after its breach reporting system was the target of an attack.”
  • and
    • “An initial access broker weaponized a critical vulnerability known as CitrixBleed 2 in a series of attacks during the first half of 2026 across multiple organizations, according to a report released Thursday [July 9] by the security company Huntress. 
    • “After exploiting the vulnerability, the hackers escalated privileges, created rogue local administrator accounts and established persistence with legitimate remote access tools, including ScreenConnect and Zoho Assist. 
    • “About a half-dozen cases between January and June followed a consistent playbook. In the most advanced case, the attackers deployed DragonForce ransomware, Huntress researchers said.”
  • Healthcare Dive adds,
    • “AdaptHealth disclosed last week that a recent cyberattack resulted in patient data being stolen.
    • “A threat actor gained unauthorized access to company systems through a social engineering attack and exfiltrated data, including certain personally identifiable information, protected health information of patients and stored password files associated with insurance billing, according to a July 2 filing with the Securities and Exchange Commission.
    • “Based on information obtained to date, AdaptHealth believes that the threat actor gained unauthorized access to certain cloud-based business applications, including internal patient management systems and document storage platforms. The company also confirmed that certain external electronic health record system portals were accessed.”
  • CISA added six known exploited vulnerabilities to its catalog this week.
    • July 7, 2026 (two releases; “Per BOD 26-04, federal agencies are required to patch all four security weaknesses by July 10.”)
      • CVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability
      • CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
      • CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability  
      • CVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability
        • Security Week discusses these KVEs here.
    • July 10, 2026
      • CVE-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
      • CVE-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
        • Mallory discusses these KVEs here.
  • Dark Reading adds,
    • “Microsoft has tackled yet another zero-day vulnerability published by a disgruntled security researcher with a vendetta against the software giant.
    • “On Wednesday, Microsoft issued an out-of-band patch for RoguePlanet, an elevation-of-privilege vulnerability in Windows Defender, tracked as CVE-2026-50656. The high-severity flaw, which received a 7.8 CVSS score from Microsoft, could allow an attacker to escalate privileges on a Windows device from a basic user to the highest SYSTEM-level access, which would give them complete control over the device.” * * *
      “Despite a public exploit being available for RoguePlanet, it’s unclear if the vulnerability has been exploited in the wild. Microsoft’s updated advisory states the flaw has not been exploited, and CISA has not added CVE-2026-50656 to its Known Exploited Vulnerabilities (KEV) catalog. Qualys, meanwhile, published a threat report on June 18 stating that RoguePlanet has been “exploited in attacks,” though no details were provided.”
  • Security Week relates,
    • “Organizations across multiple sectors have been targeted in a vishing campaign aimed at harvesting Microsoft 365 credentials, Okta warns.
    • “The campaign started in April and has involved voice calls directing the victims to fake Microsoft Entra ID login pages under the pretense that they need to register a new passkey.
    • “Tracked as O-UNC-066 and also known as CL-CRI-1147 and Pink, the hacking group has been targeting automotive, aviation, construction, food and beverage, healthcare, and technology organizations, mainly for data extortion.
    • “As part of the observed attacks, the threat actor has been registering domains incorporating the word ‘passkey’, and has been directing victims to pages that closely mirror the Microsoft passkey enrollment process.
    • “It appears engineered to convince a targeted user they are in the process of enrolling a passkey with Microsoft, while the threat actor simultaneously registers their own passkey in the targeted user’s Microsoft account,” Okta says.”
  • and
    • “A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, Noma Labs warns.
    • “GitHub Agentic Workflows allows users to write workflows in natural language using markdown files that an AI agent will use as GitHub Actions, thus automating the interaction with code repositories.
    • “Because of the security defect, named GitLost, unauthenticated attackers can hide indirect prompts in crafted GitHub Issues posted on the public repositories of an organization that also maintains private repositories, and the AI agent will follow the instructions.”

From the ransomware front,

  • Cybersecurity Dive reports,
    • “Ransomware activity grew slightly between the first and second quarters of 2026 but significantly year over year, and there were more hacker groups active during April, May and June than in any previous quarter, researchers said on Thursday [July 9].
    • “Cybercrime actors claimed breaches of 2,279 victims in Q2 2026, a 7% increase over Q1 2026 but a 43% year-over-year increase compared with Q2 2025, GuidePoint Security said in a quarterly report.
    • “The Qilin ransomware gang led the quarter, accounting for 13% of attacks, but the relatively new group The Gentlemen has grown quickly and now accounts for almost as much activity, GuidePoint said.” * * *
    • “Qilin, The Gentlemen, Akira and DragonForce compromise what GuidePoint calls the “four-headed monster” of high-volume ransomware groups. The lack of a “singular monolithic figure” could make the ransomware community more resilient to law-enforcement takedowns, the security firm said, because there are now “multiple franchises poised to absorb displaced affiliates if another were to disappear overnight.”
  • Tech Crunch relates,
    • “Last week, researchers at cloud security firm Sysdig said they’d documented the first known case of “agentic ransomware.” It was an extortion operation, dubbed JadePuffer, in which an AI agent — not a human — handled the technical execution of a real-world cyberattack from start to finish. The agent broke into a vulnerable server, stole credentials, moved through the target’s network, encrypted files, and even wrote its own ransom note, adapting to obstacles along the way like a human hacker would. Coverage of the operation described it as run “without any human oversight,” with “no human at the keyboard.”
    • “That’s not quite the full picture. In an interview on Monday with CyberScoop, Sysdig’s Michael Clark, the company’s senior director of threat research, clarified that a human was still very much involved — just not in the technical execution. “A human still set up and pointed the operation and provisioned the infrastructure behind it, the command-and-control server, the staging server used for the stolen data and chose a victim,” Clark said. The credentials used to break into the victim’s database, he added, weren’t harvested by the AI agent itself; someone obtained them separately, through a prior compromise, and handed them to the operation.
    • “None of this contradicts Sysdig’s original claim, and the technical details of the attack remain notable on their own — wild, even. The agent got in through a known bug in Langflow, a popular open source tool for building LLM apps, then moved on to a production MySQL server and exploited another known flaw to gain admin access. It encrypted over 1,300 configuration records and not only left behind a ransom note that it wrote itself but it left a Bitcoin address where the ransom could be sent. Sysdig hasn’t disclosed who was targeted.”
  • Dark Reading tells us,
    • “A newly rebranded ransomware outfit is sneaking malware into American organizations using a malicious yet Microsoft-approved driver.
    • “Researchers at Symantec recently observed a cyberattack from a group known as “Hyadina.” Hyadina is a 4-year-old ransomware-as-a-service (RaaS) operation with a new locker, “GodDamn,” an iteration on its previous lockers, “Beast” and “Monster.” It typically attacks American organizations, and it also has a distinct distaste for former Soviet countries. Its targets have spanned sectors that include healthcare, manufacturing, education, and wherever else it finds opportunity.
    • In a recent case against an unidentified organization, Hyadina used a smorgasbord of dual-use hacking tools, including legitimate remote monitoring and management (RMM) software, and more than a dozen penetration testing programs. The real kicker, though, was a malicious program with kernel access on Windows, capable of killing any and all processes, including security software.

From the cybersecurity business and defenses front,

  • Cybersecurity Dive reports,
    • “U.S. companies are merging cyber risk issues into their overall enterprise risk strategy, at a time when AI adoption and business resilience are leading to significant shifts in business priorities, according to a report released Tuesday [July 7] by Information Services Group, a technology research and advisory firm.
    • “Cybersecurity is increasingly seen as a business-critical concern, as companies accelerate their adoption of agentic AI and transform much of their technology and data infrastructure to hybrid or multicloud environments. 
    • “Enterprise leaders are closely integrating cyber spending decisions with overall IT strategy. In addition, C-suite and board members are taking greater accountability for business continuity, financial exposure and regulatory compliance.”
  • Info-Security Magazine relates,
    • “Chris Betz has officially taken the helm as the new CISO of Google Cloud. Transitioning from his previous role as Google’s VP of infrastructure security, Betz is stepping up to lead the company’s security posture at a critical turning point in the industry.
    • “In his very first interview since assuming the CISO title [which is found in the article], he shared his vision on the role generative AI will play in defending global enterprises.
    • “Coinciding with his transition, Betz published a key blog post on the Google Cloud blog titled Cloud CISO Perspectives: The 4 lessons that guided AI threat defense. In the article, he lays out Google’s playbook for using AI to defend against AI, advocating for a multi-model approach, robust security harnesses and the irreplaceable value of human expertise in modern cyber defense.”
  • Tech Target offers “a roadmap to zero trust maturity.”
    • “Transforming an organization to take on a zero-trust posture is no small affair. A phased, thoughtful approach can bolster security while supporting business outcomes.”
    • “Zero trust is not a product, control or single technology deployment; it’s a strategic architecture and operating model designed to reduce risk and improve the security posture of organizations that have traditional, perimeter-based security models. Perimeter-based models — which assume clearly defined “inside” and “outside” boundaries — fail to address modern threats because they were designed for a world that no longer exists.
    • “Zero trust relies on three foundational principles:
      • “Explicit verification. Every access request is authenticated and authorized using components such as user identity, device health, location and behavior.
      • “Least-privilege access enforcement. Users and devices receive only the minimum access required, and only for as long as needed.
      • “Assume breach. Security operates under the assumption that attackers are already present, with controls designed to limit access and damage.”
  • and sugggests an approach for “evaluating secure enterprise browsers vs. security plugins
    • “Malicious actors have long targeted and exploited browser vulnerabilities. The widespread adoption of AI increases the risk, forcing CISOs to reevaluate browser security options.” * * *
    • “In this moment of renewed attention to browser security and the risks of it failing, CISOs face two options for improving browser security: deploying secure enterprise browsers and deploying browser security plugins.”
  • Here is a link to Dark Reading’s CISO Corner.

Friday report

David Ermer–CDC, CMS, COVID-19, FDA, Federal employment benefits, Medical / Rx research, OPM, Rx coverage, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC

  • Federal News Network reports
    • “Federal retirement processing times are slowing down. During June, it took the Office of Personnel Management an average of 108 days to process a retirement claim, according to the agency’s latest data release. Processing times for digital-only applications averaged 96 days. That’s a full 30 days longer than the previous month’s average. But at the same time, OPM’s retirement claim inventory in June was the lowest it’s been all year, coming in at just under 34,000 pending applications. OPM received close to 9,000 new claims last month and processed nearly 13,000.(June 2026 retirement processing statistics – Office of Personnel Management)
  • FEHBlog observation: It’s hardly surprising that a slow down occurred during last month’s big processing system change.
  • Federal News Network adds
    • “There’s room for improvement in the Office of Personnel Management’s efforts to prevent improper retirement payments. OPM’s use of manual processes and delays in payment suspensions are hampering the ability to mitigate improper retirement payments. A recent report from OPM’s inspector general office recommends that the agency tighten its timeline and transition to digital tools to help identify and prevent overpayments or underpayments to federal retirees. Officials in OPM’s retirement services division say discussions are ongoing to automate various surveys and projects associated with improper payment prevention.(Evaluation of OPM Retirement Services’ efforts to identify and prevent improper payments – OPM Office of Inspector General)”
  • The American Hospital Asssociation News relates,
    • “The Health Resources and Services Administration has announced new funding available to healthcare providers in rural areas through the Small Health Care Provider Quality Improvement Program. Up to 20 grantees may be awarded up to $250,000 each to providers, such as critical access hospitals, rural health clinics or networks of small rural providers, to build programs that collect and use clinical data and evidence-based approaches to improve healthcare quality, particularly focused on improving chronic disease outcomes. The grant also is intended to be used to strengthen the skills and collaboration of the billing and coding staff in coordination with the front-line clinical staff. Applications must be submitted by Aug. 6, 2026.”
  • Fierce Healthcare informs us,
    • “Participants in the ACO REACH program generated nearly $1 billion in savings in 2024, according to new performance data from the Trump administration.
    • “The Centers for Medicare & Medicaid Services released its latest look at program performance on Thursday, which found $988.3 million in net savings for the federal government from the accountable care program. Gross savings, before accounting for benchmark discounts and shared savings arrangements, were $2.5 billion, according to the report.
    • “Net shared savings payments to the ACOs totaled $1.5 billion, for a shared savings rate of 4.2%.
    • Most of the 115 ACOs participating in REACH for 2024 earned shared savings, according to the report. Just 19 ACOs, or 17%, posted a net loss, while 96 organizations, or 83%, earned savings.
    • The participating ACOs also generally maintained high performance on quality, CMS said, with 49 organizations qualifying for the high performance pool that allows them to earn additional financial benefits. This pool was first offered for the 2023 program year, CMS said.
    • The ACO REACH model is set to conclude at the end of 2026, and the Center for Medicare and Medicaid Innovation will transition to a new model called Long-Term Enhanced ACO Design (LEAD) beginning on Jan. 1.

From the Food and Drug Administration front,

  • The American Hospital Association News reports,
    • “The Food and Drug Administration July 10 released a proposed rule that would modernize drug establishment registration requirements, with implications for pharmaceutical manufacturers and health systems that depend on a stable medication supply chain. The proposal would create a streamlined registration process for distributed manufacturing operations that use a “hub-and-spoke” model, allowing qualifying networks to register as a single establishment rather than registering each manufacturing unit separately.
    • “The rule would also clarify registration and drug listing requirements for certain foreign manufacturers, including facilities that produce active pharmaceutical ingredients destined for the U.S. market through intermediary facilities. FDA officials said the change would improve visibility into upstream supply chains and strengthen the agency’s ability to identify and respond to potential safety and quality concerns.”
  • Fierce Pharma informs us,
    • “The increasingly more popular combination of Padcev and Keytruda has expanded its bladder cancer territory once again.
    • “Thanks to an FDA nod on July 10, Padcev and Keytruda have become the first muscle-invasive bladder cancer (MIBC) treatment that does not require considerations over the patient’s eligibility for cisplatin-based chemotherapy. 
    • “The latest go-ahead allows the combo as neoadjuvant treatment before surgery, followed as adjuvant treatment after surgical removal of the bladder in MIBC, building on a previous perioperative indication that was limited to cisplatin-ineligible patients. 
    • “The inclusive MIBC label adds to the Padcev-Keytruda combo’s well-established profile in metastatic bladder cancer. It arrives more than a month earlier than the FDA’s target decision date of Aug. 17 under an already accelerated priority review timeline. “
  • and
    • “The third time is not the charm for Hengrui Pharma and Elevar Therapeutics’ star-crossed combination of camrelizumab and rivoceranib at the FDA.
    • “U.S. regulators have declined to approve the anti-PD-1/VEGFR combo for a third time as a first-line treatment for liver cancer, Hengrui and Elevar’s parent company, HLB Group, said in separate announcements Friday.
    • “The problem, again, is manufacturing. Only this time, the complete response letter (CRL) stemmed from deficiencies the FDA had identified in April at the plant producing rivoceranib, also known as apatinib, unlike the previous two rejections, which centered on Hengrui’s camrelizumab facility, according to the Chinese pharma. The rivoceranib manufacturer had passed an inspection by EU authorities in 2025, it noted.
    • “Still, three CRLs do not necessarily mean three strikes and you’re out for Hengrui and Elevar.”

From the public health and medical / Rx research front,

  • The Centers for Disease Control and Prevention announced today,
    • “As of July 10, 2026, the amount of acute respiratory illness causing people to seek health care is very low.
    • “RSV activity is very low in most areas of the country. Emergency department visits and hospitalizations for RSV are low but remain highest among infants and children younger than 4 years old.
    • “COVID-19 activity is low and stable nationally but is beginning to increase from low in a few areas of the country.
    • “Seasonal influenza activity is low.
    • “Parainfluenza (PIV), a respiratory virus that can cause illnesses such as croup, is elevated nationally. Rhinovirus/enterovirus (RV/EV), which often cause cold-like respiratory illness, are also elevated nationally but is going down. Whooping cough (pertussis) is still circulating.”
  • The University of Minnesota’s CIDRAP reports,
    • “The Centers for Disease Control and Prevention (CDC) confirmed 61 new US measles cases today and 2,231 for the year, as Virginia has become the country’s latest hot spot.
    • “Last year the CDC recorded 2,289 infections for the entire year, so the nation is just 58 cases short of that as we pass the midpoint of the year. The 2025 total was the most since 1991, and the United States is now on track to lose its measles elimination status that it gained in 2000.
    • “All but 13 of this year’s cases were locally acquired, with the rest related to travel outside the country. Of the total, 20% of infections are in children age 5 and under, and 70% involve kids and young adults to age 19. Six percent of patients have been hospitalized, compared with 11% in 2025. Among all measles patients, 93% are unvaccinated or have unknown vaccine status. 
    • “No measles deaths have been reported this year, compared with three in 2025.”
  • The American Hospital Association News relates,
    • “The Centers for Disease Control and Prevention has reported 843 cases of cyclosporiasis across 31 states, with 86 people hospitalized. State health departments are reporting higher case numbers than the CDC, which works to confirm the cases reported to it. Michigan has announced that it is investigating 1,562 cases, with 44 people hospitalized. No deaths have been reported, and investigators haven’t identified a source.”
  • The New York Times adds,
    • “How to Stay Safe From the Severe Stomach Bug That’s Going Around
      • “Cyclospora, a parasite that causes intestinal illness, is sickening many people across the United States. Health experts have tips for avoiding infection.”
      • “Past cyclospora outbreaks in the United States have mainly been linked to fresh produce, including raspberries, basil, cilantro, fruit mixes, snow peas, snap peas, lettuce and salad mixes. They have been caused by both imported and domestic fruits and vegetables and those prepared at home and in restaurants, said Donald Schaffner, chair of the food science department at Rutgers University.
      • “Because the cause of the recent infections is unknown, the best way to prevent illness is to follow standard hygiene and food safety practices, said Dr. Adam Ressler, an infectious disease physician with Michigan Medicine.
      • Always wash your hands with soap and water after using the bathroom and before preparing food, Dr. Moore said. Alcohol-based hand sanitizers do not kill cyclospora, he said, but soap and water does.
      • “Rinsing fruits and vegetables with water is always a good practice, Dr. Moore said. Some cyclospora may still cling to contaminated produce after rinsing, but it will reduce their numbers and in turn can reduce your risk of getting sick or make the illness less severe, he said.
      • “Cleaning produce with vinegar or other solutions is generally no more effective than doing so with running water, Dr. Schaffner said.”
  • Cardiovascular Business tells us,
    • “Data on the potential relationship between cannabis use and cardiovascular disease (CVD) remain mixed. Some studies have linked cannabis to an increased risk of heart attack and ischemic stroke, for example, but the current evidence is far from consistent. 
    • “With cannabis legalization skyrocketing in the United States, the team behind a new analysis in Trends in Cardiovascular Medicine hoped to explore the latest evidence and provide a fresh look at this important topic.[1]
    • “Compared with respiratory or psychiatric outcomes, the cardiovascular consequences of cannabis remain poorly established,” wrote first author Ahmed K. Mahmoud, MD, a cardiovascular health researcher with Mayo Clinic, and colleagues. “This highlights the urgent need for prospective studies and clinical trials to more clearly define cardiovascular risk.”
  • The University of Minnesota’s CIDRAP informs us,
    • “A new study finds that the antiviral drug Paxlovid can safely be used by children aged 6 and older.
    • “The study, published recently in Pediatrics, found Paxlovid, which combines the drugs nirmatrelvir and ritonavir, is safe for children who weigh at least 44 pounds who have mild to moderate COVID-19 but are at risk of developing severe disease.
    • “Paxlovid is approved by the US Food and Drug Administration in children at least 12 years old who weigh at least 88 pounds.
    • “The study included 75 children 6 to 17 years old who received at least one dose of Paxlovid. One group received a lower dose and the other a higher dose. 
    • “Researchers found that both doses were safe and well-tolerated, with no serious adverse events. In 90% of participants in both groups, blood concentrations of the drug reached levels that have been shown to have antiviral effects in adults.”
  • BioPharma Dive points out,
    • “An experimental drug GSK licensed from Hansoh Pharma has succeeded in a late-stage study in China, boosting the outlook for a therapy the British pharmaceutical company has already advanced into a series of large global trials. 
    • “GSK said Friday that the antibody-drug conjugate risvutatug rezetecan, or ris-rez, improved survival in people with advanced or relapsed small cell lung cancer when compared to standard treatment, meeting the trial’s main objective. The company didn’t provide specifics, but said that the drug was associated with “statistically significant and clinically meaningful improvements” in survival compared to that typical treatment, the chemotherapy topotecan. Riz-rez also produced “consistent benefits” across secondary study measures, including delaying tumor progression, according to GSK.” 

From the U.S. / worldwide healthcare business front,

  • The Wall Street Journal reports,
    • “Asset-management firm Apollo Global Management APO  agreed to buy a minority stake in Bayer’s BAYN  long-acting reversible contraceptives business for €3 billion, or $3.43 billion, the companies said.
    • “German pharmaceutical company Bayer said it secured €3 billion in equity capital, as part of an agreement with Apollo for its managed funds and affiliates to obtain a minority stake in a new entity. The newly established entity will hold Bayer’s long-acting reversible contraceptives business.
    • “Bayer will retain a majority stake in and full operational control over the business, it said.
    • “The long-acting contraceptives business focuses on methods that prevent pregnancy for a long period of time, such as the intrauterine device, according to Bayer’s website.”
  • Modern Healthcare relates,
    • “Health systems and insurers are trying to minimize poorly executed handoffs between post-acute facilities and home care providers that are costing them millions of dollars in hospital readmissions.
    • “CenterWell, Optum and Banner Health are using a combination of technology, staffing and their own post-acute operations to ensure patients receive timely and consistent care as they transition from skilled nursing facilities to home following a hospital stay.” 
  • Fierce Pharma tells us,
    • “The launch of Eli Lilly’s Foundayo remains “muted,” with weekly prescriptions flat over the last five weeks, analysts from Jefferies said in a July 10 note. The analysis is based on data collected by IQVIA.
    • “In the 13th week of Foundayo’s launch, IQVIA reported 19,550 prescriptions, down for the third straight week after peaking at Week 10 with 21,648 prescriptions. The figure also comes in significantly shy of the Week 13 launch of Novo’s Wegovy pill (more than 105K scripts) and Lilly’s injected obesity treatment Zepbound (59K), but ahead of Novo’s injected Wegovy (13K).
    • “Meanwhile, weekly scripts for Wegovy pill ticked slightly upward sequentially to about 153K, although they still lag behind the drug’s peak of more than 161K.
    • “Jefferies points out that CVS was the last of the big three PBMs to provide coverage of Foundayo, starting on June 1. By contrast, Wegovy had full coverage at the first week of its launch.
    • “While Jefferies’ $71 million quarterly sales projection for Foundayo sits significantly below Wall Street consensus of $130 million, the team still believes that the Lilly med can reach the consensus revenue estimate of $1.2 billion for 2026.”
  • Kaufmann Hall informs us,
    • “Most U.S. adults who use social media engage with health-related content, including sharing health information, according to a study published last month in JAMA. This includes joining online health communities and sharing personal or general health information, with more than one in five adults making health decisions based on what they see online. However, many adults also doubt the accuracy of health information on social platforms. This suggests a public health problem: social media has become a major health information channel, but one built for engagement rather than reliability. This comes as healthcare organizations explore “influencer engagement” as a way to introduce credible information into spaces where patients already are, and where trust is being shaped.”

Notable Death

  • The Wall Street Journal reports,
    • “For decades, oncologists blamed cancers of the mouth and throat on excessive use of tobacco or alcohol. It was typically an old man’s disease.
    • “Starting in the 1980s, they were shocked to see more of these so-called oropharyngeal cancers in people—often young or middle-aged men—who had little or no history of drinking or smoking. A few oncologists suggested those might be caused by the human papillomavirus, or HPV, just as cervical and some other cancers are. But most scoffed at that idea.
    • “In the late 1990s, Maura Gillison, a doctoral student at Johns Hopkins University who was then in her early 30s and little known in the field, sought to resolve the debate. She competed with other researchers for access to scarce tissue samples from human tumors and led a team analyzing them for clues. That work led to a 2000 article in the Journal of the National Cancer Institute demonstrating that HPV-related cases were very different from those related to tobacco or alcohol—and less deadly.”
    • “Gillison, who died June 21 at the age of 61, built on that work with more studies, describing how HPV-related cancers required different treatment—typically less aggressive than the intensive chemotherapy and radiation applied to many non-HPV cancers. These findings saved lives and spared patients from needless treatments and side effects, cancer specialists say.”
  • RIP

Thursday report

David Ermer–Agentic & Generative AI, CDC, CMS, FDA, Federal employment benefits, HIPAA Privacy and Security Rules, Medical / Rx research, Mental health care, Obesity, OPM, Patient safety, Rx coverage, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC

  • STAT News reports,
    • ‘ARPA-H, the U.S.’ “moonshot” agency for health research, announced Thursday that it will spend up to $160 million to push forward custom gene editing treatments for a spate of rare diseases. 
    • ‘The program, called THRIVE, will back seven different teams pursuing various groups of conditions affecting different organ systems. 
    • “Each team has a deadline of starting clinical trials by year three of the program, although some may start much sooner.” * * *
    • “Each of the groups will work with a partner, such as a biotech company or contract manufacturer, or multiple partners to assure they can manufacture the program to Food and Drug Administration standards.”
  • Beckers Hospital Review relates,
    • “Peptides have become one of the most closely watched regulatory questions in healthcare this summer, with a federal advisory committee vote set for July 23-24 that could reshape what’s legally available to prescribers, wellness clinics and patients nationwide.
    • “What are peptides?
      • Peptides are short chains of amino acids that often serve as signaling molecules for physiological functions in the body, including tissue repair, metabolism and inflammation. Some peptides, like insulin and semaglutide, the active ingredient in Ozempic and Wegovy, are FDA-approved drugs. Others — including BPC-157, TB-500 and a handful of others marketed for injury recovery, weight loss, sleep and anti-aging — have circulated for years through wellness clinics, medical spas and online retailers without ever being FDA-approved or added to the list of substances legally allowed in pharmacy compounding. 
      • “That distinction matters because of how compounding law works. Under Section 503A of the Food, Drug and Cosmetic Act, a licensed pharmacy can only compound a drug for an individual patient using a bulk substance if it’s FDA-approved, has a recognized USP monograph, or appears on the FDA’s 503A Bulks List. If a peptide isn’t on that list, pharmacies generally can’t legally compound it — which is exactly the question now in front of regulators. 
    • “The upcoming vote 
      • “The FDA’s Pharmacy Compounding Advisory Committee meets July 23-24 to decide whether seven peptides should be added to the 503A bulks list: BPC-157, KPV, TB-500 and MOTs-C, Emideltide (also called DSIP), Semax and Epitalon. The committee’s recommendation is non-binding, but the FDA has historically followed it.”
  • Tammy Flanagan, writing in Govexec, explains OPM’s new all-digital federal retirement benefit application process.
  • Per an HHS news release,
    • “President Donald J. Trump signed an Emergency Declaration for the Northern Mariana Islands and the Territory of Guam, and Secretary Robert F. Kennedy, Jr. has declared a public health emergency to address the consequences of Typhoon Bavi. Under these circumstances, the Secretary has also exercised the authority to waive sanctions and penalties against a covered hospital that does not comply with the following provisions of the HIPAA Privacy Rule:
      • the requirements to obtain a patient’s agreement to speak with family members or friends involved in the patient’s care. See 45 CFR 164.510(b).
      • the requirement to honor a request to opt out of the facility directory. See 45 CFR 164.510(a).
      • the requirement to distribute a notice of privacy practices. See 45 CFR 164.520.
      • the patient’s right to request privacy restrictions. See 45 CFR 164.522(a).
      • the patient’s right to request confidential communications. See 45 CFR 164.522(b).
    • “When the Secretary issues such a waiver, it only applies: (1) in the emergency area and for the emergency period identified in the public health emergency declaration; (2) to hospitals that have instituted a disaster protocol; and (3) for up to 72 hours from the time the hospital implements its disaster protocol. When the Presidential or Secretarial declaration terminates, a hospital must then comply with all the requirements of the Privacy Rule for any patient still under its care, even if 72 hours has not elapsed since implementation of its disaster protocol.”

From the Food and Drug Administration front,

  • USA Today reports,
    • “If headlines about heavy metals in tampons raised concerns, the Food and Drug Administration says there’s some reassuring news.
    • “A new agency study found trace amounts of metals including arsenic, cadmium and lead in tampons sold in the U.S., but concluded the levels released during use are too low to pose a health risk.
    • “The findings are the FDA’s latest response to a widely publicized 2024 study that detected metals in popular tampon brands and sparked questions about possible health effects. After analyzing 11 tampon products from six brands, FDA researchers found that while metals can be detected in the products, exposure during normal use remains far below levels considered harmful.”
  • MedTech Dive informs us,
    • “Johnson & Johnson has won Food and Drug Administration approval for a catheter that delivers radiofrequency and pulsed field energy to treat atrial fibrillation.
    • “The approval, which J&J disclosed Wednesday, covers the Dual Energy Thermocool Smarttouch SF Platform. J&J already had approval for a single, radiofrequency energy version of the device.
    • “Integrated into the company’s Carto mapping system, the dual-energy catheter is part of J&J’s push to leverage its electrophysiology strength to reverse market share losses triggered by PFA.”
  • The American Hospital Association News relates,
    • “The Food and Drug Administration has issued an early alert for specific lots of BD ChloraPrep Applicators by Medline because of a potential breach of sterility in the packaging, due to wrinkles in the paper lidding which may extend to the seal area. Medline has instructed impacted customers to remove the recalled convenience kits from where they are used or sold. The company said that other components within the convenience kits may still be used.” 
  • BioPharma Dive cautions,
    • “The regulatory gears in the U.S. are increasingly creaking under the weight of new, complex drug technologies and intensifying overseas clinical trials competition from countries like China and Australia.
    • “Now, the Department of Health and Human Services is making moves to speed early drug research under a new plan dubbed Operation Trialblazer. The blueprint, which involves initiatives at multiple federal agencies, including the Food and Drug Administration and the National Institutes of Health, focuses on modernizing regulations and processes, improving patient access and participation, and enhancing the use of data and technology to streamline the regulatory process.
    • “It’s the latest in a series of actions aimed at supporting drug research. But whether the new reforms will make a meaningful impact is an open question.” 

From the judicial front,

  • Fierce Healthcare reports,
    • “CVS Health and its embattled Omnicare unit have agreed to pay $440 million to the Department of Justice to satisfy a nearly $950 million judgment against the company as part of an ongoing fraud case.
    • “In April 2025, a federal jury ruled that Omnicare submitted more than 3.3 million fraudulent prescription claims between 2010 and 2018, earning $135.6 million in overpayments as a result. Then, in July 2025, a judge ordered Omnicare to pay $948.8 million in fees and damages as part of the case.
    • “In the new court docs, CVS said that it has agreed to make an initial $130 million payment within 14 days of the agreement’s effective date. The remaining $310 million must be paid out by March 15, 2028.
    • “The agreement with DOJ is contingent on the closure of Omnicare’s sale to GenieRx Holdings, according to the filing. As it navigated the legal fallout of the False Claims Act case, Omnicare filed for bankruptcy in September 2025, and CVS announced plans to sell to GenieRx in May of this year.”

From the public health and medical / Rx research front,

  • The Washington Post reports,
    • “Annual cancer cases are projected to rise considerably worldwide by 2050, according to a World Health Organization report on cancer published Wednesday. With its assessment, the United Nations body tempered optimism about improvements in cancer surveillance and treatment and warned that global health care inequities are driving further cases and deaths. 
    • “Around 20.6 million people were diagnosed with cancer in 2024, according to the findings. That number could reach 35 million a year by 2050.
    • “The new cases will disproportionately appear in lower-income countries with poorer access to cancer surveillance and treatment, according to the report.” * * *
    • “In the United States, the rate of new cases has generally been stable in recent years, according to the National Institutes of Health. The WHO report predicts that cancer rates will increase in all regions across the world, though the biggest increases are projected in Africa and the Eastern Mediterranean region.”
  • Health Day adds,
    • “More men die from cancer than women, and a new study suggests one potential reason why.
    • “Men are more likely than women to be diagnosed with advanced cancer that has spread to other parts of the body, researchers report in the July issue of the journal Cancer Epidemiology, Biomarkers & Prevention.
    • “That means their cancer is being detected too late, when it’s tougher to treat and more likely to be fatal, researchers said.
    • “We know that, overall, males are more likely than females to die from many types of cancer. We also know that cancer stage at diagnosis is a key predictor of cancer survival,” lead researcher Beth Maclin, a postdoctoral fellow at the National Cancer Institute in Bethesda, Maryland, said in a news release.” * * *
    • “My overall message is that everyone should go to the doctor regularly,” Maclin said. “Don’t delay seeing a doctor if you notice something has changed in your body.”
  • The AP relates,
    • “Nearly 1,000 people in Michigan have been diagnosed with a parasitic infection that can cause weeks of watery diarrhea, making it the largest such outbreak in state history and one of the nation’s largest in years.
    • “No deaths have been reported and the source of the cyclospora infections hasn’t been identified. Meanwhile, investigations into similar illnesses have been going on in 28 other states, including in Ohio, where people just across the Michigan border are also becoming sick.
    • “Michigan officials first announced the outbreak last week, when they were aware of more than 170 cases — all in the southeastern corner of the state — since June 22. Michigan usually identifies only about 50 cases each year.
    • “On Wednesday, the state reported the number had grown to 992, including about 40 hospitalizations. Just across the state line, Lucas County, Ohio, reported 306 cases as of Wednesday. Northwest Ohio has seen more than 500 cases.
    • “Cyclospora surges can be tricky to investigate, and food poisoning sources can be hard to establish. But “there is clearly a linked outbreak happening right now,” Dr. Natasha Bagdasarian, Michigan’s chief medical executive, told The Associated Press on Wednesday.”
  • MedPage Today tells us,
    • “Chronic kidney disease prevalence held steady at around 14.8% over the last decade, despite treatment advances.
    • “This translated to an estimated 36 million affected U.S. adults, based on national health survey data.
    • “The prevalence of diabetes-related chronic kidney disease increased during the period spanning 2013-2014 to 2021-2023.” * * *
    • “This means single-organ care is no longer enough, said [Sophie] Claudel [, MD]. Based on the data, a growing proportion of the population may be at risk for progressive cardiovascular-kidney-metabolic (CKM) syndrome.
  • Healio informs us,
    • “GLP-1s may prevent adverse outcomes in patients with peripheral artery disease and diabetes, according to data published in the Journal of the American Heart Association. 
    • “Researchers reported that GLP-1 receptor agonist use among patients with PAD and diabetes was associated with lower risk for mortality, hospitalization, revascularization and amputation compared with those prescribed metformin.
    • “Obesity and PAD, including chronic limb-threatening ischemia, are linked to increased inflammation, poor blood vessel function, insulin resistance, oxidative stress and faster hardening of the arteries,” Akiva Rosenzveig, MD, cardiology fellow at Cleveland Clinic, said in a press release. “These results indicate GLP-1 [receptor agonists] can help reduce inflammation, improve blood vessel function and manage blood sugar levels.”
  • Medscape adds,
    • “The FDA approved Zepbound (tirzepatide) in December 2024 for the treatment of moderate-to-severe obstructive sleep apnea (OSA) in patients with obesityafter research showed that the medication improved outcomes in these patients.
    • “Sleep apnea is among the most common sleep disorders. It occurs when the airways relax and block breathing during sleep. Patients may repeatedly stop breathing, leading to disrupted sleep, snoring, and excessive sleepiness during the day.
    • “Now new research has shown that certain patients seem to benefit more than others from the medication. Patients with the most severe sleep apnea along with those who are younger and have less severe obesity experienced nearly twice the reduction in symptoms compared to those who are older and have more severe obesity.”
  • Fierce Pharma points out,
    • “In a first for the neurotoxin market, Ipsen announced Thursday that its Dysport has hit the goals in two phase 3 trials for the prevention of both episodic and chronic migraines.
    • “While AbbVie’s market-leading Botox has been approved by the FDA to prevent headaches in patients with chronic migraine since 2010, Dysport is now the first botulinum toxin to also report positive phase 3 results in episodic migraine, according to Ipsen.
    • “The readouts come from studies in Ipsen’s Beond program, comprising 1,510 patients, split between C-Beond (chronic) and E-Beond (episodic). Both trials have met their primary endpoints, showing a statistically significant reduction in monthly migraine days versus placebo.
    • “Together, these findings position Dysport as a potential first-in-class treatment for a broad migraine population,” Ipsen’s global head of R&D, Christelle Huguet, Ph.D., said in a July 9 statement.
    • “Ipsen will review the full data and prepare for regulatory filings, including with the FDA, a company spokesperson told Fierce Pharma.” 
  • BioPharma Dive lets us know,
    • “A nucleic acid-based medicine from AstraZeneca and Ionis Pharmaceuticals missed its main objective in a big study of people with a deadly heart condition in a major setback with notable ramifications for multiple other drugmakers. 
    • “In a pair of statements, the companies said that when compared to a placebo in people with transthyretin-mediated amyloid cardiomyopathy, or ATTR-CM, their drug, eplontersen, didn’t significantly reduce the risk of death or recurrent cardiovascular events after 140 weeks. Eplontersen had no treatment effect among participants already receiving a commonly used “stabilizer” medication. A 29% risk reduction was observed in people who weren’t getting those drugs, AstraZeneca and Ionis said.
    • “The companies didn’t provide additional study details, only noting that the drug was “well tolerated” and showed positive signs on multiple other secondary study measures. Those specifics will be presented at a medical meeting in August. “
  • and
    • “Roche said Thursday it’s discontinuing two Ionis-partnered drugs for Huntington’s disease after clinical setbacks, with one missing its main trial goal and the other suspended because of a safety worry.
    • “A Phase 2 test of the antisense oligonucleotide tominersen “did not meet its efficacy objective” in spite of having a significant impact on biological disease signs, Roche said in a letter to patient groups. Meanwhile, enrollees in a Phase 1 trial of a drug codenamed RG6496 won’t receive a second dose because animal safety testing revealed that it “cannot be given chronically with repeated doses,” Roche said.
    • “The Swiss pharmaceutical giant had once before suspended a late-stage trial of tominersen because it didn’t appear to be helping patients. Roche forged ahead with a hypothesis that younger and less-advanced patients might benefit, but now that pathway has hit a dead end.”
  • Per Genetic Engineering and BioTechnology News,
    • “A landmark Phase I/II clinical study led by researchers at Skåne University Hospital and Lund University has shown that transplanting stem-cell-derived dopamine progenitor cells into the brain is feasible. Eight patients with Parkinson’s disease (PD) received transplants of STEM-PD, a cryopreserved, off-the-shelf dopaminergic progenitor product derived from human pluripotent stem cells. The three-year Phase I/II, open-label, multicenter, single-arm, dose-escalation study identified no serious side effects linked to the transplanted cells during the first year of follow‑up.
    • “The possibility of replacing dopamine neurons that are lost in Parkinson’s disease has been a long-standing goal in the field,” said Malin Parmar, professor of cellular neuroscience at Lund University, and lead of the STEM-PD program. “The findings represent an important milestone for regenerative medicine approaches in Parkinson’s disease and support continued clinical development of stem cell-based therapies.”
    • “Results from the study were reported by Parmar and colleagues in Nature Medicine. In their paper, titled “Human embryonic stem cell-derived dopaminergic cells for Parkinson’s disease: a Phase I/II open-label trial,” the team wrote, “In conclusion, particularly in the context of other recently published trials using human PS cell-derived dopaminergic cell therapies for PD, these findings further support the continued development of this therapeutic approach, including evaluation of the STEM-PD product in larger patient cohorts.”

From the U.S. healthcare business and artificial intelligence front,

  • Healthcare Dive reports,
    • “CVS’ insurance division Aetna has a finally gotten a handle on medical spending after a turbulent few years, according to the healthcare giant’s chief executive.
    • “We’ve got, I think, our arms around how to project and predict where healthcare costs are going, and making sure we’re pricing our products accordingly,” CVS CEO David Joyner said at an event hosted by the Economic Club in Washington, D.C., on Thursday.
    • “Joyner’s comments — which come about a month before CVS is scheduled to report second quarter results — are likely a welcome signal for investors that Aetna can continue recent progress on controlling spending.” * * *
    • “The biggest challenge for CVS isn’t managing members’ costs: It’s policy uncertainty out of Washington, Joyner said.
    • “I spend a lot of my time, both at the federal level and in the states, trying to help educate and also describe what are the real drivers of healthcare costs, and then making sure that we play an active role to help with members of Congress,” the CEO said.”
  • Fierce Healthcare relates,
    • “UnitedHealthcare is rolling out a new benefit option aimed at making it easier for employers to offer more personalized wellness programs.
    • “Called Lifestyle Spending Accounts (LSAs), the benefit allows employers to offer a stipend that members can put toward wellness solutions. The LSAs are integrated with UnitedHealth’s UHC Store, which is a digital storefront where members can purchase select health and wellness programs at a discount.
    • “The accounts exist alongside health savings accounts or flexible spending accounts, allowing individuals to purchase health and wellness generally not available under HSAs or FSAs, UnitedHealthcare said.”
  • Benefits Pro tells us,
    • “Both the levels and growth of health care spending from 2005 to 2023 were greatest among Americans with the highest incomes, according to a new report in Health Affairs.
    • “Among the lowest income quintile, spending grew more rapidly just after 2014 but declined from 2018 to 2023. By contrast, spending in the highest income quintile grew more rapidly in recent years. As a result, the difference in age and health status-adjusted spending between the highest and lowest income quintiles declined after implementation of the Affordable Care Act subsidies but increased more recently. The adjusted per capita spending difference in 2023 was more than $4,700.
    • “If spending continues its most recent trajectory, that difference will continue to grow,” the report said. “These spending patterns were driven largely by outpatient and prescription drug spending, which tend to be more discretionary than inpatient and emergency department spending. Prescription drug spending showed a particularly pronounced recent divergence for the top income quintile. Recent spending growth was most evident in the population younger than age 65, which has more variation in insurance coverage, affecting both service use and prices.”
  • Psychology Today lets us know,
    • “Mental health leave [under federal and state leave acts] has sharply increased in the U.S. since the pandemic.
    • “Women, especially caregivers, account for the majority of mental health leaves.
    • “Access to mental health leave highlights structural inequalities in the workplace.
    • “Early, ongoing treatment with an established provider can support the mental health leave process.”
  • Per Smart Brief,
    • “Healthcare AI’s next challenge isn’t adoption. It’s reliability
    • “Healthcare has reached a point where the challenge with AI is not adoption but ensuring it is accountable and dependable post-deployment, writes Sina Bari, vice president of healthcare and life sciences AI at iMerit.”
  • Per MedTech Dive,
    • “Stereotaxis said Thursday it finalized the acquisition of French surgical robotics company Robocath.
    • “Announced in April, the deal is valued at up to $45 million and brings together two robot developers focused on endovascular interventions, which are performed inside blood vessels.
    • “Combining the companies’ expertise will speed development of next-generation robotic technologies for electrophysiology, interventional cardiology and neurointerventions, the companies said.”
  • Per Fierce Pharma,
    • “Unexpectedly catapulted into global fame as a COVID-19 vaccine maker, BioNTech is on the verge of returning to its oncology roots with potentially its first commercial cancer drug. Yet, to Chief Commercial Officer Annemarie Hanekamp, the upcoming launch is less of a standalone milestone than a strategic springboard for a far more critical pipeline product. 
    • “Backed by positive phase 2 data and an ongoing confirmatory phase 3 trial, BioNTech is readying its Duality Biologics-partnered antibody-drug conjugate (ADC) trastuzumab pamirtecan (T-Pam) for submission with the FDA for previously treated HER2-expressing endometrial cancer. 
    • “If approved, the drug will compete with AstraZeneca and Daiichi Sankyo’s blockbuster HER2 ADC, Enhertu, which boasts a pan-tumor indication. Challenging the market leader, however, is not BioNTech’s end goal for T-Pam.
    • “This is not about competing head to head with Enhertu and overtaking them,” Hanekamp said in a recent interview with Fierce Pharma. “We’re very realistic, and we know in the oncology space, first-mover advantage matters. They’ve been in the market for a while, it’s an amazing drug, and we don’t claim to be all that differentiated versus Enhertu.”
    • “Instead, Hanekamp views T-Pam as a “strategic launch,” an exercise to “run water through the pipes” and test BioNTech’s commercial infrastructure in oncology.”

Midweek report

David Ermer–ACA, Agentic & Generative AI, CDC, CMS, Congress, Electronic health records, FDA, Federal employment benefits, Medical / Rx research, Obesity, OPM, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC,

  • Per a Senate news release,
    • “On Wednesday, July 15, [beginning at 10 am ET], the U.S Senate Health, Education, Labor, and Pensions (HELP) Committee will hold a confirmation hearing on the nomination of Sean Kaufman to be Assistant Secretary for Preparedness and Response for the U.S. Department of Health and Human Services and Erica Schwartz to be Director of the Centers for Disease Control and Prevention.”
  • The Wall Street Journal reports,
    • “Rates for many Affordable Care Act plans rose by double digits this year. Insurers want to do the same next year.
    • “Some of the biggest Obamacare companies are seeking hefty premium increases for 2027, often for the second year in a row. In Washington state, Centene is asking for a 28% hike, after boosting rates by 35% in 2026. Blue Cross and Blue Shield of Illinois wants 15%—on top of a 28% increase this year.
    • “It is a stunning jump” when you add both years together, said Cynthia Cox, senior vice president at KFF, a health-research nonprofit. At the request of The Wall Street Journal, KFF analyzed the rate requests for the largest ACA plans by enrollment in 15 states where insurers’ 2027 filings have already become public, as well as the District of Columbia.” * * *
    • “KFF calculated the median increase across 77 publicly available ACA rate filings for 2027: 14%. For 2026, the median final rise across all ACA plans was 20%.   
    • “Insurers’ 2027 ACA rates have to be reviewed by regulators, and the premiums finalized in late summer might be different from these early requests.”
  • Beckers Payer Issues reports,
    • “CMS has rescinded a decade-old “fast-track” review process for certain Medicaid Section 1115 demonstration waiver extensions as the agency prepares to implement new federal budget neutrality requirements that take effect in 2027.
    • “The July 7 informational bulletin formally withdraws 2015 guidance that allowed eligible states to use an expedited review process when renewing some Section 1115 demonstrations.
    • “CMS said the change is necessary because new statutory requirements will require the agency’s chief actuary to certify that Medicaid demonstrations will not increase federal spending before they can be approved, renewed or amended beginning Jan. 1, 2027.” * * *
    • “CMS previously notified state Medicaid directors that it intends to propose new budget neutrality policies and expects to issue additional implementation guidance. The agency said it remains committed to working with states to support Medicaid and CHIP innovation while complying with the new statutory requirements.”
  • Federal News Network relates,
    • “The Trump administration is looking to tweak the rules for federal employees’ paid administrative leave. Recently proposed regulations from the Office of Personnel Management would give agencies more leeway to use paid leave, including during workforce reduction efforts. During 2025, agencies used administrative leave to implement the deferred resignation program, choosing to paying thousands of employees for several months not to work, in exchange for them agreeing to quit their jobs.”
  • and
    • Federal News Network interviews Tammy Flanagan about early retirement for federal law enforcement officers.
      • [I]n law enforcement, typically, you’ve got to retire by the time you’re 57. And sometimes that’s hard because they really love that career for the most part, and that’s their identity. So leaving that early sometimes can be a tough transition, not only financially, but also emotionally.
  • The American Hospital Association News informs us,
    • “The Department of Health and Human Services and the Centers for Medicare & Medicaid Services July 8 launched  a voluntary pledge that hospitals can sign related to their efforts on healthy food. Among other actions, the pledge asks that hospitals prioritize food options in alignment with the 2025-2030 Dietary Guidelines for Americans; ensure that inpatient meals meet individual nutritional needs; provide accessible nutrition education and resources to sustain healthy habits following discharge; and provide community-based nutrition programs to support healthier communities.” 

From the Food and Drug Administration front,

  • STAT News reports,
    • “The top contenders to lead the Food and Drug Administration have been sent to the White House for a final review and decision, according to a person familiar with the process.
    • “The finalists include Heidi Overton, a White House adviser; Jeffrey Vacirca, an oncologist and health system executive; and Stephen Ferrara, a health affairs official at the Defense Department.” * * *
    • “The advancement of the finalists suggests the highly anticipated decision is on the horizon, though the timing remains unclear.”
  • Politico discusses the FDA’s 2026 regulatory agenda which was released on July 3.

From the judicial front,

  • HealthExec reports,
    • “Once scheduled for the fall, the federal murder trial against the man accused of killing UnitedHealthcare CEO Brian Thompson will now begin in January, a judge determined last week.
    • “At the conclusion of a June 29 hearing, U.S. District Judge Margaret Garnett agreed with attorneys representing Luigi Mangione who argued the original date of Oct. 13 left little time to prepare a defense.
    • “A trial in New York on state charges of second-degree murder is set to begin first, with jury selection pegged for a Sept. 8 start date, followed by opening arguments on Oct. 13—the same day the federal trial was initially scheduled to begin. With it now pushed back, Mangione’s attorneys need only worry about the looming prospect their client could be spending the rest of his life in prison as a result of the first trial.”
  • Per a Justice Department news release
    • “The founder and former Chief Executive Officer (CEO) Ruthia He of Done Global Inc., a California-based digital mental health company, was sentenced today to six years in prison and a fine of $1 million for orchestrating a scheme that used her company’s technology platform, compensation structure, and clinical protocols to unlawfully distribute over 37 million pills of Adderall, defraud insurers of over $12 million, and obstruct the federal investigation that followed.”

From the public health and medical / Rx research front,

  • The Hill reports,
    • “As of Monday [July 6], the parasitic illness has spread to at least 18 states, with the most cases reported in Illinois, Michigan, New York and Texas.
    • “While exact numbers are unknown, the Michigan Department of Health and Human Services has reported 572 cases of cyclosporiasis as of July 4, and New York has reported more than 100. No exact numbers have been released for Illinois or Texas. Current figures are most likely an undercount, as most people who are sick don’t report it or go to a doctor unless it’s severe.
    • “Other states linked to the outbreak include Alaska, Colorado, Connecticut, Florida, Georgia, Louisiana, Massachusetts, New Jersey, North Carolina, Ohio, Pennsylvania, Tennessee, Virginia and Wisconsin.”
  • Health Day relates,
    • “Exercise can boost a smoker’s odds of successfully quitting, a new evidence review says.
    • “Smokers taking part in exercise programs were more likely to either quit or cut back on cigarettes, researchers reported recently in the Journal of Sport and Health Science.
    • “In fact, a single bout of exercise immediately reduces nicotine cravings for up to a half hour afterward, researchers found.
    • “Quitting smoking is one of the best things a person can do for their health, but it’s also one of the hardest,” lead investigator Ben Singh, a research fellow at Adelaide University in Australia, said in a news release.
    • “Many smokers want to quit, but the current approaches don’t work for everyone,” Singh said. “That’s why we need more strategies that people can incorporate into their daily lives at little or no cost.”
  • The New York Times discusses the medical problems created by parents refusing to protect their infants with an injection that resolves the Vitamin K deficiency with which all of us are born. It’s worth a read.
  • STAT News tells us,
    • “Could a lifesaving lung transplant strategy that contained the Covid-19 virus also save patients whose advanced lung cancer hasn’t spread? 
    • “That’s the question that inspired surgeons and oncologists at Northwestern Medicine to offer double lung transplants to patients who had run out of treatment options but whose late-stage cancer hadn’t left their lungs. People with late-stage lung cancer have not been transplant candidates before for two reasons: rates were high for cancer recurrence and low for survival.
    • “There are ethical considerations to weigh, too, when deciding how to allot donated organs.
    • “On Wednesday, the Northwestern team reported in JAMA that the 17 patients who received lung transplants after advanced but limited cancer fared better than 81 similar patients who continued standard immunotherapy, chemotherapy, or radiation treatments. Overall, the study followed 404 patients with end-stage pulmonary disease, including 98 with stage 4 lung cancer.
    • “After one year, through June 2025, all the lung cancer transplant patients had survived compared to 88% of patients transplanted without cancer. Among those 17 patients, by January 2026, there were four recurrences of cancer and two deaths unrelated to cancer — one from an infection and one from a blood clot. Among the 81 cancer patients getting standard care, 74 saw their cancers progress.”
  • Genetic Engineering and Biotechnology News informs us,
    • “It has long been known that brain gray matter plays a key role in multiple sclerosis (MS) disease progression and cognitive impairment, but because magnetic resonance imaging (MRI) has only been able to detect lesions in white matter, neither clinicians nor researchers have had a way to detect or monitor gray matter (cortical) lesions. And while many new drugs developed in the past decade can slow disease progression significantly, they primarily work on reducing white matter lesions.
    • “A University at Buffalo (UB)-led team now reports that it has found a way to use artificial intelligence to reveal these otherwise invisible cortical lesions by reviewing existing MRI scans. The researchers say the significance of finally being able to see what has been known as one of the most important indicators in MS disease progression cannot be overstated.”
  • Healio points out,
    • “Public health messaging had a longer-lasting impact on parents’ intent to vaccinate their children against HPV than AI chatbot interactions.
    • “Strategies to make both modalities more effective are needed.”
  • Per Fierce Healthcare,
    • “After thriving in the market for more than a decade as the only treatment for Dupuytren’s contracture and Peyronie’s disease, Keenova Therapeutics’ Xiaflex has excelled in a phase 3 trial that could set up the injectable biologic enzyme for approval in a third indication.
    • “The study of 436 patients with plantar fibromatosis achieved its primary endpoint, showing statistically significant and clinically meaningful reductions in pain versus placebo as measured by the Average Daily Pain Intensity on the Numeric Rating Scale (NRS).” * * *
    • “Plantar fibromatosis, which is also known as Ledderhose disease, causes lumps composed primarily of excess collagen to form in the connective tissue that supports the arch of the foot. It can cause pain, swelling, and difficulty walking. Based on claims data and projections, Keenova estimates that 300,000 people will see a healthcare provider for plantar fibromatosis in 2028.
    • “There is no medicine on the market specifically for plantar fibromatosis. Patients can get relief through radiation therapy or corticosteroid injections, with surgical interventions generally reserved as a last resort.” 
  • The Wall Street Journal reports,
    • “Some patients are using GLP-1 drugs to treat eating disorders like bulimia and binge-eating disorder.
    • “No major medical organization has endorsed GLP-1s for eating disorders, and drugmakers Novo Nordisk and Eli Lilly say they are not approved for this.
    • “Experts say widespread adoption is unlikely soon due to limited scientific data.”
  • Per MedTech Dive,
    • “Penumbra said Tuesday it has started a clinical trial that could support wider use of mechanical thrombectomy in a subset of stroke patients.
    • “The real-world prospective study is assessing Penumbra’s RED reperfusion catheter portfolio in patients with M2 occlusions.
    • “Penumbra, which Boston Scientific has agreed to buy for $14.5 billion, is assessing whether its computer-assisted vacuum thrombectomy and modulated aspiration tools improve outcomes.”

From the U.S. healthcare business front,

  • Healthcare Dive reports,
    • “A newly released audit of UnitedHealth’s home visits for Medicare seniors found little evidence to support accusations that the program, called HouseCalls, drums up extra patient diagnoses to inflate UnitedHealth’s reimbursement from the federal government.
    • “UnitedHealth argued that the results vindicate HouseCalls, which has faced scrutiny from regulators and lawmakers focused on combating profiteering in Medicare Advantage, Medicare’s privatized sister program.
    • “About 96.6% of diagnoses that UnitedHealth found during the home visits were backed up by patients’ health records, according to the audit released Tuesday from FTI Consulting, which used the same review process as the government.
    • “That leaves 3.4% of diagnoses unsupported by medical information — three times lower than the error rate found by the CMS in its most recent audit of data in the privatized Medicare program.
    • “UnitedHealth said it reviewed FTI’s findings and that the lion’s share of diagnoses unsupported by medical records were backed up by other information like paid claims.”
  • and
    • “Data from consumer wearables are valuable in clinical care, and many physicians are using the information in their practice — but widespread adoption is hindered by limited workflow integration and other barriers, according to a survey published Wednesday by the American Medical Association. 
    • “Eighty-six percent of U.S. physicians reported they at least sometimes reviewed data from their patients’ wearables, like information on heart physiology, oxygen and breathing, and sleep, according to the report, which also interviewed doctors from Canada, France, Germany, Spain and the U.K.
    • “But only 6% of doctors in the U.S. said wearable data was integrated into clinical workflows, like the ability to import information into electronic health records. “We have all this data that’s available, but it’s actually not actionable because we don’t have a way to get it into clinical workflow,” AMA CEO Dr. John Whyte said in an interview.”
  • Modern Healthcare relates,
    • “Health insurance companies and third-party vendors offer arrangements to mitigate the costs of cell and gene therapies to employers.
    • “More than three-quarters of employers see gene therapies as a major challenge, yet 35% lack financial protection, a survey found.
    • “The Food and Drug Administration has approved cell and gene therapies for conditions such as blood cancers and neurodegenerative diseases.”
  • MedCity News adds,
    • “In Oncology, the Cost Problem Goes Beyond Predictability.
    • “Healthcare does not lack the data needed to better understand oncology costs. What it does lack is a consistent way to connect clinical progression with financial impact in a time frame that aligns with strategic planning.”
  • Beckers Payer Issues tells us,
    • “Memorial Hermann Health System plans to shut down its commercial health insurance business.
    • “The wind-down affects the Houston-based system’s HMO, PPO, and self-funded products for employers. On its website, the system said it would be difficult to reach the scale needed to sustainably provide value to members moving forward. The closure notice does not include the system’s Medicare Advantage business.
    • “This decision was made following a careful and comprehensive assessment of system assets and resources, including an evaluation of existing opportunities and future challenges amid sustained pressures on health system-owned health plans,” the system wrote.
    • “Current coverage will remain in effect, and providers can continue treating members through each plan’s termination date, which will vary by employer group. Groups whose plan year is set to renew before Dec. 1 will have the option to enroll in one additional year of coverage before the full closure.”
  • and
    • “Josh Michelson started serving as executive vice president and chief strategy and innovation officer for The Cigna Group, according to a recent LinkedIn post.
    • “A Cigna website said Mr. Michelson is responsible for steering the company’s long-term strategic direction, corporate innovation and The Cigna Group Ventures, the company’s venture capital branch.
    • “He joined Cigna in 2020 and was most recently a senior vice president and chief strategy and transformation officer for the company.”
  • Beckers Health IT notes,
    • “[The major electronic health records company] Epic named four executives who will take on expanded responsibilities following President Sumit Rana’s departure, according to a statement from Founder and CEO Judy Faulkner shared with Becker’s.
    • “Ms. Faulkner said Seth Howard, Mark Lipsky, Erv Walter and Garrett Adams are among a small group of leaders who will be adding to their responsibilities as the company moves forward without Mr. Rana.
    • “The statement did not detail the additional responsibilities these individuals would be taking on.” * * *
    • “Mr. Rana’s departure leaves a notable gap at the top of the nation’s largest EHR vendor. He was widely viewed as a potential successor to Ms. Faulkner, who is 82.”
  • Per Cardiovascular Business,
    • “Novo Nordisk is now working with Vivani Medical, a California-based biopharmaceutical company, to evaluate the potential of a long-lasting semaglutide implant. This is a non-exclusive agreement between the two companies. 
    • “Novo Nordisk, one of the world’s largest pharmaceutical companies, sells semaglutide under the brand name Wegovy. Vivani is known for its drug implants, which are designed to help patients benefit from life-changing medications without ever needing to inject or ingest them. 
    • “The goal of this partnership is to reduce the risk of non-adherence and ensure patients taking semaglutide can receive the care their physicians have determined they need. The implant in question, currently known as NPM-139, is being developed to help patients with chronic weight management. It utilizes Vivani’s proprietary NanoPortal technology and could help patients receive the maximum benefits of treatment with just one or two treatments per year.
    • “Vivani is also preparing the launch of a new first-in-human clinical trial that would randomize certain patients to either undergo treatment with an NPM-139 implant or receive semaglutide injections.”
  • Per MedTech Dive,
    • “Resmed has agreed to sell its MatrixCare software business for $490 million to private equity firm Frazier Healthcare Partners. The deal is meant to sharpen Resmed’s focus on sleep and breathing health devices and connected, home-based care.
    • “Divesting MatrixCare enables Resmed to reallocate capital and resources toward higher-growth opportunities and expansion of its digital health ecosystem, the company said Tuesday.
    • “The cash transaction is expected to close in the first quarter of Resmed’s fiscal 2027, which ends in September.”

Tuesday report

David Ermer–ACA, Agentic & Generative AI, CDC, CMS, Congress, FDA, Medical / Rx research, Medicare, Mental health care, Obesity, Patient safety, Rx coverage, U.S. Healthcare–

Simplicity is a virtue

From Washington, DC,

  • Roll Call reports,
    • “The sweltering Fourth of July weekend is over, but for both parties in House and Senate leadership, the heat is still cranked up.
    • “Both chambers are likely to return next Monday to the same sweat-inducing tangle of legislative problems that left them stumped as they headed out of town at the end of June.
    • “Speaker Mike Johnson, R-La., is looking for a solution so “irresistible” that his fellow Republicans will have to accept it — but the numbers are working against him.
    • “For one thing, August is fast approaching, leaving just a couple weeks in Washington before lawmakers depart for an even longer summer break. And as Senate Majority Leader John Thune, R-S.D., has said all along, mathematical realities can’t be changed in the Senate, even when it comes to the White House-backed voter ID bill dubbed the SAVE America Act.”
  • Beckers Hospital Review relates,
    • “CMS is proposing to create a new payment pathway for algorithm-driven diagnostic software, including AI tools, as part of its 2027 Hospital Outpatient Prospective Payment System and Ambulatory Surgery Center proposed rule, issued July 2. 
    • “The proposal marks CMS’ first attempt to build a standardized payment structure for what it calls “Software as a Medical Service” — clinical software that uses algorithms to analyze patient data and produce a diagnosis, risk score or treatment recommendation.”
  • and
    • “The planned July meeting for the U.S. Preventive Services Task Force has been postponed until late August, an HHS spokesperson told Becker’s.” * * *
    • “The HHS spokesperson said the July meeting was postponed due to an “unprecedented” number of nominations for task force membership, to allow more time for selection and onboarding of new members.”
  • Fierce Healthcare reports,
    • “The American Medical Association (AMA) updated maternity care coding Thursday, in what it says is the “most significant” move in decades to improve care delivery and data to advance maternal health.
    • “Beginning Jan. 1, 2027 (PDF), current procedural terminology (CPT) codes will reflect modern obstetric care, enable accurate and transparent reporting across the full pregnancy spectrum and create a data foundation for improved care throughout the entire patient journey.
    • ‘The update featured the deletion of 17 codes, the creation of six codes and the revision of six codes. It also includes new subsections, revised guidelines and relocation for some existing codes.
    • “Moreover, new CPT codes (PDF) will separately identify four phases of care: antepartum, labor management, delivery and postpartum.” * * *
    • “There is no expected impact on health plan benefits or an increase in cost-sharing, according to an AMA analysis using data from more than 650 physicians and certified nursing midwives.”
  • FEHBlog observation. We shall see.
  • KFF Health News explains how surprise Medicare Part D premiums can adversely affect Medicare Part D beneficiaries.

From the Food and Drug Administration front

  • Per a July 6, 2026, FDA announcement,
    • “The FDA and CDC, in collaboration with state and local partners, are investigating illnesses in a multistate outbreak of E. coli O145:H28 infections linked to frozen GreenWise brand-organic blueberries recalled by Frutas y Hortalizas del Sur S.A, of San Carlos, Chile.”
    • “Recalled frozen GreenWise-brand organic blueberries in 10-oz packages with printed lot code of 60401 and Best by Date of February 9, 2028.” * * *
    • “Recalled product was shipped to Publix retail stores throughout 8 states including Alabama, Florida, Georgia, Kentucky, North Carolina, South Carolina, Tennessee, and Virginia. Blueberries may have been distributed to other retailers, and FDA will update this advisory as more information becomes available.” 
  • Cardiovascular Business reports,
    • “Medtronic is recalling certain lots of the delivery catheter system for its Harmony Transcatheter Pulmonary Valve (TPV) System due to a significant safety risk. The U.S. Food and Drug Administration (FDA) has ruled this as a Class I recall, which means using the device could cause “serious adverse health consequences or death.”
    • “Medtronic initiated the recall after identifying an issue with the delivery system that could lead to distal tip detachment during implant procedures. More than 1,800 devices are included in this Class I recall.
    • ‘The Harmony TPV system is used to treat a native or surgically repaired right ventricular outflow tract (RVOT) in patients with severe pulmonary regurgitation. It has received FDA approval in addition to CE mark approval. Click here to read about a recent analysis of the device’s safety and effectiveness.”
  • Fierce Pharma relates,
    • “When Vera Therapeutics in-licensed atacicept from Merck KGaA about six years ago, patients with IgA nephropathy (IgAN) had no FDA-approved treatment options. Today, the dual-target drug has crossed the regulatory finish line but is entering a vastly different landscape as the sixth drug approved for the rare kidney disease.
    • “Atacicept, a recombinant fusion protein to be marketed under the brand name Trutakna, is now the first drug in the U.S. that inhibits both B-cell activating factor (BAFF) and A proliferation-inducing ligand (APRIL), two cytokines involved in B-cell survival and the production of autoantibodies associated with IgAN.” 

From the judicial front,

  • Per a June 25, 2026, Justice Department news release,
    • “Julianna C. Lung pleaded guilty in federal court today to health care fraud, admitting she marketed and sold hearing protection devices to United States Border Patrol agents, other federal employees, and their family members, then falsely billed insurance providers for what she claimed were medically-necessary hearing aids.
    • “According to her plea agreement, Lung submitted approximately 385 fraudulent claims to health insurance plans participating in the Federal Employees Health Benefits (FEHB) program. The claims falsely represented that beneficiaries suffered from hearing loss or tinnitus that required treatment.
    • “In reality, Lung told customers the devices were intended to protect their hearing—not treat a medical condition—and assured them their insurance would cover the cost for that purpose.
    • “As a result of the scheme, FEHB plans paid approximately $2,500 per device, totaling about $962,500 in fraudulent reimbursements.”

From the public health and medical / Rx research front,

  • Dr. Drew Altman, writing in KFF Health News, tells us,
    • Many of us in health care are deeply concerned about misinformation (and declining trust), so it seems important to underscore that while the American people may not always be as science-based as we might like them to be, they may also not be as anti-science as you may think they are—only a sliver of the public are hard-core refusniks who believe the lies, myths, misinformation or misbeliefs about vaccines. Occasionally, a lie breaks through when it’s amplified by someone influential and by the media. For example, 41% of the American people believed there were death panels in the ACA, but that’s the exception, not the norm.
    • In our most recent Tracking Poll on Health Information and Trust, we tested out who believed and didn’t believe each of four vaccine-related myths: “Getting the measles vaccine is more dangerous than becoming infected with measles;” “mRNA vaccines can change your DNA;” “measles, mumps, and rubella vaccines, also known as the MMR vaccines, have been proven to cause autism in children;” and, “more people have died from the COVID-19 vaccines than have died from the COVID-19 virus.” Here’s what stood out to me from these findings:
      The share of the public who believe these four myths is very small. Between 3% and 8% of the adult population believe these different vaccine myths are “definitely true.” By any standard, that’s a small, even tiny share of the overall adult population (for context, about a quarter of adults say they are MAGA). These are likely most of the folks you see in the spikes in social media engagement we sometimes observe when influencers or leaders like Secretary Kennedy amplify vaccine or
      other myths. 
    • Looked at another way, the hard-core group is even smaller: Just 1.3% believe all four false claims about vaccines are “definitely true.” 
    • By contrast, between 31% and 44% of the public think these claims are basically nonsense, meaning the share who don’t believe these things at all outnumber those who definitely do by almost 5-to-1 or more. That’s hardly the impression you get when you read reports about social media posts and views with characterizations like “engagement spiked” or “views tripled.” It’s important to track social media engagement to know how misinformation is spreading and who is spreading it, but it doesn’t give us a real picture of reach or impact. How many people believe it? How strongly? Who are they? Where did they get their information? Who do they trust and not trust when it comes to health information? That’s why we do our information and trust surveys. 
    • As I have written before and we have widely reported, most people are floundering around in a muddled middle uncertain what to believe. Take, for example, the slam dunk falsehood that “more people have died from the COVID-19 vaccines than from COVID-19 itself.” As you can see in the chart below, 53% of the American people are not certain about the answer to that question, with 34% saying that’s “probably false” and 19% “probably true,” Estimates are that the vaccine saved 2.5 million lives, and many more years of life. 
  • The Washington Post reports,
    • “The number of people injecting themselves with or taking an oral version of the new class of weight-loss drugs continues to rise dramatically.
    • “A Gallup poll released Tuesday based on a web survey of 5,065 U.S. adults says that 15 percent of U.S. adults reported using GLP-1 medications to lose weight at some point, while 11 percent say they currently are taking them.
    • “That’s up from a Gallup poll in 2024 that found 6 percent had ever taken them, and 3 percent were currently on the therapy.
    • “At the same time, respondents’ self-reported obesity rates have dipped, and diabetes rates have flattened. “The growing popularity of GLP-1 medications continues to point to broader health benefits for American adults as obesity levels curtail and the diabetes rate levels off after years of increases,” Gallup said.”
  • Beckers Payer Issues adds,
    • “The share of employers covering GLP-1s for both diabetes and weight loss has held steady at 36% year over year, according to a survey from the International Foundation of Employee Benefit Plans.
    • “The survey was conducted June 2 to June 12. The foundation represents more than 31,000 multiemployer, corporate and public sector members representing over 25 million lives.”
  • Radiology Business tells us,
    • “Experts are calling for greater integration of breast and lung cancer screening programs to help bolster monitoring for both diseases. 
    • “Researchers with Thomas Jefferson University, Philadelphia, made the case in a new analysis published July 3 by the Journal of the American College of Radiology. They noted that, despite the proven lifesaving benefits of mammography, completion rates remain as low as 55%, with worse screening adherence among socioeconomically disadvantaged patient populations. 
    • “Women eligible for lung cancer screening represent a unique population, they note, with elevated cancer risk and “substantial healthcare needs.” Previous studies have explored lung cancer screening among women already receiving mammography, but less is known about whether those actively engaged in LCS programs are up to date on their breast exams. 
    • “This represents an important gap in the literature because dual BCS/LCS-eligible women can be more efficiently identified from an [lung cancer screening] cohort than from a [breast cancer screening] cohort,” lead author Meghan Maceyko, MD, with the Department of Surgery at Thomas Jefferson, and colleagues wrote Friday. “Additionally, LCS participants may have access to highly structured LCS navigation pathways to facilitate BCS completion.”
  • The American Journal of Managed Care informs us,
    • “Adults with diabetes treated with insulin who were prescribed continuous glucose monitoring (CGM) by their primary care clinician were associated with meaningful and durable improvements in hemoglobin A1c (HbA1C), along with fewer hospitalizations and emergency department (ED) visits, according to a cohort study published in JAMA Network Open.”
      .
  • MedPage Today points out,
    • “Influenza vaccine effectiveness against death among U.S. kids and teens averaged 80% in recent years.
    • “Vaccine effectiveness against death was 77% among kids with underlying medical conditions and 87% among those without.
    • “The findings come against a backdrop of declining influenza vaccine uptake since 2021.”
  • and
    • “Roughly 22 high school students die each week from a fentanyl overdose.
    • “In a nationally representative survey study, less than half of 8th graders surveyed attributed great risk to experimental use of fentanyl.
    • “The study’s findings are a “call to action” to better educate children and teens about the synthetic opioid’s risks, a researcher said.”
  • Per Health Day,
    • “Artificial sweeteners may affect metabolism.
    • “Artificial and low-calorie sweeteners have been linked to higher fasting insulin, higher HbA1c and reduced insulin sensitivity.
    • “Alterations to the gut microbiome may help explain the observed metabolic changes.”
  • Cardiovascular Business notes,
    • “A polypill containing three different medications is associated with significant benefits for select heart failure patients, according to new findings published in Nature Medicine.[1]
    • “For the POLY-HF randomized trial, researchers explored data from 212 heart failure patients treated at two U.S. healthcare facilities. The median age was 54 years old, and 78% of patients were men. Nearly seven in 10 patients were either uninsured, or faced other barriers that can make it harder to receive optimal medical therapy.” * * *
    • “The study’s primary outcome, change in left ventricular ejection fraction after six months, was 3.3% higher for patients taking the polypill than it was for patients taking each medication separately. In addition, patients taking the polypill had a 60% lower rate of heart failure hospitalizations or ED visits.
    • “Adherence, evaluated by studying each participant’s blood for metoprolol and spironolactone, was also higher for patients taking the polypill than it was for patients taking each medication separately.”
  • Per STAT News,
    • “Compass Pathways said its investigational psilocybin treatment had lasting benefits on patients with severe depression out to six months.
    • “The biotech previously reported that 39% of patients who took two high doses in a Phase 3 trial achieved what Compass called a “clinically meaningful reduction” on a depression rating scale after six weeks. Today, it said that on average, those participants maintained the benefit through at least six months.
    • “In the trial, participants who didn’t achieve remission in the first six weeks were eligible to then get an additional dose. Compass said this morning that 28% of participants who had achieved a clinically meaningful response but not remission at six weeks did later go into remission after the additional dose. * * *
    • “Compass’ treatment is one of three psychedelic compounds the FDA has selected to review on an accelerated basis. It’s possible the drug could be approved as soon as this year.”

From the U.S. healthcare business and artificial intelligence front,

  • STAT New reports,
    • “It has never been more difficult for employers to offer health insurance for their workers. That’s especially true for America’s small businesses, the backbones of entire communities. More and more, they’re giving up entirely.
    • “America’s employer-based health insurance system — the dominant form of coverage for people younger than 65 — is crumbling. The percentage of working-age adults who get their health coverage from a job has declined from 67% in 1998 to about 60%. It’s also more expensive than ever.”
  • FEHBlog observation — To lower premiums, uncouple the employer market from the Affordable Care Act.
  • Modern Healthcare reports,
    • “Care navigators are helping health systems reduce unnecessary admissions and save money as chronically ill older adults and uninsured patients flood emergency departments. 
    • “Care navigators are typically nurses embedded in emergency departments who connect patients to less costly outpatient services to avoid hospitalizations. Providers, including St. Louis-based BJC Health System and Chicago-based Northwestern Medicine, have been growing care navigator programs.”
  • Healthcare Dive relates,
    • “Ascension has agreed to snap up a regional health system in a deal worth almost $1 billion as the Catholic nonprofit giant continues to beef up its portfolio.
    • “On Monday, Franklin, Tenn.-based Williamson Health announced it plans to sell to Ascension through the company’s Tennessee business Ascension Saint Thomas, after Williamson’s board voted unanimously in support of the change of ownership.
    • “The proposed transaction is still subject to approval by the Williamson County Board of Commissioners and other regulators. If the deal advances, the companies expect it to be finalized in 2027 or 2028.”
  • Beckers Hospital Review tells us,
    • “Jupiter (Fla.) Medical Center, an independent, nonprofit health system, broke ground June 24 on its second hospital, the “Jupiter Medical Center Neighborhood Hospital at The Health Park at Avenir.”
    • “The 53,000-square-foot facility will comprise 29 inpatient beds, four operating rooms, 24-hour emergency services, imaging services and a diagnostic laboratory, according to a news release. 
    • “Jupiter Medical Center Neighborhood Hospital at The Health Park at Avenir will be adjacent to a 47,000-square-foot, three-story medical office building for Jupiter Medical Center physicians. The building will feature cardiology, concierge medicine, gastroenterology, general surgery, primary care, pulmonary and orthopedics.
    • ‘Both the hospital and medical office building are expected to open in early 2028.” 
  • Fierce Healthcare informs us,
    • “Handspring Health offers a virtual mental health clinic for youth and families, purpose-built around evidence-based care and ongoing training and support for clinicians.
    • “The startup, which launched four years ago, picked up $19 million in series B funding to grow its clinician workforce, expand value-based care partnerships with payers and broaden its geographic reach.”
  • Fierce Pharma lets us know how “biosimilar experts size up US hurdles, opportunities ahead.”
  • Beckers Payers Issues explains “How 4 health plans are innovating with specialty pharmacy.”
  • MedCity News offers “The AI Playbook for Health Plans: 5 Steps for Leaders Who Don’t Know Where to Start.”
    • “It starts with a simple mindset shift, realizing that a successful AI journey begins with identifying a business problem, not with technology. The plans that make real progress embrace this mindset first then follow these five steps.” 

Monday report

David Ermer–CDC, CMS, Congress, Federal employment benefits, Medical / Rx research, Obesity, OPM, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC,

  • STAT News reports,
    • “Clinical trial policy got caught up in the Trump administration’s attack on policies related to diversity, equity, and inclusion. Republicans in Congress would like to change that. 
    • “Days after Trump took office, the Health and Human Services Department began purging all references to DEI from the websites of its agencies. Those efforts were supposed to target DEI initiatives focused on hiring practices, communications, and social issues.
    • “But supporters of clinical trial diversity say the policy has nothing to do with DEI in that sense. Instead, it aims to ensure that clinical trials enroll people who are similar to the patients who would use the drugs and medical devices being tested. 
    • “Congressional Republicans seem to agree. Last month, the Republican-controlled House passed a bill, mostly along party lines, to fund the Food and Drug Administration. It was accompanied by a report that, while not legally binding, tells agency officials what congressional appropriators expected of them. 
    • “A section of that bill deals with trial diversity.
    • “The Committee encourages FDA to continue to implement legislation and policies requiring study sponsors to submit a diversity action plan for phase 3 studies of new drugs,” the report states.”
  • MedPage Today relates,
    • “I still have hope,” said Peggy Tighe, legislative counsel for the Regulatory Relief Coalition, a group of physician specialty organizations advocating for regulatory burden reduction in Medicare, when she was asked about the Improving Seniors’ Timely Access to Care Actopens in a new tab or window, which was approved last weekopens in a new tab or window by the House Energy and Commerce Health Subcommittee.
    • “The measure, which seeks more transparency and accountability from Medicare Advantage plans on their prior authorization decisions, must still be approved by the full Ways & Means and House Energy & Commerce committees before it hits the House floor for a vote.
    • “What’s different this year is that there is much more limited committee time and House floor time because of the … drama on the House floor and the paucity of votes,” Tighe said in a phone interview with MedPage Today. “So with everything else going on, I still have hope that we could pass this bill out of Energy & Commerce and Ways & Means before the August recess, but every day that Congress gets canceled, it makes it more difficult to find that time to accomplish what I think should be a very easy goal of passing legislation that is zero cost and widely supported.”
  • Per a HHS news release,
    • “The Substance Abuse and Mental Health Services Administration (SAMHSA), a division within the U.S. Department of Health and Human Services (HHS), today announced more than $281 million in funding opportunities for 15 grant programs.
    • “The investments will advance President Trump’s Great American Recovery Initiative by expanding access to a wide range of behavioral health services, including substance use disorder treatment, overdose prevention and response, mental health and suicide prevention, trauma-informed care, integrated care, recovery supports, first responder training, privacy education and workforce development.”
  • The American Hospital Association tells us,
    • “The AHA today sent a letter to the Office of the United States Trade Representative to ask that medications, medical devices and other healthcare equipment and supplies be exempted from proposed duties on goods from other nations. While “America’s hospitals and health systems support the administration’s goal of strengthening domestic manufacturing for drugs, medical devices, PPE and other essential medical supplies,” the AHA noted, “the U.S. healthcare system relies significantly on international sources for many drugs, devices, supplies, equipment and other products needed to both care for patients and protect our healthcare workers.”
  • Federal News Network informs us,
    • “An overhaul to the federal workforce’s performance management system is now set in stone, following a final rule the Office of Personnel Management released this week.
    • “Going forward, agencies will be limited in the share of employees they can rate highly in performance reviews. OPM’s final regulations, which are scheduled to publish Tuesday to the Federal Register, remove a previous ban on using forced distribution in the government’s performance management system.
    • “The final rule marks the largest overhaul of the government’s performance management system in decades. Agencies will have to be in compliance with OPM’s changes by Jan. 1, 2027. Once effective, the changes to performance management will apply across virtually the entire federal workforce.
    • “These changes are necessary to promote a culture of accountability and excellence across the federal workforce — one that reflects both the government’s evolving operational demands and its longstanding commitment to a merit-based civil service,” OPM said in the final rule.”
  • Other health plan related highlights from last Friday’s unified regulatory agenda.
    • A proposed rule [RIN 0938-AV95, to be published in December 2026] would propose requirements under the Mental Health Parity and Addiction Equity Act (MHPAEA) to clarify plans’ and issuers’ obligations, promote compliance, and reduce burden.
    • A long term plan [RIN 0945-AA22] to modify the Security Standards for the Protection of Electronic Protected Health Information (the Security Rule) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH Act). These modifications will improve cybersecurity in the health care sector by strengthening requirements for HIPAA regulated entities to safeguard electronic protected health information to prevent, detect, contain, mitigate, and recover from cybersecurity threats. A final rule is expected to be published in July 2027.

From the public health and medical / Rx research front

  • The Washington Post explains “Why U.S. measles outbreaks have grown harder to extinguish.”
    • The nation is already nearing last year’s record case total, and experts say the virus is forcing doctors to relearn a disease many thought had been consigned to history.”
  • Beckers Hospital Review tells us that “Clinical cases of the drug-resistant fungus Candida auris more than doubled in the U.S. from 2022 to 2024, highlighting ongoing transmission in healthcare settings, according to a CDC study published July 2.” 
    • “C. auris is frequently resistant to antifungal drugs, can persist on patients’ skin and surfaces, and spreads readily in healthcare settings. Bloodstream infections caused by the fungus are associated with high mortality.
    • “The CDC said sustained infection prevention and control measures, including transmission-based precautions, environmental disinfection and communication of patients’ Candida auris status during transfers, remain essential to limiting further spread.”
  • The AP informs us,
    • “Doctors and others are sounding an alarm: More U.S. children have been drowning in recent years.
    • “When drowning occurs, seconds matter,” said Dr. Rohit Shenoi, the lead author of a recent American Academy of Pediatrics warning. “Quick rescue and resuscitation can mean the difference between life, death and lifelong disability.”
    • “About 4,000 to 5,000 Americans drown each year. Most are adults who die in natural bodies of water, such as lakes, ponds or oceans.
    • “But statistically speaking, drowning is a much larger danger to children. It’s the No. 1 cause of death for kids ages 1 to 4, and one of the top killers of children ages 5 to 14. The drowning rate is higher for white kids in the younger group, but much higher for Black, American Indian and Alaska Native children in the older group.
    • “Drownings of very young children sometimes occur in bathtubs. But most, like Stewie Leonard’s, occur in swimming pools.”
  • The American Medical Association lets us know what doctors want their patients to know about sunburn.
    • “Sunburns cause lasting skin damage. Learn the difference from sun poisoning, how to prevent burns and treat symptoms safely, and when to seek medical care.”
  • Health Day points out,
    • “Many people with long COVID suffer from “brain fog,” finding it difficult to remember things, think on their feet or pay attention.
    • “But this symptom can be addressed by rehab, according to a new study.
    • “Ten weeks of cognitive rehabilitation helped long COVID patients lift much of their brain fog, allowing them to achieve goals they’d set in their work and home lives, researchers reported July 1 in JAMA Network Open.”
  • Beckers Hospital Review notes,
    • “Active drug shortages in the U.S. climbed to 223 in the first quarter of 2026, the second consecutive quarterly increase. Buried in that count are dozens of manufacturer-specific dates — extended-use deadlines, promised “next delivery” windows, backorder recovery targets — that pharmacy teams are tracking lot by lot. Several of those dates land this month.
    • “[The article identifies] six hospital-use drugs with a shortage-related deadline in July, according to the FDA’s drug shortage database and its list of extended use dates.”

From the U.S. healthcare business front,

  • Beckers Hospital Review discusses “Kaiser Permanente’s partnership strategy and what comes next” and identifies “15 maternity service closures in 2026.”
  • Fierce Healthcare reports,
    • “For a month now, weekly prescriptions for Eli Lilly’s Foundayo have been hovering at around 20,000. In other words, three months into its market debut, the non-peptide GLP-1 receptor agonist was still at the same script level that Novo Nordisk’s Wegovy pill had achieved in two to three weeks post-launch.
    • “For the week ended on June 26, Foundayo’s total scripts dipped about 4% sequentially to 19,830, according to IQVIA data cited by Jefferies. During the same period, scripts were also down about 2% for oral Wegovy, reaching about 149,000.
    • “In a July 4 report, Jefferies analysts modeled about $71 million in U.S. sales during Foundayo’s debut quarter from April to June, versus the team’s previous estimate of $85 million in a June 26 report. Wall Street’s consensus currently has the number at $130 million. To reach its estimate, Jefferies used an illustrative calculation based on the IQVIA data, with certain assumptions regarding pricing, dosing and stocking.
    • “While Lilly still lags Novo on the oral GLP-1 battlefield, the Indianapolis pharma has maintained a majority 59.5% share of the overall obesity market, according to IQVIA’s prescription data.” 
  • The Wall Street Journal informs us,
    • Vertex Pharmaceuticals VRTX has agreed to purchase Crinetics Pharmaceuticals CRNX for $10 billion, adding a biopharmaceutical company that specializes in treatments for endocrine diseases to its portfolio that mainly includes cystic fibrosis therapies.
    • Vertex, a Boston-based biotechnology company, said it would acquire Crinetics for $85 a share in cash. The company pegged the value at $8.8 billion when accounting for net estimated cash acquired.
  • and
    • Novartis NOVN said it agreed to pay up to $1.5 billion for Myricx Bio, in a bid to bolster its portfolio amid industry competition for oncology drugs.
    • “The Swiss pharmaceutical company said it would purchase the privately held U.K.-based biotechnology firm, which is developing a new class of antibody-drug conjugates. Myricx Bio’s approach delivers differentiated cancer-killing mechanisms directly to tumor cells, Novartis said.
    • “Novartis will pay $1.1 billion upfront, with up to $400 million in potential additional payments. The deal, expected to close in the second half of 2026, is subject to regulatory approvals. Myricx Bio has a pipeline of antibody-drug conjugates that show pre-clinical efficacy and tolerability across tumor-associated antigens and cancer cell types, it said.”
  • BioPharma Dive adds,
    • “Drug developers making new medicines to treat autoimmune conditions and cancer made up more than 40% of the venture funding rounds in the first half of 2026, BioPharma Dive data show.
    • “Of the more than $9 billion that poured into venture-backed biotechnology companies from 26 highly active investors tracked by BioPharma Dive, a little more than $3.9 billion went toward immune and cancer drugmakers. About $2.1 billion of that figure alone was dedicated to that former bucket, in which many startups are working on experimental therapies for conditions such as lupus, atopic dermatitis and inflammatory bowel disease. A handful are developing drugs in these two fields simultaneously (and have been included in the funding totals for each).
    • “While exits might be concentrated in other research areas like obesity and cardiometabolic disorders, venture funding is likely to continue pouring into cancer and immunology because of a lack of “a time-sensitive element,” said Ben Zercher, a senior analyst at PitchBook.”

Weekend Update

David Ermer–Congress, Mental health care, No Surprises Act, Obesity, OPM, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC,

  • Congress will be out of session this week following the semiquincential holiday.
  • STAT News reports,
    • “Dozens of congressional lawmakers are urging the Trump administration to force Eli Lilly to reinstate mandated price breaks to hospitals that participate in a federal drug discount program but have refused to provide the company with claims data.
    • “In a letter to Department of Health and Human Services Secretary Robert F. Kennedy Jr., the bipartisan group of lawmakers argued that Lilly is failing to comply with federal law by eliminating the price breaks. The drugmaker stopped offering discounts last month to reduce what it calls duplicate discounts paid to the hospitals.” * * *
    • “Congress did not authorize manufacturers to unilaterally impose additional reporting mandates or data-sharing requirements as a prerequisite for obtaining those discounts,” the lawmakers wrote. “Lilly’s actions effectively condition participation in the 340B program on compliance with manufacturer-imposed requirements that extend beyond the statutory framework established by Congress.”
  • On July 3, a federal holiday, the Office of Management and Budget’s Office of Information and Regulatory Affairs posted the “2026 Regulatory Plan and the Unified Agenda of Federal Regulatory and Deregulatory Actions,” which was historically known as the semi-annual regulatory agenda.
  • The Office of Personnel Management’s agenda includes the following FEHB / PSHB related rules:
    • “This proposed rule [RIN: 3206-AO45, projected to be published in September 2026] would implement section 9816 of the Internal Revenue Code of 1986, section 716 of the Employee Retirement Income Security Act of 1974 (ERISA), and section 2799A1 of the Public Health Service Act (PHS), as directed by section 111 of the No Surprises Act; and may include other provisions under the Consolidated Appropriations Act, 2021. Pursuant to 5 U.S.C. 8902(p), Federal Employees Health Benefits (FEHB) carriers must comply with Advanced Explanation of Benefits requirements in the same manner as those provisions apply to a group health plan or health insurance issuer offering group or individual health insurance coverage. This rule would also clarify that FEHB carriers must comply with the applicable Medicare limits set forth at 5 U.S.C. 8904(b) notwithstanding a payment determination calling for a payment in excess of those limits.”
    • “OPM is proposing new standards [RI: 3206-AO93, projected to be published in November 2026] to improve enrollment integrity and accuracy in Federal employee benefits programs, including the Federal Employees Health Benefits (FEHB) and Federal Employee Group Life Insurance Programs. This would include amendments to 5 CFR parts 870 and 890 to establish a new eligibility determination process for children who are age 26 and over and who are incapable of self-support (ISS). In addition, OPM will (1) allow employing offices to adjust enrollment type from Self and Family or Self plus one to Self Only if there is only one person covered by the enrollment and (2) prohibit ineligible family members from receiving a 31-day extension of coverage when their coverage is terminated due to a reduction in the enrollee’s enrollment type.”
    • This proposed rule RIN: 3206-AP13; projected to be published in July 2027) would implement section 108 of the No Surprises Act.” Section 108 requires the No Surprises Act regulators to promulgate a rule describing the requirements of Public Health Service Act Section 2706, which is the Affordable Care Act’s provider non-discrimination provision.
    • The Office of Personnel Management (OPM) is amending its regulations to implement the Administrative False Claims Act of 1986, as amended by the National Defense Authorization Act for Fiscal Year 2025 [RIN: 3206-AP00; projected to be published this month]. This proposed rule would revise the administrative procedures for imposing civil penalties and assessments against persons who make, submit, or present false claims and statements to OPM.
  • OPM’s announced in LinkedIn
    • “Fraud in federal healthcare programs isn’t a rounding error — it’s likely billions of dollars a year, and it’s now a White House priority.
    • “I’m hiring the engineering leader who’ll help make that fight real from the inside. U.S. Office of Personnel Management (OPM) is looking for a Division Chief to lead our Healthcare Engineering Division — working directly with the White House Task Force to Eliminate Fraud, chaired by Vice President Vance. This role owns the technical work behind better services and lower costs and leads the AI/ML systems, infrastructure, and full SDLC for programs touching millions of federal employees, retirees, and their families.
    • “GS-15 scope: $147,945–$197,200, budget authority over major IT investments, a team of engineers and data scientists reporting to you.
    • “If you want engineering work with real consequences, apply by July 8.”
  • FEHBlog observation – Since the late 1980s, OPM’s Inspector General has been fighting fraud, waste, and abuse “from the inside” with strong, effective support from the FEHB and PSHB carriers which hold the financial risk for their plans.
  • ACDIS tells us,
    • “CMS has published the fiscal year (FY) 2027 ICD-10-CM code set, including 190 new codes, 30 deleted codes, and four revised codes. These updates will become effective on October 1, 2026.
    • “Of the 190 new codes, 33 are related to continuing pregnancy after vanishing twin syndrome (category O31.4) and 17 codes related to the toxic effect of cycloparaffins (category T52.82).”

From the public health and medical / Rx research front,

  • The Wall Street Journal explains new developments in sunscreens sold in our country.
  • Healio reports,
    • “Adults with type 2 diabetes who were provided medically tailored healthy meals and lifestyle counseling for 6 months had a lower HbA1c than those who received a monthly food subsidy, researchers reported.
    • “Food insecurity is a common barrier to eating healthy meals for people with diabetes, according to Seth A. Berkowitz, MD, MPH, associate professor of medicine at University of North Carolina School of Medicine. In an open-label, parallel-group, randomized trial presented at the American Diabetes Association Scientific Sessions, Berkowitz and colleagues compared health outcomes among two nutritional interventions: medically tailored meals that were created and delivered directly to people’s homes, and subsidies where participants received money to purchase food themselves.”
  • and
    • “A single injection of sura-vec reduced the severity of nonproliferative diabetic retinopathy for up to 2 years, according to data presented at Optometry’s Meeting.
    • “Early intervention is essential to prevent progression to blinding complications, yet the burden of frequent intravitreal injections with current anti-VEGF therapies make long-term treatment difficult for many patients,” Steve Pakola, MD, chief medical officer at Regenxbio, told Healio. “We believe sura-vec has the potential to redefine the treatment paradigm by delivering sustained anti-VEGF expression through a one-time, in-office gene therapy, reducing treatment burden while helping preserve vision long-term.”
  • Health Day informs us,
    • “More than half the calories consumed by young kids in the U.S. come from ultra-processed foods.
    • “Now, a new study warns that those foods, including sugary cereals, packaged snacks, fast food and processed meats, may be linked to measurable differences in brain structure by age 6.
    • “A team at Children’s Hospital Los Angeles followed 144 Latino and Hispanic mother-child pairs from infancy through age 6, tracking kids’ diets over time and using MRI scans to measure brain structure.” * * *
    • “Our findings suggest that what children eat early in life may shape brain development in ways we’re just beginning to understand,” said senior author Michael Goran, director of the Nutrition and Obesity Program at the hospital’s Saban Research Institute. “Even without differences in cognitive performance, we’re seeing measurable changes in brain structure.”
    • “More work is needed to understand what these structural differences may mean for long-term health.”
  • and
    • “Here’s more pressure for harried mothers — a sluggish response to baby’s coos and babbles might increase their risk of childhood psychiatric problems.
    • “Moms who respond within one second of their baby’s vocalizations appear to lower the child’s risk of mental health problems by age 7, researchers reported July 1 in the journal PLOS One.
    • “Specifically, for every 10% increase in the likelihood of a mom responding within a second, the child’s odds of a later psychiatric diagnosis decreased by 17%, researchers found.
    • “The results “suggest a robust association between slow parental responses to their infants’ signals and later problems,” senior researcher Philip Wilson, an emeritus professor at the University of Aberdeen in the U.K., said in a news release.”

From the U.S. healthcare business and artificial intelligence front,

  • HealthExec reports,
    • “More than half of all patients taking GLP-1s such as semaglutide are using them to treat a diagnosed medical condition, signaling that the demand for the popular weight loss drugs may not be purely for vanity, a new study using payer claims data reveals.
    • “In its report, healthcare market research firm Trilliant Health was able to show that, while popular GLP-1 substances such as Ozempic, Zepbound and Wegovy may have been originally approved to manage blood sugar, their medical use has expanded significantly since the latter was given FDA approval for chronic weight management in 2021, spurring the modern trend.
    • “According to the data analyzed by Trilliant, the number of patients prescribed this class of pharmaceuticals has risen nearly 636% between 2018 and 2024, when the data cuts off. Notably, the first GLP-1 approved to be prescribed for weight management was Saxenda, given the greenlight in 2014 for adults.” * * *
    • “The most common indication for why patients were prescribed GLP-1s was obstructive sleep apnea, potentially directly related to obesity, coming in at 25.5% of scripts. The second highest medical condition was major depressive disorder, coming in at 18.2%.
    • “After that, chronic kidney disease was the most common reason for prescriptions at 10.6%, followed by fatty liver disease.
    • “Trilliant noted that conditions related to overeating specifically—binge eating—were the least common reason for patients to be given the drugs, coming in at only 0.5%.
    • “The firm added that, when considering that many patients were also prescribed GLP-1s for more than one medically valid condition, demand for the drugs will only grow, and payer plans should be prepared for the continued spike.” * * *
    • “The full report is available by clicking here.”
  • Medscape adds,
    • “Substance use disorders (SUDs) may become the next therapeutic target for GLP-1 receptor agonists (GLP-1s). Although the evidence remains preliminary, growing preclinical, observational, and early clinical data suggest these drugs may reduce the cravings that drive addiction.
    • “Interest has accelerated over the past few years, fueled by reports that patients taking semaglutide or tirzepatide for diabetes or obesity drink less alcohol, smoke fewer cigarettes, or experience fewer cravings. Those observations have prompted a wave of studies exploring whether these drugs could have a role in treating alcohol, nicotine, opioid, and other SUDs.
    • “More recently, large retrospective analyses have suggested that GLP-1s may be associated with lower rates of overdose, SUD-related mortality, and new-onset SUDs.
    • “At this point, however, much of the evidence comes from animal studies, observational research, and patient reports. Definitive answers will require randomized clinical trials. More than 30 studies are now investigating GLP-1s for alcohol, nicotine, opioid, cocaine, and methamphetamine use disorders, making addiction one of the fastest-growing areas of GLP-1 research.”
  • BioPharma Dive relates,
    • Celea Therapeutics, a biotechnology startup testing a next-generation treatment for idiopathic pulmonary fibrosis, said in a Thursday announcement it has brought in $180 million to continue its work.
    • Launched in 2025, the PureTech Health spinout is working on a medicine that it says is a retooled version of pirfenidone, also known as Roche’s Esbriet, a drug that slows the progression of scarring in the lungs.
    • The venture round was backed by RA Capital Management, Leaps by Bayer and PureTech, as well as two other unnamed funds. The proceeds from this fundraising will be used to launch its drug deupirfenidone into late-stage testing in the third quarter of 2026.
  • HR Dive tells us,
    • HR is still adapting to artificial intelligence rather than taking the lead on redesigning the workflow around AI, according to a report released by the Institute for Corporate Productivity (i4cp) Tuesday [June 30].
    • After surveying more than 1,300 business and HR leaders worldwide, i4cp researchers determined that even though workplaces are moving past “isolated AI use cases,” AI implementation is still a “series of disconnected experiments,” according to a Tuesday statement.
    • AI is increasing expectations for what HR practitioners are expected to bring to the table, but “most HR functions are still experimenting at the margins rather than redesigning how work actually gets done,” Katheryn Brekken, senior research analyst at i4cp, said in a statement.

Cybersecurity Saturday

David Ermer–Agentic & Generative AI, Cybersecurity–

From the Project Glasswing front,

  • Cybersecurity Dive reports,
    • “Anthropic on Wednesday [July 1, 2026] unfroze access to its advanced Fable and Mythos AI models after the Trump administration lifted an export-control ban.
    • The return of the two models — with Fable 5 available for general use and the more powerful Mythos 5 limited to a coalition of trusted partners, as it was prior to the ban — represents significant progress in ongoing talks between President Donald Trump’s administration and AI firms over the responsible deployment of frontier AI models, an issue the U.S. government and the tech industry have sparred over in recent months.
    • “In a Tuesday statement announcing a resolution to one of the AI race’s most intense clashes, Anthropic insisted that its models had always been safe and that the government had blown the situation out of proportion — suggesting that tense conversations still lie ahead about the balance between offering advanced capabilities to defenders and keeping them out of the hands of U.S. adversaries.”
  • Bleeping Computer adds,
    • “Anthropic says Claude Fable 5 won’t be accessible via Claude subscriptions after July 7, but it’s not a permanent change, and the company expects the model to return outside the usage-based plan soon.
    • “Fable 5 was recently restored after the US government lifted export controls on Anthropic’s most powerful models, Fable 5 and Mythos 5.
    • “As part of the redeployment, Anthropic said Fable 5 would be available globally on Claude.ai, Claude Code, Claude Cowork, and the Claude Platform.”
  • and
    • “Claude Fable, the company’s most powerful model, is now available to all users, but early impressions are disappointing, as it appears to be nowhere near the original release.” * * *
    • “[T]he real gut punch is the degraded performance, or as famously used in the AI community, the “nerfed” performance.
    • “On Reddit, users are reporting that the restored Fable 5 feels weaker, or is simply being routed through stricter safety systems more often than before.
    • “The new guardrails are kicking in on way too many tasks and falling back to Opus 4.8,” one user wrote in a Reddit post. “This is not the model that got banned.”
    • “The problem is not just limited to Claude desktop, as Claude Code is also struggling with similar issues.”
  • Observer interviews CrowdStrike president Michael Sentonas who “discusses Anthropic’s Claude Mythos and how A.I. could speed up vulnerability discovery and exploitation.”

From the cybersecurity policy and law enforcement front,

  • Cyberscoop reports,
    • “The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure, more than a year after the Trump administration shuttered an existing nerve center between government and private sector.
    • “The Alliance of National Councils for Homeland Operational Resilience – Critical Infrastructure program, first reported by CyberScoop in January, is meant to replace the function of the Critical Infrastructure Partnership Advisory Council.
    • “CIPAC was a federal advisory body that allowed agencies like the FBI, the Cybersecurity and Infrastructure Security Agency and the intelligence community to interact with key owners and operators of water, power, internet and telecommunications to coordinate on cyberattacks and digital vulnerabilities. ANCHOR will fulfill a similar role.
    • “ANCHOR-CI will provide forums through which cybersecurity, law enforcement, intelligence, national security, and other government representatives at the federal, state, local, tribal, and territorial levels may engage representatives of private sector entities and critical infrastructure owners and operators in reviewing the current threat environment, discussing potential vulnerabilities, and forming recommendations on securing a more resilient critical infrastructure and cyberspace,” DHS wrote in a federal register notice set to publish July 1.
    • “ANCHOR-CI will be managed by CISA, which will appoint members to the council from industry, trade associations, state and local governments and other sources.
    • “The body will consist of four types of different councils: one focused on federally designated critical infrastructure sectors, cross-sector councils to deal with emerging threats like cyber attacks or zero-day vulnerabilities, critical infrastructure industry councils and regional coordinating councils.”
  • and
    • “Trump administration budget chief Russell Vought told lawmakers Tuesday that he’s willing to work with Department of Homeland Security Secretary Markwayne Mullin on re-staffing up the Cybersecurity and Infrastructure Security Agency, following deep personnel cuts and further proposed reductions in the fiscal 2027 budget blueprint.
    • “Mullin said last week at a House Appropriations Subcommittee on Homeland Security hearing that he would like to hire 600 more people at CISA, similar to remarks he made earlier this month at another House hearing. President Donald Trump has cut or lost more than 1,000 from an agency that stood around 3,400-strong at the end of the Biden administration — cuts criticized by lawmakers in both parties.”
  • Federal News Network relates,
    • “The National Institute of Standards and Technology expects to advance high profile standards work around a “Cyber AI Profile” and securing artificial intelligence agents this summer, amid a flurry of federal activity aimed at addressing both the risks and opportunities for AI and cybersecurity.
    • “NIST’s National Cybersecurity Center of Excellence (NCCoE) is now running six distinct projects focused on the intersection of AI and cyber. But Cherilyn Pascoe, director of the NCCoE, said AI is popping up across the center’s work, which focuses on practical guidance to advance secure technologies in collaboration with government agencies, industry and academia.
    • “I think AI is going to be part, if not a leading part, of every project going forward at the center,” Pascoe said in an interview. “It is becoming so foundational to cybersecurity.”
    • “Recent advancements in AI models like Anthropic’s Claude Mythos have shown the ability to quickly find software vulnerabilities and create cyber exploits much faster than humans.”
  • Security Week tells us,
    • “Google, the FBI, and other organizations coordinated in a joint effort to dismantle NetNut, a massive residential proxy network.
    • “Also known as Popa, NetNut is believed to consist of more than 2 million Android devices such as smart TVs and streaming boxes, that have been infected through trojanized applications and malware such as Badbox 2.0.
    • ‘The network’s operator, linked to the publicly-traded Israeli firm Alarum Technologies Ltd, rented the residential proxies to various threat actors, including cybercriminal and espionage groups.
    • “In a single week in June, Google observed 316 distinct threat clusters using NetNut to hide their locations in password-spray attacks and to access victim environments.
    • “We believe our coordinated actions have caused significant degradation to NetNut’s proxy network and its business operations, reducing the available pool of devices for the proxy operator by millions,” Google said.
    • “As part of the operation, the internet giant disabled Google accounts and associated services used for command-and-control (C&C), dismantling the botnet’s backend infrastructure.”
  • Cyberscoop informs us,
    • “19-year-old alleged member of the Scattered Spider extortion crew was extradited to the United States last week and remains in federal custody awaiting several cybercrime charges, the Justice Department said Wednesday. 
    • “Peter Stokes, a dual citizen of the United States and Estonia, was allegedly involved in Scattered Spider since it formed in 2022 and boasted on social media about the luxurious globetrotting life he enjoyed while he was still a child. 
    • “The cybercrime ring of young, native English-speaking people has infiltrated more than 100 businesses since 2022, and extorted more than $100 million from its victims around the world, officials said.” 

From the cybersecurity breaches and vulnerabilities front,

  • HIPAA Journal reports,
    • “Verizon Business has released the findings from its inaugural Breach Impact Study, which focuses on the financial impact of data breaches. The BIS report is from the same authoring team as the Verizon Data Breach Investigations Report and was produced in partnership with CyberAcuView. The report is based on an analysis of around 70,000 U.S. cyber insurance claims, including 38,000 claims where the policies paid out. The data spans from January 2019 to October 2025.
    • “In contrast to many data breach cost reports, the report is based on median claim amounts rather than averages, which are susceptible to skewing. In 2019, the median financial impact was around $60,000, rising by 80% to $110,000 in 2025, with data breach costs outpacing inflation, which was around 23% over the period of the study. More than half of paid-out claims exceeded $83,000, with 10% having an impact of $920,000 or more. The most extreme 2.5% of cases exceeded $5 million in losses.
    • “The report shows that data breach costs almost doubled between 2019 and 2025, with business interruption the single largest loss driver, followed by loss to threat actor and response and recovery.”
  • MedTech Dive relates,
    • “Medtronic has begun to notify people who may have been affected by a cyberattack that was disclosed more than two months ago.
    • “Medtronic provided the update in a statement posted to its website on Monday [June 29, 2026]. At this time, Medtronic has no evidence the data that was accessed has been publicly posted or exposed to the internet, according to the statement.
    • “The company is providing 24 months of complimentary credit monitoring, dark web monitoring and identity theft restoration services. It is also setting up a dedicated call center to address questions for those affected.”
  • Bleeping Computer tells us,
    • “The Department of Homeland Security is investigating a cyberattack that compromised the Homeland Security Information Network (HSIN), a sensitive information-sharing platform used by federal, state, local, and private-sector partners.
    • “The intrusion, first reported by Nextgov, was carried out by an unknown threat actor in recent weeks and is believed to have occurred sometime between late May and early June, according to two people familiar with the matter who spoke on the condition of anonymity.
    • “DHS is currently investigating the attack and has reportedly not attributed it to any specific threat actor or foreign governments. Whether any documents were stolen from the system also remains unclear.”
  • Cyberscoop informs us,
    • “Toolkits to wage phishing campaigns are a now-venerable instrument for cybercriminals, but researchers recently turned up details on something like a full-fledged “business email compromise-as-a-service” platform.
    • “Cisco Talos said Wednesday that it had found an operator panel dubbed ARToken, which shares infrastructure and other things in common with, and as an affiliate to, the EvilTokens phishing-as-a-service operation built to bypass multi-factor authentication and compromise Microsoft 365 accounts. EvilTokens has reportedly seen a dramatic increase in its phishing attacks — by 1,380% early this year compared to the same period last year — with an assist from artificial intelligence integration.
    • “ARToken is notable, though, for the capabilities that go beyond what’s been made public about EvilTokens so far by companies like Sekoia and Microsoft itself, such as inbox rule manipulation and shared access links.
    • “These features indicate the platform is more mature than a simple device code phishing kit — it is a complete BEC operations environment,” wrote Michael Kelley, security research engineer at Cisco Talos, in a blog post, referring to business email compromise scams that involve sending fake emails to solicit fraudulent payments.”
  • and
    • “Citrix published a security bulletin Tuesday [June 30] disclosing six vulnerabilities in NetScaler ADC and NetScaler Gateway appliances, including a high-severity memory disclosure flaw that researchers say belongs to a vulnerability class first identified in the 2023 incident known as CitrixBleed.
    • “The company rated the overall bulletin severity as high and assigned CVSS scores ranging from 6.9 to 8.8 across the six CVEs. Citrix said customers should install the updated builds and, in one case, manually adjust a configuration parameter even after patching.
    • “The most closely scrutinized of the vulnerabilities, CVE-2026-8451, was discovered by researchers at watchTowr, a cybersecurity firm that has published several prior analyses of issues in NetScaler products. According to a technical writeup the firm released alongside Tuesday’s disclosure, the vulnerability stems from how NetScaler parses SAML authentication requests when an appliance is configured as a SAML identity provider, a deployment mode commonly used for single sign-on.”
  • CISA added two known exploited exploits (KVE) to its catalog this week.
  • Bleeping Computer adds,
    • “CISA confirmed on Monday that ransomware gangs have begun exploiting a high-severity Microsoft Defender privilege escalation vulnerability that has previously been abused in zero-day attacks.
    • “Dubbed BlueHammer, the security flaw (CVE-2026-33825) was leaked by a security researcher known as “Nightmare Eclipse” in early April, together with proof-of-concept exploit code, in protest at how the Microsoft Security Response Center (MSRC) handles the disclosure process.
    • “Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally,” Microsoft explains in a security advisory.”
  • Dark Reading notes,
    • “NIST has reduced the number of CVEs receiving enrichment in the National Vulnerability Database since April due to a growing backlog, impacting the data available to security teams.
    • “Research from Volerion found that, between April 15 and June 15, only 6,759 out of 13,441 non-rejected CVEs published to the NVD received NIST enrichment, causing coverage gaps, delayed analysis, and reliance on inconsistent CVSS scores provided by over 500 CVE Numbering Authorities (CNAs).
    • “Volerion’s analysis identified issues with timeliness, enrichment quality, and scoring discrepancies—especially in critical metrics such as attack complexity—potentially causing organizations to misjudge vulnerability severity and prioritize incorrectly.
    • “The report urges organizations not to rely solely on NIST or CNA CVSS scores for risk assessment, recommending the use of diverse metrics and independent analysis for more accurate prioritization.”
  • Security Week points out,
    • “Cisco confirmed that a recently patched vulnerability in its Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME) has been exploited in the wild.
    • “Tracked as CVE-2026-20230 (CVSS score of 8.6), the security defect is described as the improper validation of specific HTTP requests, which could allow attackers to mount SSRF attacks.
    • “Successful exploitation of the bug could lead to arbitrary files being dropped to the underlying operating system, which could then be used to gain root access.
    • “Only appliances with the WebDialer service enabled are vulnerable, Cisco says. The service is disabled by default.”
  • Cybersecurity Dive adds,
    • “Researchers say a critical vulnerability in Oracle E-Business Suite is facing exploitation attempts by a threat actor. 
    • “The vulnerability, tracked as CVE-2026-46817, is a flaw in the Oracle Payments, and has a severity score of 9.8. 
    • “If successfully exploited, an unauthenticated attacker with network access via HTTP would be able to compromise the product. 
    • “Researchers at Defused observed a hacker exploiting the flaw on its Oracle E-Business honeypots, according to a post on X. The activity was observed on June 27 from a French IP address, but researchers said the threat actor was using a VPN. 
    • “There has been no prior known exploitation activity or any release of a proof of concept, researchers said.” * * *
    • “Oracle previously addressed the vulnerability as part of a larger series of security patch updates in May.”

From the ransomware front,

  • Dark Reading reports,
    • The initial access broker (IAB) operation behind the credential-harvesting FortiBleed campaign is working in concert with ransomware actors, indicating the victims of the massive operation are now facing an even greater threat.
    • Research published by SOCRadar this week connects FortiBleed actors with two ransomware-as-a-service (RaaS) gangs, Inc Ransom and Lynx. SOCRadar researchers discovered an operator behind the campaign’s infrastructure that was actively logged into the ransom negotiation panels for both groups, and “engaging directly with ransom demands.”
    • “Finding a single operator working both panels, using infrastructure traceable back to FortiBleed, is the clearest evidence yet that FortiGate credentials harvested through this campaign are being handed off, or used directly, for ransomware deployment,” according to the SOCRadar blog post. 
    • “The connection to ransomware gangs marks the latest development in this saga. The attacks against insecure Fortinet FortiGate firewalls were initially discovered last month by security consultant Volodymyr “Bob” Diachenko. SOCRadar then later found that the attacks were part of a global campaign it dubbed “FortiBleed,” which had compromised thousands of devices and used a Golang-based sniffer to turn firewalls into credential stealers.”
  • and
    • “An emerging ransomware campaign is targeting small businesses across multiple regions with fake Interpol notices designed to trick victims into downloading malware disguised as evidence of alleged criminal activity.
    • “The campaign has so far has targeted businesses in multiple sectors, including pharmaceuticals, food, agriculture, technology, media, and legal services in the US, Europe, Asia, and the Middle East.
    • “Besides its focus on small businesses, the campaign is notable because it highlights how attackers no longer need sophisticated ransomware or the resources of a major cybercrime operation to launch disruptive attacks, Bitdefender said in a report this week. “Even relatively simple malware can become a serious threat when paired with convincing social engineering,” Bitdefender security analyst Alina Bizga wrote.”
  • The Hacker News relates,
    • “Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent.
    • “Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper into the network, then encrypting and wiping a company’s production database.
    • “Ransomware has always needed a skilled person somewhere in the loop, either at the keyboard or writing the script the malware follows. If a model can chain those steps on its own, the skill needed to run an attack drops to whatever it costs to rent an AI agent.”
    • “The way in was an old, already-patched bug. JADEPUFFER exploited CVE-2025-3248, a missing-authentication flaw in Langflow, an open-source tool for building AI apps and agent workflows. The flaw lets anyone who can reach the server run their own Python code on it, no login needed.” * * *
    • “The fixes are familiar. Patch Langflow and never expose its code-running endpoints to the internet. Do not run AI tools with cloud keys and provider credentials sitting in their environment; keep secrets in a proper manager, away from anything the web can reach.
    • “Harden Nacos: change the default signing key, keep it off the public internet, and never let it connect to its database as root. Never expose a database’s admin account to the internet, and lock down outbound traffic so a hacked server cannot phone home.”
  • Cyberscoop explains,
    • “How ransomware syndicates weaponize corporate-style organization
      • “From outsourced labor to tiered pricing models, an inside look at how today’s top ransomware threats operate less like rogue hackers and more like Fortune 500 companies.”
  • Cybersecurity Dive informs us,
    • “A massive credential-harvesting campaign, dubbed FortiBleed, is linked to two ransomware-as-a-service operations, tracked as INC ransom and Lynx, according to a blog post Wednesday [July 2, 2026] by cybersecurity firm SOCRadar. 
    • An operator with access to FortiBleed infrastructure was found to be logged into negotiation panels for INC as well as Lynx, researchers said. 
    • In certain cases, the attacks may have involved exploitation of a vulnerability in a content collaboration platform called Nextcloud. The analysis is still ongoing, so a public advisory or common vulnerabilities and exposures number has not yet been assigned. 
    • “The Nextcloud issue appears to have been used as part of the attackers’ broader operational workflow, likely for expansion or infrastructure access after initial compromise,” Ensar Seker, CISO at SOCRadar, told Cybersecurity Dive.
    • “Not all cases involved Nextcloud, nor was compromise fully dependent on exploitation of the zero day.” 

From the cybersecurity business and defenses front,

  • The Wall Street Journal reports,
    • “Chinese artificial-intelligence systems have matched the performance of Anthropic’s powerful model Mythos in some cybersecurity scenarios, a development poised to reset the global tech race and pressure the White House in its overhaul of U.S. AI policy.
    • “Security researchers said that a new AI model, released this month by China’s Zhipu AI, also known as Z.ai, can match the latest U.S. models when it comes to finding security bugs, although it still lags behind Anthropic’s and OpenAI’s products in other tasks.
    • “Overall, the capability gap between top U.S. models and those built by Chinese companies has narrowed significantly, and use of Chinese AI systems has surged as businesses seek to rein in runaway costs. A host of companies, including Microsoft, are weighing how they can offer Chinese models on their platforms, a development that is set to alter the balance of power among tech companies.
    • “China is making sure that the gap becomes smaller and smaller over time,” said Lior Div, chief executive officer of the cybersecurity company 7AI.”
  • Dark Reading relates,
    • “Red Hat and its parent IBM have committed an eye-popping $5 billion to Project Lightwell, a new subscription-based patching service for enterprises running business-critical systems that can’t risk the disruption of updating open-source software in production. It is the largest known commitment specifically targeting open-source software supply chain security — dwarfed only by Google’s broader $10 billion cybersecurity pledge in 2021, which also covered zero-trust and workforce training.”
  • and
    • “Apple is changing its approach to security patching, in response to the growing threat of accelerated artificial intelligence (AI) attacks.
    • “The company has historically saved big, bundled sets of bug fixes for new versions of its operating system (OS). That’s set to change. The company released a variety of security updates June 29 for iPhones, iPads, Macbooks, and the Safari browser, untethered to any major version releases. It’s hardly the first time it’s released security updates out-of-band, but the motivation was different this time. According to Reuters, the company said “it was adapting to the reality that, given the ability of artificial intelligence to speed the development of malicious hacking tools, it ⁠needed to reduce the time between when updates were first made public and when they were put into customers’ hands.”
  • Tech Target discusses “The agentic AI ‘lethal trifecta’: What CISOs should know.”
    • “The very capabilities that make an AI agent useful also make it dangerous. Here’s what CISOs should know about the agentic AI lethal trifecta, and what they should do about it.”
  • Security Week explains “How to Conduct a Successful Audit of AI-Driven Software Development.”
    • “As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.”
  • Here’s a link to Dark Reading’s CISO Corner.

Pre-holiday weekend report

David Ermer–Agentic & Generative AI, CDC, CMS, Congress, FDA, Government Contracting, Medical / Rx research, Medicare, Mental health care, No Surprises Act, OPM, Rx coverage, U.S. Healthcare–

Simplicity is a virtue

Note — The FEHBlog will be writing his weekly cybersecurity report tomorrow and will resume regular FEHBlog posts on Sunday July 5. Happy Independence Day! We are so blessed to be Americans.

From Washington, DC,

  • Roll Call reports,
    • “As America gets ready to celebrate its 250th birthday, Congress is taking a road trip back to the place where it all began — Independence Hall in Philadelphia. 
    • “Led by Pennsylvania Democratic Rep. Brendan F. Boyle, members will gather for a ceremonial event Thursday in his hometown, an effort Boyle said was two years in the making. 
    • “This is going to be truly one of the highlights of my tenure in Congress, to be sitting there where our Founding Fathers sat exactly 250 years prior, to the exact day,” Boyle said, adding he hoped it could be a rare “unifying moment.” 
    • “While July 4 gets most of the fanfare, Boyle said its lesser-known neighbor, July 2, deserves more attention as the day the Second Continental Congress voted to declare independence from Great Britain in 1776. 
    • “It was always the date that John Adams thought would be celebrated as America’s birthday. Unfortunately, this was another instance in which Adams lost to [Thomas] Jefferson — because Americans came to, of course, celebrate two days later the Fourth of July, which is the date Congress adopted the Declaration of Independence,” he said.” 
  • OPM Director Scott Kupor added a third post (OPM.gov link) to his Secrets of OPM blog this week. In this post, Director Kupor commemorates the new paperless federal retirement system by spurning the altar of Michael Scott, the fictious paper czar of Scranton, PA.
  • Healthcare Dive reports,
    • “The CMS proposed a rule on Thursday that would slash Medicare payment rates for a program [known as 340B] that hospitals use to buy discounted drugs and implement site-neutral payments for some imaging services next year.
    • Reforming the 340B drug discount program and better equalizing payments between sites of care have been priorities in the second Trump administration. Thursday’s proposed rule builds upon those agendas, including by expanding the services subject to site-neutral payments and more aggressively tamping down on discounts given to hospitals in the 340B drug program, which regulators previously tried to overhaul before dialing down their efforts in the face of opposition from the industry.
    • Medicare officials said the proposed rule would control costs and ensure Medicare money is directed toward “clinically appropriate” care. * * *
    • “The 2027 Hospital Outpatient Prospective Payment System and Ambulatory Surgical Center rule proposes to increase pay for outpatient care by 2.4%, slightly less generous than the 2.6% rate update finalized last year.
    • “The rule would request information from stakeholders about how hospitals post publicly available price data, an ongoing priority for the Trump administration. Additionally, if finalized, the rule would allow certain accrediting organizations to assess hospitals on their compliance with laws regarding emergency care.”
  • The American Hospital Association News tells us,
    • “The House Education and Workforce Subcommittee on Health, Employment, Labor and Pensions July 1 examined whether direct health care contracts between employers and providers could help address rising health care costs. During the hearing, lawmakers from both parties expressed interest in arrangements that bypass traditional insurers, with supporters citing lower costs, reduced administrative burdens and improved access to care. Witnesses highlighted advantages such as simplified billing, price transparency and direct primary care services, while lawmakers also discussed the need for greater insurer transparency and access to health plan data. The committee did not signal specific legislative proposals following the hearing.”
  • and
    • “The Trusted Exchange Framework and Common Agreement Recognized Coordinating Entity published updated standard operating procedures for the individual access services exchange protocol and new FAQs. The revised SOP removed references to “TEFCA IAS Consent” workflows and associated patient matching methodologies, retaining the ability for providers to verify requests for access and use of data. Updates were made based on recommendations that the AHA and other stakeholders provided to SOP proposals. The SOP will be effective Aug. 3, 2026.”

No Surprises Act news

  • Federal Hearings and Appeals Services, which is certified IDR entity, tells us about
    • “The Cooling Off Period: What Providers and Health Plans Need to Know
      • “What is actually changing with the cooling off period under the final rule for the federal IDR program? To help clarify both the ongoing rules, the coming changes, and their timing, FHAS is offering two new tools to support parties.
        • “First, a new guide to the cooling off period explains which claims are subject to the cooling off period, how long it lasts, what will change under the final rule, and when those changes are coming.
        • “Second, FHAS has launched a new Cooling-Off Calculator which parties can use today to determine cooling off period dates and new dispute initiation timeframes. FHAS can help your team understand, anticipate, and implement changes directed by the final rule.”

From the judicial front,

  • Healthcare Dive reports,
    • “Elevance is suing the CMS after the agency recalculated the Medicare Advantage star ratings of a competitor in a more favorable way than it did for other plans.
    • “After losing a lawsuit earlier this year, the CMS reran 2026 quality scores for Clover Health, dropping 20 measures that a judge ruled could not be factored in. Regulators then recalculated stars for other MA insurers last month, but cut out extra measures, too — measures that Elevance performed well on, the insurer argued in its complaint filed Wednesday in Georgia district court.
    • “Elevance says it lost out on $115 million in bonus payments as a result. The company is asking the court to force CMS to redo its own ratings using the same methodology as for Clover.”
  • STAT News relates,
    • “In a victory for the pharmaceutical industry, a federal judge blocked a Colorado state panel from placing a cap on the price of a blockbuster drug sold by Amgen after deciding the company is “likely to be significantly harmed.”
    • “The ruling pauses a controversial, first-in-the-nation move by the Colorado Prescription Drug Affordability Board, which was created four years ago in response to the rising cost of prescription medicines and is permitted to set upper payment limits on what most state residents will pay for selected drugs.” * * *
    • “Last October, the board then voted to limit what health plans in the state will pay for the drug. The board capped Enbrel prices at $600 for a ​50-milligram weekly dose, or $30,350 a year per person, effective on January 1, 2027. That compared with roughly $53,000 that the average plan in the state paid in 2023, according to a state claims database.
    • “The drugmaker then quickly filed a second lawsuit, reiterating its earlier arguments. Meanwhile, the company had until July 5 to decide whether to continue selling the treatment, which has a list price exceeding $100,000 a year and generated $2.23 billion in sales last year, in Colorado.
    • “But Judge Daniel Domenico of the U.S. District Court in Denver agreed with the company. In his ruling, which was issued on Wednesday, he noted that the state has a ​legitimate interest in helping patients afford Enbrel, but “capping the price of a patented drug” is not an ​option.”

From the public health and medical / Rx research front,

  • The Wall Street Journal reports,
    • “The U.S. overall death rate in 2025 fell to its lowest point on record, even as influenza and pneumonia are now among the nation’s top 10 causes of death for the first time in years, according to new data from the Centers for Disease Control and Prevention.
    • “The death rate fell 4.6% last year, to 689.2 deaths per 100,000 people, down from 722.1 in 2024, according to the CDC’s National Center for Health Statistics. The death rate declined across every age group and nearly every demographic group tracked in the provisional report.
    • “The main driver of the record low was a continued drop in drug overdose deaths, said Farida Ahmad, a health scientist at the CDC and one of the report’s co-authors. Another factor, she added, was that Covid-19 no longer contributed to as many deaths.
    • “Against that backdrop, influenza and pneumonia stood out—moving from 11th to eighth place in all age groups—with 56,511 deaths in 2025 compared with 48,139 in 2024. It is the first time the influenza category has cracked the top 10 since 2020.”
  • AAMC relates,
    • “Patients arrive in the emergency department (ED) doubled over in pain and retching uncontrollably, a brew of symptoms physicians have nicknamed “scromiting” — a combination of screaming and vomiting. The problem: an underrecognized consequence of cannabis use called cannabinoid hyperemesis syndrome (CHS), and emergency medicine physicians say few conditions leave patients more obviously miserable.
    • “My heart breaks for them,” says Kathleen Clem, MD, an emergency medicine physician at Dartmouth Health in Lebanon, New Hampshire, and interim associate dean for faculty affairs at the Geisel School of Medicine at Dartmouth. “They come in because they absolutely cannot keep anything down. They’re dehydrated and their belly is sore from vomiting so much. Sometimes they vomit so much, they’ll break little blood vessels in their esophagus, and little bits of blood come up with that.”
    • “The leading cause of marijuana-related ED visits, CHS is associated with the chronic and long-term use of marijuana products, and it is becoming more prevalent, likely due to the increased legalization of marijuana. Some 24 states have legalized recreational marijuana use since 2012, and 40 states allow its use as a medicinal treatment. An additional eight states allow “limited-access” medical cannabis, which refers to low-THC (tetrahydrocannabinol) products and CBD (cannabinoid) oil.
    • “In the United States, cannabis use has nearly doubled in the past decade, with 22.3% of individuals 12 years and older — 64.2 million people — reporting its use in the past year, up from 12.6% in 2013, according to data from the Substance Abuse and Mental Health Services Administration. And research shows a 15-fold increase in the number of people reporting daily or near daily cannabis use from 1992 to 2022.”
  • The Today Show adds,
    • “Cyclosporiasis, a nasty parasitic infection that causes “explosive” watery diarrhea, has sickened dozens of people in Michigan and other parts of the United States.
    • “Cases of the gastrointestinal illness, caused by a parasite that spreads through contaminated food, have been on the rise in multiple states since May, according to the U.S. Centers for Disease Control and Prevention. At least 20 people have been hospitalized nationwide so far. 
    • “The CDC is working to identify potential sources of the parasitic infection, which is commonly linked to fresh produce.” * * *
    • “The U.S. typically sees several hundred cases of cyclosporiasis annually. In recent years, the number of infections reported in the U.S. has increased significantly.” * * *
    • “The best way to prevent infection is to avoid consuming food or water that may be contaminated with feces, the CDC says. Following proper hand hygiene and safe food handling practices can also lower your risk of foodborne illness.”
  • The New York Times points out,
    • Habitual users of fentanyl have developed such a strong tolerance to the drug that standard doses of medications to manage withdrawal and initiate recovery are no longer working for many patients, a team of researchers in Los Angeles has found.
    • Their study, published in the journal Drug and Alcohol Dependence, presents a picture of the dangerous volatility of the city’s street supply and the capacity of users to tolerate ever greater amounts of pure fentanyl, which is at least 50 times more potent than heroin.
    • “In a summary of the findings, Morgan Godvin, one of the lead authors of the study and a health services researcher at the University of California, Los Angeles, said that a seasoned user’s daily street dose of fentanyl was roughly equivalent to 1,250 hospital doses of 100 micrograms of fentanyl given during and after surgery.
    • “In any other context, that would be unsurvivable,” she wrote. “Among people who use fentanyl every day, it is routine.”
    • “The study reinforces the belief among many addiction experts that, for high-tolerance patients, the standard treatment regimens for opioid addiction have become outdated. Doses of medications such as buprenorphine and methadone, opioids that help satisfy cravings without inducing a high, were calculated to treat addictions to heroin and prescription painkillers. The results of the new research, experts said, support a growing call by clinicians for treatment guidelines to be revised to keep pace with the convulsive drug market.”
  • MedPage Today tells us,
    • “A global study showed that body mass index-associated gaps in blood pressure and cholesterol have diminished from 1990 to 2024.
    • “With more medications being used, older people with obesity were metabolically similar to, and in some countries even lower risk than, people with a normal BMI.
    • “Young adults with obesity remain metabolically higher risk, however, and should be a focus of prevention and treatment, some say.”
  • Genetic Engineering and Biotechnology News informs us,
    • “For nearly half a century, scientists have known that malaria parasites force their way into human red blood cells (RBCs) through a ring-shaped structure called the moving junction (MJ). What no one could work out was what it actually does. The structure assembles, does its job, and dissipates in the space of 60 seconds—gone before anyone can get a close look.
    • “A team at Columbia University has now finally caught the moving junction in the act. By freezing parasites at the onset of invasion and lifting the intact complex straight out of the cell, the researchers obtained the first high-resolution view of its three-dimensional structure. What they saw overturned a decades-old assumption about how the parasite gets in. Rather than a passive doorway, the moving junction turns out to be a molecular machine that actively remodels the host cell’s membrane to help the parasite force its way inside.
    • “The findings detail how the team obtained the structure and then used it as a blueprint to design a mini-protein, from scratch, that blocks invasion—a proof of concept for a new kind of antimalarial drug.”
  • The Washington Post lets us know,
    • “When it comes to dementia risk, certain factors, such as genetics, are out of your control. However, plenty of research suggests lifestyle behaviors— things you can change — may help improve your chances of staying sharp as you age. In a new study, people with an elevated risk of dementia were less likely to develop the condition if they followed a healthy dietary pattern, particularly a less inflammatory one.”
  • Per BioPharma Dive,
    • “Roche’s experimental medicine divarasib helped patients with a certain type of lung cancer live longer than two approved treatments in a new study.
    • “The Phase 3 trial compared divarasib with Amgen’s Lumakra and Bristol Myers Squibb’s Krazati in patients with KRAS G12C non-small cell lung cancer who had already received previous treatment. Researchers found significant improvements in both overall survival and progression-free survival for the group taking divarasib, Roche said Thursday.
    • “Roche did not release detailed data, saying the results would be presented at an upcoming medical meeting. There were no new safety findings of concern and most treatment-related side effects were “manageable and reversible,” the company said.”

From the U.S. healthcare business front,

  • Healthexec reports,
    • With Election Day only four months away, healthcare is again emerging as a major source of idealistic campaign promises. Many of these are driven by widespread public angst. What sorts of changes can U.S. healthcare stakeholders realistically expect once the results are in? 
    • “Professional prognosticators at the global accounting and consulting firm PricewaterhouseCoopers, aka PwC, have considered the policy possibilities and are sharing their thinking in writing. * * * PwC offers forward-looking insights and advice for organizations across healthcare’s four major subsectors. 
      • “PROVIDERS: Policy drivers are reshaping delivery and access. 
        Healthcare providers will do well to “examine their care delivery footprints, leverage automation and technology to reimagine the workforce and operations in order to mitigate economic strain,” PwC comments. 
        ‘This should include identifying opportunities to diversify revenue sources, partnerships or M&A with other stakeholders, and prioritizing investment in new technology to reduce impacts of the increase in uncompensated care and workforce constraints.’
      • “PAYERS: Policy drivers are reshaping cost structures. 
        “Healthcare payers will likely need to strengthen care management capabilities as they expand their holistic support to members, the analysts forecast. 
        ‘This will include, in the future, leveraging sophisticated data models and interactive real-time communications to understand and influence member behavior patterns, accelerate paths to appropriate cost-effective care, and drive financial savings for members and plans.’
      • “PHARMA: Policy drivers are reshaping pipeline decisions, regulatory strategy and market access. 
        “In the future, pharmaceutical manufacturers, propelled by accelerating science and shifting patient expectations, “should expand from drug manufacturers to ‘lifespan partners,’ requiring more agile operating models and greater collaboration across technology, and ecosystem players,” the authors write.  
        ‘In the interim, pharmaceutical manufacturers can embrace innovative approaches to access, affordability and evidence generation to meet the needs of today’s consumer and keep pace with pipeline and pricing pressures.’
      • “MEDTECH: Policy drivers are reducing federal oversight of AI-powered and wellness devices. 
        “Going forward, the subsector is expected to become a broader ecosystem player, building interoperable, intelligent systems that connect care across hospitals and the home, PwC remarks. 
        ‘MedTech should strengthen capabilities for post market surveillance as FDA shifts oversight focus from a premarket review paradigm to an emphasis on performance and safety once on the market, particularly for low risk, consumer devices.’
  • Cardiovascular News relates,
    • “The American College of Cardiology (ACC) reached a major milestone this summer; its highest honor, the HeartCARE Center National Distinction of Excellence, has officially been awarded to 100 U.S. hospitals [all of which are listed in the article]. 
    • “The ACC established the HeartCARE Center designation in 2018 to celebrate hospitals and health systems that “demonstrate ongoing excellence through comprehensive accreditation, data-driven performance measurement and continuous quality improvement initiatives.” Recipients must be “forward-thinking organizations” that participate in ACC Accreditation Services programs, NCDR registries and other quality improvement campaigns focused on cardiovascular health.
    • “Reaching 100 hospitals recognized as ACC HeartCARE Centers marks an important milestone in our ongoing effort to elevate the standard of cardiovascular care,” Steven B. Deitelzweig, MD, chair of the ACC Accreditation Oversight Committee, said in a statement. “Each of these institutions has demonstrated a deep commitment to evidence-based care, continuous quality improvement and measurable outcomes—ensuring that patients receive the highest level of cardiovascular care, no matter where they live.”
  • Beckers Hospital News tells us,
    • “The Kroger Co. will acquire supermarket chain Giant Eagle, Inc. for $1.65 billion, expanding its pharmacy footprint across northern Ohio, western Pennsylvania, West Virginia, Maryland and Indiana.
    • “Giant Eagle operates 11 standalone pharmacies, according to a July 1 news release. Kroger said the acquisition will strengthen its presence in adjacent markets and build on Giant Eagle’s pharmacy business, loyalty program and private label portfolio. 
    • “The deal adds to Kroger’s pharmacy footprint at a time when retail pharmacy access is contracting elsewhere in the industry, with Walgreens restructuring into five standalone companies following multibillion-dollar operating losses and Rite Aid’s footprint largely gone — a gap health systems have increasingly stepped in to fill by opening their own pharmacies.” 
  • MedTech Dive informs us,
    • “Guardant Health said Wednesday its Shield test for colorectal cancer is now covered by UnitedHealth, the first major private U.S. health insurer to reimburse for the screening.
    • “The decision by UnitedHealth, the largest private U.S. health insurer, expands access to the screening to about 100 million Americans, the company said.
    • “Canaccord Genuity analyst Kyle Mikson, in a note to clients, called the coverage decision a “watershed moment” for liquid biopsy-based cancer screening and for the category of blood-based cancer testing.”

Wednesday report

David Ermer–Agentic & Generative AI, CDC, CMS, FDA, Federal employment benefits, Medical / Rx research, Medicare, No Surprises Act, OPM, Telehealth, U.S. Healthcare–

Simplicity is a virtue.

HAPPY NATIONAL POSTAL WORKERS DAY!

From Washington, DC,

Plenty of news from the U.S. Office of Personnel Management today.

  • Per an OPM news release,
    • “Today, the US Office of Personnel Management (OPM) announced the “Last Day of Paper,” officially ending paper retirement processing for more than 95 percent of federal retirement applications and completing the agency’s transition to a fully digital retirement process.
    • “For decades, federal retirement applications relied on a paper-based process that required physical documents to move between agencies, payroll providers, and OPM’s Retirement Operations Center in Boyers, Pennsylvania. As of yesterday, nearly all retirement applications will be submitted and processed electronically through OPM’s Online Retirement Application (ORA), eliminating paper from the process and significantly reducing processing times.
    • “The milestone follows rapid adoption of ORA, which has processed more than 155,000 retirement applications over the past year after serving only a few hundred users during its initial rollout.” * * *
      • “As part of today’s milestone, OPM is also launching new capabilities designed to accelerate retirement processing, including:
      • “A new pre-retirement application that allows employees and agency HR offices to complete much of the retirement process before an employee’s separation date.
      • “Earlier processing of retirement applications while final payroll information is still being finalized, reducing unnecessary delays.
      • “A commitment to issue a retiree’s first pension payment within seven days of retirement for applicants who submit a complete retirement package by their separation date.”
  • FEHBlog observation – While OPM deserves credit for this accomplishment, the agency has not announced implementing the HIPAA standard transaction 820 which is an electronic enrollment roster that would allow carriers to reconcile premiums to individual enrollments. The HIPAA 820 has been around since 2012. Carrier systems must accept the HIPAA 820. What is the sense in collecting family member eligibility documents when no one currently knows whether the enrollee is paying the proper premium?
  • Govexec adds,
    • “The federal government’s 401(k)-style retirement savings program posted mixed results in June, ending two straight months of consistent growth.
    • “The Thrift Savings Plan’s S Fund, which is made up of small- and mid-size businesses, saw the best performance, gaining 4.34% last month. Since January, the S Fund has grown 18.41%.
    • “The fixed income (F) fund increased 0.25% last month, bringing its 2026 performance to 0.74%. And the G Fund, which is made up of government securities, increased by its statutorily mandated rate of 0.37%. So far this year, the G Fund has swelled 2.18%.
    • “But the I Fund was virtually flat in June, losing 0.03%. That brings the I Fund’s 2026 performance to 16.53%. And the C Fund’s common stocks fell 0.95%, bringing its gains since January down to 10.20%.”
    • The performance of other funds can be found in the article.
  • Another OPM news release tells us,
    • “The US Office of Personnel Management (OPM) today proposed sweeping reforms to modernize how agencies address poor performance, streamline disciplinary and removal procedures, and strengthen accountability across the federal workforce.
    • The proposed rule would require agencies to better equip supervisors with training on employee accountability while making it easier to address employee performance issues. Among other reforms, the proposal establishes a default 30-day Performance Improvement Plan (PIP), eliminates pre-PIPs that unnecessarily delay action, standardizes employee response periods for adverse actions, and modernizes Merit Systems Protection Board review of adverse action appeals by replacing the current checklist-based approach (called “the Douglas factors”) with a totality-of-the-circumstances standard.
    • This proposal is part of the Trump Administration’s broader effort to build a high-performing federal workforce that rewards excellence, recognizes strong performance, and holds employees accountable when performance falls short.” * * *
    • “The proposed rule will be published in the Federal Register and will be open for public comment. Read Director Kupor’s blog post on this here.”
  • OPM Director Scott Kupor added a second post to this Secrets of OPM blog today. The second post is titled “Measure what matters.”
    • “Last year, we postponed the Federal Employee Viewpoint Survey (FEVS) and critics were quick to claim that we at OPM did not believe in employee engagement surveys. That couldn’t be farther from the truth. * * *
    • So, today we announced that OPM will no longer centrally administer FEVS. As a centrally-administered system, it’s costly, doesn’t serve as a valuable management tool and fails to enable actionable results. That serves nobody well.
    • Instead, we have provided detailed guidance to agencies on how best to design surveys that meet their specific needs. That guidance includes a common set of core questions that every agency will ask—ensuring we preserve the ability to track government-wide trends and maintain a coherent thread of data across the federal workforce. The goal isn’t fragmentation; it’s better ownership. Agencies will have the flexibility to go deeper where their missions demand it, while OPM retains the visibility to understand the broader landscape and identify where systemic challenges require government-wide attention.”
  • Federal News Network reports,
    • “President Donald Trump said Monday [June 29] he will nominate Keith Sonderling to be the secretary of labor, elevating him from the agency’s acting director two months after Lori Chavez-DeRemer resigned amid abuse-of-power allegations.
    • “Sonderling, a lawyer who has held a variety of acting positions and leadership roles across Trump’s government, was previously the deputy labor secretary and a Republican member of the Equal Employment Opportunity Commission.
    • “Throughout his career, Keith has proven his dedication to delivering strong results for the Hardworking People of our Country, and I know he will do an incredible job in his new role,” Trump wrote in a Truth Social postannouncing Sonderling’s nomination.
    • Sonderling’s nomination is subject to Senate confirmation.
  • Fierce Healthcare relates,
    • “The Trump administration has officially launched its new “bridge” model that brings GLP-1 coverage for weight loss to Medicare beneficiaries.
    • “Eligible people enrolled in Medicare Part D can secure certain GLP-1 medications for weight loss or management at $50 each month. The program will remain in place through the end of 2027, the Centers for Medicare & Medicaid Services said in an announcement.
    • ‘Under the GLP-1 bridge, the feds will cover the cost of expanded coverage. Alongside this model, the agency also proposed a second approach—called Better Approaches to Lifestyle and Nutrition for Comprehensive hEalth, or BALANCE—in which it would negotiate lower GLP-1 prices in exchange for standardized coverage options.
    • “Plans balked at the model, and CMS indefinitely delayed from a planned January 2027 start date. A similar model was implemented in Medicaid in May 2026.
    • “In a CMS announcement commemorating the model’s launch, Administrator Mehmet Oz, M.D., urged beneficiaries to reach out to their doctors to see if they’re eligible.
    • “For too long, many Americans have been unable to access these treatments because of cost,” Oz said.”
  • Per a CMS news release,
    • “The Centers for Medicare & Medicaid Services (CMS) is proposing new safeguards to ensure taxpayers aren’t on the hook for noncompliant Medicare providers and suppliers, continuing its campaign to crush fraud, waste, and abuse throughout its programs and hold bad actors accountable. The Calendar Year (CY) 2027 Home Health Prospective Payment System (PPS) proposed rule would strengthen CMS’ ability to recover improper payments and remove non-compliant providers and suppliers from Medicare, actions estimated to save approximately $82 million in annual savings, while also expanding access for patients receiving care at home and improving the timeliness of publicly reported home health agency quality information.”
    • * * * “The proposed rule also would update Medicare home health payment rates for CY 2027. At the same time CMS is strengthening oversight and crushing fraud, waste, and abuse, the agency is proposing targeted payment updates that support access to care for beneficiaries who rely on home health services. CMS is also proposing to continue to fulfill its statutory obligation to transition the Home Health PPS to the Patient-Driven Groupings Model in a budget-neutral manner. CMS estimates total Medicare payments to home health agencies would increase by approximately 2.4%, or $420 million, compared to CY 2026.” * * *
    • “To view a fact sheet on the proposed rule, visit: https://www.cms.gov/newsroom/fact-sheets/calendar-year-cy-2027-home-health-prospective-payment-system-proposed-rule-fact-sheet-cms-1844-p. 
    • “The proposed rule can be viewed on the Federal Register at: https://www.federalregister.gov/d/2026-13602.” 
       
  • Per a GAO news release,
    • “A leading cause of death in the U.S., suicide resulted in more than 49,000 deaths in 2023. That’s up by 31% from 2003.
    • “To help those at risk, the federal government set up the 988 Suicide & Crisis Lifeline. It offers support via call, text, and chat.
    • “Since the Lifeline’s inception in July 2022 through September 2025, we found:
      • “Call, text, and chat contact volume increased
      • “Call answer rates increased, while text and chat answer rates varied
      • “Average time to answer calls, texts, and chats varied
    • “We also found that the federal government set goals for the Lifeline. It collected data related to those goals and used it to assess its performance.”
  • HR Dive points out,
    • “The U.S. Equal Employment Opportunity Commission rescinded its affirmative action guidelines Tuesday, eliminating an interpretation that had persisted for 40 years.
    • “According to a June 30 statement, the guide and a related compliance manual “ran afoul” of Title VII of the Civil Rights Act of 1964 and more recent U.S Supreme Court rulings in the eyes of the commissioner. Almost three years ago to the day, the high court issued its decision in Students for Fair Admissions, Inc. v. Harvard, holding that race-conscious admissions practices at two universities were unconstitutional.” * * *
    • “The takeaway from the new plan should not be to “abandon lawful EEO efforts, but to ensure policies do not use protected characteristics as selection criteria,” management-side attorney Randi Hyatt, a partner at Whiteford, Taylor & Preston, said in an analysis.”

No Surprises Act News

  • Fierce Healthcare reports,
    • “Healthcare technology company Zelis rolled out an AI-native solution to help health plans manage Independent Dispute Resolution complexity under the No Surprises Act.
    • “Independent Dispute Resolution (IDR) is the process for adjudicating out-of-network claims created by 2020’s No Surprises Act (NSA).
    • “Zelis’ solution uses AI to automate payers’ workflows, from claim repricing, open negotiation, dispute prevention, case management and IDR resolution. The company unveiled the new solution as dispute volume, compliance requirements and process deadlines pressure payer operations, executives said.”

From the Food and Drug Administration front,

  • Per an FDA news release,
    • The U.S. Food and Drug Administration today issued a supplemental approval for Casgevy (exagamglogene autotemcel) for patients aged 2 years and older with either sickle cell disease (SCD) with recurrent vaso-occlusive crises (VOCs) or transfusion-dependent β thalassemia (TDT). This is the first gene therapy approved for patients aged 2 years and older with SCD.  
    • Casgevy has been previously approved for the treatment of patients aged 12 years and older with SCD with recurrent VOCs or TDT.  
    • “With today’s decision, pediatric patients as young as 2 years of age can now access a critical additional treatment option to treat these debilitating, life-threatening diseases,” said Karim Mikhail, B. Pharm., M.S., Acting Director of the Center for Biologics Evaluation and Research (CBER). “The FDA is committed to prioritizing and speeding up the review of products that address critical U.S health priorities through expedited review programs, including the FDA Commissioner’s National Priority Voucher (CNPV) Pilot Program. These initiatives are designed to advance therapies for diseases with significant unmet medical needs, enabling faster access to innovative treatments while upholding the FDA’s rigorous gold-standard requirements for safety and effectiveness.”  
  • Per an HHS news release,
    • “The U.S. Department of Health and Human Services (HHS) and the U.S. Food and Drug Administration (FDA) today commended the Drug Enforcement Administration’s (DEA) issuance of two Notices of Intent to begin the temporary scheduling process for certain kratom-related substances.
    • ‘One Notice of Intent addresses temporary placement of 7-OH above a specified threshold in Schedule I, while the second would temporarily place three synthetic 7-OH derivatives into Schedule I of the Controlled Substances Act (CSA):
      • “Mitragynine pseudoindoxyl (MP)
      • “Dihydro-7-hydroxymitragynine (MGM-15)
      • “The 9-fluoro derivative of 7-hydroxymitragynine (MGM-16)
    • “Concurrent with DEA’s Notice of Intent addressing 7-OH, the Office of the Assistant Secretary for Health (OASH) issued a Request for Information (RFI) on seeking public comment on the proposed 7-OH threshold level in the NOI. The request is limited to obtaining comments on whether: 1) there is additional scientific data to support the proposed or an alternative threshold level – specifically, what concentration or quantity of 7-OH in a product constitutes an imminent hazard to public safety; and 2) data exist supporting alternative measurement expressions for purposes of specifying the threshold level that is necessary to avoid an imminent harm to public safety.
    • “After the 30-day comment period for the RFI, OASH will provide comments submitted to the RFI public docket to the Attorney General for consideration. Once comments have been considered and at least 30 days have passed since the publication of the NOI, the Attorney General may then issue a temporary scheduling order placing 7-OH above a certain threshold in Schedule I. The CSA provides the Attorney General with the authority to issue a temporary scheduling order placing a substance in Schedule I of the CSA for two years, if such action is necessary to avoid an imminent hazard to public safety.”
  • Cardiovascular Business relates,
    • “Amgen is recalling nearly 935,000 bottles of ivabradine, a heart failure drug the company sells under the brand name Corlanor, due to the presence of a foreign substance. 
    • “The recall includes specifics lots of 5-mg and 7.5-mg Corlanor tablets manufactured in Italy and then distributed by Amgen throughout the United States. The drugs are packaged in 14- and 60-tablet bottles. Expiration dates range from July 2026 to December 2028.
    • “The U.S. Food and Drug Administration (FDA) has categorized this as a Class II recall, which means taking the drugs in question could cause “temporary or medically reversible adverse health consequences.”
    • “Amgen first received FDA approval for ivabradine in April 2015. The agency’s decision was largely based on data from the SHIFT trial, which included more than 6,500 patients randomized patients treated with ivabradine or a placebo. In 2021, researchers found that ivabradine could be used to treat symptoms associated with postural orthostatic tachycardia syndrome in COVID-19 patients.”
  • MedTech Dive adds,
    • “The Food and Drug Administration has reported 252 injuries were associated with Hologic’s BioZorb radiographic markers implanted in the breast and other soft tissue sites during medical procedures. No deaths were reported.
    • “The update comes almost two years after Hologic told customers to stop using the devices due to reports of adverse events such as pain, infection and device migration. At the time, Hologic said it had received 188 complaints associated with adverse events.
    • “In its latest communication, the FDA repeated Hologic’s instructions advising healthcare providers not to use the BioZorb markers. Patients should be monitored for signs of adverse events, but Hologic said there is no need to have an implanted marker removed from the body.”
  • Beckers Hospital Review tells us,
    • “Cisplatin, carboplatin, oxaliplatin and ifosfamide remain in active shortage, and manufacturers’ latest estimates show full resupply of some formulations will not arrive until October, according to updates posted by the American Society of Health-System Pharmacists. 
    • “The four chemotherapy drugs form the backbone of treatment for breast, lung, ovarian, testicular, bladder, and head and neck cancers. Becker’s previously reported that hospitals and cancer clinics working with group purchasing organization Premier received only 38% of their ifosfamide orders and about two-thirds of their cisplatin orders in recent weeks, prompting some healthcare organizations to space out doses and prioritize patients most likely to benefit from treatment.”
  • BioPharma Dive identifies “5 FDA decisions to watch in the third quarter of 2026.”
    • “A group of coming decisions could provide important insights into how flexible the agency is willing to be under new leadership.”

From the public health and medical / Rx research front,

  • The Washington Post reports,
    • “West Nile virus activity is starting earlier than it has in years, with the CDC warning it is now seeing the highest number of human cases of the nasty mosquito-borne disease since 2004.
    • ‘At least 48 cases had been reported as of Tuesday, and 38 have involved serious illness affecting the brain or nervous system. 
    • “For comparison, by the end of June, the Centers for Disease Control and Prevention usually sees only about 10 human cases. The earlier start could be problematic, as it extends the amount of time people could be exposed to the disease before the season dies down in colder months.” * * *
    • “Arizona has reported the highest number of cases in the country at 32. Maricopa County, the state’s most populous county, has reported 29 cases, including four deaths, already more than half of the case total it reported in all of 2025.”
  • Drug Topics relates
    • “Surveillance through June 2026 shows widespread, outbreak-driven measles transmission, with 93% of cases in unvaccinated/unknown-status individuals and 6% requiring hospitalization. 
    • “Erosion of kindergarten MMR coverage from 95.2% to 92.5% leaves hundreds of thousands susceptible, while subregional coverage can fall near 50%, enabling explosive outbreaks. 
    • “Utah’s large outbreak prompted enhanced monitoring, including wastewater-based detection, and recommendations for earlier MMR dosing (from 6 months) to mitigate infant risk. 
    • “Persistent misinformation and vaccine hesitancy necessitate motivational interviewing techniques (OARS, readiness rulers) and proactive pharmacist-led community engagement to rebuild trust and uptake.”
  • Managed Health Executive points out,
    • “Physical inactivity and racial and ethnic minority status emerged as the two strongest predictors of diabetes prevalence across U.S. counties in a new machine-learning analysis published in Diabetes/Metabolism Research and Reviews.
    • “The cross-sectional study, led by Nicolaas P. Pronk, Ph.D., of the HealthPartners Institute, set out to capture what the authors call the “multilevel ecology” behind diabetes, defined as the mix of broad structural forces and individual-level behaviors that impact diabetes development.”
  • Beckers Clinical Leadership lets us know about “Lung cancer screening, mortality and incidence — by state.”
    • “At 11%, California had the lowest up-to-date lung cancer screening rate in 2024, while Connecticut, Massachusetts and Pennsylvania had the highest rate at 28%, according to American Cancer Society data. 
    • “The national median rate for up-to-date lung cancer screening in 2024 was 18%.
    • “Lung cancer mortality and incidence remain highest in Kentucky and West Virginia, despite having above-average lung cancer screening rates.” 
  • Health Day tells us,
    • “Stepped alcohol treatment (SAT) offered via telehealth helps people with chronic liver disease (CLD) reduce alcohol consumption, according to a study published online June 24 in Hepatology.
    • “Derek D. Satre, Ph.D., from the University of California, San Francisco (UCSF), and colleagues evaluated the efficacy of telehealth SAT, which consisted of three motivational interviewing sessions followed by addiction medicine referral if no drinking reduction at month 3. One hundred fifty-seven adults with CLD and unhealthy alcohol use (>7 drinks/week or ≥4/day for women; >14/week or ≥5/day for men; or heavy episodic drinking) were randomly assigned to SAT (81 participants) or usual care (76 participants). 
    • “The researchers found that SAT had no difference in percentage of alcohol use below moderate level (primary outcome) versus usual care. However, SAT had greater reduction in drinks/week from baseline to month 3 and month 6 (estimates, −0.66 and −0.67, respectively) (secondary outcome). Compared to usual care, the six-month effect of SAT on alcohol use reduction remained significant when controlling for covariates. The 30-day abstinence rates were 29 percent for SAT and 18 percent for usual care at month 6. There was a positive association between baseline motivation to reduce alcohol use and treatment response.”
  • The latest NIH Research Matter covers the following topics:
    • “Alzheimer’s proteins in blood linked to midlife cognition 
      • “A study found that people in midlife with more Alzheimer’s-related proteins in their blood had worse cognitive function.
      • “The results suggest blood tests could one day help identify people who may benefit from early efforts to delay Alzheimer’s symptoms.”
    • “Genetic testing may benefit more patients with melanoma 
      • “Researchers found people diagnosed with melanoma at a young age or with multiple melanomas were more likely to carry a genetic mutation.
      • “The findings suggest that certain patients with melanoma could benefit from genetic testing to identify mutations and potential risk for other types of cancer.”
    • “Senescent cells mapped in human body over the lifespan
      • “Scientists located and classified senescent cells, a hallmark of aging, to begin building an atlas of these non-dividing cells in the human body.
      • “The atlas could help track how senescent cells drive age-related conditions and may inform treatment strategies for age-related diseases.”
  • The University of Minnesota’s CIDRAP notes,
    • “Vaccine myths are not new. They have circulated for decades, surviving retracted studies and countless public health campaigns. Now, a new poll suggests that, while relatively few Americans fully believe those falsehoods, many remain uncertain about them—a finding that suggests opportunities to counter vaccine misinformation.” * * *
    • “The poll found a strong association between trust in healthcare providers and vaccine attitudes, with adults who have a provider they trust being less likely to believe vaccine myths.
    • “Just under half of adults (46%) who do not have a trusted healthcare provider to answer questions about their health said it was “probably” or “definitely true” that more people have died from COVID vaccines than from COVID itself. That’s almost twice as many as those who reported having a trusted provider (24%). 
    • “Researchers noted that the relationship remained significant even after accounting for factors such as age, race and ethnicity, education, political affiliation, and insurance status.”
  • Per BioPharma Dive,
    • “Shares of Paris-based biotechnology company Abivax surged nearly 40% Tuesday following the release of supplementary Phase 3 data on its inflammatory bowel disease drug that cleared away investors’ concerns about increased cancer risk.
    • “Abivax said cancer rates seen across enrollees in its Phase 2 and Phase 3 trials were no higher than the “background” one seen in people with ulcerative colitis, which is higher than the general population in certain types of malignancies.
    • “The update from the second part of that Phase 3 trial — which enrolled people who didn’t respond to the drug or relapsed during the trial — added safety data that “appropriately addresses the key overhang facing the stock,” wrote Jefferies analyst Faisal Khurshid in a client note. Abivax followed the share price increase with an $800 million sale of its U.S. listed shares.”

From the U.S. healthcare business and artificial intelligence front,

  • Modern Healthcare reports,
    • “Brian Evanko, Cigna Group’s new chief executive officer, said he aims to put patients at the center of the company’s strategy. He’ll have to convince people struggling with rising healthcare costs that he’s serious — and persuade Wall Street that this strategy can be profitable. 
    • “That’s been a difficult balancing act for Cigna. Last year the company announced that it would phase out rebate payments from drug companies in many of its prescription plans, pulling back from a “middleman” practice the Trump administration has criticized.
    • “Cigna said this would lower patient costs and only temporarily shrink profits. But investors punished Cigna with its worst selloff in 17 years. Its shares still haven’t recovered.”
    • “It’s a tension Evanko will have to navigate beginning Wednesday when he becomes the public face of Cigna, a giant in medical insurance, prescription drug benefits and specialized pharmacy services. Insurers are under fire in Washington for high costs. Employer clients are balking at premium hikes. Patients are frustrated with spending-control tactics like prior approvals. And investors are wary that addressing those concerns could erode profits.
    • “Evanko said he’s focused on making Cigna more responsive to the 185 million people who use its healthcare services, the bulk of whom have prescription drug coverage managed by the business.
    • “For me, coming into the role, importantly, we’re going to put the customer at the center of everything we do, so being patient-first,” Evanko, 50, said in a recent interview at Bloomberg’s New York headquarters. “We see that as actually a strategic choice.”
  • Beckers Payer Issues relates,
    • “Hospitals and insurers have been fighting an AI billing war for the better part of two years, with providers deploying the technology to optimize and defend their coding, and payers using it to audit and push back.
    • “AI is placing pressure on cost through RCM tools, and we have seen those patterns in terms of service intensity, and cost per encounter going up,” UnitedHealthcare CEO Tim Noel said at a June media event attended by Becker’s. “It clearly has occurred, and that is a source and driver of trend. I don’t think that that’s going to be persistent. That’s a moment that we’re in that will get to saturation.”
    • “Revenue cycle executives and physicians have described the ongoing dynamic as an “AI arms race,” that has been adding administrative cost and friction on both sides. This month, PwC projected that employers’ medical cost trend will reach its highest level in 17 years in 2027, pointing to provider adoption of AI documentation and coding tools as one of five primary inflators. Nearly 70% of surveyed health plans ranked it among their top three concerns, and roughly 20% named it the single largest driver.
    • “Mr. Noel said UnitedHealthcare is already working to move beyond paid-claims data to understand “more upstream where these hot spots are.” 
    • “The global trends are the global trends, and there are some opportunities to address those in the moment, and we are,” he added. “But we also have to look for new sources of affordability moving forward.”
  • and
    • “Sustainability has become less about cutting costs and more about redesigning how healthcare delivers value. Becker’s asked several health plan leaders how they’re thinking about long-term sustainability, and the responses point to a shared shift away from volume-driven models toward outcomes, accountability, and member-centered design. From shifting social health programs toward measurable, evidence-based interventions to redesigning the consumer experience around choice and transparency, leaders are converging on the idea that sustainability isn’t a single initiative — it’s a durable operating model built for the long haul.
    • “The answers below reflect a range of strategies, from strengthening payer-provider partnerships and embedding AI into clinical decision-making to balancing financial discipline with health equity and community trust. Common threads emerge around reducing low-value care, building data infrastructure that supports proactive rather than reactive management, and designing systems flexible enough to adapt as member needs evolve. [In the article], healthcare leaders share how they’re positioning their organizations for what’s next.
  • Vizient discusses “From scale to orchestration: The new requirements for payer success.”
    • “For executive and board consideration:
      • “Evaluate strategic pathways, including independence, partnership, affiliation, or acquisition.
      • “Assess strengths and gaps across products, member diversification, scale, and market positioning
      • “Identify partners that align across strategy, governance, economics, and long-term objectives.
      • “Execute transactions and integrations with rigor and discipline.”
  • MedCity News considers,
    • “Healthcare’s Most Avoided Question: “How Much Exactly Do You Need, and What Will America Get in Return?”
      • “Before policymakers, employers, insurers, or taxpayers commit ever-larger sums to the system, an uncomfortable question deserves attention: How much additional capacity does healthcare actually need and what measurable outcomes should society expect in return?”
  • Modern Healthcare tells us,
    • “Allegheny Health Network closed its acquisition of Heritage Valley Health despite pushback from the Pennsylvania attorney general. 
    • “The deal adds Heritage’s two hospitals, dozens of clinics and 500 employed and affiliated physicians to the 16-hospital provider division of Highmark Health.
    • “A final order Friday from a federal court paved the way for the transaction’s close, with conditions. Last Wednesday, Pennsylvania Attorney General Dave Sunday (R) sued to block the transaction over potential anticompetitive effects. He claimed the acquisition could allegedly increase hospital and radiation oncology prices in Beaver County and Allegheny County.
    • “The order from U.S. District Court for the Western District of Pennsylvania Judge Maureen Kelly requires Allegheny Health to provide current services at the rebranded AHN Beaver Hospital – Heritage Valley and AHN Sewickley Hospital – Heritage Valley for at least five years and maintain an existing joint venture between Heritage Valley and UPMC Cancer Centers.
    • “In addition, Allegheny cannot terminate automatic renewal clauses in its insurer contracts for at least a year and it must pay Sunday $75,000 in legal fees, among other provisions.”
  • The Wall Street Journal informs us,
    • “Ipsen IPN said it agreed to buy Swiss biotechnology company Memo Therapeutics in a deal that could exceed 700 million euros ($799.6 million) and that seeks to expand the French drugmaker’s rare-disease portfolio.
    • “The move marks Ipsen’s second acquisition this week after its agreement to take over Kartos Therapeutics, a company developing a drug to treat a rare blood cancer, for up to $1.75 billion.
    • “Ipsen said it would pay 200 million euros initially and make deferred payments subject to certain development, regulatory approval and sales-based targets that could take the total price above 700 million euros.
    • “The deal focuses on Memo’s experimental drug potravitug for the treatment of nephropathy associated with BK polyomavirus, a complication in kidney transplant recipients, Ipsen said. The drug—which was granted fast-track designation from the U.S. Food and Drug Administration in 2023—is due to move to a mid- and late-stage clinical trial later this year, the company added.”
  • Fierce Healthcare points out,
    • “Patients are taking charge of their healthcare with artificial intelligence and other solutions, with 58% of U.S. patients researching symptoms before deciding whether to book an appointment, according to a new report from ZS Impact Institute. 
    • “The recent report drew insights from nearly 10,000 healthcare consumers and providers across the U.S., Germany and China. Researchers note the shift is consistent across healthcare systems, which they say points to a “broader breakdown in how patients seek and experience care globally.”
    • “Thirty-seven percent of U.S. respondents report using search engines for health information—94% of which find it helpful—and 18% report using AI. Eighty-nine percent of those using AI to find information report it being helpful.”
  • and
    • “Evernorth has unveiled a new specialty pharmacy program that leans on AI to support a better experience for patients with complex conditions.
    • “Called Pharmacy Forward, the program aims to use technology to drive more coordinated, connected care and to offer personalized supports in real time. Evernorth plans to launch the program first for Accredo Specialty Pharmacy customers, investing $100 million through 2028 in the project.
    • “The goal, according to an announcement from the company, is to allow care teams to spend more time on clinical and patient care, while also accelerating prescription processing and service responsiveness.
    • “Patients navigating complex health conditions need comprehensive, expert support, often during some of the most difficult moments in their lives,” said Matt Perlberg, president of the Evernorth Health Services pharmacy and care delivery businesses, including Accredo, and executive vice president of Customer Innovation for The Cigna Group, in the announcement.”
  • Beckers Health IT notes,
    • “Anthropic is launching an internal drug discovery program with a focus on neglected diseases that traditional pharmaceutical companies would not consider commercially attractive, CNBC reported June 30.
    • “At a June 30 event in San Francisco, Eric Kauderer-Abrams, Anthropic’s life sciences head, said the effort is designed to give the company firsthand experience in drug development as it builds AI tools for biopharma customers. Anthropic leaders framed the drug discovery program as a way to build credibility with the biopharma companies it hopes to win as Claude Science customers.
    • “Jonah Cool, Anthropic’s head of life sciences partnerships, said the focus on neglected diseases will run alongside the company’s broader push to create and sell AI tools to life sciences companies.”
  • Genetic Engineering and Biotechnology News adds,
    • “Anthropic has released Claude Science, an AI workbench for scientists that consolidates fragmented research tools, including over 60 scientific databases and connectors pre-configured for genomics, proteomics, structural biology, and more, into a single reasoning layer. The platform joins an increasingly crowded ecosystem of tech platforms specialized for biology and aims to accelerate scientific discovery by making domain expertise more accessible.
    • “Anthropic’s life science partners are delivering applications. Basecamp Research is targeting global public health, where drug-resistant infections play a role in nearly five million deaths per year. The London-based team has announced that its antibiotic design and vaccine target prediction EDEN models will now be available through Claude Science.
    • “A metagenomic foundation model, EDEN demonstrated a 97% success rate when designing functional peptides with high potency against World Health Organization (WHO) critical-priority and multidrug-resistant pathogens. The work was done in collaboration with César de la Fuente, PhD, presidential associate professor at the University of Pennsylvania.”