Cybersecurity Saturday

David Ermer

I am an attorney who practices law in Washington DC. My practice has involved the Federal Employees Health Benefits Program since 1983.

Cybersecurity Saturday

David Ermer–Cybersecurity, Generative AI–

From the cybersecurity policy and law enforcement front,

  • Cyberscoop reports,
    • “With a little more than a month left before a foundational cyber threat information sharing law expires for a second time, Congress might have to do another short-term extension as negotiations on a longer deal aren’t yet bearing fruit, a key lawmaker said Tuesday.
    • “House Homeland Security Chairman Andrew Garbarino, R-N.Y., said the problem with a long-term extension of the Cybersecurity Information Sharing Act of 2015, which provides legal protections to companies to share cyber threat data with the federal government and other companies, is that there are three different views about how to approach it.
    • “The Trump administration and some in the Senate want a clean, 10-year reauthorization of the law, which Congress extended last month until Jan. 30 as part of the legislation that ended the government shutdown, after the information sharing law lapsed in October. But a reauthorization without any changes could run into House opposition, Garbarino said.” * * *
    • “Senate Homeland Security and Governmental Affairs Committee Chairman Rand Paul, R-Ky., also has a version of the bill that focuses largely on language he said is needed to defend free speech. And Garbarino’s version takes yet another approach to tweaking the law.
    • “Unfortunately, I don’t think we’re close enough with the discussions on the Senate to get it to figure out which bill will pass and what will get done,” Garbarino said. That leaves another extension tied to any funding bill that replaces the legislation currently funding the government, which also runs through Jan. 30.”
  • and
    • “Policymakers and companies are reckoning with increased reports over the past few months showing AI tools being leveraged to conduct cyber attacks on a larger and faster scale.
    • “Most notably, Anthropic reported last month that Chinese hackers had jailbroken and tricked its AI model Claude into assisting with a cyberespionage hacking campaign that ultimately targeted more than 30 entities around the world.
    • “The Claude-enabled Chinese hacks have underscored existing concerns among AI companies and policymakers that the technology’s development and relevance to offensive cybersecurity may be outpacing the cybersecurity, legal and policy responses being developed to defend against them.
    • “At a House Homeland Security hearing this week, Logan Graham, head of Anthropic’s red team, said the Chinese spying campaign demonstrates that worries about AI models being used to supercharge hacking are more than theoretical.”
  • Cybersecurity Dive tells us,
    • “A top Senate Republican is pressing the Trump administration for a plan to address the cybersecurity consequences of the U.S.’s dependence on open-source software.
    • “Leaving our reliance on OSS unmonitored is exposing America to increasingly dangerous risks,” Senate Intelligence Committee Chair Tom Cotton, R-Okla., wrote in a Wednesday letter to National Cyber Director Sean Cairncross.
    • “Cotton cited recent incidents that highlighted the unstable and sometimes untrustworthy foundations of the open-source ecosystem, including the XZ Utils crisis, a Russian developer’s control of a package that the U.S. military uses for sensitive applications and the prevalence of code contributions by Chinese companies’ employees, who are bound by Chinese laws that could force them to disclose software flaws to Beijing before fixing them.”
  • and
    • “The National Institute of Standards and Technology has prepared a companion to its widely used Cybersecurity Framework that focuses on how organizations can safely use AI.
    • “NIST’s Cybersecurity Framework Profile for Artificial Intelligence, which the agency released in draft form on Tuesday [December 16], describes how organizations can manage the cybersecurity challenges of different AI systems, improve their cyber defense capabilities with AI and block AI-powered cyberattacks. The document maps components of the Cybersecurity Framework (CSF) onto specific recommendations in each of those three areas, which NIST dubbed “secure,” “defend” and “thwart,” respectively.
    • “The three focus areas reflect the fact that AI is entering organizations’ awareness in different ways,” Barbara Cuthill, one of the profile’s authors, said in a statement. “But ultimately every organization will have to deal with all three.”
  • Cyberscoop tells us,
    • “Federal prosecutors in Michigan say they have dismantled online infrastructure tied to an alleged money laundering operation that moved tens of millions of dollars in proceeds from ransomware and other cybercrime, along with indicting the service’s creator.
    • “The U.S. Attorney’s Office for the Eastern District of Michigan announced a coordinated action with international partners and the Michigan State Police targeting E-Note, a cryptocurrency exchange and payment processing service used to launder illicit funds. The announcement coincided with the unsealing of an indictment charging a Russian national, Mykhalio Petrovich Chudnovets, with one count of money laundering conspiracy.”
  • and
    • “Former cybersecurity professionals Ryan Clifford Goldberg and Kevin Tyler Martin pleaded guilty Thursday to participating in a series of ransomware attacks in 2023 while they were employed at cybersecurity companies tasked with helping organizations respond to ransomware attacks.
    • “Goldberg, who was a manager of incident response at Sygnia, and Martin, a ransomware negotiator at DigitalMint at the time, collaborated with an unnamed co-conspirator to attack victim computers and networks and use ALPHV, also known as BlackCat, ransomware to extort payments.
    • “The plea deals mark a relatively quick turnaround as prosecutors successfully persuaded the pair to cop to their crimes less than three months after they were indicted in the U.S. District Court for the Southern District of Florida. Goldberg was arrested Sept. 22 and Martin was arrested Oct. 14.”
  • and
    • “Artem Aleksandrovych Stryzhak, a 35-year-old Ukrainian national, pleaded guilty Friday to multiple crimes stemming from his involvement in a string of ransomware attacks targeting U.S. and Europe-based organizations from mid 2018 to late 2021. He faces up to 10 years in jail for conspiracy to commit fraud, including extortion. 
    • “Stryzhak was arrested in Spain in June 2024 and extradited to the United States in April. Authorities are still looking for his alleged co-conspirator Volodymyr Tymoshchuk and announced a $11 million reward for information leading to his arrest or conviction.
    • “The defendant used Nefilim ransomware to target high-revenue companies in the United States, steal data and extort victims,” Joseph Nocella, U.S. attorney for the Eastern District of New York, said in a statement.”

From the cybersecurity breaches and vulnerabilities front,

  • Cybersecurity Dive reports,
    • “Apartment owner and developer Rockrose Development Corp. recently found that unauthorized individuals hacked its systems and claimed to have acquired confidential information, according to a letter posted to its website on Dec. 12. 
    • “The security breach occurred on July 4 and affected 47,392 people, according to a data breach notification submitted to Maine’s attorney general’s office. Rockrose discovered the issues on Nov. 14. 
    • “Rockrose determined that personally identifiable information for some individuals may have been impacted, which could indicate that the hackers accessed some sensitive areas of the network. That information could include name, Social Security number, taxpayer identification number, driver’s license number, passport number, bank account and routing numbers, health insurance information, medical information and online account credentials.”
  • Cyberscoop adds,
    • “Fallout from React2Shell — a stubborn vulnerability that impacts wide swaths of the internet’s scaffolding — continues to spread as public exploits and stealth backdoors proliferate and worrying details emerge about the targets attackers are pursuing. 
    • “Threat researchers and incident responders are reacting to swift-moving developments on React2Shell with mounting concern. Cybercriminals, ransomware gangs and nation-state threat groups are all swarming to exploit the maximum-severity vulnerability.
    • Palo Alto Networks’ Unit 42 puts the latest victim count at more than 60 organizations, which have been impacted by attacks involving exploitation of CVE-2025-55182, which Meta and the React team publicly disclosed Dec. 3.
    • “Microsoft said it found “several hundred machines across a diverse set of organizations” that were compromised via exploitation resulting in remote-code execution. Post-exploitation activity in those attacks includes reverse shell implants, lateral movement, data theft and steps that allowed attackers to maintain access to targeted networks, Microsoft said in a research blog Tuesday [December 16]. 
  • The Cybersecurity and Infrastructure Security Agency (“CISA”) added seven known exploited vulnerabilities to its catalog this week.
    • December 15, 2025
      • CVE-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
      • CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability 
        • Kubelski Security discusses the Gladinet KVEs here.
        • The Center for Internet Security discusses the Apple KVEs here.
    • December 16, 2025
      • CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability 
        • Security Affairs discusses this KVE here.
    • December 17, 2025
      • CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability
      • CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability
      • CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability
        • The Hacker News discusses the Cisco KVE here.
        • Security Week discusses the SonicWall KVE here.
        • Malwarebytes discusses the ASUS KVE here.
    • December 19, 2025
      • CVE-2025-14733 WatchGuard Firebox Out-of-Bounds Write Vulnerability 
        • Bleeping Computer discusses this KVE here.
  • Cyberscoop relates,
    • “Cisco customers are confronting a fresh wave of attacks from a Chinese threat group that has actively exploited a critical zero-day vulnerability affecting the vendor’s software for email and web security since at least late November, the company said in an advisory Wednesday. 
    • “Cisco said it became aware of the attacks Dec. 10. The defect CVE-2025-20393, which has a CVSS rating of 10, is an improper input validation vulnerability affecting Cisco AsyncOS software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager that allows attackers to execute commands with unrestricted privileges and implant persistent backdoors on compromised devices.
    • “There is no patch for the vulnerability and Cisco declined to say when one would be made available. Cisco said “non-standard configurations” have been observed in compromised networks, specifically customer systems that are configured with a publicly exposed spam quarantine feature.
    • “Cisco Talos researchers attributed the attacks to a Chinese advanced persistent threat group it tracks as UAT-9686, which has used tooling and infrastructure consistent with other China state-sponsored threat groups such as APT41 and UNC5174.
  • Cybersecurity Dive informs us,
    • “Multiple threat groups have been ramping up attacks using a technique called device code phishing to trick users into granting access to their Microsoft 365 accounts, according to a report Thursday from Proofpoint. 
    • “Hackers affiliated with China and Russia have used the technique in recent months to launch attacks. A number of criminal groups have used the same method to target M365 users as well. 
    • “This is a social engineering method that abuses a legitimate and trusted workflow for authorized access,” Sarah Sabotka, staff threat researcher at Proofpoint, told Cybersecurity Dive.”
  • and
    • A coordinated, credential-based hacking campaign has been targeting Palo Alto Networks GlobalProtect services, as well as Cisco SSL VPNs, in a surge of mid-December attacks, according to a blog post Wednesday by GreyNoise. 
    • The threat activity does not involve targeting of any vulnerabilities, but uses automated scripted login attempts over two days. 
    • More than 1.7 million sessions were observed targeting Palo Alto Networks GlobalProtect and PAN-OS profiles over a 16-hour period, according to GreyNoise. More than 10,000 unique IPs were detected trying to log into GlobalProtect portals on Dec. 11.  
  • and
    • “A Russia-linked hacker group has been targeting critical infrastructure organizations using vulnerabilities in their edge devices since at least 2021, highlighting an alarming shift toward exploiting well-known flaws in common networking equipment, Amazon’s threat intelligence team said Monday.
    • “The threat actor’s shift [toward edge devices] represents a concerning evolution,” Amazon researchers wrote in a blog post. “While customer misconfiguration targeting has been ongoing since at least 2022, the actor maintained sustained focus on this activity in 2025 while reducing investment in zero-day and N-day exploitation.”
  • Bleeping Computer points out,
    • “The UEFI firmware implementation in some motherboards from ASUS, Gigabyte, MSI, and ASRock is vulnerable to direct memory access (DMA) attacks that can bypass early-boot memory protections.
    • “The security issue has received multiple identifiers (CVE-2025-11901, CVE-2025‑14302, CVE-2025-14303, and CVE-2025-14304) due to differences in vendor implementations.”

From the ransomware front,

  • Cyber Press reports,
    • “SentinelLABS research indicates that large language models (LLMs) such as ChatGPT, Claude, and open-source alternatives are accelerating every stage of the ransomware lifecycle, from reconnaissance to negotiation. 
    • “However, analysts emphasize that these tools are improving speed and scale rather than introducing fundamentally new attack methods.
    • “By repurposing enterprise-grade AI workflows, ransomware actors are using models to automate tasks such as creating phishing content, drafting multilingual ransom notes, and triaging data across leaked datasets. 
    • “This enables threat actors to identify financially sensitive files and tailor extortion tactics across multiple languages with greater precision.” * * *
    • “The report finds that while law enforcement disruptions have weakened mega cartels such as LockBit, Conti, and REvil, smaller, short-lived groups such as Termite, Punisher, and Obscura are emerging rapidly. 
    • “These groups exploit LLM-driven workflows to emulate more experienced operators, reducing entry barriers and complicating attribution.”
  • Manufacturing Business Technology adds,
    • “Sophos recently announced new findings from the Sophos State of Ransomware in Manufacturing and Production 2025 report which reveals that manufacturers are stopping more ransomware attacks before data can be encrypted.
    • “However, adversaries are increasingly stealing data and using extortion-only tactics to maintain pressure. As a result, more than half of manufacturing organizations impacted by encryption paid the ransom despite progress in defensive measures.”
  • Bleeping Computer relates,
    • “The Clop ransomware gang (also known as Cl0p) is targeting Internet-exposed Gladinet CentreStack file servers in a new data theft extortion campaign.
    • “Gladinet CentreStack enables businesses to securely share files hosted on on-premises file servers through web browsers, mobile apps, and mapped drives without requiring a VPN. According to Gladinet, CentreStack “is used by thousands of businesses from over 49 countries.”
    • “Since April, Gladinet has released security updates to address several other security flaws that were exploited in attacks, some of them as zero-days.
    • “The Clop cybercrime gang is now scanning for and breaching CentreStack servers exposed online, with Curated Intel telling BleepingComputer that ransom notes are left on compromised servers.
    • “However, there is currently no information on the vulnerability Clop is exploiting to hack into CentreStack servers. It is unclear whether this is a zero-day flaw or a previously addressed bug that the owners of the hacked systems have yet to patch.”
  • CSO offers advice on how to create a ransomware playbook that works.

From the cybersecurity business and defenses front,

  • The Wall Street Journal reports,
    • “Blackstone is leading a $400 million investment in data-security firm Cyera that values the New York-based company at $9 billion, according to people familiar with the matter. 
    • “Cyera is among a crop of cybersecurity startups leveraging artificial intelligence to protect companies from new security vulnerabilities introduced by AI. The startup, founded in 2021 by former Israeli Defence Forces military intelligence officers Yotam Segev and Tamar Bar-Ilan, raised funding at a $6 billion valuation in June.”
  • and
    • “Kevin Mandia, founder of the cybersecurity firm Mandiant—which was acquired by Alphabet’s GOOGL 0.61%increase; green up pointing triangle Google for $5.4 billion—has formed a new company called Armadin that will take on the imminent threat from AI hacking.
    • “The company aims to use artificial intelligence to supercharge the business of testing networks for vulnerabilities. Armadin raised $24 million in seed funding from Ballistic Ventures, a venture-capital firm co-founded by Mandia, and is in talks with Accel, GV and Kleiner Perkins to raise $100 million or more, people familiar with the matter said. The deal is expected to value the company at more than $600 million. The round isn’t finalized, and the details could still change.
    • “Known as red-teaming, this kind of service will become more important as hackers turn to AI to speed up their attacks, Mandia said in an interview.  
    • “Offense is going to be all-AI in under two years,” he said. “And because that’s going to happen, that means defense has to be autonomous. You can’t have a human in the loop or it’s going to be too slow.”
  • CISA announced,
    • Today [December 19], the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency, and Canadian Centre for Cyber Security released an update to the Malware Analysis Report BRICKSTORM Backdoor with indicators of compromise (IOCs) and detection signatures for additional BRICKSTORM samples. This update provides information on additional samples, including Rust-based samples. These samples demonstrate advanced persistence and defense evasion mechanisms, such as running as background services, and enhanced command and control capabilities through encrypted WebSocket connections.
    • The update includes two new detection signatures in the form of YARA rules, enabling organizations to better identify BRICKSTORM-related activity. Organizations are strongly encouraged to deploy these updated IOCs and signatures, and to follow the detection guidance to scan for and respond to BRICKSTORM infections If BRICKSTORM, similar malware, or potentially related activity is detected, report the incident to CISA’s 24/7 Operations Center at contact@cisa.dhs.gov or (888) 282-0870.
  • Cybersecurity Dive lets us know,
    • “Hybrid infrastructure that includes a mix of public/private cloud environments, on-premises workloads and air-gapped systems are preferred by security leaders as a way to boost resilience and better manage risk, according to a report Thursday by Trellix. 
    • “About 96% of chief information security officers said a hybrid model is the preferred approach to meet regulatory and compliance requirements, while 97% said such a model will help meet obligations related to data sovereignty and residency. 
    • “Ultimately, a CISO must ensure their teams, technology and business partners understand the specific shared responsibility model for each service they consume and implement the necessary controls to manage the daily risks that remain the customer’s responsibility,” Trellix CISO Michael Green told Cybersecurity Dive. “This often involves leveraging tools and governance processes designed to operate across multicloud and hybrid environments to provide consistent security posture and visibility.”
  • An ISACA expert notes,
    • “Cybersecurity budgets are often built on assumptions, including the assumption that backups will always work, that insurance will cover the losses and that existing controls are “good enough.” Yet, when those assumptions fail, the operational fallout can be staggering. The City of Hamilton in Canada learned this lesson when a ransomware attack crippled nearly 80% of its network and left taxpayers facing a CAD $18.3 million recovery bill. Misplaced assumptions regarding backups, authentication, insurance and system resilience can lead organizations to underestimate risk and drive up the cost of a cyberattack.”
  • Dark Reading offers advice on creating an AI adoption playbook and of course its CISO Corner.

Friday report

David Ermer–CDC, CMS, Congress, COVID-19, FDA, Federal employment benefits, Medical / Rx research, Medicare, Mental health care, NIH, Obesity, OPM, Rx coverage, U.S. Healthcare–

From Washington, DC,

  • The Wall Street Journal reports,
    • “Nine pharmaceutical companies including Bristol-Myers Squibb, GSK and Merckagreed to lower the prices that certain federal government programs and patients pay, in a new round of industry pacts with the Trump administration.
    • “The companies said they would reduce U.S. prices on drugs to levels comparable with prices charged in other wealthy countries, which are generally much lower. In return, the companies get administration-backed reprieves from potential new U.S. tariffs for three years.
    • “President Trump announced the deals Friday at the White House, joined by top executives of the nine companies. * * *
    • Under the terms, the “most-favored nation” prices offered by companies would apply to the U.S. Medicaid program for lower-income patients, direct-to-patient services including the planned TrumpRx.gov and to newly launched drugs in the future.
    • “Merck said it would make diabetes drugs Januvia and Janumet available to eligible American patients at a cash price that is 70% off the current list price through a direct-to-patient program. 
    • “Amgen said it would sell its migraine drug Aimovig for $299 a month, nearly 60% off the list price.
    • “Some of the companies in the new round of deals also agreed to donate the main ingredients for certain medicines to a national stockpile, to be available in the event of a national emergency. 
    • “GSK is donating six-months’ supply of a respiratory inhaler, and Bristol-Myers will donate six-months’ worth of the blood thinner Eliquis.
    • “Bristol-Myers said it would provide Eliquis free to Medicaid programs.”
  • The Hill adds,
    • “Medicare enrollees could save roughly half of what they usually pay for certain drugs next year, according to a study from the AARP.
    • “The study, published Thursday, found that the out-of-pocket cost of 10 drugs included in the first round of Medicare drug price negotiation will decrease substantially in five states with high enrollment in the program — California, Florida, New York, Pennsylvania and Texas — once negotiated prices go into effect on Jan. 1, 2026.” 
  • Roll Call sums up Congress’s activities in the final week of this term of Congress and looks forward to January.
    • “The Senate followed the House in leaving for the Christmas break on Thursday, clearing another batch of President Donald Trump’s nominations but kicking to January the fate of the next handful of spending bills.
    • “The Senate confirmed, 53-43, an en bloc package of 97 nominations. Senators also by unanimous consent confirmed the nomination of Kevin E. Lunday to be commandant of the Coast Guard. And they reached an agreement to set up confirmation of additional Trump nominees when they return in January.” * * *
    • “[T]he aspiration of Thune and Senate Republican appropriators to get the ball rolling on a package of fiscal 2026 spending bills was not to be. The rules require unanimous consent to combine more than one regular appropriations measure into a single bill — and that agreement proved elusive despite talks that went on throughout the day Thursday.
    • “That sets the stage for January, when lawmakers will have less than a month to figure out how to fund the government and avoid another partial government shutdown. Thune said he thought another shutdown would be “toxic” for Democrats and Republicans alike.
    • “I don’t think either side wants to see that happen,” Thune said. “So I’m hoping that there will be goodwill and we’ll figure out how to fund the government.”
  • Per a Centers for Medicare and Medicaid Service press release,
    • “The Centers for Medicare & Medicaid Services (CMS), in partnership with the Department of Labor and the Department of the Treasury (collectively, the Departments), today jointly proposed major updates to the historic health care price transparency rules established during President Trump’s first term.” * * *
    • “In line with Executive Order 14221, this proposed rule reflects the Department’s commitment to ensuring that health care pricing data is not only public but maximally impactful and actionable.
    • “Key improvements include:
      • “Requiring plans and issuers to exclude from the In-network Rate Files certain data for services providers would be unlikely to perform.
      • “Reorganizing In-network Rate Files by provider network rather than by plan, cutting redundancy, and aligning with how most hospitals report data pursuant to the Hospital Price Transparency requirements.
      • “Requiring Change-log and Utilization Files so users can easily identify what has changed from one In-network Rate File to the next and have clear information on which in-network providers are actively furnishing which items and services.
      • “Reducing reporting cadence for In-network Rate and Allowed Amount Files from monthly to quarterly, significantly reducing burden while maintaining meaningful transparency.
      • ‘Increasing the amount of out-of-network pricing information reported by reorganizing Allowed Amount files by health insurance market type, reducing the claims threshold to 11 or more claims, and increasing the reporting period from 90 days to 6 months and the lookback period of data from 180 days to 9 months. 
    • “The Departments seek feedback from stakeholders during the 60-day comment period on all elements of the proposed rule, including opportunities for further standardization and burden reduction. The deadline to submit comments is February 21, 2026.
    • “To access the proposed rule, visit: https://www.federalregister.gov/public-inspection/2025-23693/transparency-in-coverage
    • “To read the CMS fact sheet, visit: cms.gov/newsroom/fact-sheets/transparency-coverage-proposed-rule-cms-9882-p” 
  • Beckers Payer Issues informs us,
    • “CMS has proposed two new models aimed at curbing Medicare drug spending by linking payments to international benchmarks. The proposals — GUARD for Part D drugs and GLOBE for Part B — are the latest in the CMS Innovation Center’s efforts to make prescription drugs more affordable for beneficiaries while preserving the long-term sustainability of the Medicare program.” * * *
    • “The models were published via a notice of proposed rulemaking and are now open for public comment [for sixty days] through the Federal Register.” 
  • MedCity News delves into “CMS’ new ACCESS model [mentioned in yesterday’s post and], slated to begin on July 1, aims to shift traditional Medicare fee-for-service toward value-based care by tying payments to patient outcomes and encouraging tech-enabled, preventive care. Experts say it could benefit digitally mature, value-focused providers first, but its overall success will hinge on clear metrics, better data sharing and sustained participation.”
  • Per a Commitee for a Responsible Budget news release,
    • “Health care spending represents about 18% of the nation’s economy and the largest area of federal spending. High and rising health care costs are driven in part by the prices for medical care, which have risen 130% since 2000, compared to 93% for overall inflation.1 This is particularly true in commercial insurance – including large employers, the Affordable Care Act marketplaces, and public employers such as states and the federal government – where rising costs place a growing burden on workers, employers, and the federal government.2 To manage costs, many employers attempt to work with insurance plans to reduce spending, but many lack the market power to command lower prices from providers, such as hospitals.3
    • “Some public employers have looked to reference pricing to address rising employee health care costs in state plans. Under a reference pricing approach, the employer sponsoring the plan establishes a maximum price for certain services. States that have launched reference pricing programs for state employees have been able to reduce costs for state budgets, as well as for enrollees.
    • “In order to reduce health care costs more broadly, policymakers could consider adopting or encouraging reference pricing for federally subsidized insurance. A possible place to start would be the Federal Employees Health Benefits (FEHB) program, which is the largest employer-sponsored commercial insurance program in the country and costs the federal government roughly $50 billion per year.4
    • “In this brief, we discuss an option to adopt a version of reference pricing for hospital reimbursement rates in FEHB, with the reference price based on Medicare rates. Doing so could save billions of dollars for enrollees and the federal government.”
  • Tammy Flanagan, writing in Govexec, discusses “key decisions every federal employee [nearing retirement] must make. From survivor benefits and health coverage to leave payouts and TSP choices, federal employees nearing retirement face deadlines that can permanently shape their finances.”
  • The New York Times lets us know that “President Trump on Thursday ordered cannabis to be downgraded to a lower category of drugs, a change that would allow for more widespread use by patients and permit cannabis producers to take advantage of standard business tax breaks.” The article explains why “moving cannabis to a category of drugs that includes some common medicines will have implications for research, businesses and patients.”

From the Food and Drug Administration front,

  • Fierce Pharma reports,
    • “Seven years after the FDA’s accelerated approval of bleeding reversal agent Andexxa, which was then under the ownership of Portola Pharmaceuticals, the drug’s round trip on the U.S. market is coming to an end. 
    • “Andexxa, now under AstraZeneca’s stewardship, is slated to be pulled from the U.S. market next week, according to a Dec. 18 update from the FDA. 
    • “In the FDA communication, the agency notes that it has “received postmarketing safety data on thromboembolic events, including serious and fatal outcomes, in patients treated with Andexxa.” Based on the available data, the agency “considers the risks of the product to outweigh its benefits,” it said.”
  • BioPharma Dive relates,
    • “The Food and Drug Administration has put a partial clinical hold on one of Merck & Co. and Daiichi Sankyo’s antibody-drug conjugates following an unexpected number of deaths in a late-stage clinical trial.
    • “Daiichi initiated a voluntary pause recruiting and enrolling the trial, called IDeate-Lung02, after “higher than anticipated incidence of grade 5 interstitial lung disease events,” a spokesperson for Merck and Daiichi said in a statement to BioPharma Dive. Following the pause, the FDA verbally placed the trial on a partial clinical hold in October. The spokesperson did not say the number of deaths recorded.
    • “During the hold, Daiichi, along with the FDA and an independent committee will review the safety data and “decide on any necessary further actions.” Trial enrollees will be able to continue treatment, but no new participants will be recruited.
    • “The experimental drug, called ifinatamab deruxtecan, or I-DXd, is one of three ADCs Merck gained the rights to through a major licensing deal with Daiichi in 2023. ADCs, which link an antibody to a toxic payload, are meant to more effectively target and destroy cancer cells while sparing the surrounding healthy tissue.”
  • Per FDA news releases,
    • “The U.S. Food and Drug Administration today awarded national priority vouchers under the Commissioner’s National Priority Voucher (CNPV) pilot program to two investigational products for their potential to increase access through affordability for American patients.
    • “The products are:
      • Enlicitide decanoate — an oral PCSK9 inhibitor for lowering LDL cholesterol
      • Sacituzumab Tirumotecan — a trophoblast cell-surface antigen 2 (TROP2)-directed antibody-drug conjugate
    • “High health care costs and prescription drug prices threaten to undermine all the technological advancements we see in the medical field,” said FDA Commissioner Marty Makary, M.D., M.P.H. “We’re pleased to grant these vouchers to two products that may significantly contribute to our goal of improving the accessibility and affordability of healthcare in America.”
    • “With these awards,18 products have now received a voucher under the CNPV pilot program since it was established in June 2025. On December 9, the agency announced its first review decision under the program, achieving significant time savings compared to a typical review timeline.”
  • and
    • “The U.S. Food and Drug Administration has issued a Request for Information (RFI) seeking input from venture capital firms on developing a new contracting approach to strengthen collaboration between the agency and America’s most innovative companies. 
    • “The FDA recognizes that many breakthrough technologies and innovative solutions relevant to its public health mission — including artificial intelligence, biotechnology, medical devices, and regulatory technology — are being developed by firms within venture capital portfolios. However, longstanding challenges, have limited engagement with innovative companies. Many existing federal contracting mechanisms favor large systems integrators and intermediaries that focus on labor-based work rather than scalable technologies. In addition, small business set-aside programs can be difficult for early-stage companies to access and have faced concerns about misuse.  
    • “We should be harnessing the incredible talent of America’s innovators, instead of relying on middlemen and D.C. insiders,” said FDA Commissioner Marty Makary, M.D., M.P.H. “The FDA is exploring a new approach that enables us to harness innovative capabilities and work directly with American entrepreneurs.”
  • Per Cardiovascular Business,
    • “Abbott has received U.S. Food and Drug Administration (FDA) clearance and CE mark approval for its Amplatzer Piccolo Delivery System. The device was developed for clinicians to use when implanting the company’s Amplatzer Piccolo Occluder in a premature baby with a patent ductus arteriosus (PDA).
    • “PDAs are holes between two blood vessels that typically close when a baby is born. In rare instances, however, the hole stays open after birth, directing too much blood toward the lungs and impacting the neonate’s ability to breathe.
    • “The Amplatzer Piccolo Occluder first secured FDA approval and CE mark approval in 2019. It is the first transcatheter treatment to gain FDA clearance for closing a PDA in a premature infant. The device is smaller than a pea and delivered through a tiny incision in the child’s leg before it is guided to the heart using the newly cleared Amplatzer Piccolo Delivery System.
    • “We designed the Amplatzer Piccolo Delivery System based on feedback from leading physicians across the world to make PDA closure procedures even safer and easier,” Sandra Lesenfants, senior vice president of Abbott’s structural heart business, said in a prepared statement. “With the Amplatzer Piccolo Occluder, which is the world’s smallest heart device, and now with the new delivery system to complement it, we’re continuing to advance how we meet the needs of our tiniest patients with structural heart disease.”

From the public health and medical / Rx research front,

  • The Centers for Disease Control and Prevention announced today,
    • “RSV activity is increasing in the Southeastern, Southern, and Mid-Atlantic areas of the country with emergency department visits and hospitalizations increasing among children 0-4 years old. Seasonal influenza activity continues to increase across the country. COVID-19 activity is low nationally.
    • “COVID-19
      • “COVID-19 activity is low nationally.
    • “Influenza
    • “RSV
      • “RSV activity is increasing in the Southeastern, Southern, and Mid-Atlantic areas of the country with emergency department visits and hospitalizations increasing among children 0-4 years old.
    • “Vaccination
      • “It is not too late to get vaccinated ahead of the holidays. Talk to your doctor or trusted healthcare provider about what vaccines are recommended for you and your family.
  • Beckers Clinical Leadership tells us,
    • “Flu hospitalization cases are evenly split between children and older adults, Northwell said, and its Cohen Children’s Medical Center in New York City is at capacity. 
    • “Flu is rising a lot faster than it did last year,” Dwayne Breining, MD, senior vice president of lab services at Northwell, said during a Dec. 18 news conference. 
    • “The other two [COVID-19 and RSV] are rising but not as fast as they did last year,” Dr. Breining said. “That’s driven by a couple of things. What’s very concerning for us is the cases of flu are rising at like 35% per week; the hospitalizations are rising at 75% per week. So we’re keeping a close eye on that trend. It could mean the flu is more severe.”
    • “Experts have said a mutated version of H3N2, “subclade K,” could be fueling the current uptick in flu activity amid earlier and more intense outbreaks abroad. The strain is a version of the influenza A virus, which is generally known to cause more severe illness, particularly in older adults and young children.
    • “At Northwell, more than one-third of flu tests for the week ending Dec. 14 were positive for influenza A’s H3 subtype. The same week period in 2024 saw a 10% flu positivity rate.”
  • Per a National Institutes of Health news release from its Director Dr. Jay Bhattacharya,
    • “At the National Institutes of Health (NIH), engendering trust and confidence in the research we support is one of our top priorities. Three things guide these efforts: engaging in open, honest dialogue, acting in transparency, and delivering on our commitment to advancing science and improving health.
    • “To help guide this work, the Novel and Exceptional Technology and Research Advisory Committee (NExTRAC) recently undertook a multi-year effort to provide the NIH with a roadmap for incorporating public voices in clinical research (see NExTRAC report).  Deliberations were informed by a team of multi-disciplinary experts and community conversations across the country, specifically asked to think about strategies for incorporating public voices at every stage of the clinical research process.
    • “I am pleased to endorse these recommendations, which focus on:
      • “providing a clear vision and framework for maximally involving patients and communities in clinical research;
      • “ensuring that people and communities have meaningful input into the agenda and direction of research that is relevant and impactful for them; and
      • “increasing transparency for how research participant data are utilized in moving the scientific enterprise forward.
    • “NIH is eager to begin implementing this roadmap, starting in 2026.”
  • The University of Minnesota’s CIDRAP adds,
    • Today [December 17] the Center for Infectious Disease Research and Policy (CIDRAP) at the University of Minnesota and NEJM Evidencelaunched their new Public Health Alerts initiative with reports on potential local transmission of clade 1b mpox virus (MPXV) in California and on influenza viruses circulating during the 2024-25 flu season.
    • Public Health Alerts is designed to deliver information and early warnings about emerging health threats, enabling swift, informed responses across the United States and globally.
    • “The new collaboration between NEJM Evidence and CIDRAP fills a gap in reliable data, offering expert-reviewed reports that translate frontline observations into actionable public health evidence. An NEJM Evidence editorial today explains the initiative further.
    • “Access to emerging public health data saves lives,” said infectious disease doctor Eric J. Rubin, MD, Editor-in-Chief of the New England Journal of Medicine and NEJM Group, publisher of NEJM Evidence, in a news release. “By providing this new, rigorous pathway for public health information, NEJM Group is delivering on its commitment to equip physicians with reliable information to support evidence-based care.”
    • “Rapid, credible communication has always been essential to an effective public health response,” added CIDRAP Director Michael Osterholm, PhD, MPH. “With this new collaboration, we hope to restore and strengthen that early-warning function, providing timely, evidence-based alerts that can help local and state health leaders act quickly to protect the health of people in their communities.” 
  • Health Day informs us,
    • “It’s beside the point to debate whether vaping or nicotine pouches can be more healthy than smoking a cigarette, a major new report argues.
    • “Nicotine is toxic to the heart and blood vessels regardless of how it’s consumed, according to an expert consensus report published today in the European Heart Journal.
    • “Nicotine is not a harmless stimulant; it is a direct cardiovascular toxin,” said lead researcher Dr. Thomas Münzel, a senior professor of cardiology at University Medical Center at Johannes Gutenberg University in Mainz, Germany.
    • “Across cigarettes, vapes, heated tobacco and nicotine pouches, we consistently see increased blood pressure, damage to blood vessels and a higher risk of heart disease,” Münzel said in a news release. “No product that delivers nicotine is safe for the heart.”
  • and
    • “Young adults are inheriting a world filled with turmoil and unrest, and this instability is leaving its mark on their mental and emotional health.
    • “A single half-hour course, however, could help them feel less anxious and depressed, by helping them increase their tolerance of uncertainty, a new study says.
    • “Young adults who took the course titled “Uncertainty-Mindset Training” continued to feel better a month after taking it, researchers reported Dec. 15 in the journal Psychological Medicine.
    • “Young people today are coming of age amid great climate, economic, social and health uncertainty,” senior researcher Susanne Schweizer, an associate professor with the University of New South Wales in Sydney, said in a news release.”
  • The Washington Post points out that “feeling wonder every day improves our health and explains how to do it.
  • Health Day calls attention to
    • “A new rapid test [that] could improve treatment of urinary tract infections (UTIs), by identifying the most effective antibiotic for each individual patient.
    • “The test applies different antibiotics to bacteria found in urine samples, to see which one best suppresses bacterial growth, researchers recently reported in the journal Microbiology Spectrum.
    • “This new method could cut a full day off the time between testing and prescription, researchers said, and arm a patient with the best means of clearing their infection.
    • “The sooner we know which antibiotic is effective, the more targeted our treatment can be,” senior researcher Oliver Hayden, a professor of biomedical electronics at the Technical University of Munich in Germany, said in a news release.”
  • Beckers Hospital Review lets us know about GLP-1 drugs that are poised to enter the U.S. market.
  • Per BioPharma Dive,
    • “An experimental anti-inflammatory drug being developed by Belgium-based Galapagos met its main goal in one Phase 2 clinical trial but missed in another, the company said Thursday.
    • “The drug, which blocks an inflammation-signaling enzyme called TYK2, helped significantly improve disease signs and symptoms in people with a muscle and skin condition called dermatomyositis. But it didn’t help people with lupus, missing statistical significance on a broad measure of clinical response.
    • “Called GLPG3667, the drug is Galapagos’ biggest remaining asset following a decision to wind down the company’s cancer cell-therapy business after an unsuccessful attempt to sell it. Galapagos may seek a partner to help further develop GLPG3667, which has some competition in the form of a Roivant medicine that could be under Food and Drug Administration review for dermatomyositis early next year.”
  • Per the Genetic Engineering and Biotechnology News,
    • “As the number of antibiotic-resistant infections continues to rise, scientists are looking to bacteriophages (“phages”), viruses that infect bacteria, as an approach to tackling antibiotic resistance. A new study by researchers at the Hebrew University of Jerusalem has revealed how bacteriophages use a tiny piece of genetic material to hijack bacterial cells and make more copies of themselves.
    • “Focusing on infection of Escherichia coli by phage lambda, a bacteriophage that scientists have been studying for decades, research lead Sahar Melamed, PhD, and colleagues identified a virus-encoded small RNA molecule (sRNA) called phage replication enhancer sRNA (PreS) that acts like a hidden genetic “switch.” The team’s research indicated that this switch rewires bacterial genes to help the virus copy its DNA more efficiently and boost viral replication.
    • “The team said that understanding how phages control bacterial cells is important both for basic science and to help inform future medical applications. By uncovering how phages use tools such as PreS to take control of bacterial cells, the newly reported study provides important basic knowledge that could help scientists design new phage-based therapies targeting drug-resistant bacteria.”

From the U.S. healthcare business front,

  • Kaufman Hall discusses “key health system enterprise strategy trends in 2025… and our predictions for 2026.”
  • Radiology Business reports,
    • “Commercial insurer Anthem is defending a controversial new plan to penalize hospitals who use out-of-network radiologists and other physicians. 
    • “Word of the new administrative policy first surfaced in October and is slated to take effect Jan. 1 across 11 states. Anthem plans to punish hospitals by charging a 10% penalty of the allowed amount for claims that involve docs outside of its networks. 
    • Radiologists and other physicians have roundly criticized the change, labeling the policy as “deeply flawed and operationally unworkable.” The American Hospital Association also joined the chorus on Wednesday with its own sternly worded letter, calling for Anthem parent Elevance Health to rescind the policy. 
    • “However, the Indianapolis-headquartered conglomerate is standing its ground and refusing to honor such requests. Radiologists have charged that the No Surprises Act and its independent dispute resolution process already addresses concerns raised by Elevance. 
    • “We agree that the federal NSA has fulfilled its intent of protecting patients from unexpected medical bills at the point of care,” Catherine Gaffigan, MD, president of health solutions for Elevance Health, detailed in a Dec. 9 response letter to the American Medical Association and others who wrote to the company in November. “At the same time, our experience shows it has also created incentives for many care providers to remain out-of-network due to extremely high, unsustainable IDR awards—on average around nine times in-network commercial reimbursement rates—resulting from the NSA’s IDR arbitration process.” 
  • Amen to that.
  • Fierce Pharma relates,
    • “Pharma marketers enter 2026 asking where DTC fits in the DTP era. 
    • “That question, which few foresaw 12 months ago, reflects the fast rise of direct-to-patient (DTP) programs. In the last few months alone, Amgen, Bristol Myers Squibb, AstraZeneca, Genentech, Novartis and Boehringer Ingelheim have all launched DTP services with discounts for self-pay patients on certain popular medications, joining earlier adopters Eli Lilly, Pfizer and Novo Nordisk.
    • “The programs are changing how patients access medicines—and how patients hear about medicines could therefore evolve to reflect the emerging sales channel.” 
  • and
    • “Sixteen months after luring former Roche dealmaker James Sabry, M.D., Ph.D., out of retirement and signaling a shift in its business development approach, BioMarin has announced the largest transaction in the company’s 28-year history.
    • “In a merger of rare disease specialists, BioMarin has agreed to acquire Amicus Therapeutics for $4.8 billion. The California biopharma will pay $14.50 per share, which is a 33% premium on the $10.89 Thursday closing price of the New Jersey-based biopharma and a 46% premium on its 30-day average.
    • “With the deal, BioMarin gains two rapidly growing products—Fabry disease drug Galafold and Pompe disease combination treatment Pombiliti-Opfolda. BioMarin also acquires the U.S. rights to DMX-200, a potential first-in-class small molecule in phase 3 development for the rare kidney disease focal segmental glomerulosclerosis (FSGS).”
  • and
    • “Regeneron has had its hands full this year contending with regulatory setbacks, Amgen’s marketed Eylea biosimilar and Roche’s hard-charging ophthalmology rival Vabysmo. Next year, the biosimilar competition to the New York drugmaker’s blockbuster eye drug Eylea is only likely to ratchet up.
    • “Regeneron has inked another settlement related to Eylea biosimilars, this one with Alvotech and Teva, enabling the partners to launch their product “in the fourth quarter of 2026, or earlier under certain circumstances,” according to a Dec. 19 press release from Alvotech.”

Thursday report

David Ermer–ACA, CMS, Congress, FDA, Medical / Rx research, Medicare, Obesity, OPM, Rx coverage, U.S. Healthcare–

From Washington, DC,

  • The Society for Human Resource Management tells us,
    • “In an address to the nation on Dec. 17, President Donald Trump spoke about the economy, efforts to lower prescription drug prices, and his plans for the year ahead. He noted the pending launch of a new website, TrumpRx.gov, in January 2026, highlighted economic progress, and announced a bonus payment of $1,776 to every military service member as a “Warrior Dividend.” He also touted his economic record and predicted the country is “poised for an economic boom the likes of which we’ve never seen.”
  • STAT News adds,
    • When HCA Healthcare, one of the largest hospital systems in the U.S., recently told employees it would stop covering blockbuster obesity drugs Zepbound and Wegovy next year, it pointed them to an alternative way to get the treatments: Buy them themselves.
    • In a notice viewed by STAT, HCA said use of the GLP-1 weight loss drugs surged 90% this year, “significantly” raising costs. It instead suggested employees enroll in discount programs introduced by the drugs’ manufacturers, Eli Lilly and Novo Nordisk, which allow patients to buy the medicines without using insurance at cash prices that are lower than the list prices.
  • The Wall Street Journal reports,
    • “Millions of Americans are facing higher healthcare premiums and lingering uncertainty about whether help might still arrive, with Congress set to break for the rest of the year without renewing enhanced Affordable Care Act subsidies. 
    • “Supporters of the subsidies insist the fight isn’t over. But prospects of a bipartisan deal remain slim, even as some lawmakers and people close to the Trump administration signaled that voter pressure could lead to a retroactive fix when Congress reconvenes in the new year.
    • “I’m not ruling anything out,” Senate Majority Leader John Thune (R., S.D.) told reporters Thursday.”  
  • Modern Healthcare adds,
    • “Health insurance exchange shoppers facing huge premium hikes are scrambling for deals during this sign-up season.
    • “Insurance brokers report high interest in bottom-tier, lower-cost Bronze plans, policies only available outside the exchanges and alternatives such as short-term plans. Some of those consumers are downgrading from Silver or higher amid skyrocketing prices tied to the expiration of enhanced subsidies at the end of the year.
    • “Yet enrollment in Affordable Care Act of 2010 plans was outpacing last year as of Dec. 5, when sign-ups reached 5.8 million, a 7% increase from the same period in 2024, the Centers for Medicare and Medicaid Services reported. Notably, 950,000 enrollees were new to the exchanges. Open enrollment began Nov. 1 and runs until Jan. 15 in most states, although Monday was the last day to choose a plan that would be in place on Jan. 1.
    • ​“All of the attention that has been paid to the market has actually helped enrollment,” said Wesley Sanders, founder and principal consultant at the health insurance consulting firm Evensun Health.” 
  • Govexec informs us,
    • “President Trump on Thursday issued an executive order implementing his plan to provide civilian federal workers with a 1% across-the-board pay raise next month.
    • “As first proposed in August, the increase is entirely being applied to buttress federal workers’ basic pay, with no changes to locality pay rates coming next year. Though the White House skipped outlining its pay raise plans as part of its annual budget proposal, officials initially planned on issuing a pay freeze for 2026. * * *
    • “The administration published pay tables outlining the 2025 pay raise across the General Schedule, along with tables for VA health workers, senior executives, and military service members on the White House website.”
    • [The executive order further states “Additionally, the Director of the Office of Personnel Management (Director) is directed to assess whether to provide up to a total increase of 3.8 percent (inclusive of the increase provided under Section 1) to the rates of pay of certain Federal civilian law enforcement personnel, as determined by the Director following coordination with agencies and consistent with 5 U.S.C. 5305.”}
  • and
    • “President Donald Trump in an executive order on Thursday gave the federal workforce a holiday on Dec. 24 and 26. Because Christmas falls on a Thursday this year, this provides government workers with a five-day weekend. 
    • “According to the directive, agency heads can require certain offices to remain open on either day due to national security, defense or other public need.” 
  • The American Hospital Association News relates,
    • “The Centers for Medicare & Medicaid Services announced Dec. 18 that it will launch a voluntary payment model designed to broadly reach more health care providers who have not joined accountable care organizations, including those with specialized patient populations and others such as small, independent or rural-based practices. The Long-term Enhanced ACO Design Model will begin Jan. 1, 2027, and continue for 10 years. CMS said ACOs can apply for participation in March following the release of a request for applications.”
  • and
    • “The Department of Health and Human Services Dec. 18 announced three regulatory actions related to the practice of “sex-rejecting procedures” on children.
    • “The Centers for Medicare & Medicaid Services issued a proposed rule that would prohibit hospitals participating in the Medicare and Medicaid programs from performing SRPs on individuals under 18 years of age. The proposed condition of participation defines SRPs as “any pharmaceutical or surgical intervention that attempts to align an individual’s physical appearance or body with an asserted identity that differs from the individual’s sex …” and would include procedures that would intentionally disrupt, suppress or alter the development of an individual’s biological functions, physical appearance or body. The proposed rule provides exceptions for the treatment of an individual with a verifiable disorder of sexual development, for uses other than attempting to align an individual’s physical appearance or body with an identity other than the individual’s sex, or to treat complications arising from, or exacerbated by, previous performance of an SRP. The proposed rule did not specify how the proposed prohibitions would be enforced.
    • “Separately, CMS published a proposed rule that would prohibit states from receiving federal matching funds for SRPs provided to Medicaid and separate Children’s Health Insurance Program beneficiaries under the age of 19. CMS notes that these proposed changes would not prevent states from providing coverage for SRPs with state-only funds. The exceptions outlined in the COP proposed rule are also applied to the Medicaid/CHIP rule.
    • “Comments on the proposed rules are due Feb. 16.
    • “HHS’ Office for Civil Rights also proposed to revise its regulations implementing Section 504 of the Rehabilitation Act of 1973 to clarify that the definitions of “disability” and “individual with a disability” exclude “gender dysphoria” not resulting from physical impairments. Comments on HHS OCR’s rule are due Jan. 20.”
  • Per Healthcare Dive,
    • “The Federation of American Hospitals has tapped Charlene MacDonald as its next CEO, the for-profit hospital association said Tuesday.
    • “MacDonald is succeeding Chip Kahn, who announced his retirement earlier this year. Kahn is stepping down after almost 25 years at the helm of the FAH.
    • “MacDonald previously led the FAH’s lobbying, public affairs and communications efforts, and oversaw its finance and operations teams. She’ll start as CEO on Jan. 1.”

From the Food and Drug Administration front,

  • BioPharma Dive lets us know,
    • “Eli Lilly’s experimental obesity pill orforglipron helped people maintain their weight following a 72-week course of the GLP-1 shots Zepbound or Wegovy in a Phase 3 clinical trial, opening up a potential new use for drugs of its kind.
    • “People taking orforglipron after Wegovy gained less than one kilogram over the span of a year, while those who got Zepbound regained five kilograms. Both ended up at the same average at the end of the study period, however, and placebo recipients regained more than nine kilograms before being offered “rescue” orforglipron.
    • ‘Lilly also said it has officially asked the Food and Drug Administration to approve orforglipron. The pill was awarded one of the FDA’s new “national priority” vouchers, making a decision likely within weeks rather than the standard six to 10 months.”
  • Fierce Pharma reports,
    • “A year after an FDA rejection, Johnson & Johnson has won approval for a more convenient version of its lung cancer drug Rybrevant to better challenge AstraZeneca’s Tagrisso.
    • “Rybrevant Faspro, a subcutaneous formulation of Rybrevant, is now cleared in the same indications as the original intravenous infusion, including its use alongside J&J’s Lazcluze for the first-line treatment of EGFR-mutated metastatic non-small cell lung cancer (NSCLC).
    • “Compared with the original Rybrevant, the under-the-skin version reduces the antibody drug’s administration time from several hours to about five minutes, which J&J suggests is more convenient for patients and less burdensome for healthcare resources.
    • “This therapy reduces the physical and emotional burden of lengthy infusions, giving patients and their families the opportunity to reclaim precious moments and focus on living, rather than treatment,” Joelle Fathi, chief healthcare delivery officer at GO2 for Lung Cancer, a patient support group, said in a Dec. 17 statement.”
  • MedTech Dive points out,
    • “Pulse Biosciences said Thursday it got the Food and Drug Administration’s go-ahead to begin an investigational device exemption study of its cardiac catheter ablation system to treat drug-resistant paroxysmal, or intermittent, atrial fibrillation.
    • “The company has developed technology that delivers nanosecond electrical pulses to treat the heart rhythm condition. Nanosecond pulses are briefer in duration than the microsecond pulses used in other pulsed field ablation systems, which could offer advantages. The Pulse Biosciences catheter is designed to deliver a complete lesion in a single energy application.
    • “Pulse Biosciences will evaluate the safety and effectiveness of its nPulse ablation catheter in the single-arm, multicenter NANOPULSE-AF study.:
  • and
    • “CMR Surgical said Tuesday it received 510(k) clearance from the Food and Drug Administration for its next-generation robotic system to perform gallbladder removal procedures.
    • “The Cambridge, England-based company said more than 40,000 surgical procedures have been completed with its robotic platforms outside of the U.S., across multiple specialties and care settings.
    • “CMR said it is on track to begin launching the new system, called Versius Plus, in the U.S. in 2026.”

From the judicial front,

  • ABC News reports,
    • “The evidence suppression hearing in the case against accused CEO killer Luigi Mangione concluded Thursday after the defense signaled it would call no witnesses.
    • “The defense rests,” defense attorney Karen Agnifilo said after prosecutors indicated they, too, rested.
    • “The nine-day hearing will determine what evidence will be used against Mangione when he goes on trial on charges of gunning down UnitedHealthcare CEO Brian Thompson on a Manhattan sidewalk last year.
    • “New York Judge Gregory Carro gave the defense until Jan. 29 to make its final argument about the evidence in writing.  Prosecutors have until March 5.  The defense then has two weeks after that to submit a reply.
    • “Carro said he expected to issue his decision about what, if any, evidence to exclude on May 18, at which point he would also set a date for trial.”

From the public health and medical / Rx research front,

  • The Wall Street Journal reports,
    • “The Los Angeles wildfires of nearly a year ago took an unexpectedly heavy toll on residents’ health, a new study found. 
    • “An unusually large number of people suffered from heart attacks, lung conditions and a perplexing rise in unexplained illnesses, according to an analysis by researchers of emergency-department data at Cedars-Sinai, the largest hospital in Los Angeles County. 
    • “Their findings offer clues into the potential cost to human health of massive wildfires that spread quickly from wild lands into urban areas, said Dr. Susan Cheng, vice chair for research affairs at Cedars-Sinai’s Smidt Heart Institute and senior author of the study.
    • “Such wildfires are increasing in frequency and scope, and release heavy metals and other toxins into the air as they engulf homes and cars. 
    • “You have a much greater magnitude and a much greater complexity of toxins being produced by the disaster affecting a very large, large population of people,” she said.” 
  • NBC News relates,
    • “As of Dec. 6, the Centers for Disease Control and Prevention had logged 26,632 cases of whooping cough in 2025. The last time the U.S. saw so many cases was more than a decade ago, in 2014, according to CDC data.
    • “But an NBC News/Stanford University investigation has found that DTaP vaccination rates are plummeting across the country, as part of a larger, troubling trend of growing vaccine hesitancy that is fueling a resurgence of preventable diseases, including measles.”
  • Managed Healthcare Executive adds,
    • “While most (82%) primary care physicians (PCPs) in the United States understand the risk factors for shingles, far fewer (29%) are fully aware of current shingles vaccine recommendations, according to a recent study published in Human Vaccines and Immunotherapeutics. The study was sponsored by GSK, the manufacturer of the recombinant zoster vaccine (RZV).”
  • BioPharma Dive notes,
    • “An experimental drug Takeda acquired in a multibillion-dollar deal has succeeded in a pair of late-stage trials, positioning the company to seek clearance of a therapy it expects to become a future blockbuster.
    • “The therapy, known as zasocitinib, met its co-primary and top secondary objectives in two Phase 3 studies testing it against a placebo or Amgen’s Otezla in patients with plaque psoriasis. Without disclosing specifics, Takeda said Thursday that, after four months, zasocitinib demonstrated “superiority” on both top study goals, which involved meaningfully reducing disease severity on two different measures. Respiratory tract infections, colds and acne were the most common side effects, according to the company.
    • “Takeda will provide detailed results at an upcoming medical meeting and intends to file for approvals in the U.S. and elsewhere during its 2026 fiscal year. Zasocitinib is also being evaluated in multiple other indications, as well as in a head-to-head study testing it against Bristol Myers Squibb’s similar, rival drug Sotyktu.”
  • and
    • “A streak of positive news that pushed Insmed into the ranks of the most valuable biotechnology companies ended this week with the announcement of a failed clinical trial.
    • “The company’s share price dropped almost 17% to about $165 early Thursday, following the announcement late Wednesday. The stock, which was worth around $25 a year and a half ago, had vaulted above $200 in trading this week.
    • “The Phase 2b study focused on a drug called brensocatib, which Insmed already sells under the brand name Brinsupri to treat a lung disease known as non-cystic fibrosis bronchiectasis. The company had hoped to expand use of the medicine to include a chronic nasal condition, but researchers found no benefit for either of the two doses they tested.”

From the U.S. healthcare business front,

  • Healthcare Dive reports,
    • “All community pharmacies in Optum Rx’s network have transitioned over to a cost-based reimbursement model as the massive pharmacy benefit manager tries to reduce variation in how pharmacies are paid.
    • “Optum Rx first launched the model across roughly 1,400 community pharmacies in March. Now, the PBM, which is owned by healthcare conglomerate UnitedHealth, has notched agreements with three additional pharmacy services administration organizations representing more than 17,000 community pharmacies to transition them to cost-based contracts, Optum Rx said Thursday.
    • “Optum Rx aims to move all of its pharmacy partners to the new model, which should result in pharmacies being paid more for brand-name drugs and less for generics, by January 2028. The PBM is still working on those owned by retail chains and grocers, a network contracting executive said.”
  • Beckers Payer Issues tells us,
    • “UnitedHealthcare is delaying a coverage policy that would have sharply restricted remote physiologic monitoring services for most chronic conditions.
    • “The policy, which had been scheduled to take effect Jan. 1, will now be implemented later next year, the insurer confirmed to Becker’s.
    • “After listening to feedback from care providers, medical societies and other stakeholders, we are postponing the Remote Physiologic Monitoring (RPM) policy scheduled to take effect on Jan. 1, 2026. We still intend to implement this policy in 2026 and will share an updated timeline once it is finalized,” a UnitedHealthcare spokesperson said.”
  • BioPharma Dive notes,
    • “Moderna said Thursday its experimental bird flu vaccine, which was cut from federal funding earlier this year, will receive up to $54.3 million from a global coalition to advance the candidate.
    • “The Coalition for Epidemic Preparedness Innovations, or CEPI, a public-private global partnership working to develop vaccines against pandemics, agreed to fund Moderna’s candidate mRNA-1018 against H5 avian influenza into Phase 3 testing. As part of the agreement, if the shot is approved and in the event of an influenza pandemic, Moderna will allocate 20% of its production capacity for low- and middle-income countries, “at affordable pricing.”
    • “Under the Biden administration, the experimental vaccine was awarded over $700 million in government contracts from the Biomedical Advanced Research and Development Authority, or BARDA. Those contracts were later canceled by the Department of Health and Human Services under Secretary Robert F. Kennedy Jr., a major critic of messenger RNA technology.”
  • MedTech Dive relates,
    • “Editor’s note: This is the fourth article in a series of stories profiling medtech companies that are changing the field of robotic surgery. You can read the first three stories here, here and here.
    • “XCath is developing a robot-assisted approach to brain aneurysm treatment that could bring greater precision to procedures and enable more physicians to perform them.
    • “A cerebral aneurysm is a bulge in a weakened area of an artery in the brain. To prevent a life-threatening rupture of the vessel wall, endovascular interventions that access the aneurysm from inside the artery are increasingly preferred over traditional open surgery.
    • “While less invasive than open surgical repair, the intricate procedures are not free from complications and require significant technical skills to perform. A global shortage of neurointerventionists with expertise to perform the procedures has raised concerns about limited patient accessto critical stroke care.
    • “XCath, a Houston-based startup, is working on a robotic system that it expects to standardize endovascular brain aneurysm treatment. The goal is to facilitate consistent performance among a wider field of physicians, minimize complications and improve clinical outcomes.”

Midweek update

David Ermer–ACA, CDC, Congress, FDA, Federal employment benefits, Medical / Rx research, Mental health care, OPM, U.S. Healthcare–

From Washington, DC,

  • The Wall Street Journal reports,
    • “The Senate approved a sweeping defense-policy package despite alarm over a provision that rolls back safety measures put in place following the fatal midair collision in January between a military helicopter and passenger plane at Ronald Reagan Washington National Airport. 
    • “The Senate passed the $901 billion National Defense Authorization Act on a vote of 77-20, codifying more than a dozen of President Trump’s executive orders, while placing new limits on his ability to act unilaterally overseas. The House passed the annual measure last week 312 to 112, and it now goes to Trump’s desk for his signature.
    • “While the bill sets specific spending levels for the Pentagon, it doesn’t appropriate any money, which is done through separate legislation. Lawmakers added $8 billion to the Pentagon’s budget request. The legislation would increase America’s total national-security budget by less than 1% from last year’s $895 billion authorization bill. It also raises troop pay 3.8%.”
  • Fierce Healthcare adds,
    • “Nearly two years after its introduction as a bill during the last U.S. Congress, the Biosecure Act has survived an election and a presidential transition and appears poised to become law. But this version, tucked into the nation’s annual defense bill, features some changes from the first iteration.
    • “Both the House of Representatives and the Senate have passed the $901 billion defense bill, sending it to the president’s desk for a signature. The White House has said President Donald Trump plans to sign the massive defense package, Reuters reports.
    • “Within the mammoth bill, the Biosecure Act has the potential to raise new hurdles for certain life sciences companies from China, as well as their partners, although the exact effects of the legislation remain tough to fully assess at this stage.”
  • STAT News tells us,
    • “House Republicans on Wednesday passed a health care bill aimed at lowering health care costs and providing more options for employer-provided health insurance.” * * *
    • “The Lower Health Care Premiums for All Americans Act would expand access to association health plans by allowing small employers and self-employed individuals to band together across industries to buy insurance that is less regulated. Large employers already can offer this kind of coverage. About 700,000 more people per year on average would choose association health plans under the bill, about 200,000 of whom currently don’t have insurance, according to the nonpartisan Congressional Budget Office.” * * *
    • “Another measure would prevent states from regulating stop-loss insurance that self-insured plans use to protect against large claims to control costs. 
    • “It also would fund cost-sharing reductions for low-income enrollees in the Affordable Care Act marketplace. Funding cost-sharing reductions would lower gross premiums for benchmark silver plans by 11% on average, according to the CBO. Because ACA subsidies are based on the cost of a silver plan, that lowers the amount of tax credits available to buy any plan.” 
  • The Wall Street Journal further reports,
    • “Four vulnerable House Republicans rebelled against Speaker Mike Johnson (R., La.) and backed a Democratic effort to force a vote on extending Affordable Care Act subsidies, exposing GOP fractures over surging healthcare costs headed into next year’s midterm elections.” * * *
    • “With the GOP signatures on the discharge petition, Jeffries now has the 218 needed to force a vote, which wouldn’t likely occur until after the holiday break. But the centrists’ move could keep up pressure on both parties to reach a deal, and talks were continuing in the Senate on a possible compromise for early in the new year.
    • “The defections delivered a blow to Johnson’s leadership in the House, where he has been forced to manage a historically narrow majority—currently 220-213—that gives any small bloc of Republicans power to derail or hijack his agenda.
    • “We’re keeping a productive conversation going,” Johnson told reporters after the defectors signed onto the Democratic plan. “I have not lost control of the House.”
  • STAT News tells us,
    • “Several drugmakers are expected to sign pricing agreements with the Trump administration on Friday, according to four people familiar with the plans, who were not authorized to speak publicly.
    • “The agreements would be the latest in a series of deals in which pharmaceutical companies agree to lower drug prices and invest more domestically in exchange for avoiding tariffs and other benefits, such as fast-tracked drug reviews.”
  • An OPM Inspector General data brief lets us know that following an OPM mandate in January 2023, spending on GLP-1 drugs in the FEHB Program for the treatment of obesity surged dramatically. While OPM has the authority to make unilateral amendments to their FEHB and PSHB contracts with carriers, the carriers have a right to an equitable price adjustment. See Section 5.38 of the standard OPM contracts. The only way to achieve is an equitable price adjustment (or any price adjustment for that matter) is through the annual benefit and rate proposal process. OPM should have proposed the change for 2024, and then allowd the carriers to include the cost of these drugs in their 2024 premium. OPM didn’t do this. and this mistake caused FEHB premiums to jump more than they should have in 2025. This should be the lesson taken from this data brief.
  • Govexec informs us,
    • “The U.S. Postal Service on Wednesday announced plans to expand access to its last-mile delivery network, which the new postmaster general hopes will provide a boon to the financially struggling agency. 
    • “In the logistics business, the most expensive part of delivery is generally the ‘last mile’ portion of a route. As part of our universal service obligation, we deliver to more than 170 million addresses at least six days a week, so we are the natural leader in last-mile delivery,” Steiner said in a statement. “We want to make this valuable service available to a wide range of customers that see the worth of last mile access — other logistics companies and retailers large and small.” 
    • “USPS in late January or early February 2026 will begin auctioning off access to more than 18,000 delivery destinations, according to a press release. 
    • “Steiner said in an interview with Reuters about the program that it could raise billions in revenue for USPS, which is needed as the PG also warned that the agency could run out of money in early 2027.”
  • Federal News Network interviews NARFE’s Staff Vice President for Policy and Programs John Hatton.
    • Federal employees are seeing signs of stability. Retirement processing is improving, workforce protections are holding, and pay raise prospects are clearer. But with continuing resolutions and hiring freezes still in the mix, the path forward requires careful planning. What can be expected in the coming year?
  • Mercer informs us,
    • “Starting next July, employers can voluntarily contribute to the Trump accounts of employees’ dependent children. Created by the One Big Beautiful Bill Act (Pub. L. No. 119-21), these accounts are a new kind of tax-preferred savings vehicle for individuals under 18. Employer contributions up to $2,500 per year are excludable from an employee’s gross income if made pursuant to a program that meets certain conditions. This tax exclusion also applies to employer contributions to accounts of employees who are under 18. Originally published on Aug. 5, 2025, this article has been updated to reflect IRS guidance in Notice 2025-68. IRS intends to propose regulations consistent with the guidance in the notice. IRS is accepting comments on the notice through Feb. 20, 2026.”

From the Food and Drug Administration front,

  • Fierce Pharma reports,
    • “With a fresh endorsement from the FDA, the last of five major drug approvals has fallen into place for GSK in 2025.
    • “Tuesday, the U.S. regulator greenlit GSK’s depemokimab, an ultra-long-acting biologic, as a new add-on maintenance therapy for severe asthma with an eosinophilic phenotype in patients ages 12 and older. The drug will hit the market under the Exdensur brand name, GSK said in a Dec. 16 press release.
    • “GSK has drafted lofty sales ambitions for Exdensur, an IL-5 antagonist that is injected just twice a year. The British pharma has previously estimated the inflammatory disease med could reel in sales of 3 billion pounds sterling ($4 billion) at peak.”
  • BioPharma Dive informs us,
    • “DBV Technologies shares soared Wednesday after the company said its Viaskin peanut allergy patch succeeded in a Phase 3 trial.
    • “The results represent a comeback for the patch, which was rejected by the Food and Drug Administration in August 2020. At the time, regulators said the patch needed modifications to fully adhere to the skin and called for more data to support its efficacy.
    • “With the results of the trial, dubbed Vitesse, in hand, DBV now plans to submit an application to the FDA in the first half of next year to clear the patch for children between the ages of 4 and 7. The FDA has previously awarded the treatment a breakthrough therapy designation, and it may qualify for a priority review, DBV said Tuesday.”

From the public health and medical / Rx research front,

  • The University of Minnesota’s CIDRAP reports,
    • “The Centers for Disease Control and Prevention (CDC) said the United States has tracked 1,958 measles cases so far this year, nearing the 2,000-case milestone just one month before the country will likely lose its elimination status. 
    • “The total represents 46 new US cases.
    • “There have been 49 US outbreaks reported in 44 US jurisdictions, the CDC said, as well as 24 measles cases reported among international visitors to the United States. Eighty-eight percent of all measles cases reported this year have been outbreak-associated. 
    • “Among US cases, 26% are in children under the age of 5 years, 41% of patients are between 5 and 19 years, 32% are 20 years or older, and 1% have unknown ages. Ninety-three percent of case-patients are unvaccinated or have unknown vaccination status, while 3% have one dose of measles-containing vaccine, and 4% are fully vaccinated. 
    • “So far, 222 people (11%) have been hospitalized for measles infections in the United States this year, and three have died.”
  • and
    • “Two studies on respiratory syncytial virus (RSV) protection conclude that vaccine effectiveness against infection and related health care use drops over 18 months in US veterans and that the effectiveness of the long-acting monoclonal antibody preventive nirsevimab is strong in hospitalized European children younger than two years but wanes over seven months.
    • “Older adults and infants are especially vulnerable to severe RSV, with possible complications of bronchiolitis, pneumonia, and sepsis.” * * *
    • “In an editorial in the same journal, Editorial Fellow Anna Hung, PhD, of Duke University, and Associate Editor Lona Mody, MD, of the University of Michigan, noted that, despite the Centers for Disease Control and Prevention’s recommendation for a single dose for anyone aged 75 and older and those aged 60 to 74 years at increased risk for severe disease, less than half of either group receives the vaccine.
    • “This low uptake can be explained by various reasons including relative recency of development of the vaccine, lack of awareness of the seriousness and frequency of RSV infection, a hazy shared clinical decision-making model, access barriers, a general vaccine fatigue, and lack of clear guidance to clinicians,” they wrote. 
    • “They added that the greater decline in VE among immunocompromised veterans suggests the need for RSV boosters. “Experts will need to evaluate this evidence carefully to update guidance,” they wrote.”
  • The American Hospital Association News lets us know, “Depression and anxiety can increase the risk of a major adverse cardiac event, according to an American Heart Association study published Dec. 17.”
  • Health Day relates,
    • “Adherence to cervical cancer screening guidelines is low, with more than 60 percent undergoing overscreening, according to a research letter published online Dec. 10 in JAMA Network Open.
    • “Michelle B. Shin, Ph.D., M.P.H., R.N., from the University of Washington in Seattle, and colleagues examined cervical cancer screening guideline adherence among a nationally representative commercially insured cohort to assess factors and modalities associated with nonadherence. Data were analyzed from the 2013 to 2021 Optum Clinformatics anonymized longitudinal claims database covering about 13 million individuals annually.
    • “The researchers found that among 670,003 eligible individuals, 47.1 and 52.9 percent received cytology alone and cotesting, respectively. Overall, only 7.3 percent were guideline-adherent, while 61.6 and 31.1 percent were overscreened and underscreened, respectively.”
    • * * * “Consistent with prior work, we observed low adherence (7.3 percent) to cervical cancer screening guidelines among the commercially insured U.S. population despite stable coverage, likely reflecting guideline confusion among patients, clinicians, and health systems,” the authors write.”
       
  • Per the University of Minnesota’s CIDRAP,
    • “Treatment with the antiviral combination nirmatrelvir–ritonavir (Paxlovid) was associated with fewer lost workdays and lower disability-related costs among US employees at high risk for severe COVID-19, according to a retrospective observational study in the Journal of Medical Economics.
    • “Using insurance claims and workplace productivity data from large US employers, the researchers, led by scientists from Paxlovid maker Pfizer, compared productivity outcomes among high-risk employees diagnosed as having COVID who either received Paxlovid within five days of diagnosis or received no antiviral. 
    • “Analyses of absences among treated and untreated workers and those on short-term disability (STD) and long-term disability (LTD) included 1,909, 20,065, and 20,318 employees, respectively. The study included data from December 2021 through December 2022, a period dominated by Omicron variants.”
  • Per Fierce Pharma,
    • “The combination of Keytruda and Padcev is taking another major step toward securing its position as a leading therapy in the treatment of bladder cancer.
    • “The PD-1/antibody-drug conjugate pairing significantly extended the lives of patients with muscle-invasive bladder cancer (MIBC) who are eligible for cisplatin-based chemotherapy compared with chemotherapy, according to results from the phase 3 Keynote-B15 (EV-304) trial. The study evaluated Keytruda and Padcev, given both before and after surgery in what’s known as a perioperative treatment, and compared the regimen with neoadjuvant chemotherapy followed by surgery.
    • “Keytruda developer Merck & Co. sponsored the study in collaboration with Padcev makers Astellas and Pfizer. The three firms announced the positive top-line readout from an interim analysis Wednesday.”
  • and
    • “Armed with new three-year data demonstrating the benefits of Anktiva in a specific patient subset, ImmunityBio is proving its bladder cancer med is still one to watch as it competes with heavy hitters from Merck and Johnson & Johnson.
    • “Last year, the company won a long-sought FDA approval for its drug—used alongside the Bacillus Calmette-Guérin (BCG) vaccine—to treat patients with BCG-unresponsive non-muscle-invasive bladder cancer (NMIBC) with carcinoma in situ (CIS), with or without papillary tumors. 
    • “That nod set up a showdown with Merck’s Keytruda and Ferring Pharmaceuticals’ gene therapy Adstiladrin. More recently, the competition has amped up, with Johnson & Johnson’s Inlexzo hitting the scene and putting pressure on IL-15 receptor agonist Anktiva.
    • “Not deterred by the expanding competitive landscape, ImmunityBio is using new data from the company’s Quilt-3.032 study to flesh out Anktiva’s benefits in patients with BCG-unresponsive high-grade papillary-only NMIBC. Papillary tumors and CIS are the two clonally linked subtypes of NMIBC, ImmunityBio explained in a Dec. 16 press release. 

From the U.S. healthcare business front,

  • Modern Healthcare reports,
    • “Oscar Health, Angle Health, Curative, Centivo and Sidecar Health are testing the market for alternative health plans.
    • “Options such as variable copay plans and individual coverage health reimbursement arrangements may appeal to employers seeking to cut costs.
    • “Leading insurers such as UnitedHealthcare, Aetna, Cigna, and Blue Cross and Blue Shield companies are active in this market.
    • “More than one-third of large businesses will offer nontraditional health benefits in 2026, according to Mercer.”
  • Fierce Healthcare relates,
    • “Cigna’s Evernorth launched a behavioral-health-focused medical group in 2024 to meet the demand for behavioral health therapy and support.
    • “In the past 18 months, Evernorth has expanded its Behavioral Care Group from virtual services in six markets and a network of 1,000 providers to more than 5,000 providers across all 50 states.
    • “Evernorth now plans to grow the medical group to more than 15,000 providers next year.
    • “The medical group also now offers in-person appointments to complement its virtual care services. Evernorth executives say this hybrid approach allows patients to choose the care setting that best suits their needs without compromising on quality or convenience.”
  • BioPharma Dive points out,
    • “Biotechnology startup Orum Therapeutics has banked 146 billion Korean won, or about $100 million, to fuel development of medicines that merge elements of two popular drugmaking approaches.
    • “Orum on Thursday said that proceeds from the round — which was led by KB Investments and involved seven other firms — will help advance a potential acute myeloid leukemia drug called ORM-1153 and that recently became its top candidate.
    • “The startup, which has offices in Cambridge, Massachusetts, and Daejeon, South Korea, is developing what are known as “degrader-antibody conjugates.” These drugs are a twist on the antibody-drug conjugates, or ADCs, used to treat multiple cancers. ADCs link a targeting molecule to a tumor-killing toxin. Orum’s drugs, by comparison, use a protein-degrading compound as a payload.”
  • Per Axios,
    • “Employer-sponsored insurance may be getting costlier, but it still delivers a positive return for firms that cover their workers, according to a new Avalere Health analysis commissioned by the U.S. Chamber of Commerce and provided first to Axios.
    • “Why it matters: Workplace insurance is the backbone of the American health care system, covering around half of the population. Whether it’s a well-functioning system or not, workers and families depend on it.
    • “What they found: The analysis measured what companies get back from each dollar invested in health benefits and concluded benefits exceeded costs for firms of all sizes this year, and that ROI will only grow through 2029.
    • “Employer insurance will yield an estimated 120% ROI to employers in the aggregate in 2025 and a 137% return in 2029, per the analysis.
    • “That comes from increased productivity, tax benefits and increased retention.”

Tuesday report

David Ermer–ACA, CDC, CMS, Congress, FDA, Federal employment benefits, Medical / Rx research, OPM, U.S. Healthcare–

From Washington, DC,

  • Politico reports,
    • “A bipartisan group of nearly two dozen senators huddled Monday night to work out an 11th-hour health care deal to extend Affordable Care Act insurance subsidies set to expire at the end of this month.
    • “At a meeting convened by Sens. Susan Collins (R-Maine) and Bernie Moreno(R-Ohio), the senators discussed a two-year extension of the Obamacare tax credits that would be coupled with a new income eligibility cap and fraud prevention language.
  • The Wall Street Journal adds,
    • “Senate Majority Leader John Thune (R., S.D.) said Congress won’t be able to extend federal health-insurance subsidies before leaving for the holidays, ending hopes for a last-minute deal and punting any possible fix into the new year.
    • “We’re not going to pass anything by the end of this week, but I do think there’s a potential pathway in January,” Thune said at a press conference on Tuesday. Lawmakers are expected to depart Washington before the weekend and won’t return until Jan. 5.” * * *
    • “House Republicans still are expected to pass a GOP healthcare bill on Wednesday that would expand access to association health plans, which generally allow small employers to band together and provide health insurance, and appropriate money to fund the cost-sharing reductions that reduce out-of-pocket spending for lower-income ACA enrollees. It doesn’t include any ACA extensions or the health savings accounts favored by many Republicans. 
    • “The Congressional Budget Office said the bill would reduce the federal deficit by $35.6 billion over a decade, but it would also reduce the number of people with health insurance by an average of 100,000 a year.” 
  • OPM Director Scott Kupor added a post about the new U.S. Tech Force to his Secrets of OPM blog today.
  • Federal News Network adds,
    • “Agencies will soon see a more streamlined process for potentially offering higher-value bonuses to federal employees who are being hired or relocated.
    • “A new final rule from the Office of Personnel Management on Tuesday seeks to reduce “administrative burden” and “increase efficiency” in the process for approving recruitment and relocation incentives. The changes come after OPM first proposed regulations in November 2023.
    • “In practice, OPM’s changes will shift the transactional work of approving waivers for larger bonuses off of OPM’s plate, and instead make it the responsibility of individual agencies. The goal is make the process for offering pay incentives easier, and in theory free up time for OPM to focus on other priorities, according to the final rule.”
  • HHS Assistant Secretary for Technology Steve Posnak remarks in his agency’s HealthBuzz blog
    • In July the Centers for Medicare & Medicaid Services (CMS) launched an ambitious Health Technology Ecosystem pledge program. The groundswell of energy and enthusiasm for the program has been remarkable, and we’re glad to be their partner. CMS established several pledge categories associated with aspirational criteria included within its CMS Interoperability Framework. This [HealthBuzz] post looks specifically at the similarities and differences between the Trusted Exchange Framework and Common Agreement™ (TEFCA™) and the “CMS-Aligned Network” pledge category.
  • Per an HHS news release,
    • “The U.S. Department of Health and Human Services (HHS) today announced the appointment of Harvey Risch, M.D., Ph.D., as chairman of the President’s Cancer Panel. The panel, part of the National Institutes of Health’s (NIH) National Cancer Institute, is charged with monitoring the development and execution of the activities of the National Cancer Program and reporting to the president on progress, efficacy, and opportunities for improvement in the national effort against cancer. The Panel was established by law through the National Cancer Act of 1971.”
  • Per a GAO news release,
    • “Congress created USPS to be financially self-sufficient. However, USPS has lost billions since 2007 as people use mail less and costs increase. As a result, USPS’s financial viability has been on our High Risk list since 2009.
    • “USPS has tried to improve financially by raising prices and making operational changes. Congress also passed legislation to reduce some of USPS’s expenses. More must be done. But USPS hasn’t projected how its changes, like transporting more mail on trucks, may affect its future revenue, expenses, and more. USPS and Congress need these projections to determine what other steps to take. Our recommendation addresses this.”

From the Food and Drug Administration front,

  • Biopharma Dive reports,
    • “The Food and Drug Administration on Monday granted a key approval for AstraZeneca and Daiichi Sankyo’s Enhertu, clearing a regimen involving the drug as an initial treatment for HER2-positive breast cancer. 
    • “The approval issued Monday comes well ahead of the FDA’s Jan. 23 decision deadline and greenlights a combination of Enhertu and Roche’s targeted therapy Perjeta for frontline use in people whose metastatic breast cancer is confirmed to be HER2-positive by an FDA-approved test. The clearance is based on results published in the New England Journal of Medicine earlier this year, which showed the Enhertu-Perjeta regimen was more beneficial than the current first-line standard, a combination of chemotherapy and precision drugs that’s known as THP.” 
  • MedTech Dive notes,
    • “The Food and Drug Administration received more than 100 comments after seeking responses on how to monitor the real-world performance of artificial intelligence in medical devices. 
    • “The feedback diverged, with patients calling for stronger postmarket reporting and medical groups saying reporting should be the responsibility of manufacturers. Device companies, meanwhile, called for the FDA to use its existing regulatory frameworks instead of introducing new requirements.
    • “The FDA’s emphasis on real-world performance comes as the agency considers how to regulate increasingly complex technologies, such as generative AI, and how to ensure the performance of AI models doesn’t degrade over time.” 

From the public health and medical / Rx research front,

  • Per HHS news releases,
    • “The U.S. Department of Health and Human Services (HHS) Secretary Robert F. Kennedy, Jr. today approved the addition of Duchenne Muscular Dystrophy (DMD) and Metachromatic Leukodystrophy (MLD) to the Recommended Uniform Screening Panel (RUSP) following scientific review and public comment. Early detection of both conditions allows children to receive FDA-approved therapies at the most effective time, helping to slow disease progression and preserve their quality of life.
    • “As my uncle has said, ‘although children may be the victims of fate, they will not be the victims of our neglect,’” said Secretary Kennedy. “This action honors that principle. Early screening gives every child a fair chance at timely, effective care, and it delivers families the answers and treatment options they deserve—right when they need them most.”
  • and
    • “The Centers for Disease Control and Prevention (CDC) today adopted individual-based decision-making for hepatitis B immunization for parents deciding whether to give the hepatitis B vaccine, including the birth dose, to infants born to women who test negative for the virus. For those infants not receiving the birth dose, it is suggested that the initial dose be administered no earlier than two months of age.” * * *
    • “The CDC is reviewing ACIP’s secondary recommendation that parents should consult with a health care provider on serology testing to determine whether a subsequent hepatitis B vaccine dose is needed. For infants born to mothers who test positive for hepatitis B or whose status is unknown, the currently recommended birth dose of hepatitis B vaccine and immunoglobulin continues with no change.
    • “The adoption of individual-based decision-making for hepatitis B immunization maintains consistency of coverage through all payment mechanisms, including entitlement programs such as the Vaccines for Children Program, Children’s Health Insurance Program, Medicaid, and Medicare, as well as insurance plans through the federal Health Insurance Marketplace.
    • “Fact Sheet: Hepatitis B Immunization“
  • Per MedTech Dive,
    • “The Centers for Medicare and Medicaid Services will reconsider its national coverage determination for transcatheter aortic valve replacement in response to a request from Edwards Lifesciences, according to an agency posting on Monday.
    • “Edwards, in a July letter, asked the agency to reconsider its current policy for TAVR patients who are Medicare beneficiaries to reflect new evidence demonstrating improved outcomes when the valves are used to treat asymptomatic patients. Those patients are currently beyond the scope of Medicare coverage for the treatment.
    • “Analysts expect expanded Medicare coverage to drive further adoption of TAVR. William Blair analyst Brandon Vazquez said one-third of severe aortic stenosis patients are estimated to be asymptomatic. Broader reimbursement could also prompt more hospitals to open TAVR centers, Vazquez said.”
  • The New York Times reports,
    • “For a while, it seemed the notion that light drinking was good for the heart had gone by the wayside, debunked by new studies and overshadowed by warnings that alcohol causes cancer.
    • “Now the American Heart Association has revived the idea in a scientific review that is drawing intense criticism, setting off a new round of debate about alcohol consumption.
    • “The paper, which sought to summarize the latest research and was aimed at practicing cardiologists, concluded that light drinking — one to two drinks a day — posed no risk for coronary disease, stroke, sudden death and possibly heart failure, and may even reduce the risk of developing these conditions.
    • “Controversy over the influential organization’s review has been simmering since it was published in the association’s journal Circulation in July.”
  • Per Fierce Pharma,
    • “With a second late-stage trial win for its investigational HIV combo in the books, Gilead Sciences is moving full steam ahead toward regulatory filings for the novel HIV regimen.
    • “In Gilead’s Artistry-2 study, the company’s single-tablet regimen of bictegravir and lenacapavir matched up to Gilead’s own megablockbuster HIV medicine Biktarvy when assessing patients’ treatment responses, Gilead said in a Dec. 15 release. The trial enrolled adults with HIV who had achieved virologic suppression on Biktarvy and randomized them 2-1 to either switch to the novel regimen or continue receiving Biktarvy.”
  • Per MedPage Today,
    • “More than 70% of patients with advanced triple-negative breast cancer (TNBC) responded to an investigational bispecific antibody targeting PD-L1 and VEGF-A plus chemotherapy, a preliminary study showed.
    • “Overall, 71.8% (61.5% confirmed) of patients had partial responses to either of two dose levels of pumitamig plus nab-paclitaxel (Abraxane), and 23.1% had stable disease, resulting in a disease control rate of 94.9%. Tumor shrinkage occurred in all but five evaluable patients, averaging 42.6% for the entire cohort.”

From the U.S. healthcare business front,

  • Fierce Healthcare reports,
    • “With COVID sales falling and patent protections expiring, Pfizer is forecasting its 2026 revenue to be in the range of $59.5 billion to $62.5 billion. The midpoint of the projection ($61 billion) would be a decline from this year’s estimated revenue of $62 billion—which the company reaffirmed on Tuesday. It would also be an additional slide from Pfizer’s 2024 revenue of $63.6 billion.
    • “Built into the 2026 guidance is a $1.5 billion decline in sales of its COVID products—from an estimated $6.5 billion this year to $5 billion in expected sales next year. The company also expects to sustain a $1.5 billion hit from the loss of exclusivity (LOE) of its products.
    • “As those LOEs escalate in the coming years—to $3 billion-plus in 2027 and $6-plus in 2028—the drugmaker said that it doesn’t expect to see growth until 2029.”
  • Modern Healthcare relates,
    • “Medline Inc. raised $6.26 billion in the year’s biggest initial public offering, upsizing the deal and pricing the shares near the top of the marketed range.
    • “The company sold 216 million shares Tuesday for $29 each, according to a statement confirming a Bloomberg News report. Medline, which counts Blackstone Inc., Carlyle Group Inc. and Hellman & Friedman among its backers, had marketed 179 million shares for $26 to $30 each.
    • “The pricing gives the company a market value of about $39 billion, based on the number of shares listed in its filings with the U.S. Securities and Exchange Commission.
    • “Medline manufactures and distributes medical supplies such as gloves, gowns and exam tables used by hospitals and doctors. The three private equity firms sealed a $34 billion deal to acquire a majority stake in the company in 2021, in one of the largest leveraged buyouts of all time.” 
  • and
    • “City of Hope has opened Orange County’s first hospital exclusively dedicated to cancer care, marking a major milestone in the organization’s commitment to increasing access to advanced cancer treatment and research across the country. 
    • “The cancer specialty hospital, which began seeing patients Dec. 1, sits on City of Hope Orange County’s 72-acre academic campus in Irvine, California, and is connected to City of Hope Orange County Lennar Foundation Cancer Center, which opened in 2022. The opening completes a full continuum of cancer services in the region, enabling patients to access advanced inpatient and outpatient care, clinical trials and surgical oncology services without having to leave the region. Before City of Hope arrived in Orange County, as many as 20% of local cancer patients left the area to receive advanced cancer care, according to the organization. 
    • “We want every person to have options and access to the most skilled teams, the most cutting-edge treatments and the best research to give them the best chance of survival — this new hospital is part of that journey,” said Robert Stone, CEO of City of Hope.”
  • Per Healthcare Dive,
    • “Cencora is acquiring a majority stake in OneOncology, a support platform for cancer care practices, for $5 billion as the drug distributor ramps up its specialty services offerings.
    • “Cencora already owned a stake in OneOncology, but has signed a definitive agreement to acquire most of the remaining shares from investment firm TPG and other holders for $3.6 billion, and to pay off $1.3 billion of OneOncology’s debt.
    • “OneOncology’s practices will retain a minority interest in the company, according to a release. Cencora expects deal to close by the second fiscal quarter next year.”
  • Beckers Clinical Leadership points out,
    • “Concierge and direct primary care models are rapidly reshaping the U.S. primary care landscape. These membership-based practices, which charge monthly or annual fees for enhanced access and longer visits, have increased in recent years — often operating outside the traditional insurance system.
    • “A research article published in December in Health Affairs by researchers from Baltimore-based Johns Hopkins University, Portland-based Oregon Health & Science University and Boston-based Harvard Medical School found that such practices increased by more than 80% between 2018 and 2023, raising questions about equity, access and the future of the physician workforce.”
  • Lockton issued its 2025 high cost claimant report.
    • “Approximately 1% of an employer’s health plan members have annual claims higher than $100,000, but they account for 33% of total spend. And claims are growing more severe, complex, and unpredictable.
    • “Approximately 1% of an employer’s health plan members have annual claims higher than $100,000, but they account for 33% of total spend. And claims are growing more severe, complex, and unpredictable.”
    • “What’s changing is not only the magnitude of these claims, but also the instability. Only 21% of high-cost claimants (HCCs) persist year over year, increasing renewal uncertainty and complicating forecasting.”
  • Per an Institute for Clinicial and Economic Review news release,
    • “The Institute for Clinical and Economic Review (ICER) today released a Final Evidence Report assessing the comparative clinical effectiveness and value of semaglutide (injectable Wegovy®, and a yet to be approved oral formulation) (Novo Nordisk) and tirzepatide (Zepbound®) (Eli Lilly and Company) for the treatment of obesity. The final report includes key policy recommendations to help ensure fair access.
    • “Downloads: Final Evidence Report | Report-at-a-Glance | Policy Recommendations “

Monday report

David Ermer–CDC, CMS, COVID-19, FDA, Generative AI, Medical / Rx research, Medicare, OPM, Rx coverage, U.S. Healthcare–

From Washington, DC,

  • The American Hospital Association News informs us,
    • “Approximately 950,000 consumers who currently do not have health insurance coverage through the federally facilitated Health Insurance Marketplace have signed up for a 2026 health plan, the Centers for Medicare & Medicaid Services announced Dec. 5. More than 4.8 million returning consumers have selected 2026 plans. The open enrollment period began Nov. 1 and continues through Jan. 15. Today is the final day for consumers to enroll in coverage that would begin Jan. 1. For those enrolling after Dec. 15, coverage would begin Feb. 1.”
  • and
    • “The Centers for Medicare & Medicaid Services Dec. 15 published the Measures Under Consideration List for 2025. These are measures that CMS is considering adopting through the federal rulemaking process for use in Medicare programs. This year’s list comprises 24 unique measures, with some under consideration for multiple CMS programs and others already in use but undergoing substantial change to their specifications. Notably, several measures address topics consistent with the Department of Health and Human Services’ Make America Health Again priority framework, such as chronic illness and nutrition, and all 24 measures rely on data submissions using at least one digital source. In addition, CMS is promoting the early review of five measures that align with the MAHA initiative and are currently in the development stage. 
    • “CMS will convene a consensus-based multidisciplinary group, on which the AHA sits, to provide recommendations to the agency on these measures by Feb. 1. In addition, CMS will seek input through public comments from Dec. 16 through Jan. 6.” 
  • Per a CMS fact sheet,
    • “All seven of CMS’ A/B Medicare Administrative Contractors (MACs) will issue updated Final Local Coverage Determinations (LCDs) for Skin Substitute Grafts/Cellular and Tissue-Based Products for the Treatment of Diabetic Foot Ulcers and Venous Leg Ulcers that will be effective January 1, 2026.”
  • Per HHS news releases,
    • “Ralph Abraham, M.D., was sworn in today as Principal Deputy Director of the Centers for Disease Control and Prevention (CDC) by Health and Human Services Secretary Robert F. Kennedy, Jr. He will begin his duties at CDC headquarters in Atlanta on January 5, 2026.
    • “Dr. Abraham has nearly 30 years of experience as a medical practitioner, most recently as Surgeon General of the state of Louisiana. As CDC Principal Deputy Director, he will help realign the agency with its mission as America’s frontline defender against infectious disease.”
  • and
    • “The U.S. Department of Health and Human Services (HHS) today convened Lyme disease patients, clinicians, and researchers for a roundtable on diagnostics and clinical needs moderated by HHS Secretary Robert F. Kennedy, Jr. The event fulfills commitments made in the Make America Healthy Again Commission Strategy Report [PDF, 21.85 MB] to address chronic and often unseen illnesses that affect millions of Americans.
    • “For decades, Americans suffering from Lyme disease have been denied the accurate diagnostics and meaningful care they deserve,” said Secretary Kennedy. “Today’s actions push us decisively toward reliable testing and treatment grounded in the real-world experiences of patients. We are committed to delivering the tools that families have waited far too long to receive.”
    • “Participants shared their experiences and recommendations on improving care and advancing research. Senator Susan Collins (R-ME) and Representatives Morgan Griffith (R-VA) and Chris Smith (R-NJ) also engaged in the discussions.
    • “As part of today’s event, HHS announced the renewal of the LymeX Innovation Accelerator with the Steven & Alexandra Cohen Foundation that began during President Trump’s first term. Established in 2020, LymeX is the largest public-private partnership ever built to improve Lyme disease diagnostics and care. The $10 million initiative will advance artificial intelligence tools that support earlier and more accurate detection across stages of infection.”
  • Per an OPM news release,
    • “The US Office of Personnel Management (OPM), in coordination with the Office of Management and Budget (OMB), the General Services Administration (GSA), the White House Office of Science Technology and Policy (OSTP), and agency leaders across the administration, today announced the establishment of the United States Tech Force (Tech Force)– a new, cross-government program to recruit top technologists to modernize the federal government.” * * *
    • “OPM is proud to announce the initial private sector partners for Tech Force: Adobe, Amazon Web Services, AMD, Anduril, Apple, Box, C3.ai, Coinbase, Databricks, Dell Technologies, Docusign, Google Public Sector, IBM, Meta, Microsoft, Nvidia, OpenAI, Oracle, Palantir, Robinhood, Salesforce, SAP, ServiceNow, Snowflake, Synopsys, Uber, Workday, xAI, and Zoom. OPM welcomes the opportunity to expand this list of partners over time.
    • “In addition, Tech Force is partnering with NobleReach Foundation – a nonpartisan talent platform that brings together America’s best and brightest across industry, academia, and government via initiatives such as its NobleReach Scholars Program – to recruit technologists and support the program.
    • “Read more of what government and tech world leaders have to say about Tech Force here.
    • “For further information, please see OPM’s memo to agencies here. To learn more or apply for Tech Force and for FAQ’s visit TechForce.gov. And follow US Tech Force on X.”  

From the Food and Drug Administration front,

  • Per FDA news releases,
    • “The U.S. Food and Drug Administration (FDA) today removed a key limitation on the use of real-world evidence (RWE) used in drug and device applications reviews. In new guidance for certain types of medical device submissions, the agency states it will accept RWE without requiring that identifiable individual patient data collected from real-world data sources always be submitted in a marketing submission. The FDA similarly intends to consider updating its guidance for drugs and biologics.”
  • and
    • “The U.S. Food and Drug Administration today reminded industry of its legal responsibilities under the Federal Food, Drug, and Cosmetic Act regarding food recalls and called for industry to increase adoption of best practices in recall implementation, especially for recalls involving foods for our country’s most vulnerable populations –infants and young children. Last week, the FDA sent warning letters to several major retailers for failing to remove recalled ByHeart infant formula from their store shelves despite being notified of the recall. These warning letters highlight a concerning problem with recall effectiveness at the retail level. Last year, the FDA sent a similar warning letter to a retailer who failed to adequately remove recalled lead-contaminated WanaBana apple cinnamon fruit puree pouches from its store shelves.”
  • Fierce Pharma reports,
    • “Clearing clinical and regulatory hurdles in the development of a fast-acting nasal spray for a heart condition has given Milestone Pharmaceuticals its first FDA approval in its 22-year history.
    • “The U.S. regulator has signed off on Cardamyst (etripamil) to quell symptomatic episodes from paroxysmal supraventricular tachycardia (PSVT), which is a type of abnormal heart rhythm. Cardamyst becomes the first self-administered treatment patients can use to manage their PSVT symptoms.
    • “The calcium channel blocker is a convenient alternative to an emergency room visit, where patients receive an intravenous dose of a drug that “basically reboots your heart,” Milestone CEO Joe Oliveto said in an interview.
  • and
    • “LIB Therapeutics has scored an FDA approval for its cholesterol-lowering, third-generation PCSK9 inhibitor, lerodalcibep-liga.
    • “The injected treatment, which will carry the commercial name Lerochol, is approved to be used along with diet and exercise to reduce low-density lipoprotein cholesterol (LDL-C) in adults with hypercholesterolemia, including those with heterozygous familial hypercholesterolemia (HeFH).
    • “Lerochol arrives on the market with a convenience edge over other PCSK9 drugs, as it is self-administered once monthly and doesn’t need refrigeration because it retains its stability for up to three months at room temperature. By comparison, Amgen’s Repatha and Sanofi and Regeneron’s Praluent are dosed between every two to four weeks, depending on patient needs, and have a shorter shelf life at room temperature.”
  • and
    • “Johnson & Johnson’s Akeega is opening new fronts in prostate cancer treatment with a fresh FDA approval, making it the first precision medicine combo for patients with BRCA2-mutated metastatic castration-sensitive prostate cancer (mCSPC).
    • “Akeega, a dual-action tablet made up of J&J’s androgen-directed prostate cancer med Zytiga (abiraterone acetate) and the PARP inhibitor niraparib—sold by GSK as Zejula in other indications—is added to corticosteroid medication prednisone to delay disease progression of the aggressive form of prostate cancer.  
    • “J&J’s Amplitude study was the first showing that a PARP inhibitor-androgen receptor pathway inhibitor treatment combination could delay both radiographic and symptomatic disease progression in the disease type, Dana-Farber Cancer Institute’s Bradley McGregor, M.D., noted in a company press release.“
  • and
    • “The FDA has “proactively” granted Johnson & Johnson a coveted speedy review under the Commissioner’s National Priority Voucher pilot (CNPV), the agency said Monday.
    • “The voucher was granted to J&J for its proposed combination of Tecvayli and Darzalex for previously treated multiple myeloma.
    • “With the voucher, the FDA aims to deliver a decision within one to two months following submission of an application. Normally, FDA drug reviews take up to 10 months, starting from the acceptance of an application.”

From the public health and medical / Rx research front,

  • The New York Times reports,
    • “A new drug has been saturating the fentanyl supply in Philadelphia and moving to other cities throughout the East and Midwestern United States: medetomidine, a powerful veterinary sedative that causes almost instantaneous blackouts and, if not used every few hours, brings on life-threatening withdrawal symptoms.
    • “It has created a new type of drug crisis — one that is occasioned not by overdosing on the drug, but by withdrawing from it.
    • “Since the middle of last year, Philadelphia’s hospitals have been strained by patients coming in with what doctors have identified as medetomidine withdrawal. Although the heart rate slows drastically right after use, in withdrawal the opposite occurs: The heart rate and blood pressure become catastrophically high. Patients experience tremors and unstoppable vomiting. Many require intensive care.”
  • The Wall Street Journal relates,
    • “People susceptible to developing heart issues benefit the most from reducing their consumption of saturated fats, according to a review of research that comes as the federal government prepares to revise dietary recommendations.
    • ‘A paper published Monday in the Annals of Internal Medicine found that people at high risk of developing cardiovascular problems saw a reduction in major health issues including heart attack and stroke when they cut back on saturated fats. The picture was different for people without those same cardiovascular risks. Within five years, cutting saturated fats didn’t yield the same benefits for that group, the review said.”
  • The Washington Post tells us,
    • “Why some people experience long-lasting physical and mental effects from covid-19 could be linked to chronic inflammation, according to new research that experts say could help develop new treatments for the confounding condition that continues to afflict millions.
    • “Some early research on the condition has suggested that long covid’s symptoms linger because the virus persists in people’s bodies. But the new study published Friday in Nature Immunology found that people with long covid had activated immune defenses and heightened inflammatory responses for more than six months after initial infection compared with those who fully recovered.
    • “The latest research “leads to a hypothesis that there might be therapeutic targets related to inflammation that might be worth exploring in clinical studies,” said Dan Barouch, the study’s lead author and director of the Center for Virology and Vaccine Research at Beth Israel Deaconess Medical Center.
    • “The study’s findings signal progress in understanding a condition that is estimated to affect more than 400 million individuals around the world as the coronavirus continues to infect people every day, said Ziyad Al-Aly, a clinical epidemiologist at Washington University in St. Louis who studies long covid. There are no drugs approved for treatment of long covid, leaving doctors to tackle individual symptoms with various therapies.”
  • The American Medical Association lets us know “What doctors wish parents knew about fall prevention for kids.
    • “Rabia Nagda, MD, of Texas Children’s Pediatrics, emphasizes that every environment where kids spend time should be built with fall risk in mind.”
  • Per MedPage Today,
    • “Cannabis use in pregnancy is associated with health risks including preeclampsia and low birthweight.
    • “In this secret shopper study, one in five cannabis retailers told callers that cannabis use was safe in pregnancy.
    • “The findings support a need for more public education about the risks of prenatal cannabis use and for guidance to discuss its use with physicians.”
  • Per Health Day,
    • “‘Dual use’ of vaping and smoking might help smokers cut back or quit.
    • “Smokers who also vaped were 4.5 times more likely to quit within a year.
    • “Dual users were also more likely to cut their smoking by half.”
  • and
    • “People could learn within 15 minutes whether they are infected with hepatitis C, thanks to a rapid test developed by Northwestern University.
    • “The test will allow doctors to diagnose infections during an office visit and kickstart patients’ treatment before they leave, researchers said.
    • “This test could revolutionize HCV care in the U.S. and globally by dramatically improving diagnosis, accelerating treatment uptake and enabling more people to be cured faster,” researcher Dr. Claudia Hawkins said in a news release. She’s director of Northwestern’s Institute for Global Health’s Center for Global Communicable and Emerging Infectious Diseases in Chicago.”
  • STAT News reports,
    • “Gene therapy researchers were converging on a holy grail. A few years ago, researchers at labs and companies reported they had engineered viruses that could ferry corrective genes deep into the brain, giving potential entry to a new world of treatments for Alzheimer’s, Parkinson’s, and a slew of rare genetic diseases.
    • “This summer, after years of careful study, the first person underwent gene therapy using one of the new viruses. The patient, a young child, died two and a half days later.
    • “The death has sent concern and uncertainty rippling through labs and companies developing gene therapies for the brain, along with rare disease groups who hoped these tools could deliver long-sought cures. They worry that Capsida Biotherapeutics unearthed a broader risk for other viruses designed to travel like a messenger pigeon to our brains, one that could derail years of progress. 
    • “Capsida has declined to answer questions about the death beyond a brief statement. Its CEO has departed. The information that has leaked out is troubling. The child died of cerebral edema — brain swelling — a clinical course distinct from other deaths tied to gene therapy over the last decade, according to a person familiar with the matter.
    • “Most disturbingly, none of the animal and lab studies Capsida presented indicated such a calamity was possible, making it unclear how other researchers and companies would test for such a risk.” * * *
    • “The best path ahead may be to start new trials in very low doses. But that’s challenging in gene therapy, where patients can only ever receive one dose of a virus in their lifetime, before they develop immunity to it. Still, “we may have to be a bit more conservative,” said Miguel Sena-Esteves, a gene therapy researcher at the UMass Chan Medical School 
    • “Alternatively, companies may have to move forward first in diseases otherwise immediately fatal, where the risk-benefit calculus shifts dramatically. The prion disease that shadows Sonia Vallabh, a researcher at the Broad Institute, is one. 
    • “Whichever way it goes, the gene therapy field has lost the assurance — already tenuous — that tests in animals can predict the toxicities for us. 
    • “In some way,” Vallabh said, “our only safety species is humans.”
  • The Wall Street Journal adds,
    • “Sanofi said its tolebrutinib drug candidate didn’t meet the primary goal in a late-stage clinical trial for multiple sclerosis. It separately said talks with the U.S. Food and Drug Administration had indicated a regulatory review for tolebrutinib in a different form of the disease would take longer than previously expected.
    • “The updates deal a blow to one of the most advanced drugs in Sanofi’s pipeline as the company seeks to move past recent disappointments in clinical trials. Sanofi has turned to dealmaking this year, using funds raised from the sale of a controlling stake in its consumer-healthcare business to replenish its pipeline.”

From the U.S. healthcare business front,

  • Fierce Healthcare reports,
    • “Highmark released its third quarter earnings report on Monday, where its top brass said the insurer expects to see elevated utilization trends persist into 2026.
    • “The Pittsburgh-based organization, which includes Highmark Health Plans and health system Allegheny Health Network, reported a $69 million net loss and a $204 million operating loss alongside $24.6 billion in revenue through the first nine months of 2025. The bulk of that loss came from the health insurance unit, which is continuing to be pressured by care use.
    • “Carl Daley, chief financial officer and treasurer at Highmark Health, told Fierce Healthcare that the company had expected utilization to normalize over the course of the year, and priced plans accordingly. It’s made adjustments in its pricing strategy for 2026 to adapt to the expectation that utilization remains high.”
  • MedTech Dive tells us,
    • “Philips has agreed to acquire SpectraWAVE, a firm making tools to help diagnose and guide treatment of coronary artery disease, the companies announced Monday. They did not disclose the terms of the deal.
    • “SpectraWAVE makes an intravascular imaging system for the coronary arteries. The Bedford, Massachusetts-based company also makes an AI-enabled solution that calculates fractional flow reserve from a single coronary angiogram to support treatment decisions. 
    • “Philips expects the acquisition will expand its portfolio of intravascular imaging and physiological assessment devices. CEO Roy Jakobs said in a statement that the company is “doubling down on image-guided therapy” and expanding its coronary intervention portfolio with the planned purchase.”
  • Cardiovascular Business adds,
    • “Ambulatory surgical centers (ASCs) and office-based labs (OBLs) are poised to play a growing role in cardiovascular care as payment policies shift and health systems look for more efficient ways to manage procedural volume. That trend, and the guardrails needed to ensure patient safety, was the focus of an educational session at TCT 2025 in San Francisco. 
    • “Cardiovascular Business spoke with one of the presenters, Arnold Seto, MD, cath lab director at the Long Beach VA Medical Center, professor of medicine at Charles Drew University, Society for Cardiovascular Angiography and Interventions (SCAI) treasurer and chair of the SCAI Advocacy Committee, to find out more.
    • “Seto said there is wide expectation that lower-acuity interventional cardiology and peripheral procedures will migrate into the ASC environment. This is partly due to better cost effectiveness and the fact that larger centers want to expand into more complex and structural heart procedures without building out their hospital cath labs to be bigger.
    • “The consultants tell us that as many as 25% to 50% of cardiology procedures will be migrating to the ASC environment. The government would prefer that because they pay about two-thirds of the hospital outpatient costs compared with an ASC reimbursement,” he said. He added that the Center of Medicare and Medicaid Services (CMS) is clearly signaling interest in this shift. “We’ve already seen CMS effectively remove all the PCI codes from the inpatient only list, and actually talk about removing everything from the inpatient only list.”
  • Per a Leapfrog news release,
    • “Today, The Leapfrog Group, a national watchdog organization of employers and other purchasers focused on health care safety and quality, announced the 2025 recipients for their elite annual Top Hospital Award and Top Ambulatory Surgery Center (ASC) Award. This national recognition is one of the most competitive honors U.S. hospitals and surgery centers can earn for excellence in patient safety and quality of care. Selected hospitals and ASCs will be celebrated today as part of Leapfrog’s 2025 Annual Meeting and Awards Dinner.” * * *
    • “The award honors hospitals and ASCs that demonstrate the highest performance in the nation on quality and patient safety, including ethical billing and informed patient consent procedures, lower infection rates, prevention of medication errors and surgical safety. To see the full methodology and list of institutions honored as 2025 Top Hospitals, please visit www.leapfroggroup.org/tophospitals. To see the full list of institutions honored as 2025 Top ASCs, please visit www.leapfroggroup.org/ratings-report/top-ascs.” 
  • Genetic Engineering and Biotechnology News points out,
    • “As Eli Lilly (NYSE: LLY) and Novo Nordisk (Nasdaq Copenhagen: NOVO-B) scramble to bring an oral glucagon-like peptide 1 (GLP-1) receptor agonist to market for obesity, a much smaller potential rival spotlighted positive mid-stage clinical data that captivated investors enough to send its share price more than doubling this past week.
    • “Structure Therapeutics (NASDAQ: GPCR) shares soared 102% after it reported positive data from its Phase II ACCESS clinical program assessing its oral GLP-1 candidate aleniglipron in people with obesity and/or overweight with at least one weight-related co-morbidity. Aleniglipron (formerly GSBR-1290) is designed to be a biased G protein-coupled receptor (GPCR) agonist, which selectively activates the G-protein signaling pathway.”
    • “If approved, Structure would compete with oral GLP-1s for weight management by the leading obesity drug developers, whose candidates could both win FDA approval in the new year.”
  • MedCity News notes,
    • “This Year’s Hottest Healthcare Company Isn’t Even a Healthcare Company
    • “Nvidia has quietly become one of the most influential players in healthcare technology by supplying the accelerated computing and AI infrastructure that powers everything from imaging to drug discovery. The company’s restraint — focusing on enabling the ecosystem rather than owning it — has helped cement its role as the indispensable backbone of the healthcare industry’s AI transformation.”

Weekend update

David Ermer–CDC, CMS, Congress, FDA, Medical / Rx research, Medicare, U.S. Healthcare–

From Washington, DC,

  • Roll Call lets us know,
    • “The last week of the congressional session before Christmas could feature a flurry of activity on unfinished business for both the House and Senate, from spending bills and health care costs to nominations.
    • “House Republican leaders released draft legislation Friday afternoon consisting of a package of health proposals aimed at reducing health care costs in 2026, aiming to lay down a marker ahead of the midterm election year as Democrats continue to hammer them over the pending expiration of Affordable Care Act premium tax credits.
    • “The House Rules Committee is scheduled to meet Tuesday afternoon to consider the GOP bill for floor action.” * * *
    • “Senate Majority Leader John Thune, R-S.D., has set up a busy getaway week, having last week filed multiple motions to limit debate on various measures. First on the Senate floor agenda is the final House-Senate agreement on the fiscal 2026 National Defense Authorization Act, with a cloture vote scheduled for 5:30 p.m. Monday.”
    • “Beyond the NDAA, the other percolating legislative business is a much awaited agreement on a second package of fiscal 2026 appropriation bills. The objective remains to pass as many of the regular spending measures as possible before the current continuing appropriations law expires at the end of January. The Senate is scheduled to be out of session the week of Jan. 19. [Here is a link to the 2026 House of Representatives calendar.]
    • “President Donald Trump and Republicans in the Senate are set up for a year-end victory on nominations, again taking advantage of the rules change the Senate GOP enacted earlier this year to allow expedited consideration of bundles of nominations through executive branch resolutions. A package on track for confirmation this week includes 97 nominations for roles across federal departments and agencies, with at least two additional individual nominees also slated for floor action.”
  • Per a House news release,
    • “On Wednesday, December 17, 2025, at 9:00 a.m. ET, the Committee on Oversight and Government Reform will hold a Member Day hearing. The hearing will convene in room HVC 210 of the U.S. Capitol Visitor Center. Members of Congress, regardless of Committee assignment, are invited to testify on issues within the Committee’s jurisdiction, including specific legislation or topics of importance to them, their district, and their constituents.”
  • STAT News reports,
    • “The federal government has sent a record $16 billion to health insurers that sell Medicare drug plans, a flashing red sign that prescription drug spending is blowing up far beyond what government officials and insurance experts had expected.” * * *
    • “Every year, Medicare looks at drug spending data and calculates whether the insurers’ drug plans, known as Part D plans, spent more or less than what they had projected at the start of the year. If insurers’ costs were more than expected, the government gives them an infusion to help subsidize the losses, known as reconciliation payments.
    • “The new $16 billion payout — which was for drug spending in 2024 — was by far the largest reconciliation payment since the Part D program went into effect in 2006, according to Medicare data. It was nearly four times more than the $4.3 billion that Part D plans got in 2023. The closest was $11.1 billion in 2014, when the Affordable Care Act was phasing out the so-called donut hole coverage gap in Part D plans.” * * *
    • “In November, the CBO called for more research into Part D spending “to help explain the unexpected growth in costs.” The group wants to understand if the changes to things like the out-of-pocket cap are driving more people to fill prescriptions if they know their financial exposure is limited.” 
  • MedTech Dive tells us,
    • “The Food and Drug Administration has created a pathway for unauthorized digital health devices to access a new Medicare payment option.
    • “In a policy published last week, the FDA said it will consider waiving typical market access rules for companies that want to join a new Centers for Medicare and Medicaid Services program.
    • ‘The pathway could enable device developers to collect data through real-world use in the CMS’ Advancing Chronic Care with Effective, Scalable Solutions, or ACCESS, program.”
  • Per a National Science Foundation news release,
    • “The U.S. National Science Foundation Directorate for Technology, Innovation and Partnerships (NSF TIP) on Friday announced the launch of a new initiative designed to launch and scale a new generation of independent research organizations. These organizations will focus on technical challenges and bottlenecks that traditional university and industry labs cannot easily solve on their own. NSF seeks feedback on this initiative through a Request for Information (RFI).
    • “As scientific challenges have become more complex and dependent upon the work of cross-disciplinary teams of experts, our nation must expand its scientific funding toolkit to adapt,” said Erwin Gianchandani, NSF TIP Assistant Director. “Tech Labs will provide entrepreneurial teams of proven scientists the freedom and flexibility to pursue breakthrough science at breakneck speed, without needing to frequently stop and apply for additional grant funding with each new idea or development.” * * *
    • “To learn more, read the RFI and plan to join a webinar on Wednesday, Dec. 17, 2025, at 11 a.m. EST. Please register in advance for the webinar.”

From the public health and medical / Rx research front,

  • Beckers Clinical Leadership reports,
    • “Flu hospitalizations are at the third-highest level seen at this point in the season in 15 years, according to the CDC’s latest FluView report [released December 11, 2025].
    • “The cumulative flu hospitalization rate for the week ending Dec. 6 reached 6.9 per 100,000, ranking third highest for week 49 since the 2010–11 flu season. Only the 2022–23 season (36.1) and 2023–24 season (9.5) reported higher rates at this point. Meanwhile, the weekly flu hospitalization rate increased to 2.2 per 100,000, up from 1.7 the week prior.”
  • The New York Times explains what menopause does to a woman’s body from head to toe.
  • MedPage Today adds,
    • “Menopausal hormone therapy (MHT) did not increase breast cancer risk in women with BRCA mutations, according to a study reported here.
    • “In fact, women who used estrogen-only MHT had a significantly lower risk of breast cancer compared with a matched cohort of women who did not use MHT (42.% vs 24.9%). An analysis of different types of estrogen showed either a lower risk of breast cancer or no effect. MHT that included estrogen and progesterone had no effect on breast cancer risk.
    • “The findings added to a growing body of literature showing the safety of MHT, reported Joanne Kotsopoulos, PhD, of Women’s College Hospital and the University of Toronto, at the San Antonio Breast Cancer Symposium. 
  • Medscape tells us,
    • “Semaglutide, a GLP-1 receptor agonist (RA), was associated with a significantly lower risk for adult-onset epilepsy in patients with diabetes than other glucose-lowering drugs (GLDs). Notably, this risk reduction appeared largely independent of improvements in glycemic control or weight.
    • “Approved for type 2 diabetes and obesity management, semaglutide has shown neuroprotective effects in stroke and dementia, but these new findings suggest it may also have a unique neuroprotective mechanism specific to seizure prevention.
    • “If a patient has type two diabetes and a high risk or likelihood of a seizure disorder, it would be beneficial to consider using semaglutide with overall brain health in mind, not just for stroke prevention and cardiovascular health,” Yong Eun, MD, primary care attending, Department of Medicine, NYC Health, Columbia University, New York City, told Medscape Medical News.”

From the U.S. healthcare business and artificial intelligence front,

  • Fierce Healthcare explains “why health plans need to bridge the member trust gap to fully harness technology.”
  • Beckers Payer Issues summarizes “major payer acquisitions have closed or were announced in 2025. 
  • Beckers Hospital Review ranks twenty health systems by operating margins.
    • “As policy uncertainties, reimbursement pressures and continued cuts and closures weigh on hospitals and health systems heading into 2026, third-quarter operating margins showed wide variation. 
    • ‘Several systems, including UnityPoint, Montefiore Health System and Providence, reported operating losses or near-break-even results, while others, such as Allegheny Health Network, UPMC and Northwell Health, recorded only modest gains. On the stronger end, Tenet Healthcare led all systems with a 16.8% operating margin, followed by HCA Healthcare at 12.6% and Universal Health Services at 11.6%.”
  • Per HR Dive, “2026 may mean an extra biweekly pay period. This article explains how HR can prepare. The phenomenon occurs approximately every 11 to 12 years for affected employers, necessitating a 27th pay day.”

Cybersecurity Saturday

David Ermer–Cybersecurity, Generative AI–

From the cybersecurity policy and law enforcement front,

  • Cyberscoop reports,
    • “The Defense Department would require that senior leaders have secure mobile phones, that personnel would get cybersecurity training that includes a focus on artificial intelligence and that cyber troops would have access to mental health services under a compromise annual defense policy bill released over the weekend.
    • “The deal between House and Senate negotiators on the fiscal 2026 National Defense Authorization Act (NDAA) [reached last weekend] is a massive piece of legislation that runs the gamut of the Pentagon, including a record-breaking $901 billion topline figure. It also has a grab bag of cybersecurity policy provisions.”
  • Roll Call adds,
    • “Senate leaders plan for the chamber to vote next week to clear the bicameral compromise National Defense Authorization Act for President Donald Trump’s signature.
    • “As the fiscal 2026 bill edges closer to enactment, one of the few last-minute controversies shadowing it concerns whether the measure goes far enough to restrict military aircraft operations in close proximity to Ronald Reagan Washington National Airport.
    • “The Senate on Thursday [Decmber 11] voted 75-22 to take one procedural step closer to voting on the measure — agreeing to proceed to the legislation — which would authorize $900.6 billion for defense programs, mostly at the Pentagon.
    • “The chamber still plans to cast another procedural vote — set for Monday evening — and is expected to vote to clear the NDAA soon thereafter next week.
    • “The House passed the bill Wednesday [December 10} by a vote of 312-112.”
  • The American Hospital Association News tells us,
    • “The Cybersecurity and Infrastructure Security Agency Dec. 11 released an update to its voluntary Cybersecurity Performance Goals, which includes measurable actions for critical infrastructure, including health care. The update aligns with the latest cybersecurity standards outlined by the National Institute of Standards and Technology and addresses the most common and impactful threats facing critical infrastructure. The guidance also highlights the role of governance in cybersecurity management, emphasizing accountability, risk management and strategic integration of cybersecurity into day-to-day operations.” 
  • The HIPAA Journal relates,
    • “The College of Healthcare Information Management Executives (CHIME) and more than 100 U.S. hospital systems, healthcare provider organizations, and provider associations have called for the Department of Health and Human Services (HHS) to withdraw its proposed updates to the HIPAA Security Rule.
    • “The HIPAA Security Rule was enacted in 2002, nine years after HIPAA was signed into law, to establish security standards for electronic protected health information created, received, used, or maintained by a covered entity, with the requirements subsequently expanded to cover business associates of HIPAA-regulated entities. The Security Rule was written to be technology agnostic to avoid frequent rule changes in response to advances in technology; however, 22 years after its initial release, the HHS proposed a substantial update that specified many new cybersecurity requirements.” * * *
    • “While few healthcare industry stakeholders would disagree with the main purpose of the update – to improve healthcare cybersecurity and prevent costly and damaging cyberattacks that threaten patient safety – the proposed update attracted considerable criticism from healthcare and provider organizations. In February 2025, 8 industry associations, including CHIME, co-signed a letter to President Trump calling for the proposed update to be rescinded, pointing out that under the previous Trump administration, healthcare organizations were incentivized to adopt recognized cybersecurity best practices, and that was a better approach than imposing unreasonable cybersecurity mandates that would be costly and difficult to implement.
    • “In the December 8, 2025, joint stakeholder letter to HHS Secretary Robert F. Kennedy, Jr., the signatories called for the proposed update to be immediately withdrawn, and for the HHS to instead “conduct a collaborative outreach initiative with our organizations and other regulated entities that are impacted to develop practical and actionable cybersecurity standards for more robust protections of individuals’ health information, without the extreme and unnecessary regulatory burden that health care providers and other stakeholders would face under the crushing and unprecedented provisions of this Proposed Rule.”
  • Per a National Institute of Standards and Technology news release,
    • “NIST Special Publication (SP) 800-70r5 ipd (Revision 5, initial public draft), National Checklist Program for IT Products – Guidelines for Checklist Users and Developers, is now available for public comment through January 16, 2026, at 11:59 PM (EST).
    • “NIST established the National Checklist Program (NCP) to facilitate the generation of security checklists from authoritative sources, centralize the location of checklists, and make checklists broadly accessible. SP 800-70r5 ipd describes the uses, benefits, and management of checklists and checklist control catalogs, as well as the policies, procedures, and general requirements for participation in the NCP.”
  • Security Weeks informs us,
    • “The US government has announced rewards of up to $10 million for information on members of the Iranian hacking group known as Emennet Pasargad.
    • “The reward offers come roughly a year after a US-Israel joint advisory described the activities of the group, which was then identified by the name of its front company, Aria Sepehr Ayandehsazan (ASA).
    • “Noting that the group was previously identified as Emennet Pasargad, Ayandeh Sazan Sepehr Arya (ASSA), Eeleyanet Gostar, and Net Peygard Samavat Company, the US now calls it Shahid Shushtari.
    • “In the private sector, the threat group has been known as Cotton Sandstorm, Marnanbridge, and Haywire Kitten.”
  • Cyberscoop adds,
    • “The Justice Department has charged a Ukrainian national with conducting cyberattacks on critical infrastructure worldwide as part of two Russian state-sponsored hacking operations that targeted water systems, food processing facilities and government networks across the United States and allied nations.
    • “Victoria Eduardovna Dubranova, 33, was arraigned on a second indictment Tuesday [December 9] after being extradited to the U.S. earlier this year. She faces charges related to her alleged work with CyberArmyofRussia_Reborn, known as CARR, and NoName057(16), two groups federal prosecutors say received backing from Moscow to advance Russian geopolitical interests. 
    • “Dubranova pleaded not guilty in both cases.”

From the cybersecurity breaches and vulnerabilities front,

  • Bleeping Computer reports,
    • “MITRE has shared this year’s top 25 list of the most dangerous software weaknesses behind over 39,000 security vulnerabilities disclosed between June 2024 and June 2025.
    • “The list was released in cooperation with the Homeland Security Systems Engineering and Development Institute (HSSEDI) and the Cybersecurity and Infrastructure Security Agency (CISA), which manage and sponsor the Common Weakness Enumeration (CWE) program.
    • “Software weaknesses can be flaws, bugs, vulnerabilities, or errors found in a software’s code, implementation, architecture, or design, and attackers can abuse them to breach systems running the vulnerable software. Successful exploitation allows threat actors to gain control over compromised devices and trigger denial-of-service attacks or access sensitive data.
  • Cyberscoop relates,
    • “Security experts have observed a steady increase in malicious activity from a widening pool of attackers seeking to exploit React2Shell, a critical vulnerability disclosed last week in React Server Components.
    • “Authorities are also responding to heightened concern about the defect, with the Cybersecurity and Infrastructure Security Agency shortening the deadline for agencies to patch the vulnerability to Friday [December 12] . The agency previously set a deadline of Dec. 26 when it added CVE-2025-55182 to its known exploited vulnerabilities catalog last week.
    • “Palo Alto Networks Unit 42 said more than 50 organizations are impacted by attacks involving exploitation of the vulnerability with victims observed in the United States, Asia, South America and the Middle East.” 
  • Cybrsecurity Dive adds,
    • “React on Thursday [December 11] warned that customers will need to apply new upgrades amid the React2Shell crisis, after researchers discovered additional vulnerabilities, including a denial of service flaw and a source code exposure. 
    • “A denial of service vulnerability, tracked as CVE-2025-55184 and CVE-2025-67779, allows an attacker to craft a malicious HTTP request and send it to a Server Functions endpoint, which can lead to an infinite loop. The flaw has a severity score of 7.5. 
    • “The source code exposure, tracked as CVE-2025-55183, allows a malicious HTTP request sent to a vulnerable Server Function to unsafely return the source code of any Server Function.”
  • The American Hospital Association News lets us know,
    • “U.S. and international agencies are warning of potential cyberattacks on health care and other critical infrastructure from state-sponsored cyber actors in Russia and China.
    • “An advisory released yesterday [December 11] warns of incidents by Russian hackers using internet-facing desktop-sharing systems to access operational technology and industrial control systems for malicious activity. A Dec. 4 report warns of Chinese state-sponsored cyber actors using BRICKSTORM malware to attack VMware vSphere and Windows cloud platforms.
    • “These nation-state level threats may be difficult for civilian network defenders to counter,” said John Riggi, AHA national advisor for cybersecurity and risk. “However, robust cyber threat information sharing between the private sector and the federal government, implementation of recommended practices, and the commendable and aggressive enforcement operations by the FBI and other agencies will help mitigate the threat. Organizations should also update, integrate and routinely test emergency preparedness, cyber incident response and clinical continuity plans should there be an extended technology outage affecting hospitals directly or indirectly through a cyberattack against mission-critical third parties.”
  • CISA added seven known exploited vulnerabilities to its catalog this week.
    • December 8, 2025
      • CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability
      • CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability
        • Cyber Press discusses the D-Link KVE here. 
        • F5 discusses the Array Networks KVE here.
    • December 9, 2025,
      • CVE-2025-6218 RARLAB WinRAR Path Traversal Vulnerability
      • CVE-2025-62221 Microsoft Windows Use After Free Vulnerability 
        • Cybersecurity News discusses the RARLAB KVE here.
        • Bleeping Computer discusses the Microsoft KVE here.
    • December 11, 2025
      • CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability 
        • Bleeping Computer discusses this KVE here.
    • December 12, 2025
      • CVE-2025-14174 Google Chromium Out-of-Bounds Memory Access Vulnerability
        • The Hacker News discusses this KVE here.
    • December 12, 2025 (double shot day, not a typo)
      • CVE-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
        • Windows Forum discusses this KVE here. 
  • Bleeping Computer adds,
    • “Apple has released emergency updates to patch two zero-day vulnerabilities that were exploited in an “extremely sophisticated attack” targeting specific individuals.
    • “The zero-days are tracked as CVE-2025-43529 and CVE-2025-14174 and were both issued in response to the same reported exploitation.
    • “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26,” reads Apple’s security bulletin.”
  • Cybersecurity Dive notes,
    • “Utility-scale battery energy storage systems are facing heightened risks of attack from nation-state and criminal threat groups, and immediate action needs to be taken to secure critical industries from potential disruption, according to a white paper from Brattle Group and Dragos. 
    • BESS deployments are expected to grow between 20% and 45% over the next five years, driven by increased demand for data centers and other power requirements. At the same time, state-linked actors have turned their attention toward disrupting critical industries, such as utilities and rival nations competing with the U.S. for dominance in AI and clean energy.”
  • Per Infosecurity Magazine,
    • “A new iteration of the ClayRat Android spyware featuring expanded surveillance and device-control functions has been identified by cybersecurity researchers.
    • “First seen in October, ClayRat was originally capable of stealing SMS messages, call logs and photos, as well as sending mass texts.
    • “The latest version introduces far broader capabilities by combining Default SMS privileges with extensive abuse of Accessibility Services.”

From the ransomware front,

  • Cybersecurity Dive reports,
    • “Ransomware activity reached an all-time high in 2023, totaling more than 1,500 incidents and $1.1 billion in reported payments, before dropping the following year after two high-profile law enforcement takedowns.
    • “The two critical law enforcement actions were the 2023 U.S.-led takedown of AlphV/BlackCat and the 2024 disruption of LockBit by U.S. and U.K. authorities, according to a new U.S. government study.
    • “The report by the U.S. Treasury’s Financial Crimes Enforcement Networkshows ransomware fell to 1,476 incidents in 2024, with reported payments reaching $734 million. 
    • ‘More than $2.1 billion in ransomware payments were reported between 2022 and 2024, according to the report. 
    • “The medium amount of a single ransomware transaction rose from $122,097 in 2022 to $155,257 in 2024, according to the report. The most common payment amount was less than $250,000 during the period. 
    • ‘AlphV/BlackCat was the most prevalent ransomware variant during the 2022–2024 period, according to the report. The other most reported variants included Akira, LockBit, Phobos and Black Basta.” 
  • Dark Reading adds,
    • “You may be familiar with ransomware-as-a-service (RaaS), but now there’s also packer-as-a-service.
    • “Security vendor Sophos on Dec. 6 published research on “Shanya,” a packer-as-a-service family that augments ransomware so it can avoid anti-malware software. While ransomware-as-a-service provides low-level attackers with extortion malware they might not be able to create otherwise, packers-as-a-service (PaaS) provide a shell around pre-existing ransomware that acts as an extra layer of obfuscation.
    • “Shanya covers ground previously paved by PaaS operation HeartCrypt, which over the past year has firmly entrenched itself in the modern ransomware ecosystem. Sophos’ Gabor Szappanos and Steeve Gaudreault say Shanya is “already favored by ransomware groups and taking over (to some degree) the role that HeartCrypt has played in the ransomware toolkit.”
  • and
    • “Initial access broker Storm‑0249 has shifted from noisy, easily detected phishing attacks to highly targeted campaigns that are much harder to detect and stop. 
    • “According to ReliaQuest, Storm-0249, which is known for brokering network access to ransomware operators, is increasingly weaponizing legitimate endpoint detection and response (EDR) processes as well as built-in Windows utilities to carry out post-compromise activities. This includes poking around compromised systems to gather information, setting up command-and-control (C2) channels, and staying persistent in the environment. These new tactics let Storm‑0249 slip past defenses, get deep into networks, and operate almost completely under the radar, the security vendor said.”
  • and
    • “A new attack uses SEO poisoning and popular AI models to deliver infostealer malware, all while leveraging legitimate domains. 
    • “ClickFix attacks have gained significant popularity over the past year, using otherwise benign CAPTCHA-style prompts to lure users into a false sense of security and then tricking them into executing malicious prompts against themselves. These prompts are often delivered through SEO poisoning and phishing campaigns, representing one of the fancier applications of social engineering in cybercrime to date.” 
  • The Register points out,
    • “Researchers at security software vendor Huntress say they’ve noticed a huge increase in ransomware attacks on hypervisors and urged users to ensure they’re as secure as can be and properly backed up.
    • “Huntress case data revealed a stunning surge in hypervisor ransomware: its role in malicious encryption rocketed from just three percent in the first half of the year to 25 percent so far in the second half,” wrote Senior Hunt & Response Analyst Anna Pham, Technical Account Manager Ben Bernstein, and Senior Manager for Hunt & Response, Dray Agha in a Monday [December 8] post.
    • “The primary actor driving this trend is the Akira ransomware group,” the trio warned, adding that the gang, and other attackers, are going after hypervisors “in an attempt to circumvent endpoint and network security controls.”

From the cybersecurity business and defenses front,

  • Security Week reports,
    • “Enterprise cybersecurity giant Proofpoint has completed the acquisition of Germany-based Microsoft 365 security solutions provider Hornetsecurity.
    • “Financial details were not officially disclosed when news of the transaction came to light, but it was reported that Proofpoint would be paying $1 billion for its European competitor. SecurityWeek learned at the time that the deal size well exceeded $1 billion.
    • “Proofpoint has now revealed that the transaction has been valued at $1.8 billion. 
    • “Through the acquisition of Hornetsecurity, Proofpoint is aggressively expanding its reach into the SMB market and strengthening its foothold in Europe.”
  • Info Bank Security adds,
    • “An identity security stalwart led by the company’s longtime founder raised $700 million to support the management of non-human identities and agentic artificial intelligence.
    • “Los Angeles-based Saviynt plans to use the Series B proceeds to invest in core platform capabilities, AI governance protocols and deep integrations with the likes of AWS, Google and CrowdStrike, said Saviynt President Paul Zolfaghari. What was once about on premise human access is now a multidimensional challenge involving extended workforces, robotic accounts and AI-driven agents, Zolfaghari said.
    • “It was an opportunity to put in place the resources necessary to deliver on the vision for the future. The interest in identity security and AI has gone up quite a bit,” he said. “The amount is just a function of the resources that we think that we need for the foreseeable future. It’s an opportunity for us to have the resources we need while still maintaining the control and the culture that has gotten us to this point.”
  • Cyberscoop relates,
    • “Global cybersecurity agencies have issued the first unified guidance on applying artificial intelligence (AI) within critical infrastructure, signaling a major shift from theoretical debate to practical guardrails for safety and reliability.
    • “The release of joint guidance on Principles for the Secure Integration of Artificial Intelligence in Operational Technology marks a meaningful milestone for critical infrastructure security because major global cybersecurity agencies, including CISA, the FBI, the NSA, the Australian Signals Directorate’s Australian Cyber Security Centre, and other partners, have aligned on a shared direction. As AI adoption accelerates across operational environments, this document moves us from theory to practice. It acknowledges AI’s promise while making clear that it also “introduces significant risks—such as operational technology (OT) process models drifting over time or safety-process bypasses” that operators must actively manage to ensure reliability.”
  • Here is a link to Dark Reading’s CISO Corner.

Friday report

David Ermer–CDC, CMS, Congress, COVID-19, Employee Wellness Programs, FDA, Generative AI, HIPAA Privacy and Security Rules, Medical / Rx research, OPM, U.S. Healthcare, Wellness–

From Washington, DC,

  • The Washington Post reports,
    • “House Republicans unveiled a new health care proposal Friday as they aim to address concerns about rising health insurance costs just weeks before enhanced Affordable Care Act subsidies expire.
    • “The legislation would codify and expand health plans for small businesses, fund reductions of premiums for low-income people in the individual health insurance market and increase transparency in prescription drug pricing, according to House Republican leadership aides.
    • “The proposal would also allow for a separate vote on an extension of the premium ACA tax credits, which subsidize health insurance for most of the 24 million Americans who buy their coverage from the Obamacare Marketplace — the central demand Democrats and moderate Republicans have made in the recent health care debate.
    • “The House is expected to vote on the proposal next week before leaving Washington for a two-week holiday break. If passed, it is unclear if the proposal could succeed in the Senate, where it would require 60 votes to overcome a filibuster.”
  • FEHBlog observation — This week, the Democrat leadship in the Senate offered a three year extension extension of the Biden subsidies while the Republican leadership offered a new approach with no transistion period. Both offerings were doomed to fail. The FEHBlog hopes that cooler heads prevail over the next week.
  • Govexec relates,
    • “The House voted 231-195 on Thursday to pass legislation that would nullify President Trump’s efforts to strip more than 1 million federal workers of their collective bargaining rights, sending the measure over to the Senate, where its prospects are less rosy.
    • “Twenty Republican lawmakers broke ranks to support the Protect America’s Workforce Act (H.R. 2550) on the floor. Introduced by Reps. Jared Golden, D-Maine, and Brian Fitzpatrick, R-Pa., the measure effectively nullifies Trump’s March executive order barring unions at more than 40 federal agencies under the guise of national security and bars federal agencies from terminating any union contracts that were in place prior to the edict’s signature.”
  • The American Hospital Association News lets us know,
    • “The Centers for Medicare & Medicaid Services Dec. 11 announced the launch of the Make America Healthy Again: Enhancing Lifestyle and Evaluating Value-based Approaches Through Evidence Model, a voluntary payment model that will fund up to 30 chronic disease prevention and health promotion proposals. The proposals must include evidence-based functional or lifestyle medicine interventions not covered by Original Medicare. Under the MAHA ELEVATE Model, CMS said it will evaluate necessary data on the cost and quality of such interventions to inform future decisions on the feasibility of including them in Original Medicare. The agency will release a funding notice in early 2026 for the first cohort, which will begin Sept. 1, 2026. The second cohort will begin one year later.”
  • The U.S. Office of Personnel Management announced today that it is seeking public comments on its plan to resurrect its FEHB and now also PSHB health claims data warehouse.
    • “OPM is collecting service use and cost data from FEHB and PSHB Carriers, including medical claims, pharmacy claims, encounter data, and provider data. This data will enable OPM to oversee health benefits programs and ensure they provide competitive, quality, and affordable plans. OPM requires Carriers to report necessary information and permit audits and examinations to manage the FEHB Program effectively. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule permits covered entities, including carriers, to disclose protected health information (PHI), including service use and cost data, to health oversight agencies, such as OPM, for oversight activities authorized under 45 CFR 165.512(d)(1).”
    • This is a legally flawed analysis. The FEHB Act, 5 U.S.C. Sec. 8910(b), states
      • “(b) Each contract entered into under section 8902 of this title shall contain provisions requiring carriers to—
      • “(1) furnish such reasonable reports as the Office determines to be necessary to enable it to carry out its functions under this chapter; and
      • “(2) permit the Office and representatives of the Government Accountability Office to examine records of the carriers as may be necessary to carry out the purposes of this chapter.”
    • Furnishing all claims data to OPM is a not a reasonable report in any sense of the English language, and the HIPAA Privacy Rule does not give health oversight agencies new data access rights. See Fed. Reg. 82,462, 82,528 (Dec. 28, 2000). OPM should head back to the drawing board for consultations with carriers.
    • The public comment deadline is February 10, 2026.
  • On a related note, per a CMS news release,
    • “The Centers for Medicare & Medicaid Services (CMS) is pleased to announce the 2026 CMS Burden Reduction Conference taking place February 25, 2026, from 9:00 a.m. to 1:00 p.m. ET. This year’s conference will be a hybrid event, with in-person programming at the Hubert H. Humphrey (HHH) Building in Washington, DC, and a fully supported virtual option for remote attendees. In-person attendance will be limited due to space.”
  • OPM should hold a similar event for overburdened FEHB and PSHB carriers.

From the Food and Drug Adminstration front,

  • Per Fierce Pharma,
    • “Amid a swell of regulatory successes in the myasthenia gravis arena this decade, Amgen is wading into the fray with a new indication for its monoclonal antibody Uplizna.
    • “Thursday, the FDA greenlighted Uplizna (inebilizumab) to treat generalized myasthenia gravis (gMG) in adults who are anti-acetylcholine receptor (AChR) and anti-muscle specific tyrosine kinase (MuSK) antibody positive. After two loading doses, Uplizna for gMG is administered just twice a year, Amgen noted in a Dec. 11 press release.”
  • and
    • “After a three-decade drought of new antibiotics to treat gonorrhea, the FDA has signed off on two first-in-class oral treatments for the sexually transmitted infection (STI), which affects more than 80 million people around the world each year. 
    • “On Friday, the U.S. regulator green lit Innoviva’s Nuzolvence (zoliflodacin) for uncomplicated urogenital gonorrhea. The nod comes less than 24 hours after the agency granted an approval in the same indication to GSK’s Blujepa, which was already on the market for uncomplicated urinary tract infections following its approval in March.
    • “The endorsements are similar in that both therapies are indicated for those ages 12 and older where standard of care treatment is contraindicated or where patients are intolerant or unwilling to use the first line of treatment.”
  • Cardiovascular Business tells us,
    • “The U.S. Food and Drug Administration (FDA) has granted 510(k) market clearance to the enVast mechanical thrombectomy system from Texas-based Vesalio.
    • “The company said the system offers a new approach to clot capture and the removal of large thrombus burden (LTB) in patients undergoing primary percutaneous coronary intervention (PCI). Thrombectomy is used in the coronary arteries to quickly remove clots to restore blood flow following a heart attack to minimizing myocardial damage.
    • “With FDA clearance and the upcoming U.S. launch of enVast, we are proud to introduce a device that we truly believe redefines coronary thrombectomy,” Steve Rybka, CEO of Vesalio, said in a statement. “Clinical experience internationally has consistently demonstrated its safety and effectiveness in managing complex LTB situations.”

From the public health and medical / Rx research front,

  • The Centers for Disease Control and Prevention announced today,
    • “RSV activity is increasing in the Southeastern, Southern, and Mid-Atlantic areas of the country with emergency department visits and hospitalizations increasing among children 0-4 years old. Seasonal influenza activity continues to increase in most areas of the country. COVID-19 activity is low nationally.
    • “COVID-19
      • “COVID-19 activity is low nationally.
    • “Influenza
    • “RSV
      • “RSV activity is increasing in the Southeastern, Southern, and Mid-Atlantic areas of the country with emergency department visits and hospitalizations increasing among children 0-4 years old.
    • “Vaccination
      • “It is not too late to get vaccinated ahead of the holidays. Talk to your doctor or trusted healthcare provider about what vaccines are recommended for you and your family.”
  • The American Hospital Association News adds,
    • “The Centers for Disease Control and Prevention Dec. 11 released a report that found last year’s version of the COVID-19 vaccine was 76% effective in preventing emergency department or urgent care visits for children ages 9 months to 4 years. It was 56% effective for those ages 5-17 years old. “These findings suggest that vaccination with a 2024–2025 COVID-19 vaccine dose provided children with additional protection against COVID-19–associated ED/UC encounters compared with no 2024–2025 dose,” the CDC wrote.”
  • The New York Times reports,
    • “To treat their pain, anxiety and sleep problems, millions of Americans turn to cannabis, which is now legal in 40 states for medical use. But a new review of 15 years of research concludes that the evidence of its benefits is often weak or inconclusive, and that nearly 30 percent of medical cannabis patients meet criteria for cannabis use disorder.
    • “The evidence does not support the use of cannabis or cannabinoids at this point for most of the indications that folks are using it for,” said Dr. Michael Hsu, an addiction psychiatrist and clinical instructor at the University of California, Los Angeles, and the lead author of the review, which was published last month in the medical journal JAMA. (Cannabis refers to the entire plant; cannabinoids are its many compounds.)”
  • The AP informs us,
    • “The U.S. suicide rate dropped slightly last year from some of the highest levels ever reported, preliminary data suggests. Experts say it’s hard to know exactly why, or whether the decline will continue.
    • “A little over 48,800 suicide deaths were reported in 2024, according to provisional data from the Centers for Disease Control and Prevention, roughly 500 fewer than the year before.
    • “The overall suicide rate fell to 13.7 per 100,000 people.”
  • The Washington Post relates,
    • “Solving a technical challenge that has stymied science for 40 years, researchers have built a robot with an onboard computer, sensors and a motor, the whole assembly less than 1 millimeter in size — smaller than a grain of salt.
    • “The feat, accomplished by a partnership of researchers at the University of Pennsylvania and University of Michigan, advances medicine toward a future that might see tiny robots sent into the human body to rewire damaged nerves, deliver medicines to precise areas, and determine the health of a patient’s cells without surgery.”
  • Per Healio,
    • “GLP-1 receptor agonists are not associated with increased risks for dry age-related macular degeneration or cataract development, according to two recently published studies.
    • “The data instead showed significantly reduced risk for cataracts, as well as lower risk for dry AMD, linked with the use of GLP-1s, according to Abhimanyu Ahuja, MD, an ophthalmology resident at the Oregon Health & Science University Casey Eye Institute, and colleagues.
    • “Other studies have demonstrated that these medications have anti-inflammatory and neuroprotective properties,” Ahuja told Healio. “We wondered whether they might influence the risk of conditions like macular degeneration or cataracts in older adults.”
  • Per MedTech Dive,
    • “AtriCure, whose devices are used to treat atrial fibrillation and related conditions, said Thursday the first procedures were performed in patients with its new dual energy platform.
    • “The system integrates pulsed field ablation with a radiofrequency ablation approach using the company’s cardiac clamp technology. Surgeons can use either method independently or in combination.
    • “The platform is not yet approved for use in any market. AtriCure said it expects to initiate a clinical trial in the coming year.”
  • Per Biopharma Dive,
    • “Arcus Biosciences will terminate work on a TIGIT-targeting cancer drug following a decision to cancel a Phase 3 trial because it didn’t appear likely to improve patients’ survival, the company said in a statement Friday.
    • “Called domvanalimab, the drug was being tested in combination with the immunotherapy zimberelimab and chemotherapy against Bristol Myers Squibb’s Opdivo and chemo in gastric and esophageal cancers that haven’t been treated before. Arcus said an independent data committee recommended ending the trial because the domvanalimab combination wasn’t likely to help patients live longer.
    • “The domvanalimab-based combination was the centerpiece of a partnership with Gilead Sciences that led the bigger company to buy a 33% stake in Arcus and pay $900 million just to secure rights.”

From the U.S. healthcare business and artificial intelligence front,

  • Healthcare Dive reports,
    • “Hospitals are managing series of cost, workforce and reimbursement challenges as they navigate uncertainty at the close of 2025 and beyond, according to a new report from Kaufman Hall.
    • “Health systems are attempting to mitigate the impact of tariffs and increasingly expensive supplies, according to Kaufman Hall’s 2025 Health System Performance Outlook report. At the same time, hospitals are trying to retain clinical staff and outsource other functions, according to the report.
    • “Only 30% of hospital leaders surveyed expect balance sheets to improve in 2026, while 30% expect them to lower and 40% projected little change. The split highlights how uncertain health systems feel about the future, especially from recent regulatory changes in the “Big Beautiful Bill” and the likely expiration of Affordable Care Act subsidies.”
  • Beckers Hospital Review relates,
    • “Dallas-based Tenet Healthcare reached a record high stock price of $218 on Nov. 25, capping off a transformative year that highlights investor confidence in the system’s ongoing shift toward specialty and outpatient care.
    • “As of Dec. 12, Tenet stock remained elevated at $199, up nearly 60% from $125 on Jan. 2. The spike reflects investor optimism around Tenet’s long-term strategy to transform into a value-based care enterprise anchored by its ambulatory business, United Surgical Partners International.
    • “In 2024, Tenet sold 14 hospitals for a combined $4.8 billion as part of a sweeping overhaul. The system now operates 50 acute-care hospitals while aggressively expanding its ambulatory surgery center footprint through USPI.”
  • Beckers Payer Issues tells us about 14 payer AI moves this year and “Turquoise Health has detailed its first comprehensive payer price transparency scores in its 2025 impact report, evaluating machine-readable file quality across 97 payers.” 

Thursday report

David Ermer–ACA, CDC, Congress, FDA, Federal employment benefits, Medical / Rx research, Mental health care, NIH, Obesity, OPM, Rx coverage, U.S. Healthcare–

From Washington, DC,

  • The Wall Street Journal reports,
    • “A Democratic effort to extend expiring healthcare subsidies drew some Republican votes but failed to advance in the Senate on Thursday, leaving no clear path in Congress for aiding millions of Americans facing soaring costs for their Affordable Care Act coverage next year.
    • “The proposal would have extended the enhanced Covid-era ACA subsidies for three years. The bill was backed by 51 senators—including Republican Sens. Lisa Murkowski and Dan Sullivan of Alaska, Susan Collins of Maine and Josh Hawley of Missouri—with 48 opposed, short of the 60 votes needed to advance under the Senate’s filibuster rule.
    • “Republicans, who control the chamber 53-47, put forward an alternative healthcare bill that wouldn’t extend the subsidies but instead offers federal funds to some households to put toward out-of-pocket healthcare costs. That proposal failed with 51 in favor and 48 opposed. All Republicans except Sen. Rand Paul of Kentucky supported the measure, while no Democrat voted for it.
    • “The lack of progress in Congress has left many of the nation’s ACA enrollees in a precarious situation. With open enrollment closing on Dec. 15 for plans starting Jan. 1, households are signing up now for coverage with sharply higher costs, with no guarantee that Congress will act to restore subsidies and bring the price tag down. Others are expected to skip coverage altogether.
    • “With the failure of the two votes Thursday, hope is fading for any deal to extend the subsidies before the end of the year, if at all. The next major legislative deadline is Jan. 30, when lawmakers need to pass a new bill funding the government. Still, some lawmakers believed a deal could still be reached.
    • “I hope that there are enough people on both sides who want to come to the table and get a compromise,” said Sen. Jeanne Shaheen (D., N.H.).”
  • Tammy Flanagan, writing in Govexec, tells us,
    • “OPM’s retirement application pile remains large as the year draws to a close
    • “New retirees awaiting full benefits may face holiday heartache as the backlog swelled to nearly 50,000 by the end of November.”

From the Food and Drug Administration front.

  • The Washington Post reports,
    • “An in-home headset that allows people with depression to send mild electrical current to their brains has been cleared by the Food and Drug Administration, in what medical experts consider a milestone for expanding mental health treatment beyond drugs.
    • “The prescription device, made by Flow Neuroscience, is designed to counteract moderate to severe depression in adults by delivering electric stimulation to an area of the brain that controls mood and stress. While such stimulation is widely used to treat depression, Flow is aiming to fill a niche with a product that delivers a relatively low dose of current at home, instead of at specialized clinics. The FDA said testing showed “modest” results for patients.”
  • Per MedTech Dive,
    • “Intuitive Surgical said Wednesday its da Vinci SP surgical robot received Food and Drug Administration clearance for use in inguinal hernia repair, gallbladder removal and appendectomy procedures.
    • “The clearances add to the single port robot’s indications in urology, colorectal, thoracic and transoral procedures, as Intuitive works to expand adoption of the platform, launched in the U.S. in 2018.
    • “The SP system, for surgery through a single incision or natural orifice, is designed to help surgeons access narrow or deep spaces within the body to perform more complex procedures. The surgeon can control up to three multi-jointed instruments and a 3D-HD imaging endoscope through the entry point.”
  • Fierce Pharma relates,
    • “A new guidance document issued by the FDA this week offers recommendations for how makers of prescription biosimilars and biologic reference products should approach promotional advertising and labeling for those meds.
    • “The document (PDF) finalizes a draft guidance issued by the agency in April 2024 and replaces a previous guidance on the topic that was initially published in 2020.
    • “Differences from last year’s draft version are minimal, including only an addition in the introduction that its recommendations “apply regardless of the medium of the communication (e.g., paper, digital)” and a few extra lines about considerations for comparisons between biosimilars and their reference products, along with “editorial changes for consistency, readability, and clarity,” per the FDA.
    • ‘At the core of the guidance is a call for all promotional materials to be “accurate, truthful, and non-misleading.”
  • STAT News tells us,
    • “Exactly a month after it announced the removal of black box warning labels on estrogen therapy products used in menopause, the Food and Drugs Administration hosted an expert panel to discuss the other sexual hormone with a potentially outdated black box: testosterone. 
    • “Nine experts, including academics, clinicians, and the CEO of a pharmaceutical startup focused on testosterone products, delivered lectures and answered questions highlighting the importance of testosterone as a marker of broader male health. They also promoted increased engagement with its therapeutic value and recommended changes in labeling and substance control.” 
  • Beckers Hospital Review shares background about and FDA review process.
    • “The FDA is considering changes that could reshape how vaccines move from labs to American pharmacies — the most significant proposed shift in vaccine oversight since the early 2000s. While the agency has not formally issued draft guidance, recent public comments, advisory committee discussions and internal policy memos outline a framework that is intended to streamline clinical trials, tighten manufacturing oversight and modernize postmarket safety monitoring.”

From the public health and medical / Rx research front,

  • The Washington Post reports,
    • “South Carolina’s measles outbreak is “accelerating” in the wake of Thanksgiving travel and a lack of vaccinations, an epidemiologist for the state’s Department of Public Health (DPH) warned Wednesday, after authorities traced a sizable outbreak to a church in the state’s northwest.
    • “Of the 111 measles cases recorded in that area, known as the Upstate region, 105 involved people who were unvaccinated while three involved those who were partially vaccinated, state epidemiologist Linda Bell said at a news briefing. One dose of the vaccine is 93 percent effective against measles, while the full two-dose regimen is 97 percent effective, according to the Centers for Disease Control and Prevention.
    • “At least 254 people had been placed in quarantine as of Tuesday, 16 of whom are in isolation, the DPH said in a news release.
    • “Bell said that 27 new cases had been reported since Friday, bringing the total reported to the DPH this year to 114. “Accelerating is an accurate term. That is a spike in cases we are concerned about,” she said in response to a question from a reporter, adding that South Carolina has “lower than hoped for” vaccination coverage.”
  • NBC News tells us,
    • “Heart disease has long been the top killer of women in the United States, but new research suggests uterine fibroids, which many may not even be aware they have, could be putting them at a significantly greater risk.
    • “A large, 10-year study found that women with leiomyomas had an 81% higher long-term risk of heart disease than those without the common condition. Women with fibroids — generally benign tumors that can form on or in the uterus — also had higher individual risks of cerebrovascular, coronary artery and peripheral artery diseases a decade after diagnosis.
    • “The study involved more than 2.7 million U.S. women and was led by scientists at the University of Pennsylvania Perelman School of Medicine. It was published Wednesday in the Journal of the American Heart Association.
    • “We do hope that our study adds to this growing evidence that reproductive health may provide important insights into cardiovascular health,” said lead author Julia DiTosto, a doctoral candidate in epidemiology at Penn. “There is a need for more information on how exactly, biologically, these conditions are related and also identifying potential strategies for cardiovascular prevention.”
  • Per Healio,
    • “Younger age at diagnosis did not appear to affect outcomes among women with breast cancer who harbor BRCA mutations, according to study results presented at San Antonio Breast Cancer Symposium.
    • “In addition, survival did not differ between very young women — defined as 30 years or younger — and those aged 31 to 40 years.
    • “Age per se should not be considered a negative prognostic factor in BRCA carriers when appropriate treatment is provided,” Matteo Lambertini, MD, PhD, associate professor of medical oncology and consultant in medical oncology at University of Genova-IRCCS Policlinico San Martino Hospital in Italy, said during a presentation.”
  • Per Radiology Business,
    • “Targeting women who are eligible for both lung and breast cancer screening pays off, according to new research.  
    • “Numerous studies have explored poor LCS adherence, a problem less pronounced in screening mammography. One previous study estimated about 58% of LCS-eligible women reported having a mammogram over the past two years versus just 8% who underwent low-dose CT for lung cancer. 
    • “This presents a potential opportunity, experts detailed Dec. 1 in the Journal of the American College of Radiology. Researchers at two academic medical centers recently aimed to leverage mammography adherence to bolster LCS uptake and are finding success, with a significant uptick in total LDCT examinations. 
    • “It has been more than 10 years since annual screening for lung cancer was recommended, and screening rates still are disappointingly low. There are many reasons for these low rates, but mostly identifying eligible individuals is challenging in the primary care setting, and there is evidence showing a surprising lack of awareness about lung cancer screening among eligible individuals,” study co-investigator Robert Smith, PhD, with the American Cancer Society, which funded the analysis, said in a statement. “There is enormous potential here, and the ACS is thrilled with the outcome of this study.” 
  • Medscape discusses the rising number of double diabetes cases and “What Doctors Should Know About Viral Sleep Trends.”
  • Per Health Day,
    • “Many young Americans are still smoking nicotine, tobacco or cannabis, even as edibles and vapes continue to grow in popularity.
    • “A University of Michigan study looked at how 12- to 34-year-olds are using these substances today. Researchers examined data from 8,722 individuals who had used at least one of these products within the last 30 days.
    • “On average, users tried about two products during that time, and researchers identified six main patterns of use:
      • “Combustible tobacco: 31%
      • “Multiple forms of cannabis: 27%
      • “Vaping nicotine: 18%
      • “Using multiple forms of nicotine, tobacco and cannabis: 14%
      • “Cannabis edibles only: 5%
      • “Multiple forms of nicotine and tobacco: 5%
    • “The largest group, and still the most concerning, were people who smoked tobacco, researchers said.”
  • BioPharma Dive relates,
    • “An experimental Eli Lilly obesity medicine helped patients lose more than a quarter of their body weight while offering relief from knee osteoarthritis in a Phase 3 study released Wednesday.
    • “Patients on the highest dose of retatrutide lost an average of 28.7% of their body weight after 68 weeks of treatment, compared with 26.4% on the lower dose and 2.1% on placebo, Lilly said. Additionally, 39% of patients on the highest dose achieved weight loss of 30% or more and 24% of those on that dose saw their weight drop by 35% or more, Lilly said.
    • “Lilly has now produced a drug with the best weight loss results of any medication to date, Leerink Partners analyst David Risinger wrote in a note to clients. Before the release, Risinger said he was looking for weight loss in the mid-high 20% range, which would surpass the effects seen with Lilly’s tirzepatide, the world’s best-selling drug, sold as Zepbound for obesity.”
  • Per Genetic Engineering and Biotechnology News,
    • “In 2022, monkeypox virus (mpox) caused more than 150,000 cases—causing flu-like symptoms and painful rashes and lesions. The outbreak resulted in almost 500 deaths. At the time, vaccines developed to fight smallpox were repurposed to help the most vulnerable patients. But that vaccine—manufactured from a whole, weakened virus—is complicated and costly to make.
    • “Now, a major inroad towards a new and more effective way to fight monkeypox virus has been published. A team used the AlphaFold 3 model to identify a viral surface protein—OPG153—as a good target for developing new antibody therapies to treat mpox or for use in a vaccine. When mice were injected with the viral surface protein, the animals produced antibodies that neutralized the monkeypox virus, suggesting the breakthrough could be used in a new mpox vaccine or antibody therapy.
    • “This work is published in Science Translational Medicine in the paper, “Antigen-agnostic identification of poxvirus broadly neutralizing antibodies targeting OPG153.”
    • “Unlike a whole-virus vaccine that’s big and complicated to produce, our innovation is just a single protein that’s easy to make,” said Jason McLellan, PhD, professor of molecular biosciences at The University of Texas at Austin.”
  • and
    • “Findings from a new study led by scientists at Stanford University School of Medicine and their colleagues elsewhere show that a single signaling pathway controls whether immune cells attack or befriend cells that they encounter in the body. By manipulating this pathway, scientists may be able to tweak the immune response to treat a range of diseases, including cancers, autoimmune disorders, and more. Full details are provided in a new Nature paper titled “Erythropoietin receptor on cDC1s dictates immune tolerance.”  
    • “The findings build on work published in an earlier study by the same research group that described a role for erythropoietin (EPO) in the immune system—specifically, controlling how dendritic cells respond to real or perceived threats. The current study, which was performed in mice, helps to illuminate an aspect of peripheral immune tolerance, which is responsible for preventing inappropriate attacks on healthy tissue. The scientists who discovered regulatory T cells (Tregs), which are the key cellular players in peripheral immune tolerance, were awarded the 2025 Nobel Prize in physiology or medicine.” 

From the U.S. healthcare business front,

  • Fierce Healthcare reports,
    • “Highmark and Blue Cross and Blue Shield Kansas City have announced plans to affiliate.
    • “The insurers revealed on Thursday that they will enter into an affiliation where Blue Cross KC will maintain its local brand and operations, but will be able to tap into Highmark’s resources to accelerate innovation for its members. Highmark is the fifth-largest Blues plan in the U.S.
    • “Through the affiliation, Blue Cross KC’s financial reserves and earnings will remain within its organization, and Highmark will support its evolution through administrative capabilities, technology and new tools to enable the insurer to build new products and operational efficiencies.
    • “Erin Stucky, CEO of Blue Cross KC, said in the announcement that after a “comprehensive” process to find a partner, the team is “confident” that Highmark was the right choice to “help us deliver greater value for our community.”
  • and
    • “Connecticut’s Office of Health Strategy (OHS) approved on Wednesday Hartford HealthCare’s Emergency Certificate of Need application to acquire two hospitals and related assets from the bankrupt Prospect Medical Holdings. 
    • “The expedited decision ensures continuity of care for Eastern Connecticut residents, while imposing specific conditions designed to ensure preservation of healthcare access and quality and control cost growth,” Amy Porter, the state regulator’s acting commissioner, said in an announcement. “The OHS staff conducted a rigorous and highly efficient process made possible by the emergency [certificate of need] statute.”
    • “Hartford HealthCare’s $86.1 million bid was the only one received for Manchester Memorial and Rockville General, and had previously been accepted by Prospect and green lit by a bankruptcy judge. The facilities had been at the heart of a now-settled legal dispute between bankrupt Prospect Medical Holdings and Yale New Haven Health, which prior to the bankruptcy had offered hundreds of millions more for the locations.”
  • and
    • “Aradigm Health, a new benefits platform aimed at easing the financial sting of coverage for cell and gene therapies, has launched out of stealth.
    • “The company is making its debut backed by a $20 million series A funding round that it intends to use to further enhance platform development, building out its team and growing its partnerships with payers and providers. The round was led by Frist Cressey Ventures with backing from Andreessen Horowitz and Morgan Health.
    • “Andreessen Horowitz led the company’s $5 million seed round in 2024 as well, according to an announcement.”
  • Healthcare Dive tells us,
    • “Elevance has added a former Pfizer executive to its board, the latest addition of pharmaceutical industry veteran as the insurer focuses on building its pharmacy services.
    • “Amy Schulman will start as an independent director of Elevance effective Jan. 12, the insurer announced Wednesday. Schulman will serve on the board’s audit and finance committees.
    • “Schulman’s “insight into the intersection of science, technology, and patient care makes her an exceptional addition as we continue to advance and expand our services,” Ramey Peru, chair of Elevance’s board, said in a statement.”
  • Beckers Hospital Review reports,
    • “Austin, Texas-based UT Health Austin intends to go live with a new inpatient Epic EHR on the same day it opens its new multibillion-dollar academic medical center.
    • “With the net-new implementation, the health system will be able to easily adopt many of the vendor’s latest AI and automation features.
    • “It is a really unique opportunity to build this from scratch, from the ground up,” UT Health Austin CIO Michael Ryan told Becker’s. “We’re really taking a fresh-eyes look at it. … We don’t have many existing legacy processes or legacy ways of working.”
    • “The $2.5 billion University of Texas at Austin Medical Center, slated to break ground in 2026, will include a new UT hospital and MD Anderson Cancer Center. Austin is currently the largest American city without an academic medical center.”
  • and
    • “U.S. News & World Report released its 2026 Best Hospitals for Maternity Care ratings Dec. 9, which also recognize hospitals providing services to underserved communities.
    • “The media company used self-reported maternity care data to identify 147 hospitals as Maternity Care Access Hospitals for providing maternity services in areas that would otherwise lack adequate access to such care.:”
    • The article lists all 147 identified hospitals by State.
  • and
    • “Many health systems are expanding their participation in value-based care models over the next few years, though few have substantial revenue at risk in value-based contract arrangements, according to a new Sage Growth Partners report. 
    • “The report, published Dec. 11, is based on a survey of 101 hospital and health system C-suite leaders from academic medical centers, integrated delivery networks and independent hospitals.’
  • Per an Institute for Clinical and Economic Research news release,
    • “The Institute for Clinical and Economic Review (ICER) today posted its revised Evidence Report assessing the comparative clinical effectiveness and value of cytisinicline (Achieve Life Sciences, Inc.) for smoking cessation. Our primary comparison was with the smoking cessation drug varenicline.
    • “Smoking cigarettes is the number one cause of preventable deaths in the US, and so any new therapy to assist with smoking cessation is extremely important,” said ICER’s Chief Medical Officer, David Rind, MD. “The drug we reviewed for this assessment, cytisinicline, is the same molecule as cytisine, a drug long used for smoking cessation in Eastern Europe. Our analyses show that cytisine/cytisinicline has similar efficacy but significantly fewer gastrointestinal side effects than varenicline, a common prescription drug used for smoking cessation in the US. We heard from experts that they are hopeful cytisinicline will be priced so as to be widely available to those who need it.”
    • “This Evidence Report will be reviewed at a virtual public meeting of the Midwest Comparative Effectiveness Public Advisory Council (Midwest CEPAC), on January 15, 2026. The Midwest CEPAC is one of ICER’s three independent evidence appraisal committees comprising medical evidence experts, practicing clinicians, methodologists, and leaders in patient engagement and advocacy.”
  • Per MedTech Dive,
    • “Natera last week said it completed the acquisition of Foresight Diagnostics, expanding the company’s position in solid tumor molecular residual disease detection, particularly in lymphoma, a cancer of the lymphatic system.
    • “The all-stock transaction was valued at $275 million upfront, plus up to $175 million in revenue- and reimbursement-based milestone payments.
    • “Foresight’s PhasED-Seq technology will be integrated into Natera’s Signatera platform to further differentiate performance in solid tumors.”