Monday Report

David Ermer

I am an attorney who practices law in Washington DC. My practice has involved the Federal Employees Health Benefits Program since 1983.

Monday Report

David Ermer–ACA, CDC, COVID-19, FDA, Generative AI, Medical / Rx research, NIH, OPM, U.S. Healthcare–
Photo by Sven Read on Unsplash

From Washington, DC,

  • Fierce Healthcare lets us know,
    • “One week before President-elect Donald Trump’s inauguration, the Biden administration is finalizing a rule that sets new standards for the individual market under the Affordable Care Act.
    • “First proposed in October, the rule protects consumers from having their coverage swapped unwittingly. Brokers and agents that violate this policy, and pose other “unacceptable” risks, can be suspended. The rule will go into effect on Wednesday.
    • “The rule also amends the risk adjustment program through user fee rates, new calculations to the Basic Health Program (BHP) and reporting to the ACA Quality Improvement Strategy (QIS), designed to improve member outcomes.”
  • Here is a link to CMS’s fact sheet on the final Affordable Care Act (“ACA”) rule titled “HHS Notice of Benefit and Payment Parameters for 2026” and a link to the rule itself.
  • The ACA regulators today withdrew an October 28, 2024, proposed rule which would have “expand access to coverage of recommended preventive services without cost sharing in the commercial market, with a particular focus on reducing barriers to coverage of contraceptive services, including over the counter (OTC) contraceptives.”
  • FedSmith confirms,
    • “President-elect Donald Trump has nominated Scott Kupor as the Director of the Office of Personnel Management (OPM). 
    • “Kupor would lead an OPM organization that has grown under the Biden administration. It now has a larger budget and workforce. 
    • “For fiscal year 2025, the Biden administration proposed a budget of $465.8 million for OPM, which is an increase of about 21% compared to the enacted budget of $385.7 million in fiscal year 2023.”
  • The U.S. Office of Personnel Management posted on the Federal Register’s Public Inspection List a final rule which, according to Govexec, “will standardize the maps relied upon to determine the locality pay rates for white- and blue-collar federal workers across the U.S.” effective October 1, 2025.
  • Pew Research reports on what the data says about federal and postal workers.
  • Federal News Network notes,
    • “The Postal Service is offering early retirement buyouts to mail handlers who work in the agency’s mail processing facilities, and other USPS employees who work in a variety of support positions.
    • “USPS, in a memo obtained by Federal News Network, is offering lump-sum incentive payments worth up to $15,000 to eligible mail handlers who agree to a voluntary early retirement in the coming months.
    • “The agency reached an agreement with the National Postal Mail Handlers Union, which represents 47,000 mail handlers nationwide, as well as the American Postal Workers Union, which represents 222,000 active and retired postal clerks, mail processors and sorters, as well as other USPS occupations.
    • “Federal News Network reached out to both unions for comment.

From the judicial front,

  • The American Hospital Association News reports,
    • The U.S. Chamber of Commerce Jan. 13 filed a lawsuit against the Federal Trade Commission, saying changes made by the FTC to premerger notification rules under the Hart-Scott-Rodino Act are “unnecessary and unlawful.”
    • In a statement, the Chamber said the FTC “has failed to justify the need to subject every merger filing to its new burden. During the rulemaking process it never contemplated alternative, less burdensome approaches and understates the costs and overstates the benefits of changing the rule as part of its final analysis. Subjecting thousands of routine mergers and acquisitions to these additional burdens will slow down normal business transactions and increase costs, hurting the economy in the process.”
    • The FTC finalized changes to the premerger notification rules, form and instructions under the HSR Act in October. The AHA expressed disappointment with the FTC’s changes, saying that the rule “functions as little more than a tax on mergers… The agency already has more than enough information about hospital transactions, and it has shown no hesitation in challenging them. The final rule will just require hospitals to divert time and resources away from patient care towards needless compliance costs.

From the Food and Drug Administration front,

  • The Washington Post reports,
    • “The long quest for powerful non-opioid drugs that treat pain without risk of addiction is nearing a milestone, in the form of a pill that could soon win approval from the Food and Drug Administration.
    • “If successful, the drug developed by Vertex Pharmaceuticals would offer a possible alternative to potent prescription painkillers such as oxycodone, which was once heavily marketed by drug companies and fueled an epidemic of dependency and death.
    • “Independent experts say it remains too early to know how revolutionary the Vertex drug, suzetrigine, will be. The company’s application that is pending before the FDA, which could be approved by the end of January, is for relatively short-term pain. It is based on successful clinical trials in people recovering from two types of surgeries, as well as a safety study that monitored participants over about six weeks.
    • “Vertex is still exploring whether the drug can be safely and effectively used for chronic, longer-lasting pain.”
  • Cardiovascular Business points out,
    • “The U.S. Food and Drug Administration (FDA) has announced that Philips is recalling the software associated with its Mobile Cardiac Outpatient Telemetry (MCOT) devices after certain high-risk electrocardiogram (ECG) events were never routed to trained cardiology technicians as intended. This is a Class I recall, the FDA’s most serious classification.
    • “This issue, which lasted from July 2022 to July 2024, has been associated with 109 patient injuries and two patient deaths. Some of the health events included suspected cases of atrial fibrillation or pause, supraventricular tachycardia, ventricular tachycardia and second- or third-degree atrioventricular block.
    • “On Dec. 18, 2024, Philips and its subsidiary, Braemar Manufacturing, sent all customers impacted by the failure an Urgent Medical Device Correction and information on how to review which patients may need to have their data reprocessed.”
  • and
    • “The U.S. Food and Drug Administration (FDA) has now cleared more than 1,000 clinical artificial intelligence (AI)algorithms to be used commercially for direct patient care in the United States. Cardiology is No. 2 among all healthcare specialties with 161 FDA clearances; some of those are even approved for multiple specialties.
    • “Radiology is by far the king of AI FDA clearances with 758 algorithms, making up about 76% of all clinical AI in the U.S. Neurology comes in at an extremely distant third place with 35 algorithms. There are 15 other specialities with cleared AI, but they each number less than 20 algorithms.
    • “The FDA updated its AI-enabled device approval list in late December, which showed the agency technically reached the 1,000 mark back in September. The first AI algorithm was cleared in 1996, and the number of submissions to the FDA has accelerated very rapidly in the past few years. The agency is now clearing an average of about 20 AI algorithms per month, and the FDA says that number is expected to rise in the coming years.”
  • Fierce Healthcare adds,
    • “The Peterson Health Technology Institute launched an artificial intelligence task force to puzzle out the value of in-demand AI technologies for healthcare delivery organizations.
    • “The task force has been operational for six months, Caroline Pearson, executive director of the PHTI, said in an interview. It will be led by Prabhjot Singh, M.D., Ph.D., a physician and co-founder of CHW Cares, which sold to Oak Street Health in 2022, and Margaret McKenna, former chief technology officer at Devoted Health. Both Singh and McKenna are advisers to the PHTI.
    • “There are about 60 people on the task force from a dozen healthcare systems, including UC San Diego Health, Intermountain Health, Mass General Brigham, Providence, Ochsner Health and MultiCare. Pearson also said there are many C-suite executives on the task force including CEOs, chief financial officer and chief information officers.
    • “They’re not AI cheerleaders,” Pearson said. “They’re just trying to run effective, efficient healthcare systems.”

From the public health and medical research front,

  • The Center for Disease Control and Prevention announced today,
    • “COVID-19 activity has increased in most areas of the country. Seasonal influenza activity remains elevated across the country. RSV activity is very high in many areas of the country, particularly in young children.
    • “COVID-19
      • “COVID-19 activity has increased in most areas of the country, with high COVID-19 wastewater levels, increasing emergency department visits and elevated laboratory percent positivity. Emergency department visits and hospitalizations are highest in older adults and emergency department visits are also elevated in young children.
      • “There is still time to benefit from getting your recommended immunizations to reduce your risk of illness this season, especially severe illness and hospitalization.
      • “CDC expects the 2024-2025 COVID-19 vaccine to work well for currently circulating variants. There are many effective tools to prevent spreading COVID-19 or becoming seriously ill.
    • “Influenza
    • “RSV
      • “RSV activity is very high in many areas of the country, particularly in young children. Emergency department visits and hospitalizations are highest in children and hospitalizations are elevated among older adults in some areas.”
    • “Vaccination
      • “Vaccination coverage with influenza and COVID-19 vaccines are low among U.S. adults and children. COVID-19 vaccine coverage in older adults has increased compared with the 2023-2024 season. Vaccination coverage with RSV vaccines remains low among U.S. adults. Many children and adults lack protection from respiratory virus infections provided by vaccines.”
  • Speaking of wastewater, the Your Local Epidemiologist newsletter, to which the FEHBlog subscribes, explains,
    • We’re seeing a lot of [H5N1] virus in California’s cows and birds. California is the number one state for dairy cattle, and so far, 703 herds have tested positive for H5N1. That’s more than 2/3 of all the dairy farms in the state. Plus, 93 commercial or backyard poultry flocks, accounting for about 22 million animals, have also been infected.
    • Unfortunately, we don’t have the wastewater testing capabilities yet to differentiate between humans and animals. A recent preprint showed wastewater is picking up viruses from animals (rather than humans) through milk dumping, animal sewage, and bird contamination. We are also relying on epidemiologists’ accounts on the ground to sort through the signals.
  • Per an NIH news release,
    • “New findings from the National Institutes of Health’s (NIH) Researching COVID to Enhance Recovery (RECOVER) Initiative suggest that infection with SARS-CoV-2, the virus that causes COVID-19, may be associated with an increase in the number of myalgic encephalomyelitis/chronic fatigue syndrome (ME/CFS) cases. According to the results, 4.5% post-COVID-19 participants met ME/CFS diagnostic criteria, compared to 0.6% participants that had not been infected by SARS-CoV-2 virus.  RECOVER is NIH’s national program to understand, diagnose, prevent, and treat Long COVID.
    • “The research team, led by Suzanne D. Vernon, Ph.D., from the Bateman Horne Center in Salt Lake City, examined adults participating in the RECOVER adult cohort study to see how many met the IOM clinical diagnostic criteria for ME/CFS at least six months after their infection. Included in the analysis were 11,785 participants who had been infected by SARS-CoV-2 and 1,439 participants who had not been infected by the virus. Findings appear in the Journal of General Internal Medicine.
    • “ME/CFS is a complex, serious, and chronic condition that often occurs following an infection. ME/CFS is characterized by new-onset fatigue that has persisted for at least six months and is accompanied by a reduction in pre-illness activities; post-exertional malaise, which is a worsening of symptoms following physical or mental activity; and unrefreshing sleep plus either cognitive impairment or orthostatic intolerance, which is dizziness when standing. People with Long COVID also experience some or all of these symptoms.
    • “Long COVID is an infection-associated chronic condition that occurs after SARS-CoV-2 infection and is present for at least three months as a continuous, relapsing and remitting, or progressive disease state that affects one or more organ systems. People with Long COVID report a variety of symptoms including fatigue, pain, and cognitive difficulties.
    • “Dr. Vernon and her team determined that new incidence cases of ME/CFS were 15 times higher than pre-pandemic levels.
    • “These findings provide additional evidence that infections, including those caused by SARS-CoV-2, can lead to ME/CFS.”
  • The American Hospital Association News tells us,
    • The San Francisco Department of Public Health Jan. 10 announced a presumptive positive case of H5N1 bird flu in a child after they experienced symptoms of fever and conjunctivitis. The child was not hospitalized and has since fully recovered, the agency said. An initial investigation by SFDPH did not reveal how the child may have contracted the virus, and the department is continuing to investigate.
  • Per Medscape,
    • More than 15 million people, accounting for 4.6% of the US population, were diagnosed with at least one autoimmune disease from January 2011 to June 2022; 34% were diagnosed with more than one autoimmune disease.
    • Sex-stratified analysis revealed that 63% of patients diagnosed with autoimmune disease were women, and only 37% were men, establishing a female-to-male ratio of 1.7:1; age-stratified analysis revealed increasing prevalence of autoimmune conditions with age, peaking in individuals aged ≥ 65 years.
    • Among individuals with autoimmune diseases, 65% of patients had one condition, whereas 24% had two, 8% had three, and 2% had four or more autoimmune diseases (does not add to 100% due to rounding).
    • Rheumatoid arthritis emerged as the most prevalent autoimmune disease, followed by psoriasis, type 1 diabetes, Grave’s disease, and autoimmune thyroiditis; 19 of the top 20 most prevalent autoimmune diseases occurred more frequently in women.
    • Source: https://www.jci.org/articles/view/178722
  • The American Medical Associations shares what doctors wish their patients knew about Parkinson’s Disease.
  • The New York Times reports,
    • “The number of people in the United States who develop dementia each year will double over the next 35 years to about one million annually by 2060, a new study estimates, and the number of new cases per year among Black Americans will triple.
    • “The increase will primarily be due to the growing aging population, as many Americans are living longer than previous generations. By 2060, some of the youngest baby boomers will be in their 90s and many millennials will be in their 70s. Older age is the biggest risk factor for dementia. The study found that the vast majority of dementia risk occurred after age 75, increasing further as people reached age 95.
    • “The study, published Monday in Nature Medicine, found that adults over 55 had a 42 percent lifetime risk of developing dementia. That is considerably higher than previous lifetime risk estimates, a result the authors attributed to updated information about Americans’ health and longevity and the fact that their study population was more diverse than that of previous studies, which have had primarily white participants.
    • “Some experts said the new lifetime risk estimate and projected increase in yearly cases could be overly high, but they agreed that dementia cases would soar in the coming decades.”
  • Health Day considers whether “Doctors Can Estimate Life Expectancy After a Dementia Diagnosis?”
    • “Updated estimates give a better picture of how long a person will live following a dementia diagnosis.
    • “Age plays a factor in how long people have left.
    • “Women tend to have longer life expectancy than men.”

From the U.S. healthcare business front,

  • BioPharma Dive relates,
    • “Johnson & Johnson on Monday said it has agreed to acquire Intra-Cellular Therapies, a developer of drugs for diseases of the brain, for $132 per share, or about $14.6 billion.
    • “The announcement of the deal, which if completed would be the largest acquisition of a biotechnology company since early 2023, came on the first day of the J.P. Morgan Healthcare Conference, an industry meeting that’s known for dealmaking.
    • “The chief prize in buying Intra-Cellular is a medicine known as Caplyta that’s approved in the U.S. to treat schizophrenia and bipolar depression. The biotech recently asked the Food and Drug Administration to expand Caplyta’s clearance to include major depressive disorder, which affects about 10 times as many people as have schizophrenia and a little more than three times as many as have bipolar depression.”
  • and
    • “Eli Lilly has turned to a biotechnology startup for help building its pipeline of cancer drugs, agreeing on Monday to purchase an experimental cancer drug from privately held Scorpion Therapeutics for as much as $2.5 billion.
    • “As part of the deal, Scorpion will spin out a new, independent company that will hold its other assets as well as inherit its employees. Lilly will take a minority stake in the new company, which will be owned by Scorpion’s current shareholders, among them Atlas Venture, Vida Ventures and Omega Funds.
    • “Current Scorpion CEO Adam Friedman will lead the new company along with other members of the startup’s management.”
  • and
    • “Late last week, Biogen made an unsolicited offer to buy one of its partners, brain drug developer Sage Therapeutics.
    • “The two biotechnology companies have worked together over the past four years on a mood-stabilizing medicine known as Zurzuvae. They split research costs and, after the medicine got approved as a treatment for postpartum depression, began sharing profits.
    • B”ut Biogen now wants Zurzuvae all to itself. In a Jan. 10 letter to Sage’s top executive Barry Greene, Biogen CEO Christopher Viehbacher wrote that his company’s experience selling nervous system drugs would “enable more streamlined operations and efficient commercial execution” around Zurzuvae, which, in turn, should improve patient access.” 

Weekend update

David Ermer–Congress, Medical / Rx research, U.S. Healthcare–

From Washington, DC,

  • Govexec tells us,
    • “Rep. Gerry Connolly, D-Va., the new top Democrat on the House Oversight and Accountability Committee, says he’s open to working with Elon Musk and Vivek Ramaswamy’s Department of Government Efficiency in some areas.
    • “That may make for strange bedfellows. But the lawmaker — who recently beat Rep. Alexandria Ocasio-Cortez, D-N.Y., to be the committee’s ranking member — has long focused on the government’s often-aged technology, a shared interest for both Ramaswamy and Musk. In recent months, Musk has posted about federal IT several times, referencing 2023 congressional testimony on legacy tech from the Government Accountability Office.
    • “By the way, that was the GAO report I requested,” Connolly pointed out during an interview with Nextgov/FCW. The report also lists former representatives Elijah Cummings, Mark Meadows, Will Hurd and current Reps. Robin Kelly, D-Ill., and Jim Jordan, R-Ohio, as requesters.”
  • Federal News Network lets us know,
    • “President-elect Donald Trump is preparing more than 100 executive orders starting Day One of the new White House, in what amounts to a shock-and-awe campaign on border security, deportations and a rush of other policy priorities.
    • “Trump told Republican senators about the onslaught ahead during a private meeting on Capitol Hill. Many of the actions are expected to launch on Inauguration Day, Jan. 20, when he takes office. Trump top adviser Stephen Miller outlined for the GOP senators the border security and immigration enforcement measures that are likely to launch soonest. Axios first reported on Trump and his team’s presentation.
    • “There will be a substantial number,” said Sen. John Hoeven, R-N.D.
    • “Allies of the president-elect have been preparing a stack of executive orders that Trump could sign quickly on a wide range of topics – from the U.S.-Mexico border clampdown to energy development to federal Schedule F workforce rules, school gender policies and vaccine mandates, among other day-one promises made during his campaign.”

From the public health and medical research front,

  • MedPage Today tells us,
    • ‘The detection of the first clade I mpox case in the U.S. this November, followed by a subsequent case in Canada, is far more than a fleeting headline. It is a stark reminder of the interconnectedness of global health. Clade I mpox, a public health emergency of international concern concentrated in Central and Eastern Africa, has already caused more than 57,000 suspected cases and more than 1,200 deaths in 2024 alone. Travel-associated cases have now extended to Europe, Asia, and North America, with the first U.S. case linked to travel from an endemic region.
    • “This development underscores the urgent need for sustained, coordinated action to prevent clade I mpox from following the trajectory of clade II. The latter has resulted in the continued global circulation of over 100,000 cases across 122 countries, including 115 nations where mpox was not previously reported.
    • The emerging threat of clade I mpox presents the incoming Trump administration with a unique opportunity to demonstrate leadership, bolster global health, and underscore the value of preparedness. Proactively addressing this challenge can protect the U.S. from future outbreaks while reaffirming its commitment to global health security and collaboration.
  • Per Healio,
    • Researchers developed a computer-based tool [known as TBorNotTB] to evaluate hospitalized patients for suspected tuberculosis that correctly identified 100% of cases, which could help prevent spread to other patients, they said.
    • “Infection prevention and control programs are tasked with implementing appropriate isolation of patients in health care facilities with suspected or confirmed communicable diseases to reduce the risk of health care-associated infections to patients and mitigate occupational risks to health care personnel,” Caitlin Dugdale, MD, MSc, an infectious disease physician at Massachusetts General Hospital, told Healio.
  • Fortune Well informs us,
    • “New research makes a strong case for morning joe, indicating that the timing may impact your longevity. In a study published in the European Heart Journal, researchers looked at two patterns of coffee timing: people who drank their coffee in the morning, and people who were all-day drinkers. After adjusting for other potential factors, researchers found that morning coffee drinkers were 16% less likely to die of any cause during the study period, and 31% less likely to die of cardiovascular disease, compared to people who didn’t drink coffee. However, there was no reduction in risk for all-day coffee drinkers compared to non-coffee drinkers. 
    • “The authors speculate that drinking caffeinated coffee later in the day could disrupt circadian rhythm and melatonin levels, leading to inflammation and sleep disturbances. A second potential explanation is that inflammation is at its highest in the morning, and the natural anti-inflammatory properties of coffee may have a greater impact when consumed earlier in the day.”

From the U.S. healthcare business front,

  • Modern Healthcare reports,
    • “Mercy Health — Toledo plans to acquire 10 urgent care centers in Ohio and Michigan from Greater Midwest Urgent Cares.
    • “The nonprofit, faith-based system, part of Cincinnati-based Bon Secours Mercy Health, said Friday it plans to assume ownership April 1. Financial details of the transaction, which would be through an asset purchase agreement, were not disclosed.
    • “Our intent is to keep those Greater Midwest Urgent Care employees who’ve done an amazing job providing patient centric care,” said Bob Baxter, president of Mercy Health — Toledo.”
  • HR Dive points out “five compensation and benefits trends to buy into in 2025. To attract and retain workers, employers will focus on competitive salaries and flexible benefits, experts say.”

Cybersecurity Saturday

David Ermer–Cybersecurity, Generative AI–

From the cybersecurity policy and law enforcement front,

  • Bloomberg alerts us,
    • “The Biden administration is racing to put out an executive order meant to shore up US cybersecurity in its dwindling days in office, according to four people familiar with the matter.
    • “The executive order, which has cleared some internal hurdles and is close to being published, incorporates lessons from a series of major breaches during the Biden administration, including the most recent Treasury Department hack attributed to China, according to people familiar with the matter who didn’t want to be named to discuss information that hasn’t yet been made public.
    • “Among the measures, it directs the government to implement “strong identity authentication and encryption” across communications, according to an undated draft of the order seen by Bloomberg News. In the December Treasury hack, intruders accessed unclassified documents stored locally on laptops and desktop computers. Encrypting information sent by email and worked on in the cloud could help safeguard it from hackers who successfully access systems but then cannot open specific documents.” * * *
    • “Whether President-elect Donald Trump will leave the executive order in place when he takes office remains unclear, though he’s vowed to pare back federal regulation. Trump has signaled that he intends to repeal another Biden administration order intended to provide guardrails around artificial intelligence.” 
  • Federal News Network provides more details on the draft EO for those interested.
  • Dark Reading reports,
    • “Yesterday [January 7, 2025] the White House introduced a cybersecurity labeling program for wireless Internet-connected devices, intended to help Americans make more informed decisions about the products they buy and their security.
    • “As Americans continue to add Internet of Things (IoT) devices to their home networks — everything from baby monitors to security cameras — there are growing concerns about the safety of these devices and their vulnerability to hackers. The goal of this label is to guide consumers to more secure products as well as encourage vendors in their cyber practices.
    • “Known as the “US Cyber Trust Mark,” the label has been a long time coming, with the Federal Communications Commission gathering input over the past 18 months. In a bipartisan and unanimous vote, the FCC authorized the program and said 11 vendors will act as label administrators while UL Solutions will serve as the lead administrator.
    • “The White House launched this bipartisan effort to educate American consumers and give them an easy way to assess the cybersecurity of such products, as well as incentivize companies to produce more cybersecure devices, much as EnergyStar labels did for energy efficiency,” the White House brief read.”
    • “Though this new system has good intentions for both consumers and vendors, there are concerns and speculation as to how effective this cybersecurity label will be.” Read the article for those details.
  • Here’s a link to the Federal Register version of the recent proposed HIPAA Security Rule amendments which appears in the January 6, 2025, issue. The public comment deadline is March 7, 2025.
  • Fedscoop tells us,
    • “Guy Cavallo, the chief information officer of the Office of Personnel Management since July 2021, will retire from federal service on Jan. 13, he confirmed to FedScoop.
    • “Cavallo leaves federal service having held several top technology roles over the past decade, including as deputy CIO of the Small Business Administration and executive director of IT operations at the Transportation Security Administration. He also served as OPM’s principal deputy CIO and acting CIO before being named permanent CIO.
    • “As the longest-tenured CIO of OPM in recent memory, Cavallo led that charge on a two-year sprint replacing or migrating over 50 applications from legacy on-premises data centers to the cloud and the launch of the new Postal Health Benefits System last year for more than 1.7 million postal workers and retirees. He touted the system as fully operational 100% of the time with no unscheduled downtime throughout the Open Season.
    • “Cavallo also led OPM to winning several Technology Modernization Fund awards in recent years, the most recent of which came in late 2024 to support the use of artificial intelligence to update legacy mainframe programs for OPM’s retirement systems.“
  • The National Institute of Standards and Technology announced on January 8,
    • NIST extends the public comment period on the initial public draft (ipd) of NIST Special Publication (SP) 800-172r3 (Revision 3), Enhanced Security Requirements for Protecting Controlled Unclassified Information (CUI) until January 17, 2025. 
    • NIST strongly encourages you to use the comment template and submit comments to 800-171comments@list.nist.gov. Comments received in response to this request will be posted on the Protecting CUI project site after the due date. Submitters’ names and affiliations (when provided) will be included, while contact information will be removed.
    • For more information, see the NIST Protecting CUI Project.
  • Per HHS press releases,
  • and
    • [Also on January 7, 2025], the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $90,000 settlement with Virtual Private Network Solutions, LLC (VPN Solutions), a Virginia business associate that provides data hosting and cloud services to covered entities (health plans, health care clearinghouses, and most health care providers) and business associates, for a potential violation under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule. OCR enforces the HIPAA Privacy, Security, and Breach Notification Rules, which set forth the requirements that covered entities (health plans, health care clearinghouses, and most health care providers), and business associates must follow to protect the privacy and security of protected health information (PHI). The HIPAA Security Rule establishes national standards to protect and secure our health care system by requiring administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronic PHI (ePHI). The settlement resolves an investigation concerning a ransomware attack on VPN Solutions’ information system.” * * *
    • “The resolution agreement and corrective action plan may be found at: https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/vpns-ra-cap/index.html
  • Per Cyberscoop,
    • “Microsoft is petitioning a Virginia [federal] court to seize software and shut down internet infrastructure that they allege is being used by a group of foreign cybercriminals to bypass safety guidelines for generative AI systems.
    • “In a filing with the Eastern District Court of Virginia, Microsoft brought a lawsuit against ten individuals for using stolen credentials and custom software to break into computers running Microsoft’s Azure OpenAI services to generate “harmful content.”
    • “In a complaint filed Dec. 19, 2024, the company accuses the group of violating the Computer Fraud and Abuse Act, the Digital Millennium Copyright Act, the Lanham Act and the Racketeer Influence and Corrupt Organizations Act, as well as trespass to chattels and tortious interference under Virginia state law.”

From the cybersecurity reminiscences department,

  • “HHS OCR Director Melanie Fontes Rainer reflects on 2024 as a historic year filled with tremendous activities and accomplishments for OCR on Health Insurance Portability and Accountability Act of 1996 (HIPAA) rulemakings, enforcement actions, and resources for the health care sector on HIPAA privacy and cybersecurity.”
  • In Cyberscoop, “National Cyber Director Harry Coker looks back (and ahead) on the Cyber Director office. It’s made real strides, but there’s a lot more that it could be doing, he said, and more that needs to be done.”
  • In a blog post, Valeria Colman, the Cybersecurity and Infrastructure Security Agency’s (CISA) chief strategy officer, looks back at “CISA Through the Years: Policy and Impact.”

From the cybersecurity vulnerabilities and breaches front,

  • Cybersecurity Dive reports,
    • “AT&T and Verizon, two of the nine U.S. telecom companies attacked by Salt Typhoon, said they evicted the China-government sponsored threat group from their networks. 
    • “We detect no activity by nation-state actors in our networks at this time,” an AT&T spokesperson said in a prepared statement. A Verizon spokesperson made a similar statement, asserting the carrier has “contained the cyber incident brought on by this nation-state threat actor. An independent and highly respected cybersecurity firm has confirmed the Verizon containment.”
    • “AT&T and Verizon did not say when they ejected the nation-state group from their networks, but declared their networks secure last week.”
  • Dark Reading adds,
    • “The Chinese threat actor group known as “Silk Typhoon” has been linked to the December 2024 hack on an agency that’s part of the US Department of the Treasury.
    • “In the breach, the threat actors were able to use a stolen Remote Support SaaS API key through third-party cybersecurity vendor BeyondTrust to steal data from workstations in the Office of Foreign Assets Control (OFAC).
    • “Silk Typhoon, also known as Hafnium, is well known for hitting targets in education, healthcare, defense, and non-governmental organizations.
    • “Using tools such as the China Chopper Web shell, the group’s cyber-espionage campaigns focus mainly on data theft.” * * *
    • “The Cybersecurity and Infrastructure Security Agency (CISA) has since confirmed that these exploits are limited to just the agency, and there is no indication that any other federal agencies have been impacted by the incident.” 
  • Bleeping Computer lets us know,
    • BayMark Health Services, North America’s largest provider of substance use disorder (SUD) treatment and recovery services, is notifying an undisclosed number of patients that attackers stole their personal and health information in a September 2024 breach.
    • The Texas-based organization provides medication-assisted treatment (MAT) services targeting both substance use and mental health disorders to more than 75,000 patients daily in over 400 service sites across 35 U.S. states and three Canadian provinces.
    • In data breach notification letters mailed to affected individuals, BayMark revealed that it learned of the breach on October 11, 2024, following an IT systems disruption. A follow-up investigation revealed that the attackers accessed BayMark’s systems between September 24 and October 14.
  • Per Dark Reading,
    • Cybercriminals have picked up a new tactic, impersonating CrowdStrike recruiters in order to distribute a crypto miner on their victims’ devices.
    • This malicious campaign starts with an email, inviting the victim to schedule an interview with a recruiter for a position as a junior developer.
    • The illegitimate email contains a link, alleging that it will take the recipient to a site so they can schedule their interview, but in reality, takes the victim to a malicious website containing links to download a purported “CRM application.”
  • CISA reminds us,
    • “In an era of increasingly sophisticated cyber threats, securing critical infrastructure has become a cornerstone of national security. CISA’s mission is to drive collaborative, proactive efforts to reduce risk and strengthen resilience for our nation’s critical infrastructure, federal civilian branch assets, and the private sector more broadly. While these efforts are many and varied, I’d like to highlight three particularly transformative initiatives—the Known Exploited Vulnerabilities (KEV) Catalog, Cybersecurity Performance Goals (CPGs), and the Pre-Ransomware Notification Initiative (PRNI)—to illustrate how we can collectively work to reshape the cybersecurity landscape.”
  • SC Media offers details on the January 7, 2025, KVEs while Cybersecurity Dive discusses the January 8, 2025, KVE.

From the ransomware front,

  • Axios gives us a primer on ransomware.
  • Here’s a link to a helpful September 2024 CISA PowerPoint presentation about its available tools such as the Pre-Ransomware Notification Initiative.
  • Security Week discusses “Temple University’s Critical Infrastructure Ransomware Attacks (CIRA)” database.
    • “The Critical Infrastructure Ransomware Attacks (CIRA) database currently covers more than 2,000 attacks documented since 2013 and includes nearly 300 entries for incidents that came to light in 2024. 
    • “It contains information such as name of the victim, date of the incident, country or US state, targeted critical infrastructure sector, name of the attacking threat group, duration of the incident, MITRE ATT&CK mapping, and — if known — the amount of money that was demanded by the attacker and the ransom paid by the victim.” * * * 
    • “The database is available for free upon request. To date it has been requested more than 1,500 times, mainly by researchers and other members of the cybersecurity industry (61%), as well as students, government entities, educators, and reporters.” 

From the cybersecurity defenses front,

  • Cybersecurity Dive identifies four cybersecurity trends to watch this year.
    • Critical industries are up against never before seen challenges to remain secure and operational, while regulatory pressures have completely upended the role of the CISO in corporate America.
  • Dark Reading considers current trends in artificial intelligence and cybersecurity.
  • CISA Director Jen Easterly discusses “Corporate Cyber Governance: Owning Cyber Risk at the Board Level.”
  • CISA also released its “Cybersecurity Performance Goals Adoption Report.”
  • TechTarget shares “Top 15 email security best practices for 2025.”
  • Here is a link to Dark Reading’s CISO Corner.

Friday Report

David Ermer–CDC, CMS, COVID-19 vaccine, FDA, Federal employment benefits, Generative AI, Medical / Rx research, NIH, OPM, Rx coverage, SCOTUS, U.S. Healthcare–

From Washington, DC.

  • STAT News reports,
    • “The Biden administration’s [last] regulation affecting the Medicare Advantage industry would come with a much lighter touch than the past two years.
    • “President Biden’s Centers for Medicare and Medicaid Services on Friday proposed to increase the average benchmark payment to private Medicare Advantage plans by 2.2% for 2026. That compares to cuts of 0.2% for this year and 1.1% in 2024, although the Biden administration gave the Medicare Advantage industry one of the largest-ever payment hikes in 2023.
    • “The proposed rule was rolled out weeks earlier than normal, as the Trump administration gets ready to take over the White House and federal agencies later this month. It’s unclear what, if any, changes President Trump’s team will make to the proposal. Trump has picked Mehmet Oz to lead CMS, but it’s possible that the Senate won’t confirm him before the final rule is published by the beginning of April.
    • “But the Biden White House at least appears worried Trump will undo the latest proposal, warning that any “pauses” to some of its changes to how Medicare Advantage insurers are paid would result in an extra $10 billion windfall for the industry.”
  • Per HHS press releases,
    • “Today, U.S. Department of Health and Human Services (HHS) Secretary Xavier Becerra declared a Public Health Emergency (PHE) for California to address the health impacts of the ongoing wildfires in Los Angeles County.
    • “The declaration follows President Biden’s major disaster declaration and gives the Centers for Medicare & Medicaid Services’ (CMS) health care providers and suppliers greater flexibility in meeting emergency health needs of Medicare and Medicaid beneficiaries.
    • “We will do all we can to assist California officials with responding to the health impacts of the devastating wildfires going on in Los Angeles County,” said Secretary Becerra. “We are working closely with state and local health authorities, as well as our partners across the federal government, and stand ready to provide public health and medical support. My thoughts and prayers are with the people impacted in my home state.”
  • and
    • “The U.S. Department of Health and Human Services (HHS) has issued its AI Strategic Plan (hereafter referred to as “Strategic Plan” or “Plan”). The Plan establishes both the strategic framework and operational roadmap for responsibly leveraging emerging technologies to enhance HHS’s core mission, while maintaining our commitment to safety, effectiveness, equity, and access. Additionally, the Plan outlines the ways in which HHS will deliver on its goal of being a global leader in innovating and adopting responsible AI that achieves unparalleled advances in the health and well-being of all Americans.
    • “At HHS, we are optimistic about the transformational potential of AI,” said Deputy Secretary Andrea Palm. “These technologies hold unparalleled ability to drive innovation through accelerating scientific breakthroughs, improving medical product safety and effectiveness, improving health outcomes through care delivery, increasing access to human services, and optimizing public health. However, our optimism is tempered with a deep sense of responsibility. We need to ensure that Americans are safeguarded from risks. Deployment and adoption of AI should benefit the American people, and we must hold stakeholders across the ecosystem accountable to achieve this goal.”
  • The Wall Street Journal reports,
    • “New divisions have emerged among U.S. intelligence agencies over whether foreign adversaries have been developing devices that led to the illness known as Havana Syndrome, according to an intelligence report released Friday. 
    • “Most of the U.S. intelligence community still believes it is very unlikely that the wide range of symptoms that have been reported by more than 1,500 U.S. government employees since the first cases emerged in Havana in late 2016 were caused by a foreign power. 
    • “But in a notable shift, two intelligence agencies now say there is a “roughly even chance” U.S. adversaries have been developing a novel weapon that could cause the illness.
    • “One of the dissenting agencies says it might have already been used to harm a small number of American personnel and dependents who have reported Havana Syndrome symptoms, the report said. 
    • “Havana Syndrome is a set of unexplained medical symptoms that include dizziness, headache, fatigue, nausea, anxiety, cognitive difficulties and memory loss of varying severity.”
  • Per Federal News Network,
    • “The Office of Personnel Management’s retirement claims backlog remained basically the same in December as compared to November, but the number of days it took to process those claims ticked up to 57 from 55 days.
    • “OPM also hit a new low in retirement claims received last month with 5,020. This is the lowest amount of claims received since November 2023.”
  • Govexec tells us,
    • “The Office of Personnel Management on Wednesday sent guidance to agency heads outlining transition authorities that President-elect Donald Trump could use to immediately place his nominees in temporary positions at federal agencies and departments. 
    • “Although Trump is pushing Senate Republicans to expeditiously confirm his picks, he will have the authority to appoint individuals, for up to 30 days, to advisory or consultative senior executive service positions while they’re awaiting confirmation. 
    • “Likewise, cabinet-level agencies will be able to make five noncareer SES appointments and other agencies can institute up to three such appointments, which is standard. Such appointments must be made by Feb. 15 and also can only last for 30 days.”

From the judicial front,

  • Bloomberg informs us,
    • “The US Supreme Court agreed [today] to review a lower court ruling that found some Obamacare coverage requirements for preventative services unlawful, but kept them enforceable nationwide.
    • “In an order Friday, the court said it will hear the Biden administration’s appeal of that decision by the US Court of Appeals for the Fifth Circuit holding the structure of the US Preventive Services Task Force unconstitutional under the Appointments Clause.
    • “The task force is charged with recommending some of the medical services health insurers must cover free-of-charge under the Affordable Care Act.
    • “Task force members “are principal officers under Article II of the Constitution who must be—yet have not been—nominated by the President and confirmed by the Senate,” the Fifth Circuit said.”
  • FEHBlog note: It drives the FEHBlog nuts that the Biden Administration or Congress failed to moot the 5th Circuit opinion by making USPSTF recommendations subject to approval by the Centers for Disease Control and Prevention’s director.

From the public health and medical research front,

  • The CDC did not have time to update its weekly respiratory illnesses report due to the unexpected federal holiday for President Carter’s Day of Mourning yesterday. This week’s report will be posted on Monday January 13.
  • The University of Minnesota’s CIDRAP relates, “A first dose of COVID-19 vaccine accelerated relief of long-COVID symptoms such as fatigue and muscle aches in UK adults, but flu vaccination did not, suggests an observational University College London–led study published yesterday in the Journal of Infection.”
  • Per MedPage Today, “Hospitals doing fewer operative vaginal deliveries (OVDs) had higher rates of adverse perinatal outcomes for these cases than higher volume centers did, according to a population-based retrospective cohort study from California.”
  • The NIH Director, Dr Monica Bertagnolli, writes in her blog,
    • “Millions of people in the U.S. have an autoimmune disease, from type 1 diabetes to inflammatory bowel disease, in which the immune system attacks the body’s own organs, tissues, or cells to cause damage. While treatments that tamp down the immune system can help, they can increase risk for infection or cancer due to systemic immune suppression. Similarly, for people who’ve received an organ or tissue transplant, immunosuppressants used to prevent rejection can leave the whole body vulnerable. What if there was a way to suppress the immune system only right where it’s needed, in tissues or organs at risk for immune attack?
    • “An NIH-supported study reported in Science describes a way to do just that by using a cell-based therapy approach. The therapeutic approach involves taking a blood sample from a patient, modifying certain immune cells in the laboratory, and then reintroducing the engineered cells back into the body. Such cell-based therapeutics can be designed to recognize specific molecules to target tissues. This approach is already used to treat many cancers, utilizing a patient’s own engineered immune cells, known as CAR T cells, to attack and kill their cancer. Inspired by the success of the CAR T-cell example, the researchers behind this new work see the technology they’re developing as a potential platform for tackling many types of immune dysfunction.” * * *
    • “While much more study is needed, the researchers suggest that such synthetic suppressor T cells could serve as a readily customizable platform to potentially treat many autoimmune conditions. Engineered immune suppressor cells could also be used to fine-tune CAR T-cell therapies for cancer so that they only attack tumors and not normal tissues, making them less toxic. This paves the way for a future in which there may be many more possibilities for precisely tamping down the immune system in ways that could prove life-changing for transplant recipients and those with type 1 diabetes, as well as many other autoimmune conditions.”
  • Per BioPharma Dive,
    • “Pfizer on Friday said its PD-1 inhibitor sasanlimab, when combined with standard therapy in people with bladder cancer, delayed death and disease complications longer than standard therapy alone. The Phase 3 trial could give Pfizer’s subcutaneous immunotherapy an edge over rival drugs, like Merck & Co.’s Keytruda and Bristol Myers Squibb’s Opdivo, which are approved to treat people with more advanced disease. Pfizer tested sasanlimab with an immunotherapy called Bacillus Calmette-Guérin in people whose cancer hadn’t spread beyond the bladder lining after surgery. If sasanlimab wins Food and Drug Administration approval, it could be the fourth PD-1 or PD-L1 inhibitor cleared as an under-the-skin shot. The FDA has already approved subcutaneous versions of Roche’s Tecentriq and Opdivo, and Merck has positive Phase 3 data in hand for under-the-skin Keytruda” 

From the U.S. healthcare business front,

  • Beckers Hospital Review identifies “100 great neuro and spine programs.”
  • The Wall Street Journal reports,
    • AbbVie on Friday said it will post a $3.5 billion impairment charge related to last year’s $8.7 billion bet on Cerevel Therapeutics following the failure of the deal’s key drug candidate.
    • AbbVie in November said the Cerevel drug, emraclidine, missed the key goal in a pair of mid-stage studies in schizophrenia, prompting the North Chicago, Ill., biopharmaceutical company to begin an evaluation of the emraclidine intangible asset for impairment.
    • AbbVie, in announcing the Cerevel deal in late 2023, said it believed emraclidine had the potential to transform the schizophrenia treatment landscape and represented a multibillion-dollar peak sales opportunity.
  • The American Hospital Association News tells us,
    • “Prices for the top 25 brand-name Medicare Part D drugs have increased by an average of 98% since entering the market, according to a report released Jan. 9 by the AARP Public Policy Institute. That price growth has often exceeded yearly rates of inflation, the organization said. The drugs highlighted in the report have not yet been selected for the Medicare Drug Price Negotiation program. The drugs accounted for nearly $50 billion in total Part D spending in 2022.”
  • Healthcare Dive informs us,
    • “Walgreens’ first quarter earnings were notably better than Wall Street feared, though the retail pharmacy operator continues to suffer heavy losses as it works to right the ship.
    • “On Friday, Walgreens posted financial results that beat analyst expectations with revenue of $39.5 billion, up 7.5% year over year. Still, Walgreens reported a net loss of $265 million, larger than its $67 million loss same time last year, mainly due to costs stemming from ongoing store closures and asset sales.
    • “Walgreens’ market value has plummeting in recent years, leading the company to explore a private equity buyout, according to the Wall Street Journal. Executives didn’t address the speculation on a call with investors Friday morning, but said Walgreens made progress on its $1 billion cost-cutting initiative in the quarter, including a pending sale of beleaguered medical chain VillageMD and closures of 70 underperforming retail stores.”

Thursday Report

David Ermer–CDC, CMS, Congress, FDA, Generative AI, Medical / Rx research, Obesity, Rx coverage, Telehealth, U.S. Healthcare–
Photo by Josh Mills on Unsplash

From Washington, DC

  • Tammy Flanagan, writing in Govexec, discusses, “The Social Security Fairness Act: What we know so far.  It may take time to implement this new law — here’s what you should know for now.”
    • “It will undoubtedly take time to implement this new law as it impacts about two million beneficiaries who have their earned Social Security benefits reduced because of the WEP, and close to 750,000 individuals who have had spousal and widow’s benefits payable based on the Social Security work record of their current, former or deceased spouse.  
    • “The repeal of the WEP and GPO will increase the Social Security benefit entitlements of the government worker or retiree who is receiving a pension from work not covered by Social Security. For most of you reading today’s column, this would be the CSRS employees and retirees who are married or were married to a spouse who paid Social Security taxes and the CSRS employee or retiree who earned their own Social Security retirement benefit in addition to receiving a CSRS retirement benefit.  
    • “The WEP can also affect CSRS Offset employees and retirees as well as some employees or retirees who transferred to FERS after more than five years of creditable service under CSRS.”
  • The American Hospital Association News tells us,
    • The Centers for Medicare & Medicaid Services will host a webinar Jan. 16 at 1 p.m. ET to provide an update on the No Surprises Act Good Faith Estimate requirements for uninsured and self-pay patients. Experts will discuss the recent GFE FAQs with a focus on implications for providers and facilities. REGISTER NOW” 

From the public health and medical research front,

  • Per Medical Economics,
    • Screening for physical inactivity during routine medical visits can play a pivotal role in the identification of patients at risk for chronic diseases, according to a study published in Preventing Chronic Disease, a journal of the U.S. Centers for Disease Control and Prevention (CDC). Using the Exercise Vital Sign (EVS), researchers found that patients screened for physical activity had healthier profiles and fewer comorbid conditions than those who were not screened.
  • WTW Consulting informs us,
    • More and more evidence show that GLP-1 medications are good for losing weight and reducing the amount of metabolic disease in people with obesity. But only about 52% of employers currently cover these drugs for obesity, and these employers are facing rising costs.
    • Previous research has shown that the cost of these drugs will exceed any medical cost savings, as is true for most medical interventions. For example, medical plans don’t save money by treating cancer or providing dialysis for patients with kidney failure.
    • JAMA Network Open recently published a study that showed that healthcare spending could decrease based on the type of weight loss seen with use of GLP-1 medications. However, the study demonstrates once again that even with their impressive impacts on patient weight and health, an employer-sponsored health insurance plan should not expect net medical savings from these medications.
    • The researchers looked at medical claims from over 13,000 commercially insured adults from the Medical Panel Expenditure Survey from 2001 to 2020 and found that medical spending was lower in those who weighed less. Therefore, cost effectiveness of an effective weight loss drug would be much higher in those with higher BMIs, especially in those with diabetes. 
    • However, the study didn’t evaluate people who had lost weight, but rather examined differences in costs based on BMI. Those who lose weight won’t necessarily have the same lower level of expense as those who weren’t previously obese. Even if their estimate of cost “savings” is correct, the net cost of semaglutide or tirzepatide is around $9,000 annually, which is more than the delta in costs for a person with diabetes who loses 25% of their body weight.
    • Implications for employers: 
      • An employer-sponsored health insurance plan should not expect net medical savings from these medications, even with their impressive impacts on patient weight and health.
      • The decision to cover these medications should be based on the benefit they offer, and not the hope of lower medical expenses. Lower prices would allow more people to benefit from these medications.
  • The Wall Street Journal warns us,
    • Wildfires in California aren’t all wild anymore. They often burn in urban areas, creating a toxic soup of smoke, ash and noxious substances that can be dangerous, even deadly. 
    • In Los Angeles this week, wildfires have burned buildings and roadways. Incinerating the plastics, metals and other materials that these structures are built from releases hazardous chemicals and gases into the air, doctors and public-health experts say. 
    • Wildfires which tear through urban landscapes release chemicals from human-made fuels, construction materials, household products and generate emissions which are chemically different from wildland fires, according to a 2022 report from the National Academies of Sciences, Engineering and Medicine. About 70,000 communities and 43 million homes are at risk from fires that could burn through both wild and urban landscapes, the report stated.
    • “The combination of wildfire smoke in conjunction with human elements might be even more dangerous,” said Dr. Sanjay Rajagopalan, chief of cardiovascular medicine at University Hospitals Harrington Heart & Vascular Institute in Cleveland. “When you burn plastic, for instance, or you burn rubber, you get some pretty nasty stuff.”
    • Smoke from the Los Angeles wildfires could have far-reaching effects. Depending on weather patterns and geographic conditions, smoke can travel vast distances. Tens of thousands of Los Angeles County residents have already been ordered to evacuate.
  • BioPharma Dive points out,
    • “An experimental menopause drug from Bayer succeeded in a late-stage trial in women taking drugs to treat or prevent breast cancer, the company said Thursday.
    • “Bayer said the drug, elinzanetant, significantly reduced the frequency of hot flashes and improved sleep for women with breast cancer, or who are at high risk of developing it, and whose symptoms are caused by hormone therapy. The study randomized 474 women to receive treatment or a placebo and measured the effects after four and 12 weeks.
    • “The announcement represents the fourth positive late-stage study result for elinzanetant, but the first that isn’t in menopausal women. Bayer has already submitted the drug for U.S. approval in postmenopausal women, and the Food and Drug Administration accepted its application in October. If cleared by regulators, the drug would compete with Astellas Pharma’s Veozah.”
  • Per Fierce Pharma,
    • “Trailing Johnson & Johnson’s powerhouse Darzalex by roughly five years in its development timeline has made it challenging for Sanofi’s Sarclisa—the only other CD38 antibody on the market for multiple myeloma—to compete in the indication.
    • “But with an on-body delivery system (OBDS) to deliver its subcutaneous (SC) formulation of Sarclisa, Sanofi may be finding the edge it needs.
    • “The company has taken a major step in the development of its OBDS as a phase 3 trial has met its primary co-endpoints, showing non-inferiority to intravenous (IV) Sarclisa. The company reported the trial result in a press release Thursday.”

From the U.S. healthcare business front,

  • Health Dive relates,
    • “Blue Shield of California, one of the largest plans in the state, has revamped its corporate structure and named its first-ever female CEO.
    • “Blue Shield created a parent company called Ascendiun to oversee the insurer, along with its managed Medicaid subsidiary and clinical services firm Altais, starting Jan. 1, the company announced Wednesday. Ascendiun also includes a newly created health services business called Stellarus, which aims to scale and sell Blue Shield’s pharmacy and technology offerings to other insurers.
    • “Lois Quam, who has been Blue Shield’s president since last year, will step up as chief executive of the insurer. Quam will be the first woman to serve as Blue Shield’s CEO in the organization’s 86 years of operation. Paul Markovich, Blue Shield’s CEO for over a decade, will become president of Ascendiun and will also lead Stellarus on an interim basis.”
  • and
    • “Amwell is selling its virtual psychiatric care business to fellow telehealth provider Avel eCare for about $21 million in cash, the company said Thursday. 
    • “The divestiture, which includes an additional earn-out payment for Amwell if the business meets financial targets, includes the psychiatric care segment’s technology and personnel along with Asana, a clinical network that employs and contracts with the unit’s clinicians. 
    • “Amwell CEO Ido Schoenberg said in a statement the sale strengthens the telehealth firm’s balance sheet and “fortifies our confidence” to reach positive cash flow in 2026.”
  • The American Hospital Association announced,
    • “The AHA today released its 2025-2027 Strategic Plan, approved by the AHA Board of Trustees in November. The plan is rooted in four core disciplines — advocacy and representation, thought leadership, knowledge exchange, and agents of change. It also includes nine principles that serve as the foundation of the AHA’s work and strategies to help the field make progress on its mission of advancing health in America. View the 2025-2027 Strategic Plan for more information.”
  • Modern Healthcare notes,
    • Oakland, California-based Kaiser Permanente led a $275 million Series F funding round for Innovaccer, a company that sells technology to unify patient data across health systems.
    • Innovaccer said the round will help it introduce new artificial intelligence and cloud capabilities. The company also said the new capital will help it to continue scaling a developer ecosystem that can allow health systems to implement AI tools with other third-party vendors.
  • NCQA suggests “Health Care Trends to Watch in 2025.”
  • Per Fierce Healthcare,
    • “A new report from Press Ganey highlights the close relationship between patient experience and health plan star ratings.
    • “Researchers polled 450,000 people across 200 plans and combined those survey results with its database of 5.5 million patient encounters. It found that people who gave poor scores for safety and privacy in surveys following a visit to their primary care providers also frequently awarded their health plan one star on quality and access to needed care on Medicare consumer services.
    • “The report noted these are critical data for plans to consider, as they have traditionally focused on making improvements to customer service, benefit design and patient engagement. It suggests they should also be considering ways to address safety.
    • “In addition, the survey found that patients expect easy access to primary care, but their ability to reach specialists is a key differentiator. Plans that earned four or more stars connected a higher proportion of their members with specialty care.”
  • MedTech Dive points out “five medtech trends to watch in 2025. After a busy 2024, experts called out competition in soft tissue robotics, uncertainty from a Trump White House and continued success for pulsed field ablation as trends to watch this year.”

Midweek Report

David Ermer–CMS, Congress, FDA, Generative AI, Medical / Rx research, NIH, U.S. Healthcare–

From Washington, DC

  • FedScoop informs us,
    • “President Joe Biden on Saturday signed into law the Government Service Delivery Improvement Act, legislation that targets improving customer service interactions with the government.
    • “The bill (H.R. 5887) was first introduced by Reps. Ro Khanna, D-Calif., Byron Donalds, R-Fla., Barry Loudermilk, R-Ga., and William Timmons, R-S.C., in October 2023. Now as law, it requires the Office of Management and Budget to choose a senior official as a “Federal Government Service Delivery Lead” to coordinate government service delivery improvement within agencies. 
    • “That service delivery lead would also work with new agency-appointed senior officials, who must be named within a year of the bill’s enactment, to oversee their organizations’ delivery improvements.”
  • Per an HHS press releases,
    • “Today, U.S. Department of Health and Human Services Secretary Xavier Becerra announced he would delegate the authority vested in the HHS under the Dr. Emmanuel Bilirakis and Honorable Jennifer Wexton National Plan to End Parkinson’s Act to the National Institutes of Health, with support from the HHS Office of the Assistant Secretary for Health.”
  • and
    • “Today, the White House Initiative on Asian Americans, Native Hawaiians, and Pacific Islanders (WHIAANHPI) unveiled Rising Together, its final report to President Joe Biden. The report showcases how the Biden-Harris Administration has leveraged the full force of the federal government to make real the promise of America for Asian American, Native Hawaiian, and Pacific Islander (AA and NHPI) communities. Read the full report at wh.gov/whiaanhpireport2025 – PDF“
  • and
    • “Today, the U.S. Department of Health and Human Services (HHS) announced seven winners of the KidneyX Sustainability Prize, designed to incentivize development of solutions to reduce water or power usage during dialysis care.” * * *
    • “HHS congratulates the winners of the KidneyX Sustainability Prize, who will each receive an equal share of the $7.25 million prize purse:  
      • “Kuleana Technology Inc. Advancing Hemodialysis Sustainability: Dialysate Regeneration via Uremic Toxin Photo-Oxidation. “Kuleana Technology’s Dialysate Regeneration Module enables hemodialysis with just 2 liters of water per treatment, making dialysis portable and accessible while saving 300 billion liters of water per year worldwide.”
      • “Micro Nano Technologies Inc. Handheld Water-Free and Battery-Powered Renal Replacement System. “The proposed technology mimics kidney filtration, eliminating the need for water and operating on a laptop-sized battery for 8 hours, ensuring dialysis access during disasters without traditional infrastructure.”
      • “Particle4X. SMART-PD: Sustainable Home Dialysis Revolution. “SMART-PD is an advanced home dialysis system that produces sterile PD fluid from tap water, reclaims effluent, and employs AI-powered monitoring to enhance sustainability and patient safety.”
      • “Qidni Labs Inc. Qidni/D: A Novel Sorbent Platform for Dialysis. “The Qidni/D is a portable and nearly waterless hemodialysis system that can offer accessible and sustainable access to care anywhere.”
      • “Stephen Ash. Sorbent Regeneration of Dialysate with Improved Ammonium Capacity. “We have developed a sorbent with high capacity for NH4+ (from urea) and minimal binding of Ca++ and Mg++, which should make regeneration of dialysate simpler, smaller and more practical.”
      • “University of Minnesota. Decentralized Dialysis Fluid Production: Enhancing the Sustainability of Dialysis Care. “Our innovation enables decentralized production of peritoneal dialysis fluids, reducing dialysis energy and water consumption by 48% and 66%, respectively, increasing supply chain resilience, and improving patient outcomes worldwide.”
      • “Wearable Artificial Organs Inc. Green dialysis on batteries using only 300ml of water. “A 2 lb. miniaturized Wearable Artificial Kidney (WAK) powered by rechargeable batteries, continuously regenerates dialysate water and delivers continuous dialysis 24 hours a day, 7 days a week.”
    • Kudos to the prize winners.
  • The American Hospital Association News tells us,
    • “The Centers for Medicare & Medicaid Services Jan. 8 announced 23.6 million consumers have signed up for a 2025 Health Insurance Marketplace plan. Of that total, approximately 3.2 million are new consumers. Open enrollment continues until Jan. 15 for the 31 states that use HealthCare.gov and most state-based marketplaces for coverage beginning Feb. 1.” 
  • Kevin Moss, writing in Federal News Network, answers the question “If someone is on Federal Health Benefits, what happens when they turn 65 and become eligible for Medicare, and what happens when their spouse turns 65 and is also eligible for Medicare?” It’s worth adding that OPM regulations grant special FSHB/PSHB open enrollment period to employees and annuitants who turn 65:
    • On becoming eligible for Medicare. An employee [or an annuitant] may change the enrollment from one plan or option to another at any time beginning on the 30th day before becoming eligible for coverage under title XVIII of the Social Security Act (Medicare). A change of enrollment based on becoming eligible for Medicare may be made only once. 5 CFR Secs 890.301(k), 890.306(p)
  • Stars and Stripes gives us an update on the “pilot program aimed at helping Department of Defense civilian employees [based in Japan] find health care from Japanese providers is up and running, according to the DOD. The program, which aims to connect the civilians with local health care providers without paying large, upfront service fees, among other advantages, began Jan. 1, according to a fact sheet emailed to employees Wednesday by the U.S. Army Civilian Human Resources Agency. The program complements existing health insurance coverage for eligible DOD employees.”

From the judicial front,

  • Bloomberg Law reports,
    • “A trade group representing consumer credit reporting companies and a Texas-based credit union association sued to block the Consumer Financial Protection Bureau’s new rule barring most medical debt from credit reports.
    • “The CFPB overstepped its authority in eliminating medical debt from credit reports and banning creditors from considering medical debt in lending decisions, the Consumer Data Industry Association and the Cornerstone Credit Union League said in a complaint filed Tuesday in the US District Court for the Eastern District of Texas.
    • “Only Congress has the power to determine whether information can or can’t be included in credit reports, the complaint said.
    • “The ban will make it harder for lenders, employers, and rental housing providers to make informed decisions about the creditworthiness of borrowers, the industry groups said. 
    • “Knowing whether a consumer has debt is an important element of underwriting, and unilaterally eliminating consideration of coded medical debt information erodes the predictive nature, and therefore the value, of consumer reports,” the complaint said.
    • “The suit came on the same day the CFPB finalized its medical debt rule.”

From the Food and Drug Administration front,

  • Fierce Pharma lets us know,
    • “The FDA will require GSK and Pfizer to include on the label of their respiratory syncytial virus (RSV) vaccines a warning about the risk of developing Guillain-Barré syndrome (GBS), a rare neurological condition that can cause paralysis.
    • “The ruling will affect GSK’s Arexvy and Pfizer’s Abrysvo, both of which were approved by the agency in May of 2023 for adults 60 years or older and realized booming sales in their first year on the market.
    • “Seven months ago, however, the sales potential for both shots declined significantly when the Centers for Disease Control and Prevention (CDC) recommended that they only be used by adults aged 75 and older and those 60 and older who have a high risk of severe disease due to underlying medical conditions.
    • “In narrowing the population with its revised recommendation, the CDC cited the potential link between the vaccines and GBS.
    • “On Tuesday, the FDA explained that its new guidelines come after the agency conducted a post marketing observational study and evaluated the results of clinical trials and reports to its Vaccine Adverse Event Reporting System (VAERS).”
  • Per Healthcare Dive,
    • “The Food and Drug Administration’s device center clarified how manufacturers should approach artificial intelligence in a draft guidance issued on Monday.
    • “The document outlines recommendations for design, development and maintenance to ensure AI-enabled devices are safe and effective. In particular, the guidance outlines how device makers should address transparency and bias and when post market monitoring is needed. 
    • “Troy Tazbaz, director of the FDA’s Digital Health Center of Excellence, said the agency has authorized more than 1,000 AI-enabled devices to date. 
    • “As we continue to see exciting developments in this field, it’s important to recognize that there are specific considerations unique to AI-enabled devices,” Tazbaz said in a statement.”
  • Per MedTech Dive,
    • “Johnson & Johnson said Wednesday it paused all U.S. Varipulse caseswhile the company investigates the cause of four reported neurovascular events.
    • “J&J said the cases were part of an external evaluation in the U.S. The pause was initiated on Jan. 5. J&J completed more than 130 cases across 14 sites as of Jan. 3.
    • “An external evaluation is a limited rollout intended to collect physician feedback on a new technology before a full release, a J&J spokesperson said in an email to MedTech Dive.
    • “Because the evaluation used a unique platform configuration, the pause does not affect the rollout of Varipulse outside of the U.S., where more than 3,000 commercial cases have been completed, J&J said.
    • “The pause of U.S. cases comes two months after J&J received Food and Drug Administration approval for Varipulse, becoming the third device company to offer a PFA system in the U.S.”

From the public health and medical research front,

  • The National Cancer Institute released its Cancer Information Highlights concerning “Targeted Therapy for Head and Neck Cancer & CAR T-Cell Therapy for Brain Cancer.”
  • MedPage Today informs us,
    • A study of older adults showed that 6% had depression, with higher prevalences in certain groups, including women, those who were unmarried, and those with chronic medical conditions. (Journal of the American Geriatrics Society)
    • A single 25-mg dose of synthetic psilocybin significantly improved depressive symptoms by week 3 among participants with severe treatment resistance in a small single-arm open-label trial. (American Journal of Psychiatry)
    • Older adults with major depressive disorder displayed riskier driving compared with those without depression, according to a prospective longitudinal cohort study. (JAMA Network Open).
  • MedPage Today adds, “Two types of Wicklow Gold cheddar cheese sold in five states were recalled due to potential contamination with Listeria monocytogenes, Abbey Specialty Foods said [last Friday].”

From the U.S. healthcare business front,

  • Healthcare Dive expects that “Health insurers will step off the roller coaster in 2025. After a turbulent year, things should calm for payers with the advent of a business-friendly Trump administration — though challenges will persist.”
  • MedCity News discusses
    • How Can Employers Manage Rising Healthcare Costs in 2025? Multiple reports indicate that employers can expect rising healthcare costs in 2025. To address these costs, employers are holding their vendor partners accountable and evaluating their health plan and PBM partners.
  • and
    • “Biopharma in 2025: Outlook for Obesity Meds, Drug Prices, Regulation & More. Metabolic medicines dominated life sciences headlines in 2024, a trend expected to continue into the new year. Other things to look for include more widespread adoption of artificial intelligence technologies and the IPO market’s return to normal levels.”
  • STAT News reports
    • “Next week brings the return of the J.P. Morgan Healthcare Conference, and with it another fabled opportunity for companies in the industry to court possible mergers, acquisitions, and licensing deals. This year, there will be even greater pressure to make a good match, as the pharmaceutical industry, which drives more than $1 trillion in economic activity and thousands of jobs, faces one of the largest patent cliffs in recent history. 
    • “Between now and 2033, the patents on dozens of brand-name medications will expire, allowing generic drugmakers to begin selling cheaper versions. Drug companies stand to lose more than $400 billion in revenue as patents expire for Keytruda, Eliquis, Jardiance, Opdivo, and other blockbuster therapies. (By comparison, the last major patent cliff that hit the industry, in 2011, jeopardized around $250 billion in drug revenue.) 
    • “One of the few tried-and-tested methods for navigating a patent cliff is to acquire startups and new drugs — and lots of them. As a result, many experts anticipate pharma ramping up M&A activity in 2025, starting at the J.P. Morgan conference. 
    • “We always have a handful of deals announced around JPM. But the real work is the meetings that happen at JPM, that start the discussions.… I think people need to buckle up, because it’s already twice as frothy and could get even more,” said Charles Ruck, an attorney at Latham Watkins who specializes in M&A.”
  • Per Fierce Healthcare,
    • “Two-thirds of insured Americans say they would trust a health insurer’s artificial intelligence copilot to accurately inform them about a health plan’s benefits, a survey conducted by virtual care navigation platform Pager Health and market research firm The Harris Poll reveals.
    • “Of the respondents, 66% believe AI can correctly personalize digital healthcare with the goals and needs of the member. Even more respondents think AI can find doctors accepting new members and schedule appointments.
    • “The survey, shared exclusively with Fierce Healthcare, provide insights into how members want insurers to offer a better customer experience, sometimes through AI. However, health plans do not fully capitalize on this opportunity.
    • “Only 41% of people say they receive personalized messages, while 17% don’t receive health plan recommendations at all. About one-third of respondents say an insurer’s wellness programs would be more enticing if they received progress alerts, biometric information or claims data.
    • “Only health plans that fully leverage the power of AI to analyze the wealth of health data available will be able to meet this demand and, in the process, boost member engagement and satisfaction,” said Rita Sharma, chief product officer at Pager Health, in a news release.”
  • The Wall Street Journal reports,
    • “Novo Nordisk expanded a deal with Valo Health, a U.S. company, to discover and develop treatments for obesity, type 2 diabetes and cardiovascular disease using human data and artificial intelligence.
    • “The deal extends an agreement signed in 2023 and will see Valo become eligible for increased payments and funding.
    • “Under the original deal, the companies agreed to develop up to 11 drug programs, primarily focused on cardiovascular disease, with Valo eligible to receive up to $2.7 billion in milestone payments, plus research and development funding and potential royalty payments.
    • “The new agreement set out Wednesday expands the scope to put a stronger focus on obesity and type 2 diabetes and includes near-term payments to Valo of up to $190 million.
    • “A further $4.6 billion in potential milestone payments will be made for up to nine new drug programs and Valo will also be eligible for more research and development funding and potential royalty payments.
    • “The companies will continue to use Valo’s drug discovery and development platform that uses patient data and AI to generate new insights and translate them into potential therapeutics.”
  • Per Healthcare Dive,
    • “Transcarent, a healthcare platform for self-insured employers, will acquire benefits navigator Accolade for about $621 million, the companies announced Wednesday. 
    • “The deal will combine Transcarent’s offerings — including an artificial intelligence-backed information and navigation service, health benefits guidance and virtual care — with Accolade’s services, like providing virtual primary care and specialist consultations, as well as patient advocates and care navigation. 
    • “The acquisition will net Accolade stockholders $7.03 per share in cash, an approximately 110% premium over the company’s closing stock price on Tuesday. Transcarent’s CEO, noted entrepreneur and investor Glen Tullman, will head up the combined organization, according to a spokesperson.”

Tuesday Report

David Ermer–CDC, Congress, Medical / Rx research, Obesity, OPM, Rx coverage, U.S. Healthcare–
OPM Headquarters a/k/a the Theodore Roosevelt Building
  • In a press release, OPM patted itself on the back for successfully launching the Postal Service Health Benefits Program.
  • Govexec adds,
    • “The Office of Personnel Management on Tuesday issued guidance to agencies reminding them of how to handle the pay and benefits of political appointees who are set to resign ahead of President-elect Trump’s inauguration on Jan. 20.
    • “In a memo to agency human resources directors, OPM associate director for workforce policy and innovation Veronica Hinton wrote that agencies should compensate appointees who are planning on resigning at noon on Inauguration Day—when Trump is slated to be sworn into office—for the hours they are scheduled to work before that time.” * * *
    • “Hinton’s memo also addresses the fact that Inauguration Day, which Washington, D.C., area federal workers receive as a holiday due to the congestion resulting from the proceedings, happens to fall on another federal holiday: Martin Luther King, Jr. Day.
    • “In short, there are no so-called “in-lieu-of” holidays entitling employees who typically work Mondays to an extra day off in light of the two holidays’ confluence. But if a D.C.-area employee’s normal work schedule does not include Mondays, they would receive one “in-lieu-of” holiday.”
  • Speaking of political appointees leaving on Inauguration Day, an HHS press release lets us know “United States Surgeon General Dr. Vivek Murthy released his Parting Prescription for America – PDF, weaving together reflections on his personal and professional experiences having spent six of the last ten years as our nation’s Surgeon General.”
  • Fierce Healthcare tells us,
    • “The Federal Consumer Financial Protection Bureau on Tuesday issued new regulations barring medical debts from American credit reports, enacting a major new consumer protection just days before President Joe Biden is set to leave office.
    • “The rules ban credit agencies from including medical debts on consumers’ credit reports and prohibit lenders from considering medical information in assessing borrowers.
    • “These rules, which the federal watchdog agency proposed in June, could be reversed after President-elect Donald Trump takes office Jan. 20. But by finalizing the regulations now, the CFPB effectively dared the incoming Trump administration and its Republican allies in Congress to undue rules that are broadly popular and could help millions of people who are burdened by medical debt.”
    • FEHBlog note — The rule does not take effect until early March. The FEHBlog hopes that the incoming Administration will cancel this rule making which is bound to disrupt the U.S. credit market.
  • Per a Senate press release,
    • Today, Senators Sheldon Whitehouse (D-RI) and Chuck Grassley (R-Iowa), in their respective capacities as Chairman and Ranking Member of the Senate Budget Committee during the 118th Congress, released a bipartisan staff report on the findings of their investigation into the ways in which private equity investment in health care has negative consequences for patients and providers. 
    • The Committee focused on two private equity firms—including the single-largest private equity investor in health care—that currently or previously invested in two prominent hospital operators.  Throughout the course of its investigation, the Committee reviewed more than one million pages of documents from Leonard Green & Partners, Prospect Medical Holdings, Medical Properties Trust, Apollo Global Management (Apollo), Lifepoint Health, and Ottumwa Regional Health Center, a for-profit Iowa hospital, that revealed new information about the business dealings of private equity-owned hospital operators.  Documents obtained by the Committee detailed how private equity’s ownership of hospitals earned investors millions, while patients suffered and hospitals experienced health and safety violations, understaffing, reduced quality of patient care, and closures. 
    • “Private equity has infected our health care system, putting patients, communities, and providers at risk,” said Chairman Whitehouse. “As our investigation revealed, these financial entities are putting their own profits over patients, leading to health and safety violations, chronic understaffing, and hospital closures.  Take private equity firm Leonard Green and hospital operator Prospect Medical Holdings: documents we obtained show they spent board meetings discussing profit maximization tactics—cost cutting, increasing patient volume, and managing labor expenses—with little to no discussion of patient outcomes or quality of care at their hospitals.  And while Prospect Medical Holdings paid out $645 million in dividends and preferred stock redemption to its investors—$424 million of which went to Leonard Green shareholders—it took out hundreds of millions in loans that it eventually defaulted on.  Private equity investors have pocketed millions while driving hospitals into the ground and then selling them off, leaving towns and communities to pick up the pieces.”
    • “The Ottumwa community has personally felt the impact of private equity on its health care system.  Under private equity ownership, wait times at Ottumwa Regional Health Center have gone up as patient experience has gone down. The diminishing quality of care, service availability and care capacity at the hospital is forcing Ottumwa residents to travel significant distances in order to receive appropriate treatment. Iowans deserve better,” Grassley said. “A dependable health care system is essential to the vitality of a community.  As always, sunshine is the best disinfectant.  This report is a step toward ensuring accountability, so that hospitals’ financial structures can best serve patients’ medical needs.”  
    • Read the full report here, and view the documents released by the Committee here and here.

From the public health and medical research front,

  • Here is a link to the Centers for Disease and Control and Prevention’s respiratory virus updates.
  • STAT News reports
    • “At Tufts University in Medford, Mass., researchers loaded a tiny 3D model of the human brain into a plastic shell resting atop a spring-loaded platform. Inside this polymer skull, the donut-shaped ball of living brain tissue floated in a warm, salty bath, its neurons whispering to each other in the darkness. Then a piston struck the platform, whipping it back and forth, and sending the mini-brain sloshing.
    • “Days later, as the team assessed the damage, the results were stark. Some of the human brain-like tissue had been housing a latent infection with a herpes virus, the type that causes cold sores. And the impact of the piston — intended to mimic a concussion — had woken that virus up. In those tissues, the researchers found lots of inflammation, newly formed plaques of sticky amyloid proteins, and all around them dying neurons — the signature marks of Alzheimer’s disease. Meanwhile, infection-free brain tissues recovered from the concussion with just a bit of lingering inflammation. 
    • “Decades of epidemiological data have shown that infections with herpes simplex virus type 1, or HSV-1 can raise the risk of Alzheimer’s disease in certain people. So can a history of head injury. The new research, published Tuesday in Science Signaling, is the first to connect the dots between them, and adds to mounting evidence that this most common form of dementia can be caused by an everyday microbe.”
  • Per Fierce Pharma,
    • “It’s now official: Johnson & Johnson’s combination of Rybrevant and Lazcluze has racked up an overall survival (OS) victory against AstraZeneca’s standard-of-care Tagrisso as a first-line treatment for advanced or metastatic non-small cell lung cancer (NSCLC).
    • “In reporting positive top-line results from the phase 3 MARIPOSA study in 1,074 patients with NSCLC with EGFR exon 19 deletions or L858R substitution mutations, J&J’s combo is expected to keep patients alive for at least a year longer than Tagrisso.
    • “The results, details of which are yet to be revealed, show a statistically significant and clinically meaningful improvement in OS, according to J&J.” 
  • BioPharma Dive points out,
    • “A landmark study hoping to find new treatments for ALS has notched two more failures, as experimental medicines from Denali Therapeutics and Calico Life Sciences proved no better than a placebo at slowing the nerve-destroying disease or keeping patients alive longer.
    • “Denali disclosed high-level results from the study Monday. After about six months, treatment with the company’s drug didn’t result in any significant changes in the severity of the disease, nor did it substantially help patients’ muscle strength or respiratory function.
    • “Denali plans to further examine the data and look at biological markers of the disease, including one, “neurofilament light chain,” that’s become increasingly important to researchers focused on amyotrophic lateral sclerosis. The company expects to conduct those analyses later this year.”
  • and
    • “Privately-held biotechnology startup Metsera said Tuesday a long-acting GLP-1 shot it’s developing helped people who are overweight or have obesity lose more weight than placebo recipients in a Phase 2 trial. 
    • “Study participants who received the shot, dubbed MET-097i, lost on average 11% more of their body weight than those who got a placebo over the course of 12 weeks. Placebo-adjusted weight loss also reached around 20% in those who received the highest dose, comparable to what was observed in tests of Eli Lilly’s Zepbound and Novo Nordisk’s Wegovy over a similar period.
    • “Metsera also said data from the trial support plans to test MET-097i as a monthly injection, less frequent than the weekly shots Zepbound and Wegovy require. The announcement is the latest step forward for a company that has raised more than half a billion dollars since launching last April to support a bid to challenge Lilly and Novo’s medicines.” 
  • Cardiovascular Business adds,
    • “Semaglutide is associated with significant cardiovascular benefits for overweight and obese patients who have previously undergone coronary artery bypass graft (CABG) surgery, according to new data published in the Journal of the American College of Cardiology.
    • “Semaglutide is a popular GLP-1 receptor agonist being sold by Novo Nordisk under the brand names Wegovy and Ozempic. GLP-1 receptor agonists were originally developed to treat diabetes, but they are being used more and more to help obese and overweight patients lose weight. 
    • “For this latest analysis, researchers tracked data from the SELECT trial, originally designed to examine semaglutide’s impact among overweight/obese patients without diabetes, and focused exclusively on more than 2,000 patients with a prior history of CABG. The patients had a mean age of 65 years old, 84.2% were men and the mean BMI was 31.9 kg/m2. A history of hypertension was seen in 85.6% of patients. The rates of pre-existing atrial fibrillation and heart failure were 12.5% and 33.4%, respectively. 
    • ‘The study’s results confirmed that CABG patients still face an elevated risk of ischemic cardiovascular events following treatment. And once again, researchers wrote, semaglutide has been linked to “significant and consistent reductions” in the risk of such events.” 
  • The Wall Street Journal reports,
    • “A new study is helping to answer a pressing nutrition question: Which ultra-processed foods are harming our health—and which might not be so bad? 
    • “The problem is the way many packaged foods are made, researchers believe. Products such as many frozen pizzas, cereals and chips pack more calories per gram than less-processed foods do. And most ultra-processed foods have combinations of salt, fat, sugar and carbohydrates that aren’t generally found in nature, which can make us crave them. Diets high in packaged foods without those traits—such as canned peaches or refried beans—don’t seem to lead people to overeat and gain weight, at least not as much.
    • “Those are the findings so far of a continuing study investigating how ultra-processed food affects our bodies. Scientists presented their interim data at a workshop put on by the National Institutes of Health and the U.S. Food and Drug Administration in December. 
    • “There might be a way to create the quote, unquote healthy ultra-processed food that’s still convenient,” said Kevin D. Hall, the principal investigator of the study and a scientist at the NIH, giving an example of a frozen meal with brown rice, beans and a lot of vegetables.” 

From the U.S. healthcare business front,

  • STAT News reports,
    • “The advent of the first generic GLP-1 drugs could help Medicare negotiate a lower price for the highly sought after diabetes and obesity medication semaglutide, according to experts familiar with the price-negotiation program and STAT’s review of documents from the first round of negotiations.
    • “The Food and Drug Administration approved generics for the diabetes drugs exenatide and liraglutide in November and December. While those drugs don’t work as well as semaglutide, their much lower costs could give Medicare leverage to push for lower prices for semaglutide, two experts said.
    • “It’s hard to make an argument that liraglutide is not clinically comparable to the other GLP-1,” said Institute for Clinical and Economic Review President Sarah Emond.
    • “Both the nonpartisan Congressional Budget Office and academic experts expect semaglutide, sold by Novo Nordisk under the brand names Ozempic and Wegovy, to be among the next 15 drugs up for price negotiation. Medicare will announce that list by Feb. 1, and the negotiated prices will take effect in 2027.” 
  • Fierce Pharma notes,
    • “With COVID vaccine sales in the doldrums and a respiratory syncytial virus (RSV) vaccine market in “contraction”, Moderna CEO Stéphane Bancel had the unenviable task of trying to put a positive spin on a sharp stock decline in his annual shareholder letter.
    • “After an unexpectedly limited RSV vaccination recommendation from the CDC resulted in a “contraction” in the U.S. market, Moderna will adjust its financial reporting traditions to exclude products in their launch year, Bancel said Monday in his annual letter to shareholders.
    • “The company was “too optimistic about our ability to break into the market given the headwinds from a midyear approval and launch,” the Moderna CEO wrote about the RSV launch. “We are taking those learnings to heart and going forward, we will not include revenue from products in their launch year in our financial framework,“ he added.”
  • Per MedTech Dive,
    • “Stryker has agreed to acquire Inari Medical for approximately $4.9 billion, the company announced late Monday. The transaction is expected to close in the first quarter.
    • “Under the deal, Stryker would acquire all of Inari’s shares for $80 per share in cash, a premium of more than $30 over Friday’s closing price. Inari’s stock price closed at $65 Monday after surging by more than 30% in day trading.
    • “Inari would continue a busy year of dealmaking for Stryker in 2024, which included acquisitions of the artificial intelligence company Care.ai, the back pain device maker Vertos Medical and Nico Corporation, which makes devices to remove brain tumors and clots. Stryker did not disclose financial terms for the three deals.”
  • The Drug Channels Blog headlines “Inflation-Adjusted U.S. Brand-Name Drug Prices Fell for the Seventh Consecutive Year as a New Era of Drug Pricing Dawns.” Check it out.
  • Health Day relates,
    • “Patients have more access to their own medical test results than ever before, thanks to legislation requiring results be released as soon as they’re available.
    • “But that’s not necessarily a good thing, a new study warns.
    • “Many patients are reading test results in their electronic medical record before their doctor has had a chance to go over them, researchers say in a study published Jan. 2 in the Journal of the American Medical Association.
    • “This is provoking a lot of confusion and anxiety, mainly because medical reports contain a lot of jargon the average patient doesn’t understand, researchers said.
    • “For example, “a standard pathology report is written by a pathologist for a clinical specialist like a surgeon or a cancer doctor or for other pathologists to read,” lead researcher Dr. Cathryn Lapedis, a pathologist at University of Michigan Health, said in a news release from the college.
    • “To address this, Lapedis and her colleagues tested whether patients might benefit from pathology reports written in a way they would better understand.”

Monday Report

David Ermer–CDC, CMS, Congress, COVID treatment, FDA, Medical / Rx research, Rx coverage, U.S. Healthcare–

From Washington, DC.

  • The Wall Street Journal reports, “Congress quickly and smoothly certified President-elect Donald Trump’s election victory Monday, a contrast to four years earlier, when a pro-Trump mob stormed the Capitol and temporarily halted the confirmation of President Biden’s win.” 
  • Federal News Network confirms,
    • “President Joe Biden signed the Social Security Fairness Act into law Sunday afternoon, the final step needed for nearly 3 million public sector employees, retirees, spouses and surviving spouses to begin receiving larger monthly Social Security payments.
    • “The legislation repeals the Windfall Elimination Provision and Government Pension Offset — two longstanding provisions of Social Security that reduce or eliminate benefits for certain government retirees, including Civil Service Retirement System annuitants, as well as teachers, firefighters, police officers and others who have worked in a public sector position.”
  • The American Hospital Association News tells us,
    • “The Centers for Medicare & Medicaid Services Jan. 6 announced the 15 participants for its state Transforming Maternal Health Model: Alabama, Arkansas, California, Washington, D.C., Illinois, Kansas, Louisiana, Maine, Minnesota, Mississippi, New Jersey, Oklahoma, South Carolina, West Virginia and Wisconsin. The model will provide technical support and resources to state Medicaid agencies to develop programs that address new mothers’ physical health, mental health and social needs during pregnancy and postpartum. The model launched Jan. 1 and will run for 10 years.”
  • Per FiercePharma,
    • “In recent years, the FDA has amped up its supervision of accelerated approvals, including by requiring that confirmatory trials at least be underway at the time of these conditional nods. But, after hearing some mixed messaging from the agency, drugmakers were left wondering what exactly “underway” means in this context.
    • “Now, a new draft guidance document tries to clear the air on the agency’s interpretation of the term “underway.”
    • “The FDA on Monday posted a draft guidance document titled “Accelerated Approval and Considerations for Determining Whether a Confirmatory Trial is Underway.” Although the guidance doc was uploaded by the Oncology Center of Excellence, which has issued the majority of accelerated approvals, the policies are slated to apply to the entire FDA.”
  • BioPharma Dive points out “five FDA decisions to watch in the first quarter of 2025. Over the next three months, the regulator could approve new medicines for pain, a deadly heart disease and a rare condition that’s long bedeviled drugmakers.”

From the public health and medical research front,

  • The New York Times reports,
    • “A Louisiana patient who had been hospitalized with severe bird flu has died, the first such fatality in the United States, state health officials reported on Monday.
    • “The patient was older than 65 and had underlying medical conditions, the officials said. The individual became infected with the bird flu virus, H5N1, after exposure to a backyard flock and wild birds.
    • “There is no sign that the virus is spreading from person to person anywhere in the country, and Louisiana officials have not identified any other cases in the state. Pasteurized dairy products remain safe to consume.
    • “I still think the risk remains low,” said Dr. Diego Diel, a virologist at Cornell University.
    • “However, it is important that people remain vigilant and avoid contact with sick animals, sick poultry, sick dairy cattle, and also avoid contact with wild birds,” he added.”
  • The Washington Post informs us,
    • “The rate of triplet and higher-order multiple births in the United States declined 62 percent from 1998 to 2023, according to the Centers for Disease Control and Prevention. 
    • “Most of the downturn occurred since 2009. Triplet and higher-order births are pregnancies involving three or more babies. Because maternal and infant health problems are more frequently associated with higher-order multiple births than with twins and single births, the increase was of public health concern, the CDC report noted.” * * *
    • “The period that preceded the current study, 1980 to 1998, saw an extraordinary fivefold increase in births of triplets and higher-order multiple births — from 37 per 100,000 births in 1980 to 194 births per 100,000 in 1998. Researchers attributed the spike to higher maternal age and increased use of fertility treatments. Since that period, the rates of multiple births have trended in the opposite direction.”
  • Medscape adds,
    • “Respiratory syncytial virus prefusion F vaccine significantly reduced severe RSV-related lower respiratory tract disease (LRTD) requiring hospitalization or emergency department (ED) visits in an older adult population, including substantial representation from the oldest age groups.”
  • In related news,
    • Per the New York Times, “Can Paxlovid treat long Covid? A new report suggests it might help some patients, but which patients might benefit remains unclear. The report, published Monday in the journal Communications Medicine, describes the cases of 13 long Covid patients who took extended courses of the antiviral drug. Results were decidedly mixed: Nine patients reported some improvement, but only five said it lasted. Four reported no improvement at all.”
    • Per Infectious Disease Advisor, “Nirmatrelvir/ritonavir (PaxlovidTM) reduced COVID-19-related hospitalization and all-cause death, as well as the duration of COVID-19 symptoms and utilization of health care resources among patients at high risk for severe diseases, according to study findings published in Clinical Infectious Diseases.”
  • The Institute for Clinical and Economic Review announced today “that it will assess the comparative clinical effectiveness and value of apitegromab (Scholar Rock) for the treatment of spinal muscular atrophy (SMA). ICER will also assess new evidence (since ICER’s 2019 Final Evidence Report) on the clinical effectiveness of nusinersen (Spinraza®, Biogen) and onasemnogene abeparvovec-xioi (Zolgensma®, Novartis), as well as the evidence for risdiplam (Evrysdi®, Genentech). Risdiplam was not evaluated in the 2019 report.”

From the U.S. healthcare business front,

  • Fierce Healthcare reports,
    • “All of the commercial prescriptions dispensed at CVS pharmacies will be processed through its CostVantage reimbursement model beginning this year, the healthcare giant announced on Monday.
    • “Under the model, prescriptions are priced based on the underlying cost with a delineated markup and dispensing fee to cover the services provided by CVS in the transaction. The company says that this model makes it less necessary to raise the cost for certain prescriptions to cover losses on other drugs.
    • “The model also seeks to increase transparency for insurers and pharmacy benefit managers, making it potentially easier for PBMs to establish their own more transparent programs for plans and clients.
    • “Prem Shah, group president for CVS Health, said that the team is also working with the Centers for Medicare & Medicaid Services to expand the program to Medicare and Medicaid prescriptions.”
  • Modern Healthcare relates,
    • “Although the pharmacy benefit manager market has long been controlled by three large, established players, many smaller PBMs are seeing a spike in interest. But the newer entrants will continue to face stiff competition this year as they seek more business.
    • “Smaller PBMs that advertise themselves as transparent have gained traction over the last few years as health insurers, employers and government entities look to deviate from the traditional spread pricing model. Many of these companies have said 2024 was their largest selling year, with an increasing number of large customers showing interest.”
    • “Companies that had never even spoken to us prior to this past year now are talking to us and are including us as a finalist,” said David Fields, president and CEO of Navitus Health Solutions, which serves employers with up to 500,000 workers and dependents. Navitus will manage pharmacy benefits for about 18 million people in 2025.”
  • McKinsey & Company notes,
    • Technology leaders and enthusiasts are convening in Las Vegas this week for CES—formerly known as the Consumer Electronics Show—to hear from industry leaders, get immersed in demos and interactives, and learn about the latest solutions to society’s greatest challenges. This year’s conference program features topics including artificial intelligence, digital health, vehicle technology and future mobility, and more. 
    • Whether you’re attending in-person or via livestream, prepare for #CES2025 by learning about the adoption, development, and effects of 15 top technology trends in an analysis by McKinsey’s Lareina Yee, Michael Chui, and Roger Roberts.

Weekend update

David Ermer–Congress, Medical / Rx research, Mental health care, U.S. Healthcare–

From Washington, DC

  • A joint session of Congress will be held tomorrow to counting the votes received from the Electoral College. Thereafter, the House of Representatives and the Senate will resume organizing the 119th Congress.
  • On January 3, the President issued a “Memorandum on the Designation of Officials of the Office of Personnel Management to Act as Director.” Such a memorandum has been issued in advance of Presidential Inauguration Day pursuant to the Federal Vacancies Act of 1998.
  • The FEHBlog understands
    • “The [Presidential] signing ceremony of HR 82, [the Social Security Fairness Act of 2023 which repeals certain laws that reduce Social Security benefits for individuals who receive other benefits, such as a pension from a state or local government, has been moved up to Sunday, January 5 at 4 PM Eastern time.  
    • “We still don’t know whether the ceremony will be broadcast or streamed, but one possible outlet if it is live is https://www.whitehouse.gov/live/
  • The President also signed another raft load of bills into law yesterday.

From the public health and medical research front,

  • Fortune Well explains why it is particularly important for adults and children to receive the flu vaccine. What’s more,
    • “Don’t worry if you missed the unofficial “vaccine before Halloween” memo. We’re in the thick of cold and flu season and any protection you can provide yourself, your loved ones, and your community will benefit public health, says Dr. Robert Hopkins Jr., medical director of the National Foundation for Infectious Diseases.
    • “It’s not too late,” Hopkins told Fortune in December. “It is not a bad time when we’ve got risk in front of us. And I would certainly prefer that people were vaccinated earlier, but I’m not going to make perfection the enemy of the good.”
  • The Washington Post reports,
    • “People who receive physical therapy shortly after suffering concussions have better outcomes than those who wait longer to start rehabilitation programs, a recent analysis suggests.
    • “Published in the Physical Therapy & Rehabilitation Journal, the study reports on a randomized trial of 203 adults diagnosed with a mild traumatic brain injury, or concussion, who were within two to 12 weeks from their injury.
  • NPR Shots shares “nine unexpected things we learned about mental health and our brains in 2024.”
  • A commentator in the Wall Street Journal shares her personal experience with chronic pain. For context, she writes
    • “[W]e do know that relentless chronic pain is destabilizing,” says Dr. Scott Fishman, a pain specialist at the University of California, Davis, who founded its Center for Advancing Pain Relief, a rare center that focuses on both the treatment and prevention of pain. 
    • It would be absurd to say that chronic pain drives sufferers to become murderers; the only people pain patients are at any heightened risk of killing is themselves. Yet Fishman likens the effects of enduring pain to “driving on a slippery road. It puts everyone at risk.”

From the U.S. healthcare business front,

  • Modern Healthcare reports,
    • “Health tech companies focused on behavioral health are confident that reimbursement trends favor them in 2025.
    • “Payment flexibilities for telehealth, hospital-at-home care and remote prescribing have been temporarily extended until March 31. The changes will prolong COVID-19-era payment for remote care across all specialties.
    • “For many in mental health tech, new reimbursement codes from the Centers for Medicare and Medicaid Services’ November physician payment rule are an even bigger deal.
    • “The codes reimburse providers for using digital mental health treatment applications or devices that have been cleared or granted De Novo authorization by the Food and Drug Administration.
    • “While the codes are narrow in scope, analysts said the move signifies a larger recognition among CMS and commercial insurers that virtual platforms treating mental health should be reimbursed.”

Cybersecurity Saturday

David Ermer–Cybersecurity, Generative AI–

From the retrospection front,

  • Bleeping Computer reflects on the fourteen “biggest cybersecurity and cyberattack stories of 2024.
  • Dark Reading queries “What Security Lessons Did We Learn in 2024?”

From the cybersecurity policy and law enforcement front.

  • Beckers Hospital Review highlights
    • “six things the proposed changes to HIPAA would require of [HIPAA covered entities and business associates:
      • 1. “Encrypt electronic protected health information “with limited exceptions.”
      • 2. “Implement multifactor authentication “with limited exceptions.”
      • 3. “Deploy antimalware software.
      • 4. “Establish written procedures to restore EHR systems and data within 72 hours of a cyberattack.
      • 5. “Notify certain regulators within 24 hours when an employee’s electronic access to EHR data or systems is changed or terminated.
      • 6. “Develop and revise an inventory and network map that illustrates the movement of EHR data through the organization’s systems at least once every 12 months.”
  • Dark Reading summarizes themes of the proposed HIPAA Security Rule amendments (some of which are overkill in the FEHBlog’s opinion) and notes
    • “The changes to the security rule will cost approximately $9 billion in the first year and $6 billion for years two to five, said Anne Neuberger, deputy national security adviser for cyber and emerging technology, during a Dec. 27 press briefing.
    • “The cost of not acting is not only high, it also endangers critical infrastructure and patient safety, and it carries other harmful consequences,” Neuberger said.
    • “Stakeholders have 60 days after the nearly 400-page proposal is published to submit comments (early March 2025). HHS will issue the final version of the rule afterward, although a specific date has not yet been set, followed by a compliance date of 180 days. It is also not clear whether work on the changes will continue under the new presidential administration. Even so, healthcare organizations should review proposed requirements and evaluate their existing security programs to prepare.”
  • Another Dark Reading article goes into more detail about proposed rule which is fitting for a “nearly 400-page proposal.”
  • Dark Reading also reports,
    • “A US Army soldier was reportedly arrested Dec. 20 in Texas and charged with two counts of unlawful transfer of confidential phone records.  
    • “Cameron John Wagenius, 20, is suspected of leaking presidential call logs belonging to AT&T and Verizon under an online alias of “Kiberphant0m.”

From the cybersecurity breaches and vulnerabilities front,

  • The Wall Street Journal reports,
    • “The Treasury Department told lawmakers Monday [December 30, 2024] that a state-sponsored actor in China hacked its systems, accessing several user workstations and certain unclassified documents.
    • “The Treasury was informed on Dec. 8 by a third-party software service provider, BeyondTrust, that a threat actor used a stolen key to remotely access certain workstations and unclassified documents, according to a letter reviewed by The Wall Street Journal.
    • “Once alerted, the department said it immediately contacted the Cybersecurity and Infrastructure Security Agency and has since worked with law enforcement partners across the government to assess the incident.
    • “The compromised BeyondTrust service has been taken offline and there is no evidence indicating the threat actor has continued access to Treasury systems or information,” a spokesperson said.
    • “In response, the Chinese embassy in Washington, D.C., denied the Treasury Department’s allegations, and said that its government opposes what it described as U.S. smear tactics without any factual basis.”
  • Per Cybersecurity Dive,
    • “Weeks after BeyondTrust disclosed an attack spree against a limited number of customers, more than 8,600 instances of the company’s Privileged Remote Access and Remote Support products remain exposed, according to a blog post released Thursday [January 2, 2025] by Censys. 
    • “BeyondTrust in December warned that an attacker gained access to a limited number of Remote Support SaaS instances utilizing a compromised API key. This week, the U.S. Department of Treasury said a suspected state-linked attacker gained access to a number of workstations and stole unclassified information using a BeyondTrust key.
    • “Censys researchers, in the Thursday [January 2, 2025] blog, indicated that not all of the exposed instances are considered vulnerable, because the firm does not have access to the versions involved.”
  • The Cybersecurity and Infrastructure Security Agency added one known exploited vulnerability its catalog this week.
  • Palo Alto Network offers details on this CVS at this link.
  • An ISACA commentator cautions “Overreliance on Automated Tooling is A Big Cybersecurity Mistake.”
  • A Dark Reading commentator warns,
    • “Despite never-ending data breaches and ransomware attacks, too many companies still rely on the outdated “trust but verify” cybersecurity strategy. This approach assumes that any user or device inside a company’s network can be trusted once it has been verified. The approach has clear weaknesses: Many businesses are putting themselves at additional risk by verifying once, then trusting forever.
    • “There was a time when “trust but verify” made sense, namely when networks were self-contained and well-defined. But at some point, perhaps due to the overwhelming volume of devices on a network, the number of patches needing to be applied, user demands, and resource constraints in the cybersecurity team, things began to slip. Initial verification meant the asset was trusted, but no additional verification ever took place.”

From the ransomware front,

  • Cybersecurity Dive lets us know,
    • “Rhode Island officials said a ransomware group has begun to leak stolen information from a state social services database following a December attack. 
    • “In a Monday [December 30, 2024] press conference, Rhode Island Gov. Daniel McKee said the state was informed by Deloitte, which manages the RIBridges program, that hackers had begun to release data on a dark web leak site. 
    • “The contents of those files are still being analyzed by experts,” McKeetold reporters during the briefing. “Identifying what is in those files is a complex process, but they’re working right now to make those identifications.”
    • “RIBridges is a state program that administers several social services programs, including Medicaid, Temporary Assistance for Needy Families and other programs.”  * * *
    • “A threat group called Brain Cipher previously claimed credit for the attack, which was disclosed Dec. 5. The group has been active since June 2024 and leverages the LockBit 3.0 payload for their ransomware payloads, SentinelOne previously told Cybersecurity Dive.
    • “The group often uses phishing campaigns to gain initial access to targeted organizations, thus tricking users into downloading malicious files, according to Jon Miller, co-founder and CEO of Halcyon. 
    • “Once inside, they leverage tools and exploits to move laterally across networks, frequently targeting Windows domain administrator credentials to maximize their reach,” Miller said via email.
    • “Researchers from Sophos confirmed Brain Cipher posted detailed information on a leak site claiming credit for the RIBridges database incident.”
  • Per Security Week,
    • “The Richmond University Medical Center in New York has been investigating a ransomware attack since May 2023 and it recently determined that the incident resulted in a data breach affecting more than 670,000 people. 
    • “The healthcare facility, which serves residents in Staten Island, New York, suffered significant disruptions in May 2023 after being targeted in a ransomware attack. It took the organization several weeks to restore impacted services.
    • “An initial forensic investigation showed that the hospital’s electronic health record systems were not compromised, but it was later determined that other files may have been accessed or exfiltrated from Richmond University Medical Center’s network in early May. 
    • “Once the investigation determined what files may have been accessed or removed from our network, we located a copy of each file and then undertook a manual review process of those files to determine whether they contained any sensitive personal information or personal health information,” the hospital said in a security incident notice.”
  • Healthcare IT News adds,
    • “Ransomware attacks are having a severe impact on U.S. healthcare organizations, with an alarming escalation in incidents and their consequences, according to a Comparitech report.
    • “The study found that, since 2018, 654 ransomware attacks have targeted healthcare providers, with 2023 standing out as a record-breaking year, logging 143 incidents.
    • “These attacks compromised over 88.7 million patient records during this period, with more than 26.2 million breached in 2023 alone.
    • “Each day of downtime due to ransomware costs healthcare organizations an average of $1.9 million, culminating in an estimated $21.9 billion in downtime losses over six years.
    • “On average, medical organizations experienced 17 days of downtime per incident, with the highest disruptions reported in 2022, averaging 27 days.”

From the cybersecurity defenses front,

  • A Dark Reading commentator explains how to get the most out of your cybersecurity insurance policy.
    • “As cyber threats continue to evolve, so must our approach to mitigating them. Bolster your cybersecurity posture in a holistic manner — self-assessing your risk profile, addressing vulnerabilities, and striving for continuous improvement — and you can better safeguard your organization against threats and control your cyber-insurance costs.
    • “Prepare for increasingly rigorous risk assessments from [insurance] providers moving forward. Underwriters now have access to extensive data about cyber threats and protections. Expect them to ask more granular questions and do deeper inspections into the efficacy of controls, especially those around identity-related risks, such as privileged access and credential theft. Anticipate their questions, and be prepared with comprehensive, up-to-date answers.
    • “Cyber insurance should augment your cybersecurity strategy, not replace it. Prioritize implementing robust, ongoing cyber practices that protect your organization.”
  • Cybersecurity Dive informs us,
    • “Most cyber leaders are bullish on generative AI despite governance concerns, according to a CrowdStrike survey published in December. Nearly two-thirds say their organization would overhaul tooling in order to leverage better generative AI capabilities. 
    • “Leaders expect generative AI adoption to bring ROI through cost optimization, easier tool management, reduced incidents and shorter training cycles, according to the survey of more than 1,000 cybersecurity leaders and practitioners. 
    • “Respondents said the leading concern when weighing a generative AI purchase is how applications or services integrate with current tools. Around 70% intend to purchase access to the technology in the next year.”
  • Dark Reading discusses “6 AI-Related Security Trends to Watch in 2025. AI tools will enable significant productivity and efficiency benefits for organizations in the coming year, but they also will exacerbate privacy, governance, and security risks.”
  • Here is a link to Dark Reading’s CISO Corner.