FEHBlog

Weekend Update

David Ermer–Agentic & Generative AI, CMS, Congress, Federal employment benefits, Medicare, OPM, U.S. Healthcare–

“Simplicity is a great virtue but it requires hard work to achieve it and education to appreciate it. And to make matters worse: complexity sells better.”
– Edsger W. Dijkstra

From Washington, DC

  • Roll Call discusses what is likely to happen on Capitol Hill this week.
  • The Federal Benefits Open Season begins at noon (ET) tomorrow. OPM adds,
    • “The Federal Benefits Open Season ends at 11:59 pm Eastern Time on Monday December 14, 2026 for the Federal Employees Dental and Vision Insurance Program (FEDVIP) and the Federal Flexible Spending Account Program (FSAFEDS). Open Season for the Federal Employees Health Benefits Program (FEHB) and Postal Service Health Benefits Program (PSHB) ends at 11:59 pm, per the location of your electronic enrollment system, on Monday December 14, 2026.”
  • Beckers ASC Review reports,
    • “Physician leaders warn that CMS’ 2027 Medicare physician fee schedule final rule will put more strain on independent practices and make it harder for patients to get care.
    • “The final rule, released Nov. 4, cuts the conversion factor 2.31% to $32.63 for physicians who aren’t qualifying participants in an advanced alternative payment model. CMS had proposed a 1.68% cut in July. Much of the drop comes from the expiration of a temporary 2.5% payment increase for 2026. The rule also finalizes a 20% payment reduction for certain evaluation and management services billed with modifier 25 on the same day as a zero-day global procedure.”
  • Contemporary OB/GYN tells us,
    • “The Centers for Medicare & Medicaid Services (CMS) has included the American Medical Association’s (AMA) new obstetric billing codes in the final 2027 Medicare Physician Fee Schedule, according to a statement from Camille A. Clare, MD, MPH, CPE, FACOG, president, American College of Obstetricians and Gynecologists.1 
    • “ACOG is deeply grateful to CMS for including AMA’s new obstetric codes in the final 2027 Medicare Physician Fee Schedule, and we look forward to ushering in a new system that will contribute to improved maternal health outcomes,” Clare said in part. “This change follows years of ACOG advocacy and will address several challenges related to the current method of billing for prenatal care services.” 
  • The FEHBlog guessed last Sunday that CMS would announce the Medicare Part B and D premiums after the national election day on November 3. We are now three business days past election pay with no announcement. Perhaps the announcement will be made this week.

From the public health and medical / Rx research front,

  • The New York Times reports,
    • Nutrient deficiencies are rare in the United States, thanks in part to advances in food fortification in the 1900s. But many people, especially those in certain high-risk groups, are still not meeting daily recommendations for some nutrients, said Teresa Fung, a nutrition professor at Simmons University in Boston.
    • Nutrient inadequacies typically don’t cause the obvious symptoms that severe nutrient deficiencies do, Dr. Fung said. But they sometimes cause more vague symptoms that can affect quality of life and increase the risk of certain health conditions.
    • [The article identifies] “five, commonly under-consumed nutrients in the United States, according to experts — and the signs you may be falling short.”
  • and
    • “Cardiologists have been on edge for months, waiting for the details surrounding recent reports of the stunning failures of two new heart drugs.
    • The drugs — pelacarsen and ziltivekimab — were widely expected to usher in a new era in preventing heart disease. Companies, betting on the drugs’ promise, made huge investments in developing them.
    • So when doctors saw preliminary announcements that the drugs were not helping patients in large clinical trials, many felt blindsided, although still hopeful that there was more to the story than they knew.
    • “The whole cardiovascular community was gobsmacked,” said Dr. Karol Watson, a director of UCLA’s preventive cardiology program.”
    • Were the drugs close to succeeding, just barely missing a statistically significant benefit? Or were there at least subgroups of patients who were helped?
    • “Now the answers are in. There was not a shred of evidence that the drugs helped anyone. By every measure, they were no better than placebos.
    • “The results, Dr. Watson noted, “are about as neutral as they can be.” The full data were presented on Saturday morning at the annual meeting of the American Heart Association and in simultaneous publications in The New England Journal of Medicine.”
  • The Washington Post relates,
    • “The humble flu shot may have a hidden talent: fighting cancer.
    • “In a small clinical trial in Ohio, doctors injected an ordinary flu vaccine straight into patients’ skin tumors, hoping to fool the immune system into mistaking the cancer for an infection.
    • The ruse seemed to take. Immune cells flooded into most of the injected tumors. By the time surgeons cut the cancers out, more than a third of patients showed signs that their tumors were in retreat. In a few, no trace of cancer remained.
    • “The trial involved just 18 patients and lacked a comparison group, so the findings are far from proof that the approach works. But they hint at a possibly inexpensive, off-the-shelf way to help cancer patients and offer an alternative to cancer vaccines, a field that has lately centered on bespoke, highly expensive shots built to match the mutations in each patient’s tumor. The findings were presented last week at the Society for Immunotherapy of Cancer’s annual meeting in Phoenix.”
  • Cardiovascular Business tells us,
    • “The Society for Cardiovascular Angiography and Interventions (SCAI) released updated cardiogenic shock classifications to help clinicians better identify patients at risk, assess disease severity, and determine whether treatments are restoring adequate organ perfusion.
    • “The 2026 SCAI SHOCK Classification Expert Consensus Update, published in the Journal of the SCAI (JSCAI) in conjunction with the 2026 American Heart Association (AHA) Scientific Sessions, represents the third iteration of the classification system first introduced in 2019.[1] The framework has become widely adopted in clinical care, research and regulatory settings as a common language for communicating cardiogenic shock severity.
    • “Srihari Naidu, MD, FACC, FAHA, MSCAI, immediate-past SCAI president and director of the catheterization laboratories at Westchester Medical Center, was a co-chair of the consensus writing group. He said the update retains the familiar five-stage classification, A through E, while refining how clinicians identify patients at risk of deterioration and evaluate their response to treatment. Originally issued in 2019 and revised in 2022, this new iteration incorporates additional data from the past few years.
    • “We were happy that most of the data that had supported the shock classification and showed that really it was instrumental in improving shock care and really tracking with mortality. This is the third iteration of the shock classification, and I think people will agree that this has been a major step forward,” he said.
    • “One of the most important clarifications is the emphasis on tissue hypoperfusion rather than blood pressure alone when determining shock severity.”
  • Genetic Engineering and Biotechnology News informs us,
    • “Right now, there is no pharmaceutical treatment for obstructive sleep apnea, a condition that is estimated to affect more than one billion people globally and approximately 30 million Americans. Multiple studies (notably in 20101 and 20172) report that as many of half those prescribed continuous positive airway pressure (CPAP)—the gold standard apnea therapy—reject it outright, and between 12% and 25% of those who begin those treatments abandon CPAP within three years.
    • “The reason for such high non-compliance is that CPAP is uncomfortable and socially awkward, Joel Latham, president and CEO, Incannex Healthcare, says. His company aims to be the first to potentially market an oral pharmaceutical therapy for obstructive sleep apnea.
    • “Latham says Incannex Healthcare’s mission is “targeting indications that have limited or no treatment options available.” So, while a therapy for obstructive sleep apnea, known as IHL-42X, is its lead therapeutic, the company’s pipeline also includes therapeutics based on distinctly different therapeutic platform to treat generalized anxiety disorder and rheumatoid arthritis.”

From the U.S. healthcare business and artificial intelligence front,

  • Beckers Hospital Review reports,
    • “Hospital sales are picking up steam as various health systems under financial pressure look to trim underperforming assets, exit noncore markets and redirect capital toward strategic priorities. 
    • “Recent hospital divestitures have come from nonprofit giants carrying hundreds of millions of dollars in operating losses, for-profit operators completing full-state exits and other systems shedding community hospital portfolios they no longer consider core to their portfolios. 
    • [The article identifies] “10 large health systems that have sold or announced plans to sell hospitals this year.”
  • Healthcare Dive adds,
    • “It was a busy Thursday morning at the strip mall in White Hall, West Virginia. Once the sprawling grounds of Middletown Mall, the state’s first shopping mall before it shuttered in 2017, customers shuffled under a searing August sun between stores like Michaels, Five Below, Ace Hardware and Tractor Supply.
    • “You’d be forgiven for overlooking the catty-cornered building sandwiched between the Department of Motor Vehicles and across the two-lane road from the Italian pizzeria. 
    • “The bright red “Emergency” sign over the front entrance might get your attention though. Or the Marion County ambulances with their engines idling around back.
    • The building, containing just two hallways, is Mon Marion Neighborhood Hospital, part of a burgeoning trend of small acute care hospitals dubbed “micro-hospitals” or “neighborhood hospitals” that can hold anywhere from eight to 25 inpatient beds.
    • The micro-hospitals are popping up nationwide — from Pennsylvania to Arizona, Colorado to Texas — as lower-cost alternatives to traditional hospitals, including in semi-urban and rural areas where care access is strained.
    • “It’s been well received by the community,” said David Goldberg, the former CEO of Mon Health System, owner of Mon Marion. “Very busy, very widely accepted.”
    • “Micro-hospitals differ from freestanding emergency rooms or urgent care, two types of care sites that are offered as solutions to the rural care crisis because they have inpatient care capabilities. Though diminutive, the facilities are certified as hospitals according to federal standards set by the CMS.”
  • Fierce Healthcare relates,
    • “Omada Health saw its “strongest quarter ever” in the third quarter of 2026, CEO and co-founder Sean Duffy told investors and analysts during a Thursday evening earnings call.
    • “We delivered our highest quarterly revenue, gross margin progression, and our most profitable quarter to date,” Duffy said.
    • “The virtual chronic care provider, which went public last June, brought in $91 million in revenue—up 34% year-over-year—and reported gross margin of 76% on a GAAP basis and 78% on a non-GAAP basis, according to Duffy. Omada reported net income of $7 million in the third quarter, compared with a net loss of $3 million in Q3 2025.
    • “The company also reported adjusted EBITDA of $12 million, compared to $2 million the year prior. 
    • “It beat Wall Street analysts’ estimates for revenue, though slightly trailed behind projections for total membership.
    • “Total members reached 1.1 million, up 36% year-over-year, with trailing 12-month revenue per total member increasing 5% year-over-year to $294, according to financial results publishedThursday. Average member tenure also grew 10% compared to the year prior, to approximately two years and four months. Member retention has improved to 58%, up from 43% in Q4 of 2024, executives said.”
  • Beckers Payer Issues tells us,
    • “Aetna left the ACA market at the beginning of 2026, citing underperformance. Other insurers have also been navigating a rocky ACA landscape, marked by the expiration of enhanced premium subsidies and shifting risk-pool dynamics.
    • “CVS Health previously recorded a $448 million premium deficiency reserve in the first quarter of 2025 for its individual exchange business related to expected losses that year. During that quarter’s earnings call, former CFO Tom Cowhey had projected losses for the individual exchange business between $350 million and $400 million for full-year 2025.
    • “Aetna CFO Andreana Santangelo recently joined the Becker’s 5th Annual Fall Payer Issues Roundtable and shared more about the decision. 
    • “Very early on, you could see that we just didn’t have the right cost structure for our ACA business,” she said. 
    • “Citing her experience at a Blues plan and at Cigna, Ms. Santangelo said considerations around scale and cost structure are especially important for that business line. 
    • “While addressing how scale can be about more than sheer numbers, Ms. Santangelo said that “scale is also about having the right kind of risk pool” and attracting the right people who will find value in the product.”
  • Fierce Healthcare informs us,
    • “Equiti is acquiring Lexi AI to build a hybrid language-access model that combines AI language support with human medical interpreters. 
    • “Equiti, which sells medical interpretation services to hospitals and health systems through its Martti business, provides 24/7 access to qualified medical interpreters across more than 250 languages and dialects. Lexi provides multilingual, AI-powered medical interpretation. The acquisition deal merges Lexi’s immediate AI language support, covering over 35 languages and dialects, with Martti and its network of qualified medical interpreters to help healthcare organizations expand language access.
    • “The acquisition was announced October 28. Financial details of the deal were not disclosed.”

Cybersecurity Saturday

David Ermer–Agentic & Generative AI, Congress, Cybersecurity, HIPAA Privacy and Security Rules–

From the frontier AI front,

  • Cyberscoop reports,
    • “OpenAI announced a new cybersecurity-focused model Thursday [November 4], citing internal benchmark testing that shows improvements in vulnerability discovery, patch development and adherence to safety guardrails meant to block out-of-scope work.
    • GPT-6 Cyber will first be available to a limited number of customers in OpenAI’s Daybreak Red program, which uses more advanced or nonpublic cybersecurity models for offensive red teaming.
    • “As a preview of the model’s capabilities, OpenAI officials said GPT-6 has found at least 81 “novel” vulnerabilities in the Firefox web browser, developed exploits for 948 Linux kernel vulnerabilities and was able to develop and validate a critical remote code execution vulnerability in Brotli, a popular open-source data compression tool. All the vulnerabilities were reported to owners and patched. 
    • “OpenAI officials told reporters Wednesday that the new safeguards include additional identity and account security requirements, more frequent check-ins from the model to OpenAI when a request is made to perform high-risk behaviors, and additional monitoring for “misalignment” or rule-breaking.”
  • The Wall Street Journal asks
    • “What if the mathematical locks and keys that secure our bank accounts, email inboxes and everything else on the internet turn out to be a lot less secure than we thought? What if the password-protected internet we rely on every day collapses?
    • “Quantum computers have long threatened such an apocalypse. For decades, engineers have been preparing for their arrival—and their inevitable abuse by well-heeled bad guys.
    • The result is known as “postquantum cryptography.” According to leading mathematics experts, an orderly transition of the world’s digital systems to this new paradigm should avert an event that could otherwise send us back a century, technology-wise.
    • “But now there is a potentially more pressing issue: AI’s impressive math skills.
    • Artificial intelligence is pushing advances in various mathematics fields at an unprecedented rate, conquering problems that our puny human minds have wrestled with for centuries. The fear is that this could include new solutions to the math problems that keep our encrypted communications encrypted.”
  • Cybersecurity Hub, writing in LinkedIn, adds,
    • “The US National Institute of Standards and Technology (NIST) has published its final roadmap for transitioning to post-quantum cryptography, marking a significant step towards replacing the cryptographic technologies that underpin digital communications, authentication and data protection.
    • “NIST IR 8547, Transition to Post-Quantum Cryptography Standards, identifies the existing standards vulnerable to future quantum computers and the quantum-resistant alternatives organisations will need to adopt. The publication moves the discussion beyond algorithm selection towards the practical challenge of coordinating migration across products, services and interconnected systems.
    • “For security leaders, the significance extends beyond choosing new encryption software. The transition will require visibility into cryptographic dependencies, cooperation with suppliers and decisions about which information and systems need protection first.”
  • CISA announced,
    • “CISA, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and the National Security Agency (NSA) released joint guidance and an accompanying quick-reference list to help organizations assess vendor readiness for transitioning to post-quantum cryptography (PQC). As quantum computing advances, widely used public-key cryptography will become vulnerable to compromise from cryptographically relevant quantum computers (CRQCs). To protect their systems and data, organizations must plan for and transition to PQC—which includes algorithms capable of withstanding both classical computing and quantum-enabled threats—before CRQCs become available. 
    • “Many organizations rely on third-party vendors for managed services, cloud capabilities, and other cryptography-dependent products and services. Cryptography is also embedded in systems and devices that are difficult to update, tied to long asset lifecycles, and require vendor support or replacement—such as industrial control systems and Internet of Things (IoT) devices. Reliance on vendors means that effective PQC transition depends on vendor readiness, and early, structured engagement with these vendors is critical to planning efforts. 
    • Organizations can use the vendor-neutral questions outlined in this guidance to determine whether a vendor understands quantum-related risks, maintains transparency over its cryptographic implementations, and supports a secure, cost-effective and timely transition to PQC. 
    • “Visit CISA’s PQC Initiative page for additional resources.”
  • McKinsey and Co. advises
    • “As AI makes it easier and faster for cyberattackers to discover and exploit vulnerabilities in software, companies must change their approach to safeguarding their digital assets and infrastructure.”

From the cybersecurity policy and law enforcement front,

  • Cybersecurity Dive reports,
    • “Democrats’ big wins in the midterm elections are poised to transform cybersecurity policymaking and oversight on Capitol Hill, with potentially big implications for critical infrastructure operators and other businesses that work with the government.
    • “After Democrats take control of the Senate and the House of Representatives in January, they likely will ramp up scrutiny of the Cybersecurity and Infrastructure Security Agency (CISA), accelerate efforts to solve AI security challenges and revive cybersecurity grants for struggling local utilities, experts told Cybersecurity Dive. Republican lawmakers have largely ignored those subjects, in part to avoid angering or embarrassing President Donald Trump’s administration, but Democrats — newly energized by unexpectedly sweeping gains on Tuesday — are expected to take a far more assertive approach to cybersecurity hearings, investigations and legislation.
    • “Key figures in Congress’s new Democratic majority told Cybersecurity Dive that they viewed digital security as a top priority.”
  • and
    • “Three dozen business groups, including organizations representing critical infrastructure sectors, are pressing Congress to renew a major cybersecurity information sharing law before its expiration next month.
    • “The 2015 Cybersecurity Information Sharing Act “has become a foundational component of the nation’s cybersecurity,” the groups wrote on Sunday to the chairs and ranking members of the congressional armed-services committees.”
  • Cyberscoop adds,
    • “Republicans have talked about wanting to get the fiscal 2027 National Defense Authorization Act done in the lame duck. Besides the possibilities of CISA 2015 being included in the bill, Nicholas Leiserson, senior vice president for policy at the Institute for Security and Technology, said the Senate version of the legislation has a pair of very noteworthy cyber provisions: a “very broad” authorization for contractor-owned, contractor-operated offensive cyber operations, and a requirement that every artificial intelligence product sold to the Defense Department have an AI bill of materials.”
  • CISA announced,
    • “The Cybersecurity and Infrastructure Security Agency (CISA) kicks off Critical Infrastructure and Resilience Month today [November 2], recognizing the systems and assets that keep the country running as well as the people who operate them. This year’s Critical Infrastructure Security and Resilience Month aligns with President Trump’s National Resilience Strategy and comes as we continue to see new and evolving threats, including those driven by rapid advances in technology like super intelligence. Through it all, we rely on frontline operators who keep essential services moving even when things are disrupted.
    • “Our work depends on people who understand their systems and stay prepared,” said Acting CISA Director Nick Andersen. “Resilience comes from knowing what matters most and having a plan you can actually use when something goes wrong.”
  • Federal News Network notes,
    • “The Cybersecurity and Infrastructure Security Agency is turning to a former Department of Health and Human Services official to head up CISA’s infrastructure security division.
    • “Brian Mazanec is now serving as acting executive assistant director for infrastructure security at CISA. He was sworn in Monday, according to CISA.
    • “Mazanec previously served as deputy assistant secretary and director of the Center for Preparedness within HHS’s Administration for Strategic Preparedness and Response (ASPR). He stepped down from ASPR last week after serving there since January 2023.
    • “During his time at HHS, Mazanec helped spearhead the department’s response to significant events like the Change Healthcare ransomware attack.“
  • Cyberscoop tells us,
    • “Delaware-based defense and aerospace company has settled a case with U.S. agencies over government allegations that the firm neglected its cybersecurity obligations in its contracts.
    • ILC — the name the government uses to collectively refer to ILC Dover and ILC Astrospace — agreed to pay $13 million to resolve the False Claims Act allegations involving its contracts with the Department of the Army, Missile Defense Agency and National Aeronautics and Space Administration.
    • “ILC, according to the government, submitted false or fraudulent claims for payment on contracts with the agencies because it knew it hadn’t complied with the contracts’ cybersecurity requirements over a period between 2018 and 2024.
    • “For instance, ILC allegedly used a third-party company to store sensitive data in the cloud without proper safeguards, and didn’t develop and update mandated security plans for each of its covered information systems.
    • “The best response to cyberattacks is to prevent them from happening in the first place,” Benjamin Wallace, U.S. Attorney for the District of Delaware, said in a news release Tuesday. “The obligations that ILC violated exist to prevent bad actors from taking advantage of the United States’ technical innovation.” 

From the cybersecurity breaches and vulnerabilities front,

  • On November 3, 2026, Binance shared on LinkedIn “29 October Binance Security Incident: Initial Findings and Response Update.”
    • “This is our initial report. It covers what we know today and what we have already improved. “The investigation remains ongoing and our findings will be subject to further independent review. Some technical details will remain confidential to prevent malicious actors from using them to plan attacks. We are engaging independent security firms for further review.
    • “The latest information released by the Federal Bureau of Investigation indicates that the Democratic People’s Republic of Korea is responsible for this incident.
    • “We are sharing this initial report because security improves when the industry learns together.”
  • HIPAA Journal tells us,
    • “Data breaches have been announced by HCA Healthcare, Blossom Health, El Camino Health, and University of Mississippi Medical Center.”
  • and
    • “Cleveland-based University Hospitals is working on restoring systems after an October 22 cyberattack. Cybersecurity incidents have also been announced by EyeMed Vision Care and Facial Surgery Group.”
  • Cybersecurity Dive reports,
    • “Authorities are investigating a cyberattack targeting a refrigeration-equipment supplier for the French Blood Establishment (EFS), which oversees France’s civilian blood supply.
    • “An unknown hacker was able to manipulate temperature controls at cold storage rooms for three EFS sites, according to the agency. Temperatures and defrosting thresholds were raised to very high levels. 
    • “EFS monitoring systems and alarms detected the activity, and staff were able to regain control. The supplies were transferred to other facilities, the agency said, and the integrity of those blood supplies was not compromised.” 
  • The American Hospital Association News adds,
    • “Federal agencies Nov. 5 issued a bulletin saying that they are aware of malicious cyber activity targeting industrial refrigeration and cold chain monitoring systems globally, including systems used within the healthcare sector. The agencies warned that threat actors may exploit unpatched or internet-accessible refrigeration controllers to remotely alter temperature settings, trigger extended defrost or heating cycles, cause inventory loss, create equipment hazards and disrupt temperature monitoring capabilities. The agencies are urging organizations to identify internet-exposed systems, remove unnecessary remote access, apply available patches and firmware updates, implement strong authentication controls, segment operational technology networks and review alerting and monitoring capabilities.”
  • Cybersecurity Dive relates,
    • “Hackers are using Artex and other agentic AI-based frameworks to scan public GitHub repositories for exposed credentials and API keys, according to a report Thursday from Microsoft Threat Intelligence.
    • “The credentials are then deployed in downstream attacks against targeted organizations. Starting Oct. 28, researchers found a single IP address using compromised but still-valid application credentials to sign into downstream tenants. 
    • “In one case, hackers were able to steal credentials and exfiltrate data from Azure Key Vaults and Storage Accounts, as well as abuse Azure AI services. Researchers also saw hackers using embedded shell commands in a user agent to exploit vulnerabilities as well as attempts to steal App Service authentication tokens.
    • “Microsoft researchers said the threat activity overlaps with a campaign using the same IP address, as outlined in research released Wednesday by Todyl. That report showed how hackers with stolen secrets for Entra ID signed into Microsoft 365 and Azure environments at various managed service providers.” 
       
  • Bleeping Computer informs us,
    • “Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers.
    • “Chainalysis provides blockchain analysis tools to trace cryptocurrency transactions and investigate crimes such as fraud, ransomware, and money laundering. Its customer list includes law enforcement, government agencies, financial institutions, insurance companies, and cryptocurrency businesses worldwide.
    • “This follows the company’s disclosure last Friday that attackers using AI tools accessed customers’ names, email addresses, user IDs, and organizational role labels using what it described as “offensive agentic techniques.”
  • Computer Weekly lets us know,
    • “Two-thirds of the vulnerabilities Palo Alto Networks has uncovered using frontier artificial intelligence (AI) models had never been disclosed as Common Vulnerabilities and Exposures (CVEs), according to the security supplier’s CIO, Meerah Rajavel.
    • “Speaking to Computer Weekly on the sidelines of Singapore International Cyber Week last month, Rajavel said the sheer number of undisclosed vulnerabilities means organisations can no longer simply prioritise which known flaws to patch first.
    • “Palo Alto Networks has had an early look at what frontier AI can do. It was among the launch partners of Anthropic’s Project Glasswing, which gave a select group of organisations access to the unreleased Claude Mythos Preview model to find and fix flaws in critical software.
    • “The model’s knack for finding vulnerabilities made headlines, but that was not what surprised the company. “The thing that shocked us was how good it was in devising attack paths,” said Rajavel, referring to the model’s ability to chain vulnerabilities in novel ways.” * * *
    • Organisations cannot patch some systems at all, she said, especially those that run business-critical processes or rely on older technology that cannot take rolling updates.
    • “That makes virtual patching critical, said Rajavel, as it blocks exploit attempts at the network level until a fix is applied. She added that a good zero-trust architecture and attack surface management can help eliminate attack paths to a large part of an organisation’s infrastructure.”

From the ransomware front,

  • Spectrum News reports,
    • “A ransomware attack has disrupted services across the Queens Public Library system.
    • “The library system first reported a systemwide network outage on Wednesday, saying it was affecting its website and app, as well as checkout and return machines, renewals, on-site computers and free Wi-Fi access at all 66 branches.  
    • “As of Thursday morning, those services were still unavailable, Queens Public Library president and CEO Dennis Walcott said in a statement.
    • “All library locations are currently open as scheduled, but some virtual and in-person programs may be impacted, Queens Public Library said on social media.”
  • The Recorded Future News relates,
    • “Michigan State University officials said recent claims by a ransomware gang were tied to an incident last month that forced password resets for all student and employee accounts.  
    • “On Sunday evening [November 1], the BYOD ransomware gang added the university to its leak site — claiming to have stolen personal information on 1.3 million current and former students. Last week, BYOD caused outrage after attacking The University of New Mexico and shutting down its hospital.  
    • A spokesperson for Michigan State told Recorded Future News that the university “became aware of suspicious cyber activity and immediately began investigating the matter,” in early October.  
  • Tech Radar points out,
    • “Synology, a major network-attached storage (NAS) manufacturer, is warning users about ongoing ransomware attacks targeting devices running outdated software. It urged all users to apply provided patches and secure their devices without delay.
    • “In a brief announcement, Synology said it “identified threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM.” The goal of the attacks seem to be data encryption and a ransom demand.
    • “Synology strongly urges all users running vulnerable versions to update DSM immediately to protect their systems. Synology also recommends enabling automatic updates to keep DSM up to date at all times.” * * *
    • “The company also did not say who the threat actors are, but according to BleepingComputer, there has been a “massive wave of reports” from Synology customers whose data was apparently locked down by the “C3rb3r” encryptor. These customers were asked to pay “thousands of dollars” in ransom, in exchange for the decryption key. The publication says the first reports started surfacing more than two weeks ago.”
  • Huntress offers guidance on how to protect against ransomware before it encrypts data,
    • “Phishing is one of the most common ways in, but not the only way. Exposed remote access, unpatched internet-facing systems, and stolen credentials work just as well for attackers.
    • “Backups are crucial to your security plan. Keep at least one copy offline or isolated, and test restores before you need them.”
    • “Ransomware usually leaves footprints. Catch the behavior early, and you can stop the attack before the ransom note shows up.”

From the cybersecurity business and defenses front,

  • The New York Times reports,
    • “Anthropic Is Racing to Obtain the A.I. Boom’s Most Vital Resource
      • “The company went on a deal spree with tech giants, former crypto miners and others to gain computing power to further its artificial intelligence ambitions.”
  • Cybersecurity Dive relates,
    • “Companies are struggling to oversee their AI agents because they don’t know what those agents’ normal behavior looks like, according to a new report.
    • “Nearly half (46%) of security professionals say they’re unable to establish safe baselines for agentic AI activity, the security firm Abnormal AI said in a report published on Thursday [November 4].
    • “The report highlights security gaps in AI oversight that businesses should prioritize as they increase their AI deployments.”
  • Security explains “Frontier AI Is Changing Cyber Defense: 15 Moves CISOs Should Make Now.”
  • Dark Reading offers,
    • “9 Cyber Awareness Tips That Actually Match Today’s Maze of Threats
      • “Practical guidance on safer search, stronger login security, better executive protection, and other habits can reduce enterprise risk.
  • Security points out,
    • “Companies are getting faster at disclosing cyberattacks and slower at explaining what those attacks actually cost. Since the SEC’s cyber disclosure rule took effect, a public company has four business days to file an 8-K once it determines an incident is material, often before it knows the full scope. The filing says some version of the same thing: Systems are affected, operations are disrupted, and whether the impact will be material has not yet been determined.
    • “Increasingly, these incidents get discussed as one problem, with cybersecurity, business continuity, and enterprise resilience collapsed together, when each does something different. Cyberattacks are hitting more often and doing more damage when they land, which makes the distinction matter more. Cybersecurity focuses on detecting and stopping the attack itself. “Business continuity and enterprise resilience determine how the organization keeps operating once that happens. Detection and containment alone aren’t enough. When disruption hits, the business continuity function must be able to answer what is impacted, what happens next, what is the financial exposure, and what should be prioritized.”
  • NIST announced
    • “A new NIST guide can help solo business owners — also called “solopreneurs” — grasp the basics of cybersecurity and craft a strategy that can help reduce their cybersecurity risk.
    • “The guide is designed to help solopreneurs prioritize and implement a selection of actions from the NIST Cybersecurity Framework that would best help their businesses.
    • “The publication is written in lay language and assumes no prior cybersecurity knowledge.”
  • FEHBlog note — This guide also may improve guidance for work at home staff.
  • Here’s a link to Dark Reading’s CISO Corner

Friday report

David Ermer–CDC, CMS, Congress, FDA, Medical / Rx research, Medicare, Obesity, Rx coverage, Telehealth, U.S. Healthcare–

“Simplicity is a great virtue but it requires hard work to achieve it and education to appreciate it. And to make matters worse: complexity sells better.”
– Edsger W. Dijkstra

From Washington, DC,

  • Govexec reports,
    • “Rep. James Walkinshaw, D-Va., fresh off his reelection this week, said Thursday that he will press for a 2027 pay raise for federal workers to be part of any deal to keep the government open past December 11.
    • “The congressman, whose district is home to roughly 50,000 federal employees, told Editor-in-Chief Frank Konkel at GovExec’s After the Midterms event that the government must increase compensation in order to compete for talent, particularly after the last two years of buyouts, layoffs and mass firings. In August, President Trump formally proposed freezing most civilian federal workers’ pay next year.” * * *
    • “Walkinshaw told reporters his starting point in spending negotiations will be the 4.1% average pay increase as proposed earlier this year in his Federal Adjustment of Income Rates Act.
    • “Walkinshaw said he was also optimistic that lawmakers would pass legislation restoring the collective bargaining rights of more than 1 million federal employees, though likely not in full until after the new Congress is seated in January. The House this year has passed standalone legislation that would unwind President Trump’s executive orders, which banned unions at most federal agencies on national security grounds, and it has included language in its draft of the annual National Defense Authorization Act that would roll the edicts back for Defense Department workers.”
  • Healthcare Finance News adds,
    • “Base physician pay will decrease in 2027 under the Centers for Medicare & Medicaid Services Physician Fee Schedule Final Rule released on Wednesday.
    • “For 2026, the Working Families Tax Cut legislation provided a one-year PFS conversion factor increase of 2.5% that will no longer be in effect for 2027, CMS said. 
    • “This means that current law requires a 2.5% reduction in Medicare payment.
    • “The American Medical Association on Thursday said the lame duck session, along with the continuing-resolution bill that has funded the federal government and is set to expire on Dec. 11, creates an opportunity. 
    • “This creates an opportunity for Republicans and Democrats to unite on an end-of-year legislative package that makes real progress toward fixing the unsustainable Medicare physician payment system,” the AMA said. 
    • “Among other priorities, the AMA wants Congress to extend the 2.5% physician payment update through 2027.”
  • The Wall Street Journal relates.
    • “President Trump said on Friday that longtime adviser Stephen Miller would become his chief of staff, replacing Susie Wiles after Republicans suffered far-reaching losses in this week’s midterm election. 
    • “In a Truth Social post, Trump called Miller one of his most trusted advisers and said he would be starting in the new role on Monday. Wiles, who has served as chief of staff since the beginning of his second term, will move to the president’s political operation, Trump said.
    • “I want to thank her for her service as Chief of Staff—She has done a great job!” Trump wrote of Wiles. Wiles was the first female White House chief of staff.”
  • Per a Health and Human Services Department news release,
    • “The U.S. Department of Health and Human Services (HHS), through the Health Resources and Services Administration (HRSA), today announced a Notice of Funding Opportunity (NOFO) for the Women’s Initiative for Screening and Health (WISH) program. The program will award up to $1 million in fiscal year 2027 to establish a multidisciplinary coalition to update the HRSA-supported Women’s Preventive Services Guidelines (Guidelines) to reflect gold-standard evidence and support their use in clinical practice.
    • “The funding opportunity advances priorities outlined in President Trump and First Lady Melania Trump’s Executive Order 14437, Advancing Women’s Health to Improve Outcomes in All Phases of Life, including translating scientific research into improved clinical care and strengthening prevention for women and girls throughout every stage of life.” * * *
    • “Applications are due January 8, 2027, at 11:59 p.m. ET through Grants.gov under opportunity number HRSA-27-072. Applicants must have active SAM.gov and Grants.gov registrations.
    • “For details and application instructions, visit the WISH funding opportunity page.”
  • Today “the Internal Revenue Service announced the tax year 2027 annual inflation adjustments for almost 70 tax provisions, including the tax rate schedules, standard deduction amounts and other tax changes. Revenue Procedure 2026-35 PDF provides details about these annual adjustments.”

From the U.S. Food and Drug Administration front,

  • Radiology Business reports,
    • “The U.S. Food and Drug Administration has cleared a new artificial intelligence-powered intravascular ultrasound imaging system, the product’s developer announced on Wednesday.
    • “San Jose, California-based Evident Vascular says the regulatory win applies to its Guidance System and Evident peripheral imaging catheters. They’re intended for examination of pathology during certain peripheral vascular procedures handled by radiologists and other docs. 
    • “Evident says the system is designed to improve the clinician experience by combining high-fidelity imaging, “purpose-built AI,” and simple workflows without disruptions. Features include flush-less plug-and-play catheters, an “intuitive” user interface, and hands-free voice controls.
    • “FDA clearance marks an important milestone for Evident and the physicians who believed in this platform from our company’s inception,” Howard Rosen, CEO and co-founder of Evident Vascular, said in a statement Nov. 4. “We engineered the entire imaging architecture to deliver the image fidelity physicians need in a system that is both intuitive and easy to use.”
  • STAT News relates,
    • “The U.S. Food and Drug Administration conducted more unannounced drug inspections in India and China in Fiscal Year 2026 compared to the previous year, Regulatory Focus tells us. The increase is attributed to an effort by the agency to increase unannounced foreign inspections to achieve inspection parity between domestic and international facilities. The proportion of unannounced inspections in India increased from 47% in FY 2025 to 87% in FY 2026. In China, the percentage of unannounced inspections rose from 19% in FY 2025 to 61% in FY 2026.”
  • BioPharma Dive tells us,
    • “Eli Lilly will offer its obesity drugs Zepbound and Foundayo on Hims & Hers’ telehealth platform, the companies announced Friday. Under the deal, eligible patients with a prescription can use Hims to gain access to Lilly’s drugs at the same “self-pay” prices available elsewhere. Foundayo carries an initial $149 monthly price tag, while Zepbound starts at $299 per month.
    • “Hims had previously used legal loopholes to make lower-cost, compounded versions of GLP-1 weight loss drugs. But it changed course in March after a legal challenge from Novo, adopting a new strategy based on providing U.S. consumers access to an array of FDA-approved weight loss medicines. Hims struck a similar deal with Novo in March.”
  • Fierce Pharma adds,
    • “Eli Lilly has successfully challenged Good Life Meds’ claims about the health benefits and personalization of a compounded tirzepatide product.  
    • “Lilly, which sells the GLP-1/GIP drug tirzepatide as Mounjaro and Zepbound, challenged the telehealth provider’s claims through BBB National Programs’ National Advertising Division (NAD). The drugmaker, the only provider of FDA-approved tirzepatide products, disputed Good Life’s claims about the effect of the compounded drug on body weight, blood sugar, energy and lean muscle. 
    • “After assessing Good Life’s response to the challenge, the NAD recommended that the company stop making the express health benefit and personalization claims challenged by Lilly and modify its ads to remove unsupported implied claims about safety, efficacy and personalization.”

From the public health and medical / Rx research front,

  • The Centers for Disease Control and Prevention announced today,
    • “COVID-19, flu, and RSV are key indicators of overall respiratory illness activity.
    • “The amount of acute respiratory illness causing people to seek health care is low.
    • “RSV activity is low in most areas of the country.
    • “COVID-19 activity is declining nationally.
    • “Seasonal flu activity continues to increase in many parts of the country.
    • “Rhinovirus/Enterovirus (RV/EV) is elevated nationally, and respiratory adenovirus (HAdV) is elevated in some regions of the country.”
  • The American Hospital Association News lets us know
    • “Nationally, there are now 5,182 confirmed measles cases this year, according to a Nov. 6 update from the Centers for Disease Control and Prevention. The vaccination status of 96% cases is unvaccinated or unknown.”  
  • The New York Times tells us,
    • “A resident of Washington State died this week after a severe case of bird flu, a new and worrying sign that the virus continues to be a threat in the United States.
    • “The news followed reports that the bird flu virus had been detected in dairy cattle on dozens of farms across the country over the past month. It has also been spreading unchecked for months at a mink farm in Utah.
    • “The death, in Yakima County, Wash., is the first related to bird flu in the country this year, and the third since 2024. But it was only on Thursday, one day after an inquiry from The New York Times, that the Centers for Disease Control and Prevention updated its website. It still has not made any statements to the public about the death.” * * *
    • “Bird flu is not yet a threat to most humans, but it does pose a significant risk to the millions of agricultural workers and veterinarians in the country, said Kristen Coleman, an expert an airborne infections at the University of Maryland.”
  • Genetic Engineering and Biotechnology News adds,
    • “Researchers at the University of Cambridge and Cambridge’s spin-out DIOSynVax, along with collaborators, reported on the development of a broad-spectrum bird flu vaccine that in animal trials provided complete protection against globally circulating, diverse H5Nx variants of the disease. Current pandemic preparedness relies on stockpiling vaccines against individual virus variants that have already emerged. The Cambridge team’s approach uses AI-guided engineering to create broadly protective vaccines intended to remain effective across a wide range of existing and future variants.
    • “The team’s study, described in Cell Reports Medicine, found the new digitally engineered multi-antigen mRNA vaccine to be superior to bird flu vaccines currently stockpiled by many governments for use in the event of a human outbreak. Their preclinical trial results showed that the existing vaccines tested protected only around 50% of animals exposed to multiple H5N1 bird flu variants, compared with complete protection achieved by the team’s new vaccine, DVX-panH5Nx.
    • “The results demonstrate the potential of AI-guided vaccine design in developing broad protective population immunity ahead of evolving biological threats. The researchers say the vaccine represents the third success with their AI-guided technique for designing vaccines against highly infectious viruses that threaten animal and human health. The new study in addition demonstrates that the team’s ‘plug and play’ approach can be used to create safe, highly effective vaccines for a plethora of infectious diseases threatening animal and human health globally.”
  • Health Day informs us,
    • “A common test used to diagnose obstructive sleep apnea may miss the condition in Black patients, potentially impacting important treatment decisions.
    • “Sleep studies often use pulse oximeters — small devices that measure blood oxygen levels — to help determine the severity of sleep apnea.
    • “In the new study, oxygen-based scoring counted roughly 20 percent fewer breathing events in Black participants than in white participants.
    • “But heart-rate-based scoring showed no comparable racial difference.
    • “The first author says the findings have “potential implications for diagnosis and severity classification.”
  • and
    • “A new study suggests a woman’s reproductive history may play an important role in her brain health later in life.
    • “Women are affected by Alzheimer’s disease more often than men. This may be related, in part, to fluctuations in estrogen levels throughout life,” said study author Anna Marseglia, an assistant professor at the Karolinska Institutet in Stockholm.
    • “Estrogen is known to have protective effects on both neuronal cells and blood vessels in the brain,” she added in a news release. “However, its potential role in women’s cerebrovascular health in later life has been largely understudied.”
  • MedPage Today points out,
    • “A retrospective-cohort analysis showed that GLP-1 receptor agonists were associated with a lower risk of obesity-related cancers as compared with insulin or sulfonylurea.
    • “Cancer risk with GLP-1 agonists did not differ significantly from metformin, DPP4 inhibitors, or SGLT2 inhibitors.
    • “The effect of GLP-1 agonists on cancer risk versus other diabetes medications was most noticeable in patients with low-severity diabetes.”

From the U.S. healthcare business front,

  • The Wall Street Journal reports,
    • “Humana raised its full-year earnings outlook as consolidated income and revenue rose in the third quarter.
    • “The health insurer now expects 2026 adjusted earnings of at least $9.50 a share, up from its previous forecast of at least $9 a share.
    • “Humana’s third-quarter revenue jumped 26% to $41.16 billion, beating Wall Street estimates of $40.87 billion.”
  • and
    • “Moderna raised its full-year revenue growth outlook to 15% to 25% after swinging to a profit and logging higher revenue in the recent quarter.
    • “The higher outlook follows the U.S. approval of mFLUSIVA, Moderna’s mRNA-based influenza vaccine.
    • “Moderna swung to a third-quarter profit of $162 million, beating analyst expectations for a loss.”
  • Beckers Hospital Review relates,
    • “Atlanta-based Piedmont Healthcare reported a 10.7% operating margin for fiscal year 2026, generating more than $1 billion in operating income for the second consecutive year as revenue climbed to nearly $9.5 billion.
    • “The health system recorded $1.02 billion in operating income for the fiscal year ended June 30, up slightly from $1 billion in fiscal 2025, according to its financial documents published Nov. 6. However, its operating margin narrowed from 11.4% to 10.7% as expenses increased faster than revenue.
    • “Piedmont also strengthened its liquidity position, ending the fiscal year with $3.8 billion in cash and cash equivalents, while continuing to invest in hospital expansion projects across Georgia.
  • and
    • “Grand Forks, N.D.-based Altru Health System’s operating margin fell to -3% through the first nine months of 2026, as expenses outpaced revenue growth and the system moved closer to acquiring three more North Dakota hospitals from Chicago-based CommonSpirit Health.
    • “Altru Health reported an $18.2 million operating loss for the nine months ended Sept. 30, compared with a $1.7 million operating loss and -0.3% margin during the same period in 2025, according to its financial statements published Nov. 2.
    • “Revenue increased 8.3% year over year to $610.4 million, up from $563.6 million, while operating expenses climbed 11.2% to $628.6 million, compared with $565.3 million in the prior-year period.”
  • The Wall Street Journal tells us,
    • “The practice of keeping admitted patients in the emergency room while they wait for a bed, known as boarding, is increasing in American hospitals.
    • “One in four admitted patients spent at least four hours waiting in the E.R. for a bed in September 2024, up from one in eight in September 2017.
    • “Studies show that patients stuck boarding in the E.R. face a higher risk of worse care and early clinical deterioration.”
  • Fierce Pharma informs us,
    • “Heading into Halloween weekend, both Novo and Lilly saw scripts for their oral obesity medicines tick up. 
    • “In its 30th launch week, Lilly’s Foundayo racked up roughly 65K prescriptions, seemingly topping a record of more than 64K scripts set in week 25 of the rollout, according to IQVIA data cited by Jefferies. Still, the medicine’s performance pales in comparison to Novo’s Wegovy pill at week 30 of its own launch, when the semaglutide tablet reeled in roughly 173K scripts. 
    • “For the last weekly period, the Wegovy pill charted a 0.5% script increase—or around 8K new prescriptions—to land at around 184K total. That’s roughly on par with the height of the pill’s script performance in 2026 so far and marked a rebound from roughly 183K the prior week. 
    • “Novo reported earlier this week that the Wegovy pill generated 5.39 billion Danish kroner (nearly $811 million) in third-quarter sales. Over the same period, Lilly reported $184 million in sales of Foundayo. 
    • “On an analyst call, Novo’s EVP of U.S. operations, Jamey Millar, resurfaced caveats with the data IQVIA is using to track the oral GLP-1 launches, arguing that Novo boasts “a much more extensive ecosystem of partners for Wegovy” than Lilly, and that those partners “don’t report to IQVIA in absolute terms.” 
    • “So we’ve consistently seen a lower capture rate for Wegovy pill than the competitive oral product,” he suggested. 
    • “Based on the latest weekly metrics, Lilly holds a little more than a 26% share of the overall oral obesity market compared to Novo’s nearly 74%, the Jefferies team said in its note.” 

Thursday report

David Ermer–CMS, FDA, Federal employment benefits, Medical / Rx research, Medicare, OPM, Rx coverage, U.S. Healthcare–

“Simplicity is a great virtue but it requires hard work to achieve it and education to appreciate it. And to make matters worse: complexity sells better.”
– Edsger W. Dijkstra

From Washington, DC,

  • Beckers Hospital Review reports,
    • “CMS proposed a sweeping deregulation rule Nov. 5 that would remove hospital staff training requirements tied to Biden-era obstetric standards. It would also roll back several nursing home requirements, rescind a Medicaid payment transparency rule and exempt certain critical access hospitals from distance requirements.
    • “The proposed rule follows a CMS review of the conditions of participation for all 21 provider and supplier types. Providers must meet these baseline standards to bill Medicare and Medicaid.
    • “CMS said the rule is meant to eliminate obsolete or excessively burdensome requirements so healthcare organizations can devote more time and resources to improving patient care.
    • “The agency estimates the proposals would save $320 million a year and return more than 3.26 million hours of staff time to providers. Nursing homes would see the largest share at $142.6 million a year. Hospitals would save $123.2 million, CAHs $16.6 million and intermediate care facilities for individuals with intellectual disabilities $6.6 million. Rescinding a Medicaid payment reporting requirement accounts for another $30.4 million.”
  • and
    • “CMS has finalized a rule that sets ongoing policies for the Medicare Drug Price Negotiation Program, starting with negotiated prices that take effect in 2029.
    • “The agency said the rule is designed to give drugmakers in the program a clearer, more predictable process going forward, according to a Nov. 5 news release.
    • “CMS plans to pick up to 20 additional Part D or Part B drugs for the program’s fourth negotiation cycle by Feb. 1, 2027. It may also select previously negotiated drugs for renegotiation.
    • “This rule provides additional tools to help CMS negotiate better deals, achieve greater savings for taxpayers and beneficiaries, and improve health outcomes for seniors who rely on the Medicare Prescription Drug Program,” CMS Administrator Mehmet Oz, MD, said in the release.”
  • and
    • “HHS’ Administration for Strategic Preparedness and Response, the Commerce Department’s Bureau of Industry and Security and the Department of War’s health affairs office are assessing the U.S. industrial base for pharmaceutical key starting materials. The materials are the chemical precursors and intermediates used to make active pharmaceutical ingredients.
    • “The assessment will examine the upstream supply chain behind U.S. drug manufacturing, including limited domestic production capacity and reliance on foreign or single sources of critical materials, according to a Nov. 3 news release. BIS is surveying U.S. manufacturers, chemical suppliers, distributors, procurers and customers under Section 705 of the Defense Production Act. The one-time survey collects information on production capabilities, sourcing practices, customers, supply chain disruptions, workforce and research and development.
    • “The findings will be compiled into a report on U.S. production capacity, supply chain vulnerabilities and emergency response capabilities, with recommendations to improve resilience and public health emergency preparedness. The government plans to use the findings to develop funding strategies for the availability, quality and security of the materials.”
  • STAT News adds,
    • “Medicare will finalize a controversial proposal that will prevent providers, such as hospitals, from using third parties to deliver remote patient monitoring services, brushing away widespread opposition to the idea. However, Medicare will delay implementing the rule for two years to give providers enough time to hire and train staff to deliver the services. (I pulled the RPM section of the fee schedule here.)
    • “A common use case for RPM is using a connected blood pressure cuff to monitor a patient’s response to hypertension drugs and helping them manage the condition. Despite evidence RPM can be helpful for patients, use of the services has soared, and Medicare is worried about fraud in RPM billing.” 
  • Per a Health and Human Services Department news release,
    • “Women with higher blood levels of two common per- and polyfluoroalkyl substances, also familiarly known as PFAS, were more likely to develop estrogen receptor-negative, or ER-negative, breast cancer, according to a new study by the National Institutes of Health (NIH), part of the U.S. Department of Health and Human Services (HHS). PFAS are a large group of chemicals used in common consumer products. Often referred to as “forever chemicals,” PFAS do not break down easily in the environment and can remain in the body for years.
    • “The study found that women with higher blood plasma levels of two of these substances, perfluorooctanoic acid (PFOA) and perfluorooctanesulfonic acid (PFOS), were associated with a higher incidence of ER-negative breast cancer. No clear association was observed between the two chemicals and breast cancer risk overall.
    • “Women deserve clear answers about how chemicals in their environment may affect their health,” said HHS Secretary Robert F. Kennedy, Jr. “This NIH study links two forever chemicals to a higher risk of ER-negative breast cancer and demands further investigation. Under President Trump’s leadership, we will pursue the evidence, confront environmental health risks, and give women the information they need to protect their health.”

From the U.S. Office of Personnel Management front,

  • FedSmith advises,
    • “Protect Your FEHB Benefits: Who Qualifies, What to Verify and How to Keep Coverage.”
      • “Review your family’s FEHB eligibility before Open Season. Learn who qualifies, what documents may be required and how to avoid losing coverage for eligible family members.”
  • Tammy Flanagan, writing in Govexec, suggests,
    • “Make these health coverage decisions before you retire
      • “From FEHB eligibility rules to Medicare enrollment deadlines, the right steps before your last day can protect coverage for you and your spouse.”

From the U.S. Food and Drug Administration front,

  • Cardiovascular Business reports,
    • “The U.S. Food and Drug Administration (FDA) has confirmed that a safety issue with certain accessories used to implant the Sapien M3 transcatheter mitral valve replacement (TMVR) system has been ruled a Class I recall. 
    • “This is the agency’s most severe recall classification. It means using the devices in question could cause “serious adverse health consequences or death.”
    • “This Class I recall only covers four specific lots of these devices: 67718561, 67804014, 67887043 and 67887044. Delivery systems distributed as part of those four lots should not be used to treat any patients going forward. However, all other delivery systems sold with the Sapien M3 TMVR system can be used as normal. 
    • “The FDA first released information about this recall in October while the issue was still under investigation. As the agency explained at the time, four lots of the Commander M delivery systems sold with the Sapien M3 TMVR systems were being recalled due to an increased risk of the balloons bursting during inflation. Four serious injuries and one death were linked to the issue.” 
  • Per an FDA news release,
    • “The U.S. Food and Drug Administration today granted accelerated approval to Rybrevant Faspro (amivantamab and hyaluronidase-lpuj) for the treatment of adults with recurrent or metastatic head and neck squamous cell carcinoma (HNSCC) whose disease has progressed on or after platinum-based chemotherapy and immunotherapy. HNSCC is an aggressive, life-threatening disease for which there is a high unmet need for effective therapies.
    • “Rybrevant Faspro is not indicated as a treatment for patients with oropharyngeal squamous cell carcinoma that is associated with human papillomavirus (HPV). 
    • “Approval was based on trial results showing that more than double the percentage of patients responded to the drug compared to currently approved therapies. This is the first approval in 10 years of a drug for patients with recurrent or metastatic HNSCC who had received prior platinum-based chemotherapy.” 
  • The Acting FDA Director writes about “Delivering Answers and Hope for Rare Disease Families.”

From the judicial front,

  • Per a Human Rights Campaign news release,
    • [On November 4,] the Human Rights Campaign Foundation and the law firm Correia & Puth filed an application for a preliminary injunction in their federal lawsuit to block the Office of Personnel Management’s (OPM) prohibition on health insurance coverage for transgender medical care under the Federal Employee Health Benefits (FEHB) and Postal Service Health Benefits (PSHB) plans. Implemented this year, OPM’s mandate has subjected federal employees and their families to even higher barriers to access potentially life-saving medical care, forcing many to leave their jobs, take on heavier financial burdens or go without care altogether. As Open Season for enrollment in these healthcare plans ends on December 14, a preliminary injunction is crucial to prevent imminent harm to federal employees who need continuing gender-affirming care.”
  • The Wall Street Journal reports,
    • “Elevance Health sued autism-therapy provider the Perfect Child, alleging that it paid the company $160 million due to misleading claims over the last five years.
    • “The lawsuit, filed in New York state court on Wednesday, cites a Wall Street Journal article that detailed the Perfect Child’s practices of charging insurers rates that could exceed $30,000 a day and attempting to collect directly from families when they balked at the bills, despite promises they would face little or no out-of-pocket costs.”
  • Beckers Hospital Review relates,
    • “A federal judge has lifted CMS’ freeze on new ACA marketplace broker registrations, clearing the way for approximately 19,000 licensed agents and brokers to assist consumers with 2027 coverage.
    • “The U.S. District Court for the District of Maryland ruled Nov. 5 in favor of the National Association of Benefits and Insurance Professionals, which challenged the moratorium in an Oct. 15 lawsuit. The ruling immediately lifts the registration restrictions, with training for newly eligible agents and brokers set to begin Nov. 6, according to the association.
    • “CMS implemented the moratorium Sept. 22, blocking agents and brokers who had not registered with the federally facilitated Marketplace for the 2026 plan year from completing registration for 2027. The freeze was originally set to remain in effect through Feb. 1, 2027.”

From the public health and medical / Rx research front,

  • Beckers Clinical Leadership reports,
    • “An infant in Wisconsin has died of measles, the state’s first measles death since 1990, the Wisconsin Department of Health Services said Nov. 5.
    • “The coroner listed measles as the immediate cause of death. The department is withholding further details to protect the family’s privacy.
    • “Any death of a child is a tragedy and even more so when it is related to a vaccine-preventable disease,” DHS Secretary Kirsten Johnson said in the news release.
    • “As of Nov. 3, Wisconsin had reported 431 measles cases in 2026, the state’s highest count in more than 35 years. Nine patients have been hospitalized with severe symptoms. The department said official counts likely understate the outbreak’s reach because not every sick person seeks care or gets tested.”
  • Health Day relates,
    • “More than 6 in 10 American drivers admit they’ve driven while dangerously sleepy.
    • “A new National Sleep Foundation report estimates 145 million adults have driven drowsy, including nearly 35 million who do so at least monthly.
    • “And about 40% don’t recognize warning signs like frequent blinking, head-nodding or drifting out of their lane.
    • “Drowsy driving is responsible for 1 in 5 deadly crashes, according to data cited in the report.
    • “Every signal in this year’s report points the same way: Drowsy driving is common, it’s under-recognized and the public is ready for solutions,” said Joseph Dzierzewski, senior vice president of research and scientific affairs at the foundation. “When 4 in 10 drivers can’t identify even the most basic of warning signs, too many people don’t realize they’re impaired and shouldn’t be behind the wheel.”
    • “The researchers say drowsy driving deserves the same serious attention as drunken driving.”
  • and
    • “Cutting-edge weight-loss drugs like Ozempic and Zepbound are helping people reverse prediabetes and avoid heart attack and stroke more effectively than standard diabetes medications, a new study says.
    • “People with prediabetes had 53% better odds of getting their blood sugar levels back to normal if they were taking a GLP-1 drug rather than the diabetes drug metformin, researchers are slated to report Monday at the annual meeting of the American Heart Association (AHA) in Chicago.
    • “They also were less likely to develop type 2 diabetes or suffer life-threatening heart problems on a GLP-1, researchers said.
    • “The great news with prediabetes is that it’s still possible to reverse the progression of the disease,” investigator Dr. Vinicius de Sousa Barzon Serra said in a news release. He is a research fellow in the department of cardiovascular medicine at the Mayo Clinic in Scottsdale, Arizona. 
    • “This research may add to the case for considering GLP-1 medications earlier for certain patients, rather than waiting until they develop Type 2 diabetes,” he said.”
  • Healio adds,
    • “Bariatric surgery can offer long-term cancer-protective effects for people with obesity regardless of their sex or age, findings of a population-based cohort study suggest.
    • “An analysis of registry data from nearly 800,000 people showed those who underwent the procedure exhibited an overall significantly lower risk for 10 obesity-related malignancies.
    • “The magnitude of risk reduction remained consistent between younger and older adults, and analyses that focused on cancer types that affect both sexes showed comparable benefits for men and women.”
  • MedPage Today tells us,
    • “The share of newborns who missed routine vitamin K shots rose to 6.8% in 2025.
    • “Infants who didn’t receive vitamin K shots faced a 47% higher bleeding risk in their first 6 months of life.
    • “Newborns without vitamin K shots also had doubled intracranial hemorrhage and bleeding-related death risks.”
  • STAT News informs us,
    • “When statins aren’t enough, other cholesterol-lowering drugs come into play. But which one is most effective?
    • “Cardiologists looking to help their patients reduce the amount of LDL, or “bad,” cholesterol threatening to clog their coronary arteries often consider two long-approved drugs, each acting through a different mechanism delivered by a different route. A new trial based on real-world evidence pitted the injectable PCSK9 inhibitor evolocumab, sold by Amgen as Repatha, against the oral cholesterol absorption inhibitor ezetimibe, now generic but previously sold by Merck as Zetia.
    • “Repatha was the winner.” 
  • and
    • “Novartis has acknowledged seven previously unknown instances in which tumors were found in children who were treated with its spinal muscular atrophy therapy, a surprising development that has raised concerns among families, physicians, and patient advocacy groups.
    • “The cases, which for the moment are being seen as only a potential safety signal, were publicized on Thursday by an advocacy group and on a Facebook page after Novartis earlier this week disclosed the information to neurologists. One advocacy group, SMA Europe, issued a statement saying that regulatory authorities are now examining the cases.
    • “The drugmaker issued its own statement saying that since its treatment — called Zolgensma — was approved in 2019, it has received nine reports of tumors in previously treated patients. Of those, two cases to date showed evidence that the tumors may be linked to the treatment itself.” 
  • Beckers Hospital Review points out,
    • “Active U.S. drug shortages stood at 225 at the end of the third quarter, similar to the past three quarters, according to the American Society of Health-System Pharmacists. The 87 new shortages reported through September nearly equal the 89 reported for all of 2025, and chemotherapy shortages in particular have outlasted drugmakers’ resupply estimates. The FDA’s databasecontinues to reflect new discontinuations weekly.
    • [The article identifies] 11 recent shortage and discontinuation listings, according to the FDA database.”

From the U.S. healthcare business and artificial intelligence front,

  • The Wall Street Journal reports,
    • “Cigna Group CI lifted its outlook and reported higher sales in the recent quarter, driven by growth in both its healthcare and pharmacy-benefit businesses.
    • “The healthcare company on Thursday reported a third-quarter profit of $1.44 billion, or $5.47 a share, compared with $1.87 billion, or $6.98 a share, a year earlier.
    • “Stripping out certain one-time items, earnings were $7.98 a share. Analysts polled by FactSet expected adjusted earnings of $7.52 a share.
    • “Total revenues climbed 5.6% to $73.68 billion, ahead of Wall Street models for $72.64 billion. The company attributed the growth to gains across both its namesake healthcare business and Evernorth Health Services.”
  • and
    • “Inside CVS Health, a small group of top executives spent months engaged in a strategic review that developed into a secret plan: a decision to split up the $400 billion healthcare giant, hiving off its ubiquitous pharmacies. 
    • “It was an unlikely and radical step. The stores, with CVS’s signature red-letter logo, weren’t only how Americans thought of CVS but also the heart of its identity as a healthcare giant. Chief Executive David Joyner, a longtime veteran at the company, publicly rejected a split when he landed the top job in 2024. 
    • “This year, the C-suite’s annual planning exercise delivered a different verdict. The company should break off its drugstores from the Aetna health-insurance unit and Caremark pharmacy-benefit manager. The breakup, revealed Tuesday, will put Aetna and Caremark into one company, and the approximately 9,000 retail pharmacies into another.
    • “The logic: Its balance sheet was strong enough to support the two resulting companies, and the breakup would create more agile, focused firms. “It basically gives you confidence and strength about how each of the businesses are going to perform,” Joyner said in an interview. 
    • “The board supported the move. CVS wanted to get ahead of dynamics reshaping the healthcare market. Regulators appeared increasingly hostile to healthcare conglomerates.”
  • Beckers Payer Issues adds,
    • “Oscar Health reported $167.3 million in profit for third-quarter 2026, compared to a net loss of $137.5 million in the same period last year.
    • “The company reported its third-quarter earnings Nov. 5. Oscar brought in $5.1 billion in revenue, a 72% year-over-year increase. That includes a $250 million benefit from updated risk adjustment estimates.
    • “Earnings from operations reached $178 million, up from a $129.3 million loss in the third quarter of 2025.
    • ‘The company’s medical loss ratio fell from 88.5% in third-quarter 2025 to 84%.
    • “Oscar’s membership grew about 27% year over year, nearing 2.7 million effectuated members as of Sept. 30.”
  • Fierce Healthcare relates,
    • “Clover Health is continuing to see strong traction in its Medicare Advantage plan, with membership growing 49% year-over-year in the third quarter to approximately 157,000 members.
    • “Alongside continued membership growth, executives touted the company’s star ratings from the Centers for Medicare & Medicaid Services for payment year 2028.
    • “We are incredibly proud that our flagship PPO plan achieved five stars for payment year 2028, making it the largest five-star PPO contract in the country,” Andrew Toy, Clover Health CEO, said during Wednesday’s earnings call. “Additionally, our HMO plan achieved four and a half stars, meaning 100% of Clover members are enrolled in plans rated at least four and a half stars for payment year 2028.” 
    • “Toy said the ratings give Clover “continued flexibility to invest” in benefits and affordable care access for members, adding that the company’s HEDIS quality performance remains “industry leading.”
  • Beckers Hospital Review tells us,
    • “Indianapolis-based Indiana University Health reported an operating income of $110 million (4% margin) in the third quarter, up from $6.4 million (0.3% margin) in the third quarter of 2025, according to its most recent financial report. 
    • “IU Health’s operating expenses were $2.6 billion for the three months ended Sept. 30, 2026, up from $2.4 billion the previous year. Total revenue was $2.7 billion in the third quarter of 2026, up from $2.4 billion in the third quarter of 2025.
    • “The system’s long-term debt was $3.3 billion as of Sept. 30, 2026.”
  • Beckers ASC Review informs us,
    • “McAllen, Texas-based UT Health RGV Surgery Center has joined the ASC network of Phoenix-based Atlas Healthcare Partners, marking Atlas’ expansion into Texas, according to a Nov. 5 news release shared with Becker’s.
    • “The center is part of a new collaboration between Atlas and the University of Texas Rio Grande Valley. It has four ORs and one procedure room and offers orthopedics, gastroenterology, surgical oncology, general surgery, podiatry, gynecology and ENT.
    • “Atlas partners with nonprofit health systems, including Banner Health, Corewell Health, ChristianaCare and Prisma Health, to operate 47 ASCs across eight states. The company performs more than 110,000 procedures a year and generates about $400 million in annual revenue.”
  • and
    • “Palm Harbor, Fla.-based American Vascular Associates has formed a strategic partnership with New England Endovascular Center, a West Springfield, Mass.-based provider of minimally invasive vascular and endovascular care, the organizations announced Nov. 4 in a news release shared with Becker’s.
    • “AVA is a vascular management and growth organization. It supports office-based labs and ASCs with operations, revenue cycle management, finance, IT, compliance, marketing, physician recruitment and growth strategy.
    • “NEEC was the first interventional and endovascular medical center in Western New England. It serves patients across the Pioneer Valley, the Greater Springfield region, the Berkshires and Northern Connecticut.”
  • STAT News points out,
    • “The commercial debut of Revolution Medicines’ pancreatic cancer drug Rasonquewas eye-popping and jaw-dropping: $198 million in sales in just five weeks following the U.S. approval of the groundbreaking pan-RAS inhibitor. More than 5,000 patients have already been treated with the drug, the company said Wednesday evening. 
    • “The U.S. launch of Rasonque is off to a strong start,” said Revolution Chief Commercial Officer Anthony Mancini, on the company’s earnings call — perhaps the understatement of the year in commercial biotech.”
  • Per Healthcare Dive,
    • “Mayo Clinic’s health tech innovation arm, Mayo Clinic Platform, has launched an artificial intelligence tool to bring patients’ medical information and relevant clinical evidence together during patient interactions, the health system said Tuesday.
    • “The solution offers clinicians specific guidance for more than 35 specialties, helping answer clinical questions, explore diagnoses and assess care options. The tool aims to reduce the time clinicians spend finding the information they need across different resources and to focus more on patient care. 
    • “The tool is available to clinicians at the Mayo Clinic and others who work for organizations that participate in Mayo Clinic Platform’s provider programs.”
  • Per MedTech Dive,
    • “Study results supporting Edwards Lifesciences’ transcatheter aortic valve replacement in patients with less severe disease were a highlight of the Transcatheter Cardiovascular Therapeutics conference.
    • “Also notable were findings on Medtronic’s renal denervation system in a broader patient population and the performance of Abbott’s Amulet 360 left atrial appendage closure device one year after implant.
    • “The TCT conference, which wrapped up in San Diego this week, is the Cardiovascular Research Foundation’s annual scientific symposium.”
  • and
    • “Edwards Lifesciences’ third-quarter sales exceeded its expectations, prompting the heart valve maker to raise its full-year forecast for the third time this year.
    • “Executives on Wednesday’s earnings call pointed to several catalysts for the business going forward, including data supporting expanded use of transcatheter aortic valve replacement to treat aortic stenosis.
    • “In the PROGRESS trial, presented this week at the Transcatheter Cardiovascular Therapeutics conference, Edwards’ Sapien 3 TAVR device demonstrated superiority to standard-of-care clinical surveillance in people with moderate aortic stenosis and at-risk features.”

Midweek report

David Ermer–AHRQ, CDC, CMS, Congress, FDA, Federal employment benefits, Medical / Rx research, Medicare, Mental health care, NIH, No Surprises Act, OPM, Rx coverage, Telehealth, U.S. Healthcare–

“Simplicity is a great virtue but it requires hard work to achieve it and education to appreciate it. And to make matters worse: complexity sells better.”
– Edsger W. Dijkstra

From the national election front,

  • The Wall Street Journal reports.
    • “Vice President JD Vance blamed the Iran war for Republicans’ heavy midterm losses, saying “everyone knows why we lost.” The comments came a day after Democrats took control of the Senate and House in a blue wave that surged across the country, extending into traditionally red states in a repudiation of President Trump.
      • House: As more races are called, Democrats are expanding the majority they clinched in the chamber last night. [As of this writing, the Democrats have 237 seats and the Republicans 147.] Meanwhile, with House Speaker Mike Johnson saying he wouldn’t run for minority leader, House Republicans are already jockeying for the job.
      • Senate: Democrats have flipped seven seats so far in the Senate. [As of this writing the Democrats have 54 seats and the Republicans 44.] Two races have yet to be called in which the Democratic candidate currently has a slight edge over the Republican incumbent: Alaska and Mississippi. It’s unclear when those results will be announced.
      • Trump: The president appeared at the site where his ballroom is being constructed and took a few questions from reporters. Among other things he said Vance’s assessment of the impact that the war with Iran had on the midterms was “largely true” and that he wasn’t considering replacingDefense Secretary Pete Hegseth.
  • Beckers Hospital Review tells us,
    • “Health insurer and hospital stocks climbed Nov. 4 after Democrats won majorities in both chambers of Congress in the Nov. 3 midterm elections, as analysts said the new Congress could delay Medicaid cuts and restore enhanced ACA subsidies.”
  • Fierce Healthcare lets us know in more depth “what Democratic control of Congress means for healthcare in 2027.”
  • Beckers ASC Review points out “Physicians who won in the 2026 midterms.”

From the U.S. Office of Personnel Management front,

  • Govexec reports,
    • “Following the drubbing of congressional Republicans in Tuesday’s midterm election, federal employee unions are hopeful that the change in control on Capitol Hill will precipitate action to roll back some of the Trump administration’s efforts to reshape the federal workforce.”
  • Fedweek tells us,
    • “The annual federal benefits open season starting next Monday (November 9) and running through December 14 provides an opportunity for current enrollees change FEHB/PSHB health insurance plans’ change levels of coverage, for plans that have more than one; and change among self-only, family and self plus one options.” * * *
    • “Even enrollees happy with their same coverage should look at the offerings, experts advise, since benefits do change somewhat year to year. And within the average premium increase there is variation, with some plan premiums increasing by well more than the average.
    • “A summary of general changes to coverage terms in both programs is here; check a plan’s brochure for its specifics. OPM’s main open season resources page is here.
    • “Tables of plans leaving the programs or reducing service areas are here for FEHB and here for PSHB. Affected enrollees in these plans who don’t choose a new one will be moved to Compass Rose Standard if in FEHB and in FEP Blue Focus if in PSHB.”
  • and
    • “While most of the attention focuses on the FEHB health insurance program during the annual benefits open season—this year November 9-December 14—the open season also provides federal employees and retirees the opportunity to elect or change vision and/or dental coverage in the FEDVIP program, and for employees to begin or renew flexible spending accounts for the new year.” * * *
    • “Those who wish to have a dependent care and/or health care flexible spending account must make a new election during the open season. The IRS has not yet announced the maximums in those programs for 2027; for 2026, they were $7,500 individually or for a couple filing federal income taxes jointly ($3,750 for married individuals filing separately) for dependent care accounts and $3,400 (individually) for health care accounts.” * * *
    • “The open season does not apply to the other two federal insurance programs, the FEGLI life insurance program and the FLTCIP long-term care insurance program. FEGLI conducts open seasons only rarely, although new enrollments or coverage changes are allowed in certain circumstances at other times. The FLTCIP has not accepted new applications for enrollment or changes in existing enrollment since 2022; there has been no indication of that suspension being lifted.”
  • FedSmith discusses “Preparing for Medicare: FEHB Decisions at Age 65
    • “Learn how Medicare and FEHB work together at 65. Understand Medicare Part A, Part B, and make smart retirement healthcare decisions early.”

From the Medicare front,

  • Beckers Hospital Review notes,
    • “On Jan. 1, 2027, Medicare’s negotiated prices for 15 more drugs take effect, including the semaglutide products Ozempic, Wegovy and Rybelsus. They join the 10 drugs whose first-round negotiated pricestook effect this year. For hospital pharmacies, the date matters twice: several of the same drugs also move to rebate-only 340B pricing that day if the program takes effect as scheduled.”

From the U.S. Food and Drug Administration front,

  • STAT News reports,
    • “Democrats’ landslide victory in the midterm elections may have significant implications for the upcoming negotiations over a key funding source for the Food and Drug Administration, in part by empowering a major critic of the program.
    • “The FDA collects user fees from pharmaceutical companies to fund the agency’s reviews of their medicines. The Prescription User Fee Drug Act must be renewed before the current law expires on Sept. 30. Otherwise, it could disrupt the FDA’s ability to approve medicines.
    • “The power to shape that legislation will fall to senior Democrats, including Sen. Bernie Sanders (I-Vt.), who will likely lead the Senate’s health committee. Sanders is one of the few lawmakers who have opposed the core premise of the user fee structure.
    • “Now, he will have a chance to fundamentally alter how the FDA interacts with the companies it regulates.” 
  • Cardiovascular Business relates,
  • Contemporary OB/GYN shares professional “reactions to FDA’s boxed warning removals for menopausal hormone therapy.”

No Surprises Act News

  • The New York Times reports,
    • “The federal government plans to end contracts with two arbitration firms that settle medical billing disputes under the No Surprises Act, a consumer protection law that has come under scrutiny for high payouts for doctors.” * * *
    • “The arbitrators’ contracts last five years, and the government is now reviewing those awarded in 2022.
    • “Two firms, Island Peer Review Organization and Network Medical Review Company, were notified on Wednesday that the government does not plan to renew their contracts, according to a notice published that day.”

From the public health and medical / Rx research front,

  • Beckers Clinical Leadership reports,
    • “Lung cancer remains the leading cause of cancer death in the U.S. and sits at the intersection of several pressures health systems are already managing: an aging patient population, uneven access to screening and a disease that is still most often caught too late. 
    • “How lung cancer affects a health system depends heavily on where it operates. Incidence, mortality, screening and smoking rates, along with Medicare spending, vary widely from state to state.
    • “For healthcare leaders, those state-level differences can inform decisions about screening programs, patient volume and investment in early detection.
    • “Becker’s compiled a list of the facts and figures healthcare leaders need to know about lung cancer using data from the American Cancer Society, the CDC, CMS and a lung cancer screening study published Dec. 9, 2025, in CHEST.”
  • and
    • “Hawaii and Louisiana continue to report the highest percent of influenza-like illnesses as the U.S. experiences an earlier-than-usual flu season.
    • “The CDC defines influenza-like illness, or ILI, as a fever of 100 degrees or greater, along with a cough and/or sore throat. The agency collects data on outpatient visits to healthcare providers for respiratory illness through ILINet. ILI percentages are weighted for state population and compared to baseline levels to assess flu activity. For more information on how the metric is calculated, click here.
    • “Hospitals reported 6,100 new flu admissions in the week ending Oct. 24, up from 4,811 the week prior, according to the CDC’s latest FluView report. This accounts for a 27% week-over-week increasein flu admissions. 
    • “About 2.4% of outpatient visits involved patients with respiratory illness. This metric sits below the national baseline of 2.9% and is up from 2.2% the week prior.”
  • The Washington Post relates,
    • “Peanuts, and peanut butter in particular, are some of the most ubiquitous elements of a child’s diet, and so when a kid is allergic to them, it can be a unique vexation for parents. It means no PB&Js for lunch — but also an endless list of logistics, from having to check in with the parents any time their kid goes over to a friend’s house to communicating with school officials.
    • “It turns out that for many kids thought to have peanut allergies, much of that vigilance may not be necessary. 
    • “A new peer-reviewed study, published Nov. 4 in the Journal of Allergy and Clinical Immunology: In Practice, suggests that fewer young children than previously thought have long-lasting peanut allergies. The findings could change how we make early-childhood allergy diagnoses and how to think about treating allergies moving forward.”
    • “Tim Brettig, a pediatric allergist and immunologist, and a senior research clinician at the Murdoch Children’s Research Institute in Melbourne, Australia. said that means many parents who think their children have lifelong allergies to peanut butter might want to reexamine the matter carefully. “If you’ve had a clear reaction, I would be less inclined to accept a peanut allergy diagnosis,” said Brettig, one of the lead researchers on the new study. “I’d want to continue that work-up. I think food challenges should play a greater role in the allergy assessment of children. Give them a chance to prove that they’re not allergic.” 
    • “The key is a controlled environment, such as a doctor’s office, for checking again, Brettig said. About 12 percent of the babies given the oral food challenge did experience anaphylaxis, the whole-body and sometimes life-threatening reaction that is the most severe response to an allergen. But because they were in an environment with medical professionals to administer care, no long-term harm came to any of the children. “It’s not necessarily something that I’d be doing in a community setting,” said Brettig. “You’d want it to be done with specialists that are skilled in performing these food challenges.”
  • The New York Times adds,
    • “Kratom, long used by people seeking relief from addiction to prescription opioids and alcohol, is increasingly being pitched as a wellness product that purports to raise energy, sharpen focus and enhance athletic performance.
    • “Some makers of kratom, a substance that is derived from the leaves of a tropical tree and often sold in the form of drinks, powder or capsules, have distributed free samples at gyms. Others have sponsored sporting events or trumpeted the product’s benefits with the help of social media influencers and wellness podcasts.
    • “What this marketing often fails to acknowledge is the potential for kratom to lead to addiction, liver injury, seizures and in some cases, fatal overdoses.”
  • Healio tells us,
    • “Individuals with inflammatory bowel disease who have at least two first-degree relatives with colorectal cancer appear to have the greatest increase in risk for CRC, according to results of a Swedish cohort study.
    • “Analysis also showed that having a relative with early-onset CRC was associated with a more modest risk, a finding that diverges from prior research.”
  • Health Day informs us,
    • “Gestational weight gain (GWG) outside of recommended ranges is associated with increased severe maternal morbidity (SMM) risk, according to a study published online Oct. 22 in JAMA Network Open.
    • “Sahar Khademioore, from McMaster University Medical Center in Hamilton, Ontario, Canada, and colleagues examined the association between GWG and SMM across prepregnancy body mass index (BMI) categories.”
  • Per an NIH news release,
    • “Results from a clinical trial funded by the National Institutes of Health (NIH) in five major United States cities show that delivering integrated HIV and substance use disorder (SUD) services using peer navigation in mobile medical units reduced all-cause deaths by 71% compared to participants who received peer navigation to community-based services alone. While scientists found no difference in the use of daily, oral preexposure prophylaxis (PrEP) and medication for opioid use disorder (MOUD) between the groups, the secondary outcome of reduced mortality was significant. 
    • “Injection drug use is an important contributor to HIV in the U. S. that also increases risk for other serious infectious diseases,” said Nora D. Volkow, M.D., director of NIH’s National Institute on Drug Abuse (NIDA), which funded the study. “Although we have effective interventions for this population, there are significant barriers to their accessibility and use. Nonetheless, these findings suggest that delivering low threshold services through mobile units could save lives.” 
  • Beckers Behavioral Health adds,
    • “Researchers at St. Louis-based Washington University School of Medicine found that among patients presenting to the emergency department with a substance-related problem, cannabis was most common among adolescents while alcohol was most common among older adults. 
    • “The study, published Nov. 4 in The American Journal of Psychiatry, analyzed data from large health insurance databases for more than 1.3 million patients ages 16 to 64 who had at least one substance-related emergency care visit between January 2016 and December 2023. Researchers analyzed the data by age group and substance used.” 
  • BioPharma Dive points out,
    • “Sanofi has stopped development of an experimental protein-degrading immune disease drug licensed from biotechnology company Nurix.
    • “Nurix on Tuesday revealed Sanofi’s decision to scrap “SAR448272,” an oral medicine designed to eliminate STAT6, a protein involved in many inflammatory conditions. Nurix didn’t specify the reason for the decision, but Sanofi separately told analyst firm Leerink Partners “emerging nonclinical findings … didn’t warrant further development” in eczema, according to a note to investors. 
    • “Nurix received a $10 million payment from Sanofi in August when a Phase 1 study began and would’ve been eligible for additional payouts if the treatment moved forward in testing.”
  • and

From the U.S. healthcare business and artificial intelligence front,

  • The Wall Street Journal reports,
    • “CVS Health raised its full-year guidance on gains in its health-care benefits and pharmacy segments, but said it remains cautious amid high costs and potential macroeconomic headwinds.
    • “The outlook comes after the company said Tuesday that it plans to split in two, with one company housing its insurance giant Aetna and pharmacy-benefit manager Caremark, and the other its 9,000 retail pharmacies.
    • “CVS said the breakup, slated for early 2028, will enable the two separate management teams to focus more on their respective businesses and be more agile, The Wall Street Journal reported.
    • “For the current fiscal year, the company on Wednesday said it now expects adjusted earnings of at least $8.20 a share, up from its previous forecast of between $7.90 and $8.10 a share. Analysts polled by FactSet anticipate adjusted earnings of $8.05 a share.
    • “CVS also said it now projects revenue of at least $420 billion for the year, compared with its previous forecast of at least $414 billion. Wall Street is modeling for revenue of $417.7 billion.
    • “Each of our businesses delivered another quarter of strong results,” Chief Executive David Joyner said. “We continue to advance our strategy by improving the consumer experience, lowering health care costs, and connecting care for the people we serve.”
  • and
    • “Novo Nordisk raised its annual guidance due to an improved outlook for its key obesity and diabetes drugs.
    • “The Danish drugmaker now expects adjusted sales and operating profit to range from a 2% decline to 2% growth at constant exchange rates.
    • “Third-quarter sales of the Wegovy pill reached the equivalent of $807.2 million, beating analyst expectations of 4.5 billion kroner.”
  • and
    • “AstraZeneca recently made a roughly $10 billion offer to buy Rhythm Pharmaceuticals RYTM 28.04%increase; up pointing triangle, according to people familiar with the matter, a deal that would expand its portfolio of rare disease treatments. 
    • “The U.K. pharmaceutical giant offered to pay $124 a share for the biotech last month, the people said. 
    • “Rhythm specializes in treatments for metabolic conditions and severe obesity. Its shares were trading Wednesday afternoon at around $95 apiece before The Wall Street Journal reported on the offer. They closed up 28% at over $110 a share following the report, giving the company a market value of roughly $7.6 billion. AstraZeneca had a market value of close to $300 billion.”
  • Beckers Hospital Review lets us know how “Health system CEOs close margin gaps with operational redesign.”
  • Fierce Healthcare informs us,
    • “As health plans and employers contend with a growing array of virtual care and AI-enabled tools, Amwell is positioning its digital health platform as the infrastructure layer for AI-enabled care.
    • “Executives at Amwell, formerly known as American Well, touted the company’s platform strategy, government contracts and higher-value clinical services as the main drivers of future growth during the company’s third-quarter earnings call Tuesday.
    • “Rising healthcare costs are pushing health plans and employers to adopt tech-enabled care solutions, but they are looking for measurable engagement and outcomes from digital health vendors, not just access, according to Ido Schoenberg, M.D., Amwell chairman and CEO.
    • “The proliferation of point solutions, accelerated by AI, is creating more vendor sprawl and member confusion, Schoenberg told investors and analysts during the call.” * * *
    • “This is the problem Amwell is determined to solve for our customers. We help them improve clinical and financial outcomes. We do it through activation, getting more of their members into technology-enabled care in place of conventional care that often costs more. We give our customers one platform under their brand with one integration. It provides reliable, scalable rails to bring in a program, exchange data with it, and tests whether it works. The member’s experience stays consistent, simple, and engaging. A common data structure proves the outcomes and improves performance over time,” he said.
    • “As AI adoption grows, a unified care platform becomes more valuable, Schoenberg asserted.”

Tuesday report

David Ermer–Agentic & Generative AI, CDC, COVID-19, FDA, Medical / Rx research, Medicare, Rx coverage, U.S. Healthcare–

“Simplicity is a great virtue but it requires hard work to achieve it and education to appreciate it. And to make matters worse: complexity sells better.”
– Edsger W. Dijkstra

From Washington, DC

  • It’s a national election day. More tomorrow.
  • Beckers Payer Issues reports,
    • “Medicare beneficiaries in 193 counties across 16 states will have no Medicare Advantage prescription drug plans available for general enrollment in 2027, up from 123 counties in 2026, according to an Oct. 9 KFF analysis of CMS plan landscape data.” 
  • The American Hospital Association News relates,
    • “The Administration for Strategic Preparedness and Response announced Nov. 3 that it will partner with the Bureau of Industry and Security and the Assistant Secretary of Defense for Health Affairs on an assessment of U.S. pharmaceutical key starting materials in an effort to identify supply chain vulnerabilities and strategies to improve domestic manufacturing capabilities. The assessment would examine supply chain elements of U.S. pharmaceutical manufacturing efforts, including domestic production capacity and the country’s reliance on foreign or single sources of critical materials.”
  • Bloomberg Law tells us,
    • “A forthcoming proposed rule will expand employers’ ability to help workers pay for health insurance in the individual market, boosting the one major surviving insurance policy from President Donald Trump’s first term.
    • “Trump first created independent coverage health reimbursement arrangements in 2019, and they’ve now been rebranded as custom health option and individual care expense, or CHOICE arrangements. The policy allows employers to contribute money tax-free to pay for health expenses, including insurance premiums in the individual market.
    • “CHOICE is Trump’s least controversial insurance plan with Democrats, in part because it helps strengthen the Affordable Care Act exchanges by increasing enrollment in the individual market — even though most CHOICE plans are purchased off-exchange. Backers say small employers can offer benefits they couldn’t otherwise afford, while critics question whether employees are better off under individual market plans than traditional employer-sponsored plans.”

From the U.S. Food and Drug Administration front,

  • Beckers Hospital Review reports,
    • “Macleods Pharma USA has recalled 3,744 bottles of a combination blood pressure medication nationwide after the product failed dissolution specifications, according to an FDA enforcement report.
    • “The voluntary recall covers olmesartan medoxomil, amlodipine and hydrochlorothiazide tablets, 40 milligrams/10 milligrams/12.5 milligrams, in two lots: 3,528 30-count bottles (NDC 33342-246-07, lot 12251163A) and 216 90-count bottles (NDC 33342-246-10, lot 12251163B), both expiring May 31, 2027. The company, which notified consignees by letter, initiated the recall Oct. 7. The FDA classified it as Class II on Oct. 26, and the recall is ongoing.”
  • and
    • “The FDA has approved Novo Nordisk’s Awiqli as the first once-weekly, long-acting basal insulin for children 10 years and older with Type 2 diabetes.
    • “Awiqli (insulin icodec-abae) injection, 700 units/milliliter, was approved as an adjunct to diet and exercise to improve glycemic control, according to an Oct. 23 news release from Novo Nordisk. The treatment reduces basal insulin injection frequency from seven times per week to one.
    • “The approval was supported by evidence from studies in adults with Type 2 diabetes and a single-dose pharmacokinetic study in pediatric patients ages 10 to 17. Efficacy and safety were also demonstrated in the ONWARDS clinical trial program.
    • “Awiqli is available at more than 70,000 pharmacies nationwide.”
  • BioPharma Dive adds,
    • “Vertex, ahead of FDA decision, calms fears surrounding kidney drug
      • “On a conference call, executives expressed conviction in the coming launch of an IgA nephropathy medicine viewed by Wall Street investors as important to its future.”

From the public health and medical / Rx research front,

  • The New York Times reports,
    • “A 7-month-old, unvaccinated child in New York’s North Country died after contracting measles, the first death in the state from the viral disease in 30 years, officials announced.
    • “Gov. Kathy Hochul said on Monday that the death was a signal that public health protections were eroding as a growing number of families forgo vaccinations.
    • “The child died in Lewis County, which is northeast of Syracuse and has recorded 15 measles cases this year, according to the health authorities, who shared few details about the case. New York is in the midst of a significant measles outbreak. Amish communities, where vaccination rates tend to be lower, have been particularly hard hit.”
  • Per Beckers Hospital Review,
    • “States with heavier chronic disease burdens tend to report somewhat lower rates of skipped checkups, according to a Becker’s analysis of three new KFF datasets. Chronic conditions typically require regular physician visits, which likely keeps patients connected to routine care. 
    • “However, 14 jurisdictions break that pattern: seven with high rates on both measures and seven with low rates on both.
    • “Arkansas, Ohio, Wyoming, Oregon, Wisconsin, Montana and Oklahoma reported above-median rates of chronic disease among working-age adults in 2025 and above-median rates of adults skipping a routine checkup — a sign that preventive care may not be reaching people in states where need is high.”
  • and
    • “Patients who could not tolerate semaglutide or tirzepatide, or who lost little weight on them, lost substantial weight after bariatric surgery, according to a Cleveland Clinic study published Nov. 3 in Annals of Surgery.”
  • Cardiovascular Business relates,
    • “GLP-1 medications such as semaglutide and tirzepatide may outperform metformin in patients with prediabetes, according to new data being presented at the American Heart Association’s Scientific Sessions 2026 in Chicago. 
    • “Metformin is typically the therapy of choice for patients with prediabetes, but GLP-1 drugs appear to be better at preventing type 2 diabetes while also reducing the risk of heart attack and stroke.
    • “The great news with prediabetes is that it’s still possible to reverse the progression of the disease,” co-author Vinicius de Sousa Barzon Serra, MD, a research fellow in the department of cardiovascular medicine at the Mayo Clinic in Scottsdale, Arizona, said in a statement ahead of the conference. “This research may add to the case for considering GLP-1 medications earlier for certain patients, rather than waiting until they develop type 2 diabetes.”
    • “This study included data from more than 250,000 adult patients with prediabetes and obesity. The mean age was 52 years old, and 72% were women. Participants were followed for approximately three years. Overall, approximately half of these patients were on GLP-1 drugs such as semaglutide, tirzepatide, liraglutide or dulaglutide. The remaining patients were taking metformin.”
  • and
    • “Cannabis use is associated with a heightened risk of cardiovascular disease (CVD), according to new data being presented at the American Heart Association’s Scientific Sessions 2026 in Chicago.
    • “Researchers tracked data from more than 440,000 American adults who responded to telephone interview questions about cannabis use. These interviews were conducted as part of the Behavioral Risk Factor Surveillance System. 
    • “Overall, the group found that using cannabis one to five days per month was linked to a 23% higher odds of reporting a history of CVD. These low-frequency users also had a 40% higher odds of experiencing a stroke. Heavy cannabis users, meanwhile, were associated with a 23% higher odds of reporting a history of CVD and a 25% higher odds of experiencing a stroke.
    • “When it came to heart attack risk, on the other hand, the study’s authors did not identify any comparable trends.
    • “We were surprised to find that the link between cannabis use and cardiovascular disease was not straightforward,” study co-author Aabha Divya, MBBS, MCh, an assistant professor of cardiothoracic surgery at the Tulane University School of Medicine, said in a statement ahead of the conference. “We expected that the chances of heart disease would gradually rise as people used cannabis more often, but that wasn’t the case. Both low-use and heavy-use groups had higher odds of developing heart disease.”
  • Per a Census Bureau news release,
    • “As the U.S. population age 65 and older grew from 2008 to 2025, so did the number of older adults with a disability.
    • “But while the number of older Americans with a disability climbed 38.0% to 21.7 million, the overall share actually dipped 7.0 percentage points, from 40.5% to 33.5% during the same period, according to newly released 2025 American Community Survey (ACS) 1-year estimates.
    • “The decline was particularly pronounced among women and adults with less than a high school education.
    • “The drop in the percentage of older adults with a disability is a promising public health trend. But the increase (66.9%) in the share of the total population 65 and over presents care challenges for families, hospitals and public support programs, particularly for those with chronic health issues and disabilities.”
  • Bloomberg Law tells us,
    • “People whose long Covid affects multiple body systems are far less likely to improve than overall recovery estimates suggest, with fewer than one in five experiencing sustained improvement within three years of infection, according to a US study.
    • “Researchers followed 1,019 adults who still had probable long Covid a year after their initial infection. About half experienced sustained symptom improvement over the following three years, while roughly a quarter had complete symptom remission, the study, published Monday in Annals of Internal Medicine , found.
    • “But outcomes differed dramatically depending on the pattern of illness. About 60% of people whose long Covid was dominated by changes in smell or taste had improved by three years, compared with less than 19% of those with symptoms affecting multiple body systems.”
  • Health Day informs us,
    • “E-bike crashes involving kids are soaring — and the injuries are getting more serious, according to a new study.
    • “We’ve been seeing more and more kids on e-bikes, both on the street and in the hospital,” said co-author Dr. Stephanie Chao of the Stanford University School of Medicine.
    • “Researchers examined more than 13,000 injury cases at six children’s hospitals across the country.
    • “They found e-bike injuries jumped 33% per quarter from early 2023 through March 2026.
    • “E-scooter injuries rose 15% per quarter. In all, 8% of e-bike injuries were classified as severe — double the rate for traditional bikes.
  • and
    • “Parental autoimmune diseases were associated with a higher risk of type 1 diabetes in offspring.
    • “Risk grew substantially when either mothers or fathers had type 1 diabetes.
    • “The study did not account for disease severity, autoantibody levels, disease activity during pregnancy, or medication use.”
  • Medscape points out,
    • “A year after completing treatment for obesity, adolescents trained in regulating their emotions were significantly more likely to sustain their weight loss than peers who received standard behavioral therapy alone, according to a randomized clinical trial published in JAMA Network Open.
    • “Those who learned the add-on skills also reported significantly less emotional eating at follow-up compared with those who went through just the diet and exercise program.
    • “Emotional eating is one of the triggers for overeating and binge eating for many — over time, the goal is for teens to see food as one of many ways to feel better, but not the only one,” said Kerri Boutelle, PhD, professor of pediatrics and psychiatry at the Herbert Wertheim School of Public Health and Human Longevity Science at the University of California, San Diego, who led the study.”
  • Healio adds,
    • “A low-carbohydrate, ketogenic diet was found to have the most benefits for liver health vs. other diets.
    • “The keto diet also appeared to be most effective at improving blood sugar control.”
  • Per an Institute for Clinical and Economic Review news release,
    • “The Institute for Clinical and Economic Review (ICER) today released a Final Evidence Report assessing the comparative clinical effectiveness and value of tavapadon (JuvmoTM, AbbVie Inc.) for Parkinson’s disease.
    • “ICER’s report on this therapy was the subject of the October 2026 public meeting of the CTAF, one of ICER’s three independent evidence appraisal committees that discusses and votes on ICER’s report findings. Currently available evidence indicates that tavapadon provides some relief from key symptoms. Benefits from tavapadon appear to be similar to those of older, generic drugs, however, and discontinuation from tavapadon due to adverse events was relatively high.
    • “Downloads: Final Evidence Report | Report-at-a-Glance | Policy Recommendations 
    • “Tavapadon provides a net health benefit over no additional pharmacological treatment, but there are open questions about its benefits compare to other available symptomatic treatments,” said ICER’s Chief Scientific Officer and Director of Health Technology Assessment Methods and Engagement, Dan Ollendorf, PhD, MPH. “Unfortunately, the manufacturer chose a price for tavapadon far above any reasonable estimate of a value-based price. This may lead payers to implement formulary restrictions to limit provider and patient access to this new treatment.”

From the U.S. healthcare business front,

  • The Wall Street Journal reports,
    • “CVS Health will split into two companies, dividing its retail pharmacies from its insurance and pharmacy-benefit operations in a move that will reverse one of the signature deals defining an era of health-industry gigantism, the company said.
    • “The breakup is set to occur in the first half of 2028, a decade after the transformative nearly-$70 billion acquisition that knit together insurance giant Aetna with CVS’s namesake drugstores, its pharmacy-benefit manager Caremark and other assets. 
    • “The two resulting companies will both be publicly traded, and current CVS shareholders will own shares in both. The Financial Times earlier on Tuesday reported the breakup.
    • “One of the two new firms will keep the CVS Health name, and will be run by David Joyner, who is chief executive of today’s CVS, the company said. 
    • “In addition to the insurance and PBM assets, that company will include senior-focused clinics business Oak Street Health, the home-visit provider Signify Health, and CVS’s specialty-drug business, a key growth lever.”
  • and
    • “Pfizer boosted its guidance for the year, as momentum in new products helped it offset declining sales for its Covid-19 vaccine and treatments.
    • “The New York company said Tuesday that sales for its recently launched and acquired products—which include cancer treatments Padcev and Lorbrena—gained 32% in the latest quarter. Higher sales for other products, like blood thinner Eliquis and heart-disease treatment Vyndaqel, also boosted the company’s top line.
    • “Sales of Covid products like Paxlovid and Comirnaty, meanwhile, continued to slide.”
  • Fierce Healthcare relates,
    • “Hinge Health is seeing early traction with its migraine and gastrointestinal care programs as it pushes beyond musculoskeletal care and builds a broader, multi-condition platform.
    • “But the company’s core MSK business remains the engine fueling its robust growth. 
    • “Our vision has always been to automate the delivery of care using technology to close the gap between the care people need and the care they actually receive. We’re now applying that same approach and the same trusted relationships with employers and partners in neurology and gastrointestinal care,” Daniel Perez, Hinge Health co-founder and CEO, told analysts and investors on the third-quarter earnings call Monday. “We’re not starting from scratch in each new category. We’re extending a platform that’s already proven into conditions that are often connected to the ones we already treat. We believe that’s a fundamentally different and more powerful way to expand than what other companies in our space are attempting.”
  • and
    • “Humana and athenahealth are expanding electronic prior authorizations nationwide in a newly announced collaboration. 
    • “Through athenaPayer, Humana is able to connect with over 180,000 providers across the athenaOne network, which the partners said will create a more connected experience between the health plan and clinicians.” 
  • Beckers Clinical Leadership tells us,
    • “As AI races into exam rooms and onto patients’ phones, the physician’s role is more important than ever — not because doctors must police the technology, but because chatbots cannot replace trust, judgment and the patient-physician relationship, according to Jan Carney, MD.
    • “Dr. Carney, 2026-2027 president of the American College of Physicians, published a statement Nov. 3 about AI hype. Dr. Carney is associate dean for public health and health policy and chief of the division of public health at the University of Vermont’s medical college in Burlington, Vt.
    • “Her message follows a September MAHA summit wherein HHS Secretary Robert F. Kennedy Jr. said AI can offer “a second opinion that is much better informed than any doctor in the country” — a claim six physician organizations, including ACP, publicly refuted. Those groups said physicians must “help lead the responsible development and use of AI in medicine.”
  • Beckers Health IT adds,
    • “Health systems have spent the past few years building the case for AI one use case at a time. Less clear is what AI will do to the nation’s healthcare bill.
    • “It came up during the opening keynote at Becker’s 11th Annual IT + Revenue Cycle Conference in Chicago, where Bobbie Byrne, MD, executive vice president and CIO of Charlotte, N.C.-based Advocate Health, gave an answer that rarely shows up in an AI vendor’s pitch deck.
    • “I do think … AI in general is going to raise the cost of healthcare, not for our organization, but in total,” Dr. Byrne said at the September event. “We’ve talked about how we’re using AI to improve care. Well, care is what? Cost.”
    • “The research cuts both ways. A 2023 National Bureau of Economic Research working paper estimated that wider AI adoption could save 5% to 10% of U.S. healthcare spending. A September Blue Cross Blue Shield Association white paper pegged the cost of rising hospital coding intensity at about $942 million over two years and linked it to the spread of AI-assisted billing tools, findings the American Hospital Association challenged in October. Health system CIOs are also working to rein in usage-based AI token costs that grow as adoption does.”
  • MedTech Dive informs us,
    • “Bracco is investing $230 million to construct its first U.S. manufacturing facility for injectable contrast media, the company said last week. 
    • “Bracco will build the facility in Sanford, North Carolina. The company expects to create 200 jobs and could receive a $2.9 million grant over 12 years. 
    • “Adding U.S. production capacity could enhance the resilience of the supply chain, which failed to meet demand for iodinated contrast media during a pandemic-related lockdown in 2022.” 

Monday report

David Ermer–Uncategorized–

“Simplicity is a great virtue but it requires hard work to achieve it and education to appreciate it. And to make matters worse: complexity sells better.”
– Edsger W. Dijkstra

From Washington, DC

  • Politico Pro reports,
    • “The top Republican and Democrat on the Energy and Commerce Committee are taking seriously the pleas of large employers and health insurers who say the No Surprises Act is driving up insurance premiums.
    • “The House panel’s chair, Brett Guthrie of Kentucky, and ranking Democrat, Frank Pallone of New Jersey, asked the Congressional Budget Office on Monday to determine if and how the law will raise premiums over the next decade.
    • “The lawmakers’ letter to CBO Director Phillip Swagel — his office is Congress’ nonpartisan arbiter of the cost of legislation.”
  • Beckers Behavioral Health adds,
    • “Health plans want the next federal mental health parity rule to do something regulators haven’t yet: show them what compliance looks like. The 2021 law called for illustrative examples of good compliance, and plans are still waiting for them, according to Debbie Witchey, president and CEO of the Association for Behavioral Health and Wellness.
    • “ABHW represents the health plans that provide mental health and substance use benefits, including Optum and Aetna. Its members cover about 200 million lives.” * * *
    • “She called a recent field assistance bulletin from the Employee Benefits Security Administration helpful because it narrows where enforcement should focus while a new rule is pending: utilization management, treatment exclusions and network adequacy, the areas the bulletin identifies as having the greatest impact on patients.
    • “Still, Ms. Witchey said the bulletin is no substitute for the compliance examples ABHW wants to see when the new rule comes out.”
  • Healthcare Dive relates,
    • “Millions of seniors in standalone Medicare prescription drug plans could see their premiums skyrocket next year if they don’t switch to a cheaper option.
    • “Average monthly premiums for Part D plans are set to jump 50%, from $34 to $51 in 2027 — assuming seniors stay on their current plans, according to a new analysis from the KFF.
    • “But premiums for plans on offer vary widely, ranging from $6 to $204 among national Part D carriers, the KFF found. Researchers with the health policy think tank stressed the importance of plan shopping during Medicare open enrollment, which runs until Dec. 7.”
  • CMS has posted the slide deck from its September 30, 2026, webinar about the Group Health Plan (GHP) Recovery: Best Practices Webinar.

From the U.S. Office of Personnel Management front,

  • Govexec reports,
    • “For the second straight month, most offerings in the federal government’s 401(k)-style retirement savings program lost value, reflecting continued volatility across the economy.
    • “Only the fixed income (F) fund, and the G Fund, which is made up of government securities, posted gains in October. The F Fund grew 2.47%, while the G Fund increased by its statutorily mandated rate of 0.46%.
    • “Since January, the F Fund has lost 0.35%; the G Fund has gained 3.89%.
    • “The common stocks of the C Fund finished October 0.87% in the red, bringing its 2026 performance down to 11.75%. And the small- and mid-size businesses of the S Fund fell 0.40% last month; since January, the S Fund has increased 11.17% in value.
    • “The international investments in the I Fund lost 2.89% last month. So far this year, the I Fund is 13.09% in the black.”
  • Per OPM news releases,
    • “The US Office of Personnel Management (OPM) today announced that applications are now open for the 2027–2028 class of White House Fellows, offering exceptional Americans a unique opportunity to serve at the highest levels of the federal government and help shape the future of our nation.
    • “Established in 1964, the White House Fellows Program is one of the nation’s most prestigious leadership and public service programs. Each year, a select group of accomplished individuals from across the country is chosen to spend a year working alongside cabinet secretaries, senior White House staff, and other top government officials, gaining firsthand experience in federal leadership and policymaking.” * * *
    • “Applications for the 2027–2028 White House Fellows class are open now. Interested candidates can learn more about the program and application process here.”
  • and
    • “The US Office of Personnel Management (OPM) has identified approximately 50,000 deceased individuals who remain listed in the Federal Employees Health Benefits Program (FEHBP) by matching Treasury’s August 2026 Death Record Confidence Scoring Tool (DRCST) against OPM’s FEHB enrollment records.
    • “The review identified $96.3 million in improper payments made after date of death, including $70.6 million in government FEHB premium contributions and $25.7 million in retirement payments.
    • “OPM also estimates $10.4 million in carrier costs tied to over 20,000 individuals who remain on carrier rolls even though no government premium is being paid for them. Carriers charge FEHB funds each month for administrative and per-member costs. OPM will examine claims that may have been paid after date of death in the coming weeks.”
  • FEHBlog observation — FEHB and PSHB plans have no way to reconcile premiums with individual enrollments. Plans would gain that ability if OPM simply adopted the HIPAA 820 enrollment transaction which has been in service since 2012.

From the U.S. Food and Drug Administration front,

  • The American Hospital Association News reports,
    • “The Food and Drug Administration has identified Class I recalls of two products: certain platelet factor 4 radioimmunoassay products by Instrumentation Laboratories due to customer reports of obtaining an invalid calibration curve; and certain StatStrip Glucose Hospital Meters by Nova Biomedical due to a scanning issue that could lead to a glucose result being assigned to the wrong patient’s medical record or quality control ID. Nova Biomedical reported one serious injury related to the issue as of Oct. 5. The FDA said no deaths have been associated with either issue.” 
  • Reuters relates,
    • “Dr Reddy’s (REDY.NS) said on Monday that the US FDA has tentatively approved a generic version of a new and highly effective HIV prevention drug, paving the way for ​sales in many low- and middle-income countries, though not yet in the United ‌States.
    • “Some doctors and activists say the new treatment could help control the 44-year-long AIDS epidemic which still infects 1.3 million people a year, and which the World Health Organization estimates has killed 44 million since it first ​emerged.” * * *
    • “FDA tentative approval is given to drugs that ​meet all the agency’s safety, efficacy and quality standards but cannot yet be sold in the ​US due to patent or exclusivity issues.”
  • Per a FDA news release,
    • “The U.S. Food and Drug Administration today issued final guidance for manufacturers of cellular and gene therapy (CGT) products to implement a comprehensive, science- and risk-based plan for making sure their products meet potency standards. The guidance provides FDA’s recommendations for a Potency Assurance Strategy, which guides manufacturers to test and verify — before a product reaches a patient — that every batch meets a defined standard of potency to do what the product is supposed to do therapeutically.
    • “The Potency Assurance for Cellular and Gene Therapy Products final guidance replaces FDA’s 2011 potency testing guidance for CGT products and applies to treatments for serious and often life-threatening conditions. By law, manufacturers are expected to verify that their products work as intended, from the time of approval through post-approval monitoring. This final guidance provides FDA’s current thinking and recommendations on how manufacturers can meet that requirement.”  
  • Beckers Behavioral Health adds,
    • “The American Medical Association is calling on the FDA to require botanical drug products, including kratom and cannabis, to prove safety and efficacy in clinical trials before they are marketed or prescribed, warning that unproven products can pose serious risks to patients.
    • “The AMA made its case in an Oct. 28 letter to FDA Deputy Commissioner Grace Graham. The physician group argued that rising consumer demand, anecdotal claims and influencer marketing on social media should not replace high-quality clinical trials or postmarket safety monitoring.
    • “AMA President Willie Underwood III, MD, said manufacturers are producing increasingly potent botanical products in forms ranging from gummies and powders to oils and injections. He said consumers face harms that include dependence, substance use disorders, overdose and death.
    • “Calling something ‘natural’ doesn’t make it safe,” Dr. Underwood said.”

From the public health and medical / Rx research front,

  • Cardiovascular Business reports,
    • “A deep dive into a recent Heart Failure Society of America (HFSA) report makes it clear that heart failure (HF) outcomes can still be significantly influenced by where a person lives or how much money they earn. That report, the HFSA Heart Failure Clinic Database Annual Report, includes data from more than 300 U.S. clinics. And it says a lot about the modern healthcare landscape in the United States.
    • “Cardiology health policy experts Nicholas Chiu, MD, MPH, and Rishi K. Wadhera, MD, believe the report should be a wake-up call for healthcare policy reform. They made their case in a new editorial published in the Journal of Cardiac Failure Intersections.[1]. 
    • Wadhera is the associate director of the Richard A. and Susan F. Smith Center for Outcomes Research at Beth Israel Deaconess Medical Center in Boston. Chiu is a cardiology fellow with Harvard Medical School and Mass General Brigham/Brigham and Women’s Hospital.
    • “The two co-authors said these stats provide a map of the policy choices that resulted in poor outcomes. At the same time, the numbers show how much room there is for improvement. 
    • “For example, the U.S. is one of the wealthiest nations in the world, but it has greater income inequality than most other high-income countries. In addition, the gap in health outcomes between the richest and poorest Americans is widening over time.
    • “Poverty is one of the most powerful and persistent determinants of health in the United States,” the authors wrote. “Patients with heart failure are especially vulnerable to the downstream effects of poverty, because effective care requires costly medications, frequent monitoring, and reliable access to specialty care. Despite a decade of therapeutic advances, poverty continues to shape who develops HF, who can access high-quality care, and how patients live with the disease.”
  • tctMD adds,
    • “Hospitalizations for heart failure (HF) seem to go up with colder ambient temperatures, but the same rise is not seen when temperatures run warmer, an analysis of Medicare data suggests.
    • “Several prior studies have illuminated the relationship between cardiovascular health and climate, with many showing increases in cardiovascular death with rising heat and others showing profound negative effects of cold weather as well.
    • “The new analysis, published online this week in JAMA Network Open with first author Nathaniel Kuhrt, MD (Thomas Jefferson University, Philadelphia, PA), looks specifically at HF hospitalizations documented in Medicare claims data between 2007 and 2022.” 
  • The American Medical Association lets us know what doctors want patients to know about perimenopause.
    • “Perimenopause symptoms can be confusing. Learn what perimenopause is, when it starts and what to know about symptoms, treatment and changing periods.”
  • tctMD relates,
    • “Cancer survivors who adhere to a healthy dietary pattern appear to fare better over the long term compared with those who eat less healthy diets, an analysis of the UK Biobank shows.
    • “Out of eight different dietary patterns, better adherence to all but one of them was associated with lower risks of CVD and all-cause death over about a dozen years, lead authors Qing-Yuan Gao, PhD, and Jing-Wei Gao, PhD (both from Sun Yat-Sen Memorial Hospital, Sun Yat-Sen University, Guangzhou, China), and colleagues report.
    • “An average 45-year-old gained an estimated 1.66 to 3.32 years in life expectancy by consuming healthy foods.
    • “The findings, published online this week in JACC: Advances, highlight “the potential for diet to support cardio-oncology care,” the authors write, noting that “dietary interventions may exert cardioprotective effects in cancer survivors through modulation of metabolic dysfunction and aging processes.”
    • “There remains a need for more definitive research, however.”
  • Medscape tells us,
    • “Remibrutinib, an investigational Bruton tyrosine kinase (BTK) inhibitor developed by Novartis, significantly reduced relapse rates and inflammatory brain lesions compared with teriflunonmide, the current standard of care, in patients with relapsing multiple sclerosis (MS), new findings from two industry-sponsored phase 3 trials showed.
    • “The REMODEL-1 and REMODEL-2 trials showed relative reductions in annualized relapse rates (ARRs) of 35% and 31.2%, respectively, although the absolute differences were small. Remibrutinib was also associated with a reduction in new or enlarging brain lesions by approximately 65%-70% compared with teriflunomide.
    • “The studies also suggested a potential benefit in delayed disability progression with remibrutinib although the findings were not statistically conclusive. The results also showed fewer liver enzyme elevations with remibrutinib vs teriflunomide.
    • “These findings support remibrutinib as a new safe and highly efficacious oral therapy for relapsing MS,” lead author Heinz Wiendl, MD, professor and chair, Department of Neurology, University of Freiburg, Freiburg, Germany, told Medscape Medical News.”
  • MedTech Dive informs us,
    • “Abbott has started a pivotal clinical trial of its investigational Cephea mitral valve system, the company said Thursday.
    • “The device, which Abbott acquired in its 2019 takeover of Cephea Valve Technologies, replaces the diseased mitral valve to restore normal blood flow through the heart. 
    • “Cephea performs the same function as Abbott’s Tendyne but is delivered through a vein in the leg, rather than via a small incision in the chest.”

From the U.S. healthcare business and artificial intelligency front,

  • Beckers Hospital Review reports,
    • “Corvallis, Ore.-based Samaritan Health Services joined Tacoma, Wash.-based MultiCare Health System Nov. 1, completing an affiliation announced in 2025.
    • “As part of the agreement, MultiCare has committed to investing $700 million over 10 years to expand access to care, recruit and retain clinicians, support workforce development and improve facilities and technology across Samaritan’s region, according to a Nov. 2 news release. A regional strategic planning process led by local leaders and shaped by community input will set longer-term service priorities and investments. 
    • “Samaritan keeps its name, now paired with MultiCare’s, along with its local leadership and community-based governance. Samaritan operates five hospitals and serves more than 280,000 residents in Oregon’s mid-Willamette Valley and central coast.” 
  • Modern Healthcare adds,
    • “Providence has completed the final phase of a joint venture with home care company Compassus to provide home health, hospice and palliative care services in Oregon.
    • “The joint venture will operate under the name Providence at Home with Compassus, the two organizations said Monday in a news release. Under terms of the deal, Brentwood, Tennessee-based Compassus will manage 17 home care programs Providence previously operated across Oregon.
    • “The Oregon Health Authority gave final approval for the arrangement last July following a 19-month review. The state sought public input of the deal over concern the joint venture could alter the way patients receive home health and hospice services.” * * *
    • “Providence is a nonprofit Catholic health system that operates across seven states. Compassus offers home care services across 34 states.”
  • Beckers Hospital Review relates,
    • “UnitedHealthcare will stop requiring prior authorization for more than 2,000 pediatric care codes for members under 18 starting Dec. 1.
    • “The payer published the full list of CPT codes Nov. 2. The codes span common services, diagnostic imaging, sleep studies, cancer treatment and orthopedic care, according to a UnitedHealthcare news release. Examples are ear tube and tonsil procedures, MRI and CT scans, joint and cardiac procedures, and some oncology and chemotherapy services.
    • “UnitedHealthcare said it chose services widely considered safe and effective in the medical community. The selection cuts pediatric prior authorization volume by nearly two-thirds and fulfills a commitment the insurer made in May. 
    • “Some complex services will still require prior authorization. These include certain injectable medications, genetic tests, surgical procedures and services that must be managed under state regulations. Some pediatric services will also still require advance notification.
    • “The changes apply to UnitedHealthcare commercial plans, Individual Exchange plans and UnitedHealthcare Community Plans, where permissible by state law.”
  • and
    • “Franklin, Tenn.-based Community Health Systems is still waiting longer for insurers to pay its claims, but the slowdown has not worsened, CFO Jason Johnson said on the system’s Oct. 29 third-quarter earnings call.
    • “In July, Mr. Johnson said insurers were auditing more claims before paying them and asking for more records. Payers used to run those audits after payment. He said CHS’s accounts receivable was growing as a result. He called it a timing issue rather than a collection problem and said the system would return to a normal run rate once it anniversaried the change. 
    • “It has not worsened. We continue to see a slowdown in the payment of claims,” Mr. Johnson said on the Oct. 29 call. “No worse than it was in the first quarter when we really first started seeing that shock. But it has not changed either. Our days in A/R are consistent from [June 30 to Sept. 30], so we have kind of maintained.”
    • “CHS’s cash flow improved in the third quarter despite the slowdown. Cash generated from operations was $168 million, excluding taxes on divestiture gains, up from $121 million a year earlier. On a reported basis, it rose to $155 million from $70 million. Mr. Johnson credited better management of accounts payable and continued collection of accounts receivable, including the timing of state-directed payments.”
  • and
    • “Blockbuster medicines now account for nearly half of prescription medicine spending worldwide, according to an Oct. 22 report from the IQVIA Institute for Human Data Science that analyzes blockbuster drugs from 2000 to 2024.”
  • Fierce Healthcare tells us,
    • “Teladoc Health raised its 2026 outlook after better-than-expected third-quarter results, as BetterHelp’s insurance pivot gained traction and Integrated Care profitability improved.
    • “The virtual care company posted declining revenue but still beat Wall Street on both revenue and profit. Teladoc Health’s Q3 beat drove shares up nearly 27% Thursday after the company reported Q3 earnings Wednesday after market close.
    • “Teladoc Health faces near-term pressure as it transitions its virtual mental health business, BetterHelp, from a cash pay model to an in-network, insurance-covered model.” 
  • Healthcare IT News adds,
    • “Telemedicine is becoming an increasingly important part of cancer care, allowing patients to access specialized expertise without always traveling to a hospital. At The University of Texas MD Anderson Cancer Center, virtual visits now account for one-quarter of ambulatory encounters.
    • “The organization conducted more than 295,000 virtual visits in fiscal 2026, with 60% of patients having used telemedicine at some point. Those numbers are helping MD Anderson understand where virtual care works best, where it falls short and how it can reshape cancer treatment.”
  • Beckers Health IT gives us a look at Amazon’s healthcare playbook.
  • Fierce Health points out,
    • “Electronic health record company athenahealth is opening up patient health records to outside AI assistants, starting with Anthropic’s Claude, through a new connection designed to give patients personalized answers based on their clinical data.
    • “The new server solution, athenaPatient MCP, uses the Model Context Protocol to connect Claude directly with the athenaOne platform. Patients authenticate using their athenahealth patient portal credentials and decide what information Claude can access, according to the EHR company. Credentials are not shared with Claude.
    • “Paul Brient, athenahealth’s chief product and operations officer, said that information is encrypted in transit, patients control what information is shared, and they can revoke access at any time. “Once the connection is established and patients approve what types of data they would like to share, the rest is between Claude and the patient,” he told Fierce Healthcare in an interview.”
  • BioPharma Dive notes,
    • “Karyopharm Therapeutics, a cash-strapped cancer drugmaker, has filed for bankruptcy in a bid to sell itself and reorganize.  
    • “Through the Chapter 11 filing announced Monday, Karyopharm intends to hold an auction in which Ayrmid, the parent of cell therapy maker Gamida Cell, will serve as the lead bidder. Karyopharm will continue to operate during the proceedings with the help of a $55 million bankruptcy loan from its current lenders. An acquisition should close in early 2027.  
    • “Karyopharm sells the blood cancer drug Xpovio, which was first approved for multiple myeloma in 2019 and has since been cleared for a common form of lymphoma. U.S. regulators could soon clear use in myelofibrosis, too. In a statement, Ayrmid CEO Joe Wiley said adding Xpovio to Gamida Cell’s line of blood cancer cell therapies could “build a broader, stronger commercial-stage hematology business with meaningful opportunities for future growth.”

Weekend update

David Ermer–Congress, HIPAA Privacy and Security Rules, Medical / Rx research, Medicare, Mental health care, Obesity, U.S. Healthcare–

“Simplicity is a great virtue but it requires hard work to achieve it and education to appreciate it. And to make matters worse: complexity sells better.”
– Edsger W. Dijkstra

From Washington, DC

  • The mid-term elections campaign trail ends on Tuesday, which is Election Day. Both the House and the Senate return to Capitol Hill next for a lame duck session.
  • Roll Call reports,
    • “Republicans in both the Senate and House will hold their leadership contests on Nov. 10, just a week after a high-stakes Election Day that will determine whether they keep their majorities.” 
  • Beckers Health IT relates,
    • “U.S. Sen. Bill Cassidy, MD, R-La., has released a discussion draft of the PATIENT AI Act, proposing to clarify whether the FDA or ONC oversees healthcare AI tools and to create a federal payment pathway for AI-based services.
    • “The Protecting Americans Through Intelligent, Ethical, and Transparent Artificial Intelligence in Health Care Act comes from Dr. Cassidy, who chairs the Senate Health, Education, Labor and Pensions Committee. AI applications that don’t qualify as FDA-regulated devices would be added to the definition of ONC’s certified health IT.
    • “The FDA would get a risk-based review process for software-based devices, including authority to accept premarket software changes and review updates on a rolling basis. HHS would certify third-party bodies to review low- to moderate-risk software. The Oct. 29 draft also applies existing federal preemption of state product liability laws to integrated and software-based devices.
    • “On reimbursement, HHS would build a coverage evaluation framework for AI-based services, propose payment methodologies and establish a process to use Healthcare Common Procedure Coding System Level II codes for them. The Center for Medicare and Medicaid Innovation would test a payment model for AI applications that deliver care autonomously.”
  • The Street tells us,
    • “A rare pricing shift is coming for Medicare beneficiaries in 2027, but taking advantage of potential savings will depend on the coverage decisions they make before the December 7, 2026, enrollment deadline.
    • “Medicare Advantage premiums are expected to fall next year, while Medicare Part B premiums are projected to rise more modestly than some retirees may have feared, according to the Centers for Medicare and Medicaid Services (CMS). 
    • “Prescription drug coverage, however, comes with a higher annual out-of-pocket limit and deductible in 2027.”
    • “Meanwhile, major insurers are reducing their coverage in some areas, leaving certain counties and limiting provider choices while cutting extra benefits like dental care in some regions.”‘
  • FEHBlog Observation — The FEHBlog’s guess is that CMS will announce 2027 Part B and D premiums shortly after Election Day.
  • The New York Times lets us know “What to Know About the 6 Experimental Peptides Kennedy Has Cleared for Use.
    • “Patients will now have widespread access to the peptides, despite experts’ safety concerns.”

From the public health and medical / Rx research front.

  • MedPage Today reports,
    • “As Measles Outbreak Hits Pennsylvania Amish Country, More Show Openness to Vaccines.
      • “— After a decline in trust, some minds are changing.
  • Health Day relates,
    • “No single exercise is best for weight loss, and varying workouts helps prevent progress from stalling
    • “Cutting calories drives most weight loss, but regular activity is key to keeping the weight off
    • “A sports doctor recommends pairing 30-minute cardio sessions with strength training that targets the legs and large muscles.”
  • and
    • “Low-risk prostate cancer (PC) has become less common at diagnosis since 2010, and low-risk patients are increasingly avoiding treatment, according to a study published online Oct. 26 in Cancer.”
  • and
    • “A vaginal swab test in development could help some women with abnormal bleeding avoid a painful uterine biopsy
    • “Early company-reported results suggest the swab catches at least 90% of endometrial cancers
    • “Developer PinkDx hopes to offer the test by mid-2027, pending results from a larger 3,000-woman study.”
  • The New York Times tells us,
    • “Knee Surgery Isn’t Always the Answer. Here’s How to Avoid It.
      • “If you want to avoid the knife, you have to be patient.”
  • and
    • “Why Your Mental Health Needs an Annual Checkup, Too
      • “Here are a few questions to ask yourself — and your primary care doctor — to keep your psychological well-being on track.”
  • Medscape informs us,
    • “For many problem drinkers, the after-work drink is automatic. Now, some patients of Sylvie Stacy, MD, tell her they pour a glass, take a sip or two, and walk away.
      “That sense of anticipation isn’t there anymore, and the situations that used to trigger an immediate craving for alcohol suddenly feel very neutralized to them,” said Stacy, an addiction medicine specialist and chief medical officer for Rehab.com.
    • “Why? These patients are using GLP-1 medications.”
  • and`
    • “In a small pilot trial, adults who had lost weight while they were on a GLP-1 receptor agonist (GLP-1 RA) and then stopped it regained less weight over 4 months with either a digital wellness app or dietitian-developed meal deliveries compared with usual care.

From the U.S. healthcare business and artificial intelligence front,

  • Modern Healthcare reports,
    • “Hospital units dedicated to treating the nation’s sickest kids are disappearing nationwide. In the past year alone, hospitals have closed pediatric intensive care units for critically ill kids in Montana, Oregon, and Missouri. Overnight hospital wings for kids have also shuttered in Illinois and California.
    • “Depending on the hospital, pediatric units — which are separate from neonatal intensive care units — can serve patients ranging from a few weeks old to well into their teens or early adulthood. As hospitals look to cut costs, many are converting those beds into more services for newborns or adults. As a result, pediatric intensive care has become centralized in medical hubs, requiring critically ill children to travel farther for lifesaving care.
    • “You can’t expect that people will be fine if the next-closest children’s hospital is a flight away or an eight-hour drive,” said Elizabeth Mack, a pediatric critical care doctor and spokesperson for the American Academy of Pediatrics.
    • “Hospitals cutting pediatric care tend to cite low patient volumes; it’s relatively rare for a child to need intensive care. It’s also hard to find doctors to treat those rare cases because the nation is short on pediatric subspecialists, who earn less than those focused on adults. Meanwhile, hospitals are often paid less to treat children than adults, and buying gear tailored to kids adds extra costs.
    • “The gap in care is acute in rural places. Cutbacks are happening across community hospitals, whether owned by small nonprofits or massive private equity companies.
  • Beckers Physicians Leadership relates,
    • “San Ramon, Calif.-based Hill Physicians Medical Group has agreed to have the Santa Clara County Independent Practice Association join its enterprise, according to an Oct. 29 news release.
    • “As part of the deal, Hill Physicians would also acquire the IPA’s management services organization, Pacific Partners Management Services, from an affiliate of HCA Healthcare. The addition would bring about 1,000 physicians and other providers into Hill Physicians’ network and give it a presence in all nine Bay Area counties.
    • “Hill Physicians is Northern California’s largest independent physician association, with more than 6,000 physicians serving more than 400,000 patients across 14 counties. The deal is subject to regulatory approvals, and financial terms weren’t disclosed.”
  • Beckers Health IT informs us,
    • “When Dallas-based Baylor Scott & White Health and Thrive Global, the behavior change technology company founded and led by Arianna Huffington, announced their collaboration in October, they set out to help people make healthier decisions about sleep, food, movement, stress and connection through what Ms. Huffington called “microsteps.”.
    • “For Ms. Huffington, supporting people through microsteps between doctor visits is an important part of moving healthcare beyond treating illness.
    • “One of our mottos is that health is also what happens between doctor visits. If we don’t nail how we can help people sleep better, eat better, move more, stress less and connect more, it’s going to be very hard to transform what is really a sick care system into a healthcare system,” she told Becker’s in an interview alongside Pete McCanna, CEO of Baylor Scott & White.
    • “Mr. McCanna said the idea resonated with him when he heard Ms. Huffington describe Thrive Global’s approach at a dinner, because it fit with the system’s effort to redefine what a modern health system should be, one he described as customer-centric and demand-driven.”
  • Fierce Healthcare informs us,
    • “Building on its recent guidance for organizations’ use and governance of clinical AI, the American Medical Association on Thursday gave a deeper breakdown of how it believes different parties should be responsible for decisions, actions and failures involving the technology. 
    • “The latest framework from AMA’s Center for Digital Health and AI addresses liability issues the group said are currently unanswered by existing liability frameworks. Those structures, it said, could leave physicians facing “liability for risks they cannot reasonably prevent, while patients may struggle to seek remedies when AI causes harm.”
    • “Other key issues with the status quo liability frameworks, AMA said, are ambiguity around when product liability applies to AI; how contract terms and disclaimers from developers can distance responsibility from risk control; and whether deploying healthcare organizations hold various responsibilities specific to AI, such as local testing or outcomes monitoring. 
    • “AMA said the clinical AI liability framework it’s advancing “recognizes that multiple parties may bear liability for the use of AI when something goes wrong,” and then aligns that accountability based on a party’s ability to prevent harm. Responsibility is spread out in areas where control is shared, but it does not become interchangeable, and no party’s obligations disappear because another party also bears some,” AMA wrote in a brief outlining its thinking.” 

Cybersecurity Saturday

David Ermer–Agentic & Generative AI, Cybersecurity–

From the frontier AI front,

  • Cybersecurity Dive reports,
    • “A suspected China-nexus actor chained flaws in PHP2Shell with a privilege escalation bug in the Linux kernel to gain root access to Palo Alto Networks firewalls, according to researchers at Dream and PAN Unit 42. The attacks reached more than two dozen targets, including multiple servers linked to the U.S. government. 
    • “The chained critical flaws in PHP, tracked as CVE-2026-109618 and CVE-2026-109169, along with a high-severity flaw in Fragnesia, tracked as CVE-2026-46300. The threat actor, assisted by AI, gained root access to 25 PAN-OS firewall and management servers in the U.S., Japan, Taiwan and South Korea. 
    • “After gaining access to the firewalls, the hacker targeted Microsoft Active Directory. Researchers confirmed the attacks led to directory enumeration and credentials theft. 
    • “The attacks impacted a cloud environment that researchers confirmed is linked to the U.S. government.”
  • and
    • “The insurance industry is closely monitoring PHP2Shell amid concerns of a systemic event that could overwhelm the sector with billions in cybersecurity risk claims. 
    • “PHP Foundation and multiple government authorities last week warned about two critical vulnerabilities in the scripting language used in more than 70% of websites. If successfully exploited, those vulnerabilities could enable an attacker to achieve remote code execution. 
    • ‘The insurance sector has long feared that a systemic cybersecurity event could lead to billions of dollars in claims that extend well beyond any existing risk models.” 
  • Tech Crunch lets us know in a detailed article,
    • “PHP2Shell explained: Timeline of the global vulnerability crisis.”
      • “PHP powers most of the web, making PHP2Shell a major risk. Here’s a timeline of what happened, who was affected and how to secure your systems now.”
  • Federal News Network adds,
    • “A top Cybersecurity and Infrastructure Security Agency official has called a security vendor’s decision to break the embargo on the recently disclosed PHP vulnerabilities “dangerous” and “inappropriate,” as cyber professionals grapple with how artificial intelligence is accelerating vulnerability timelines.
    • “The company in question, Chainguard, released patches for the PHP bugs more than six hours ahead of the planned, coordinated release last week, according to the PHP Foundation.
    • “Under coordinated disclosure processes, security firms like Chainguard receive vulnerability information in advance so they can develop patches and their users can immediately update their systems upon disclosure.
    • “Chainguard’s decision has been criticized for putting others at risk, allowing hackers to study the PHP vulnerabilities before other organizations were ready to release patches.”
  • Ars Technica tells us,
    • “It’s almost like Google’s got something to prove after taking a break from releasing new frontier AI models earlier this year. Just two weeks after rolling out Gemini 4 Argon, Google has announced Gemini 4 Carbon. This isn’t the Flash model equivalent we’ve been waiting for but, rather, is an improvement on Argon, and like that model, Google is working on a staged release that could take a while.
    • “Stop me if you’ve heard this one before: Google says its latest AI model reaches a new threshold in coding, agentic tasks, and scientific analysis. It’s so capable, in fact, that Google can’t let you use it just yet.
    • “Gemini 4 Carbon reportedly makes big gains in cybersecurity applications. Google says the model shows a “significant leap” in vulnerability detection, validation, and remediation. Carbon is also apparently twice as likely to generate code that is free of vulnerabilities versus Argon. Meanwhile, the Chrome team claims that Carbon is 10 times better at generating “high-quality” patches compared to non-Google models. Google also notes that Carbon has increased its score by 89 points on WebDev Arena, now ranking at number four on the leaderboard.”
  • Anthropic informs us,
    • Anthropic’s life sciences team is working to accelerate curing disease. Over the past several months, our scientists have engaged in deep research partnerships with six organizations developing new medicines: BigHat Biosciences, Bristol Myers Squibb, Divergence Labs, Enveda, Generate Biomedicines, and The Column Group. We’ve also begun drug discovery efforts of our own. In doing so, we’ve learned a lot about how Claude can support drug development, and how we’ll need to improve Claude further to realize AI’s potential in medicine. We plan to scale this work up substantially from here.
  • Silicon Angle adds,
    • “Anthropic PBC today [October 6] expanded its Cyber Verification Program into three tiers of access for vetted security teams, with fewer blocks on cybersecurity work at each step up.
    • “The overhaul is aimed at a restriction Anthropic built into its own products. Because the company treats cybersecurity as dual-use, its generally available models carry conservative classifiers that block most cyber work. When Claude Opus 5.5 launched Sept. 22, most security tasks sent to it were routed to the older Opus 4.8.
    • “Anthropic is folding Project Glasswing into the program at the same time. Since April, Glasswing has given Claude Mythos access to organizations that secure critical software, and Anthropic widened it to 150 more organizations in June. Claude Opus 5.5, Claude Sonnet 5.5 and Claude Mythos 5.1 are available at every tier of the new structure, and later models will be added as they ship.” * * *
    • “The program is available through the Claude Platform, Google LLC’s Vertex AI and Microsoft Corp.’s Foundry service. On Amazon Web Services Inc.’s Bedrock, it is limited to customers eligible for Enterprise Frontier Safeguards.”

From the cybersecurity policy and law enforcement front,

  • Per a Cybersecurity and Infrastructure Security Agency (CISA) news release,
    • “The Cybersecurity and Infrastructure Security Agency (CISA) today [October 26] released its new strategy, CISA 2030: Defend, Harden, Prevail, which advances President Trump’s Cyber Strategy for America and National Resilience Strategy while strengthening the security and resilience of the nation’s critical infrastructure.
    • “The strategy addresses an increasingly complex threat environment, strengthens national cyber defense, and prioritizes the infrastructure most essential to America’s national security, economy, public health, and safety.
    • “The threat landscape is evolving at an unprecedented pace. Nation-state actors and other malicious adversaries are becoming increasingly sophisticated in their attempts to compromise U.S. networks. CISA is strengthening national cyber defense through decisive, proactive action to identify, disrupt, and eliminate adversarial access while hardening critical infrastructure against emerging threats.
    • “I call on every company and organization in the critical infrastructure community—from owners and operators to vendors and technology manufacturers—to act now,” said CISA Acting Director Nick Andersen. “CISA 2030 provides a focused roadmap to strengthen defenses, eliminate adversarial footholds, and deny them any advantage that could endanger the nation’s security, economy, or public health.”
  • Federal News Network adds,
    • “Agency chief information security officers are working together through an unofficial “CISO working group” to help accelerate the migration to post-quantum cryptography.
    • “Bill Newhouse, cybersecurity engineer and project lead at the National Institute of Standards and Technology’s National Cybersecurity Center of Excellence, said Wednesday that the June executive order and corresponding Office of Management and Budget memo gave leaders a push to collaborate more. Newhouse added that the White House’s guidance allowed for more conversations to help agencies identify what gaps remain in the migration process.
    • “We need to think about what tools do we have in common and how do you leverage those to gain information about cryptographic use and functions so that we can take advantage of what the [content delivery network] program has accomplished and is still trying to accomplish,” Newhouse said at Red Hat’s Government Symposium.
  • Cybersecurity Dive tells us,
    • “Small and rural healthcare organizations are among the most vulnerable critical infrastructure organizations in the nation.
    • “The U.S. government will help protect rural hospitals from cybersecurity threats as part of a new pilot program that could generate lessons for how to secure healthcare infrastructure nationwide.
    • “The White House’s Office of the National Cyber Director (ONCD) and the Department of Health and Human Services (HHS) on Monday launched Project Lifeline 250, a six-month program through which technology and cybersecurity firms will offer free hardware and services to rural hospitals. Partner companies, including Cisco, Cyera, Microsoft, Trellix and Zscaler, will upgrade hospitals’ basic defenses, provide them with backup hard drives in case of outages and help them identify and replace insecure legacy technology.
    • “The order requires agencies to transition “high value assets” and “high impact systems” to post-quantum cryptographic keys by Dec. 31, 2030, and PQC digital signatures by the end of 2031.”
  • Per an HHS news release,
    • “The United States Department of Health and Human Services (HHS) Office for Civil Rights (OCR) today [October 29] announced a settlement with Lehigh Valley Health Network (LVHN) and its affiliated covered entities concerning potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy, Security, and Breach Notification Rules. Under the terms of the resolution agreement, LVHN agreed to a three-year corrective action plan, and paid $800,000 to OCR.
    • On May 15, 2023, LVHN, a health system in Pennsylvania, filed a breach report stating that on February 4, 2023, LVHN discovered suspicious activity in their IT system that was subsequently determined to be ransomware. As a result of this ransomware attack, protected health information (PHI) was exfiltrated and posted on the dark web. The attack affected the PHI of 248,359 individuals and included sensitive photographs of cancer patients receiving radiation oncology treatment, names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial information, diagnoses and conditions, lab results, medications, and treatment information.” * * *
    • “The resolution agreement and corrective action plan may be found here [PDF, 337 KB].”
  • Cyberscoop reports,
    • “Authorities seized the domain of Virtualine, a bulletproof hosting provider that cybercriminals used to commit a large-scale sextortion scheme, ransomware, data theft, malware hosting and money laundering, the Justice Department said Tuesday. 
    • “Virtualine facilitated prolific criminal activity, including the distribution of child sexual abuse material (CSAM), the Justice Department said. The Russian-speaking bulletproof hosting provider was among the most active this year in crypto-related crime in particular, researchers said. 
    • “The site and its associated infrastructure stands out among the dozens of bulletproof hosting providers currently tracked by TRM Labs. “It was not among the largest by total inflows, but it received the most illicit-attributed value in 2026 to date,” the blockchain and cryptocrime research firm wrote in a blog post.”
  • and
    • “A defense contractor with top secret security clearance pleaded guilty to aiding North Korea’s remote worker scheme by allowing co-conspirators to use his identity to apply for jobs, including positions with national security implications, the Justice Department said Wednesday. 
    • “John Allen Kurrle Jr. participated in a short-lived but prolific conspiracy that spanned at least 88 job applications at U.S.-based companies, resulting in nine job offers, according to court records.
    • “The 62-year-old allowed co-conspirators to use his identity and government clearance for prospective sensitive work, often with U.S. government contractors. The nine job offers Kurrle’s co-conspirators received between June and October 2025 had annual salary ranges of $120,000 to $190,000.
    • “The scheme had a limited success rate. The longest and most lucrative job a co-conspirator landed under Kurrle’s identity lasted about three weeks, netting a total pay of $4,800.”

From the cybersecurity breaches and vulnerabilities front,

  • This bullet is astounding. The Wall Street Journal reports,
    • “Last week, the founder of the world’s largest crypto exchange delivered a chilling warning that read more like a tagline to a horror movie than a reminder to be vigilant on cybersecurity.    
    • “No crypto wallet is 100% safe,” Binance’s Changpeng Zhao wrote on X, the social-media platform. “No tech is 100% secure.”  
    • “Binance’s own users were soon caught in a whirlwind of recent software hacks, widespread panic and bitter recriminations. In the latest, and biggest, cyberattack that has buffeted the world this “Black October,” North Korean hackers ransacked Binance on Thursday afternoon [October 29]. In 20 minutes, they had made off with at least $6.3 billion.
    • “The speed, scale and sophistication of the heist has left the crypto industry reeling, and renewed questions about the digital-asset markets and whether they will ever fulfill their promise as a viable alternative to the traditional financial system or even a safe place to store money. The momentum that had lifted bitcoin and other cryptocurrencies to record highs last year had already stalled. But the recent spate of attacks, punctuated by Binance’s hit, threatens to deal a more serious blow.
    • “It’s a really tough moment for the crypto industry,” said Ari Redbord, global head of policy at crypto intelligence firm TRM Labs.” * * *
    • “At 10:30 p.m., The Wall Street Journal reported findings from cybersecurity research firms TRM Labs and Pangolin Intelligence that the attack was linked to North Korea’s state-sponsored TraderTraitor hacking unit. The same group has been behind many of the largest crypto attacks, including the $1.5 billion ByBit attack in 2025, previously the largest hack in crypto history.”
  • Cyberscoop relates,
    • “A company working on behalf of the Department of Homeland Security sought to cut off online access to information on more than 41,000 employees that hacktivists said they obtained from a database breached at DHS.
    • “A search tool for the database, named Icepick, went offline for a spell before coming online again Thursday [October 29] under a different registrar.
    • “Icelandic hosting company FlokiNET said Thursday that it received a request from DHS contractor ZeroFox to remove the data, which it refused.
    • “By mid-morning, icepi.cx no longer resolved. Its registrar, CentralNic, had placed the domain on serverHold,” FlokiNET said in a blog post. “Our refusal kept nothing online. The request that decided the outcome to take the site down was not the one sent to us. A registrar reached the opposite conclusion the same morning, published nothing, and a global audience lost access to the site. In the meantime the site is online again under a domain from a different registrar.”
  • and
    • “China state-backed threat group is using ARTEX, the automated agentic AI penetration testing framework, to achieve remarkable speed, scale and success in a campaign that already compromised about 140 sensitive targets in 11 days, according to CrowdStrike. 
    • “The threat group, which CrowdStrike tracks as Vapor Panda, targeted more than 200 organizations in at least 14 countries since Oct. 17, the security company said in a threat report Thursday. Targets and confirmed victims include foreign ministries, a European country’s presidency and prime minister’s office, defense and intelligence agencies; 19 U.S.-based organizations in the pharmaceutical, semiconductor, defense, nuclear and financial sectors; and telecom providers in the United States, Belgium and the Philippines. 
    • “CrowdStrike told CyberScoop about 70% of Vapor Panda’s targets were confirmed compromised or had evidence indicating moderate confidence of a successful intrusion. 
    • “Vapor Panda’s use of ARTEX, paired with DeepSeek, allowed it to accomplish more tasks with shocking speed — requests occurring as often as every 10 seconds — and pursue multiple attack paths concurrently. 
    • “This is the first time that we’re seeing an agentic adversary nation-state threat actor at this scale, and I think that this is probably, unfortunately, something we’ll see more of,” Adam Meyers, senior vice president of counter adversary operations at CrowdStrike, told CyberScoop.”
  • Cybersecurity Dive tells us,
    • “Hackers are increasingly targeting internet of things devices, including on home networks, in attacks that can serve as launching pads for campaigns against enterprises, security firm Bitdefender and networking vendor Netgear said in a report on Wednesday [October 28].
    • “As enterprises get better at protecting their digital infrastructure, cybercriminals are turning to connected home devices,” the report said, describing home IoT devices as “an ideal foothold,” because they are “always on, reliable, and rarely monitored.”
    • “While the report focuses on home networks, it has implications for businesses that run similar devices on enterprise networks, as well as for companies whose executives are vulnerable to compromise at home.”
  • HIPAA Journal informs us,
    • “An analysis of data breaches affecting 500 or more individuals reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) in August 2026 shows a considerable improvement from the previous month. Data breaches are down 34% month-over-month, with August’s total of 52 data breaches, the second-lowest monthly total in the past 12 months, well below the 12-month average of 66 data breaches per month.
    • “While August was a relatively good month for healthcare data breaches, the year-to-date figures show that 2026 is turning out to be another bad year for healthcare data breaches. Last year was the worst-ever year for healthcare data breaches, with 807 incidents reported. So far this year, 593 large healthcare data breaches have been reported to OCR. At this time last year, the total stood at 556 data breaches. That’s a 6.7% year-over-year increase.”
  • and
    • “Blueberry Pediatrics, a telemedicine service provider that offers subscribers access to board-certified pediatricians, has been affected by a data security incident involving a third-party tool called Metabase. The incident resulted in the theft of the sensitive data of 340,915 individuals.
    • “Metabase, a business intelligence and data visualization platform used by more than 100,000 organizations, was found to contain a critical vulnerability. On August 22, 2026, Blueberry Pediatrics learned that the vulnerability had been exploited by a hacker who obtained a copy of patient data. Metabase was also used by Photon, a prescription service provider used by Blueberry Pediatrics, that exposed a subset of the same information. On August 24, 2026, Photon advised Blueberry Pediatrics that the vulnerability had also been exploited by a different threat actor, who also obtained a copy of patient data.”
  • CISA added ten known exploited vulnerabilities to its catalog this week.
    • October 26, 2026
      • CVE-2026-109618 – PHP Memory Corruption Vulnerability 
      • CVE-2026-109619 – PHP Stale Internal Request-State Vulnerability 
        • See the frontier AI discussion above.
    • October 27, 2026
      • CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
      • CVE-2026-111497 Google Brotli Unchecked Return Value Vulnerability
        • The Hacker News discusses these KVEs here.
    • October 28, 2026
      • CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability
      • CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability
        • Security Affairs discusses these KVEs here.
    • October 29, 2026
      • CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability
      • CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
        • The Hacker News discusses these KVEs here.
    • October 30, 2026
      • CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
      • CVE-2026-118527 Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
        • The Hacker News discusses these KVEs here.

From the ransomware front,

  • HIPAA Journal reports,
    • The University of New Mexico Health System (UNM Health) has experienced a cyberattack that has prevented access to critical electronic systems. The incident was detected on October 26, 2026, and as a precaution to ensure patient safety, all ambulance traffic was temporarily diverted to alternative hospitals. A decision was made to cancel all appointments at UNM Health facilities on October 26. UNM Health explained in a 2:30 p.m. update on October 26 that it was also temporarily limiting the acceptance of new patients while efforts continued to restore access to key systems.” * * *
    • “Law enforcement has been notified, and the incident is under criminal investigation, so limited information about the nature of the attack can be disclosed at this time. It is naturally too early to determine the extent to which patient data was involved. While UNM Health has not disclosed details about the nature of the attack, this appears to have been an attempted ransomware attack. A new ransomware group called Byod has claimed it was responsible. The group’s data leak site currently lists 10 victims.
    • “The group’s post about the attack suggests that 36,000 systems at the UNM main campus and UNM Health were compromised, and that patient, student, and employee data was exfiltrated, along with payroll information, internal emails, and Cerner EHR rosters. The group later backtracked to a degree, adding a further post stating it was unaware that “[UNM Health] was running machines related to assisting patients in real-time,” and offered to provide certain decryption keys for free. “(we would keep it locked if it was appointments, patient information + research data only), we are still going to keep the data, but we will provide the decryption key for the hospital sector only… To any patient that was affected, we will pay you up to $2,500 each for the inconvenience. We are sorry once again. We have morals, and we have a heart, we are not villains, but we will still hold companies responsible for bad security leading to compromise of any customer data.”
  • The Hacker News relates,
    • “Cybersecurity researchers are calling attention to what they say is a “recurring social engineering pattern” across hundreds of cases in which threat actors use Microsoft Teams’ external chat creation feature to conduct impersonation scams or to deliver malware.
    • “A consistent pattern of attacker behavior has emerged across these incidents: the use of the same throwaway tenants, the same ‘IT Support (Internal)’ display names, the same remote-access tools, and increasingly, the same payload domains,” Arctic Wolf Labs said in a report shared with The Hacker News.
    • “The attacks consistently employ IT-themed display names or friendly-sounding first names to subvert external-user warnings in Teams. These messages originate from Teams identities established through newly created or acquired Microsoft 365 tenants.”
  • Info Security Magazine tells us,
    • “Cybersecurity leaders can now use a new framework to find and address weaknesses that could leave their AI systems vulnerable to ransomware attacks.
    • “The tool is the Ransomware Assessment and Incident Defense Framework for AI Systems (RAID-AI) and is fully available for anyone to use online for free.
    • “Behnaz Karimi, co-lead of the Open Worldwide Application Security Project’s (OWASP) AI Bill of Materials (AIBOM) initiative, developed RAID-AI over the past two years with the help of Yuvaraj Govindarajulu, also co-lead at OWASP AIBOM.” * * *
    • “Speaking to Infosecurity, Karimi said RAID AI focuses on ransomware attacks against AI systems, whether or not an attacker uses AI. The framework’s approach is hands-on, asking security teams to assess their own controls rather than connecting to or scanning their systems.
    • “Right now, we are slowly seeing that ransomware attacks targeting AI systems are happening,” Karimi said.
    • “She highlighted a April 2025, a report by Zoran, Mitrovic head of engineering at Kintra Health, which detailed how ransomware actors used data poisoning techniques, as well as an alleged cyber-attack on Novo Nordisk in June 2026, where hackers claimed to have stolen AI models used by the pharmaceutical company.”
  • Bloomberg adds,
    • “When hackers crippled the computer network of a Canadian retailer, its owners asked Surefire Cyber Inc. to bargain with the cybercriminals on their behalf. Negotiator Joe Tarraf knew a few things about his opponents: The Russian-speaking hackers respond badly to low-ball counters. Keep them waiting too long, and you risk infuriating them. And when they offer to “split the difference,” there may still be room to bargain.
    • “But Tarraf, 41, also had some extra help. Hackers, like everyone else, have habits — and few are better positioned to learn them than artificial intelligence technology that can analyze hundreds of negotiations at once. Earlier this year, Surefire had introduced an AI tool for just that, using it internally to help its staff tailor their tactics based on lessons drawn from past negotiations with various cybercrime crews.”

From the cybersecurity business and defenses front,

  • The Harvard Business Review lets us know,
    • “To build cyber resilience, organizations need to think about fostering internal relationships instead of just compliance. Social capital—the relationships, trust, and shared understanding that support cooperation—is an integral feature of how business units interact, cooperate, and pursue shared organizational goals, and in this cybersecurity is no different than anything else. Yet it is often overlooked in how companies address cyber risk. New research offers three important findings for leaders:
      • 1) security benefits from compliance activities have a ceiling,
      • 2) shared social capital effectively increases AI and cybersecurity, and
      • 3) large, complex organizations see bigger payoffs from social capital.
    • Taking a social capital approach to drive increased AI and cybersecurity is more a mindset than a process redesign, but leaders can take several concrete steps to invest in building it.
  • NTT Data adds,
    • “Artificial intelligence is reducing the cost and complexity of cybercrime, helping attackers automate reconnaissance, improve phishing, adapt campaigns and analyze vulnerabilities more quickly. At the same time, many organizations still rely on decision-making processes, governance layers, patching cycles and manual controls designed for a slower environment.
    • “That creates a growing asymmetry.
    • “For business leaders, the question is no longer simply whether the organization has the right security technologies in place. It is whether it can recognize risk, make decisions and act quickly enough when the environment changes.
    • ‘The goal therefore cannot be perfect prevention. It has to be resilience: knowing what matters most, detecting threats early, containing disruption and recovering quickly enough to keep the business operating.”
  • The Cybersecurity Hub, writing in LinkedIn, reports,
    • “Microsoft is preparing to add an artificial intelligence-powered security feature to Teams that examines conversation context for signs of phishing, impersonation and social engineering.
    • “The update addresses a weakness in workplace messaging security: an attacker does not necessarily need to send malware or a suspicious website to begin compromising an organisation. A convincing introduction from someone claiming to represent IT support can be enough to persuade an employee to share information or grant access to a device.
    • “Microsoft plans to begin a targeted release in early November 2026 and complete that phase by mid-November. Worldwide general availability is expected between early and mid-December. Administrators will not need to take action to enable the protection, according to the announcement. These remain planned rollout dates.”
  • Cyberscoop points out,
    • “Fresh off the PHP2Shell advisory, former DHS CISO and acting deputy CIO Hemant Baidwan — now executive CISO at Knox Systems, the largest federal managed cloud — joins Safe Mode to break down what actually happens in the hours after a high-severity vulnerability drops. He walks through why “patch it and move on” gives teams a false sense of security, how to map internet reachability in environments that change by the hour, and what a CISA KEV listing really signals to defenders. Baidwan also reflects on writing DHS’s first-ever AI cybersecurity guidance, what he’d add to that playbook today — starting with AI agent identity — and why he thinks compliance has drifted into security theater.”
  • Here’s a link to Dark Reading’s CISO Corner.

Friday report

David Ermer–CDC, CMS, COVID-19, FDA, Government Contracting, Medical / Rx research, Medicare, Mental health care, No Surprises Act, OPM, Rx coverage, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC

  • The Wall Street Journal reports,
    • “Affordable Care Act plan premiums will rise by 13% in 2027, the second straight year of double-digit increases in a strained market that is already facing shrinking enrollment.
    • “Next year’s boost follows a 26% surge this year and is the second biggest rise since 2018, according to KFF, the health-research nonprofit that calculated the increase based on federal data released Friday.
    • “The hike means an average monthly premium of about $704 for a 40-year-old buying an ACA “benchmark” plan for 2027, compared with $624 this year and around $497 in 2025. Benchmark plans are midtier products in each region that are used to set federal subsidy amounts.
    • “People can start shopping for next year’s ACA plans on Nov. 1. The latest increase will add to the strain for the slice of ACA consumers who pay the full price for their plans. Most people with ACA coverage get the government subsidies, but federal support was reduced sharply at the start of this year, leading millions of people to drop out of the market.” * * *
    • “For the ACA plans, as with other types of insurance, a main driver of higher premiums for next year is the growth in spending in areas like hospital care and drugs, said Cynthia Cox, a senior vice president at KFF.”
  • Here’s a link to the CMS Fact Sheet on this news.
  • Per a CMS news release,
    • ‘The U.S. Department of Health & Human Services (HHS), through the Centers for Medicare & Medicaid Services (CMS), has finalized a rule to help more donated organs reach patients by strengthening oversight of Organ Procurement Organizations (OPOs). OPOs connect donor hospitals and transplant programs by securing authorization for donations, recovering organs, and coordinating safe, timely delivery for transplantation. This rule builds upon President Trump’s 2019 Executive Order, Advancing American Kidney Health, and helps advance a key goal of the Department’s Kidney Care National Plan to reform organ transplantation
    • “While more than 49,000 transplants were performed in the United States in 2025, over 100,000 Americans are waiting for lifesaving transplants. To improve access to transplants, the final rule allows high-performing OPOs to compete for multiple donation service areas, clarifies OPO recertification procedures, and reinforces longstanding process performance standards.” * * *
    • “The final rule is available in the Federal Register at: https://public-inspection.federalregister.gov/2026-22381.pdf. 
    • “View the final rule fact sheet at: https://www.cms.gov/newsroom/fact-sheets/medicare-medicaid-programs-organ-procurement-organizations-conditions-coverage-revisions-conditions.”
  • Beckers Hospital Review reports,
    • “In the first six months of Medicare’s Wasteful and Inappropriate Service Reduction pilot, the use of targeted services fell in participating states relative to the rest of the country, according to a research letter published Oct. 26 in JAMA.
    • “The study, from researchers at the University of Minnesota School of Public Health and Brown University School of Public Health, gives early insights into WISeR. The pilot, which brings AI-enabled prior authorization to traditional Medicare, is taking place for six years across six states, according to CMS.
    • “Compared with trends in other states, monthly epidural steroid injections declined 15%, while other targeted services declined nearly 20%. Services with delayed WISeR implementation served as a negative control, showing no significant change.” * * *
    • “The key question we can’t yet answer is whether the care not received was wasteful or necessary,” Hannah Neprash, PhD, lead author and University of Minnesota School of Public Health associate professor, said in an Oct. 26 news release.” 
  • GSA announced today,
    • “The Federal Acquisition Regulatory Council has released an update to the FAR Companion as part of the ongoing Revolutionary FAR Overhaul (RFO) Initiative, in accordance with Executive Order 14275 and OMB Memorandum M-25-26.
    • “FAR Companion, Version 3.0 was posted on October 30, 2026. FAR Companion, Version 3.0, includes:
      • “Embeds a feedback form directly in the FAR Companion;
      • “Captures best practices for industry engagement across the acquisition lifecycle;
      • “Adds guidance on non-federal past performance, contractor self-assessments, performance monitoring, and reprocurement to the next highest-rated offeror;
      • “Includes annotations that cover all RFO smart accelerators and Periodic Table of Acquisition Innovations techniques;
      • “Moves common acquisition practices into FC 7.102(a) for consistency across buying pathways;
      • “Clarifies outcome-based contracting as a subset of performance-based acquisition;
      • “Clarifies use of modular contracting; updates definitions, procedures, and guidance on commercial contracting, including commercial construction contracting;
      • “Expands guidance on construction and architect-engineer contracting; adds guidance on contract closeout and termination settlements;
      • “Provides context on non-FAR based authorities such as OT, SCO, and the SBIR/STTR program; and
      • “Adds relevant program management concepts for improved cross-functional usability; and includes updates to FC parts 5, 6, 7, 11, 15, 24, 32, and 36 based on practitioner and interagency feedback.
    • “To view the FAR Companion, Version 3.0, visit: https://www.acquisition.gov/sites/default/files/page_file_uploads/far-companion.pdf.
    • “To view all available rewritten FAR Parts and agency deviations, visit: https://www.acquisition.gov/far-overhaul/far-part-deviation-guide.”

From the U.S. Office of Personnel Management front,

  • Federal News Network reports.
    • “With two months left for agencies to conduct a required annual assessment of federal employee satisfaction and engagement, the Office of Personnel Management is finalizing major changes to the structure and distribution of the now-defunct Federal Employee Viewpoint Survey.
    • “Following final regulations published Thursday, OPM has formally moved forward with ending the distribution of FEVS, which it has overseen for more than 20 years. Instead, it’s telling agencies to issue their own versions of the workforce survey by the end of the calendar year.
    • “OPM said the changes are meant to make the engagement survey more useful and actionable. But critics of OPM’s changes contend that removing the governmentwide survey will undermine years of comparable workforce data and reduce transparency into the results.
    • “In its final rule, OPM pointed to three large agencies that have already discontinued using FEVS — NASA, the Department of Veterans Affairs and the Securities and Exchange Commission — as evidence that the engagement survey needed to be individualized.

From the U.S. Food and Drug Administration front,

  • Contemporary OB/GYN reports,
    • “The FDA has approved updated labeling for 3 additional menopausal hormone therapy (MHT) products, removing statements on cardiovascular disease, breast cancer, and probable dementia from their boxed warnings, according to an October 30, 2026, release from the US Department of Health and Human Services (HHS). All 3 products are estradiol transdermal patches from 2 applicants, though the FDA did not provide details on brand or manufacturer names.1
    • “The approvals follow the agency’s February 2026 action on labels for 6 MHT products. The FDA began engaging companies on the changes in November 2025, and 29 drug companies have submitted proposed labeling changes to date, the agency stated. HHS added that the latest actions support the executive order “Advancing Women’s Health to Improve Outcomes in All Phases of Life,” signed October 19, 2026.”
  • Per an FDA news release,
    • “The U.S. Food and Drug Administration today granted accelerated approval for Voceryq (doruxapapogene ralaplasmid and lalikinogene sifuplasmid-gxfd) for treatment of adults with recurrent respiratory papillomatosis (RRP), a rare disease caused by human papillomavirus (HPV) that leads to the formation of small, wart-like growths in the patient’s airways. This approval, the first for a plasmid DNA-based immunotherapy in the U.S., offers patients a new therapeutic option that targets the root cause of RRP and has been shown to reduce the burden of surgical intervention, representing an important step forward for a patient population with limited treatment options.” * * *
    • “The FDA granted Voceryq Breakthrough and Orphan Drug designations. The FDA granted accelerated approval of Voceryq to Inovio Pharmaceuticals, Inc.”
  • Cardiovascular Business relates,
    • “Sotagliflozin has been linked to key cardiovascular benefits for a wide range of patients. In fact, the team behind new research published in The Journal of Clinical Investigation believe it may be a “wonder drug” of sorts with untapped potential.[1]
    • “Sotagliflozin is a dual SGLT1 and SGLT2 inhibitor sold by Lexicon Pharmaceuticals under the brand name Inpefa. It first secured U.S. Food and Drug Administration (FDA) approval in 2023 to reduce the risk of heart failure among high-risk patients, including those with type 2 diabetes.
    • “Multiple studies have linked this drug to a reduced risk of adverse cardiovascular events, including one from 2025 that found it may protect patients from heart attack and stroke. To learn more, a group of researchers with the University of Michigan performed a series of experiments focused on learning how, exactly, sotagliflozin achieves these results.
    • “A drug that can both decrease the risk for diabetes along with the risk for having a heart attack or stroke could be a turning point in our ability to safely treat this growing population in the US and abroad,” co-senior author Michael A. Holinstat, PhD, MS, a professor of pharmacology, internal medicine and surgery at University of Michigan Medical School, said in a statement.
    • “Sotagliflozin appears to be in the sweet spot because compounds that have higher levels of SGLT1-selective inhibitors can cause gastrointestinal issues,” added co-author Bertram Pitt, MD, professor emeritus of internal medicine at University of Michigan Medical School. “We think this could be a wonder drug with potential to offer benefit for many conditions.”

No Surprises Act News

  • The American Hospital Association News reports,
    • “The Departments of Labor, Health and Human Services, the Treasury, and the Office of Personnel Management released guidance Oct. 29 for independent dispute resolution entities on batched and bundled items or services, reflecting changes finalized in the No Surprises Act IDR operations rule in May on how qualified IDR items and services can be batched. The guidance explains how the finalized batching requirements will be used and specifies the permissible current procedural terminology code ranges for anesthesiology, radiology, pathology and laboratory items and services considered to relate to the treatment of a similar condition. It also explains the definition of a bundled payment arrangement and provides examples to guide how disputing parties and certified IDR entities should apply the finalized batching and bundled payment provisions.” =
  • STAT News adds,
    • “It was a simple urinary tract infection. A textbook urgent care visit. 
    • “Kristin Gills knew the drill. She peed in the cup, and the doctor confirmed her suspicion. He prescribed antibiotics. Before she left Methodist Legacy ER & Urgent Care in Allen, Texas, Gills paid her $211 bill and figured that was the end of it.
    • “Then the real bill came, for another $1,756.
    • “I was like, ‘What in the world?’ I immediately tried calling them,” she said. When she couldn’t reach anyone, she sent three MyChart messages. Nothing.” * * *
    • “The facility Gills visited doubles as both an emergency room and an urgent care clinic. Intuitive Health, the private equity-backed company that runs the hybrid facility and nearly 50 others like it, says they’re great for patients because they prevent them from having to guess whether their conditions are emergencies. But patients told STAT they visited for what they thought were obvious urgent care issues — coughs, congestion, flu symptoms — and were shocked when they got bills for ER care instead, often totaling thousands of dollars. 
  • FEHBlog observation — This patient must have been cash only because if she had used health insurance the provider would have collected the cost sharing and then proceeded to the No Surprises Act dispute resolution process. It is ironic

From the judicial front,

  • The American Hospital Association News reports,
    • The U.S. District Court for the District of Massachusetts yesterday ruled in favor of 25 states and the District of Columbia to vacate the Centers for Medicare & Medicaid Services’ definition of “medically frail” from its Medicaid community engagement requirements.
    • “The definition would have required medically frail individuals to demonstrate they had a qualifying condition that significantly impairs their ability to comply with the community engagement requirements. The requirements call for certain adults to complete 80 hours per month of “qualifying activities,” such as employment, education, community service or participation in a work program, or meet equivalent income thresholds. In the decision, District Judge Richard Stearns said CMS went beyond its scope in authorizing the provision and narrowing the definition of “medically frail.”  
    • “Because enforcement of an unlawful definition of ‘medically frail’ may lead to the disenrollment of otherwise eligible vulnerable individuals relying on Medicaid coverage for continuity of care, the States (and public) face potential for great hardship in the absence of an injunction,” Stearns wrote. The remaining provisions under the community engagement requirements will be enforced beginning Jan. 1, 2027.” 

From the public health and medical / Rx research front,

  • The Centers for Disease Control and Prevention announced today,
    • “COVID-19, flu, and RSV are key indicators of overall respiratory illness activity
    • “The amount of acute respiratory illness causing people to seek health care is very low.
    • “RSV activity is low in most areas of the country.
    • “COVID-19 activity is declining nationally.
    • “Seasonal flu activity remains low nationally but is increasing in many parts of the country.
    • “Rhinovirus/Enterovirus (RV/EV) is elevated but decreasing nationally, and human parainfluenza viruses (PIV) are increasing.”
  • The University of Minnesota’s CIDAR adds,
    • It used to be that 200-plus US measles cases would reflect the total for the year or even for two years, but the Centers for Disease Control and Prevention (CDC) today confirmed 264 new cases in just the past seven days, raising the country’s total to 4,852 cases, by far the highest yearly total in 35 years.
    • “The new data mark the 12th straight week of triple-digit increases nationwide. Rising cases in multiple states have contributed to the escalation, but Pennsylvania continues to be the nation’s hot spot, logging 88 new cases this week, followed closely by Wisconsin.
    • “The United States will very likely lose its measles elimination status—which it gained in 2000—in the coming month. Even an analysis published in May, when the country had only around 1,800 cases, said as much.
    • “The CDC has logged 43 measles outbreaks across the country so far this year, compared with 48 for all of last year, which saw 2,289 cases by year’s end. An outbreak involves three or more people. All but 18 infections this year have been locally acquired, with the rest involving international travelers.
    • “Of the confirmed cases, 17% have been in children under the age of 5 years, and 41% have been in kids and teens ages 5 to 19. Eleven percent of cases overall have required hospitalization, a number that has been slowly climbing and now matches the 2025 rate. Hospitalization rates are highest in preschoolers (16%), with a 14% rate in adults 20 and older.”
  • and
    • “Measles is highly contagious, and quickly identifying who is infected is critical from a public health perspective: Delays lead to additional cases since patients, caregivers, and clinicians won’t know to take precautions to prevent viral spread. 
    • “Yet an estimated 6.9% of patients with measles who sought medical care were misdiagnosed at least once in the two weeks before an accurate diagnosis, according to a study published this week in Infection Control and Hospital Epidemiology. 
    • “While the findings suggest these errors are not common, the University of Iowa authors argue the study shows the need to consider early measles testing among patients with respiratory symptoms.
    • “The risk of transmission is increased when patients spend time in busy waiting rooms or clinics, because virus aerosols remain airborne for hours,” said the authors, led by biostatistician Alan T. Arakkal, PhD.” 
  • The American Medical Association lets us know what doctors want patients to know about sciatica.
    • “A sharp, shooting pain that starts in your lower back can be a sign of sciatica. Learn what causes sciatica, how long it lasts and when to see a doctor.”
  • Contemporary OB/GYN relates,
    • “The American College of Obstetricians and Gynecologists (ACOG) has issued a practice advisory recommending that ob-gyns counsel patients on the lack of sufficient safety data for glucagon-like peptide-1 receptor agonists (GLP-1RAs) in pregnancy, advise considering discontinuation 1 to 2 months before conception, and advise against use during pregnancy. For lactation, the guidance supports shared decision-making on a postpartum care plan that may include GLP-1RAs, with close surveillance of neonatal weight gain, and recommends against use in individuals breastfeeding or chestfeeding preterm infants and neonates.
    • “Prescribing of GLP-1RAs in the perinatal period increased more than 30- between 2019 and 2024, according to a large retrospective cohort study cited in the advisory. The long half-lives of semaglutide, tirzepatide, and dulaglutide make avoiding the medication during pregnancy more challenging, and because GLP-1RA-associated weight loss may improve fertility, patients who can become pregnant should be counseled on effective contraception.
    • “Currently, as many as 1 in 300 women are exposed to GLP-1s prior to pregnancy,” said D. Yvette LaCoursiere, MD, FACOG, lead author of the guidance, in an ACOG news release. “This is a fast-moving area of research, so for now we need to proceed with caution and reassess as more data becomes available.”
  • Beckers Behavioral Health tells us,
    • “The share of U.S. children and adolescents ages 5-17 who have ever received an attention-deficit/hyperactivity disorder diagnosis rose from 9.9% in 2019 to 13.8% in 2025, according to CDC data published Oct. 29.
    • “The CDC’s National Center for Health Statistics released the findings as a QuickStats feature in the Morbidity and Mortality Weekly Report.
    • “Nazik Elgaddal of the National Center for Health Statistics wrote the analysis, which draws on National Health Interview Survey data from 2019 through 2025. The estimates measure whether a child had ever received an ADHD diagnosis, not whether the condition is currently active or under treatment. The CDC also published a supplementary table with year-by-year figures by sex.”
  • and 
    • “Calls to the Washington Poison Center involving kratom and one of its active compounds, 7-hydroxymitragynine, or 7-OH, rose 433% over the past three years, with the sharpest increase in 2026, CBS affiliate KIRO 7 News reported Oct. 29.
    • “The center logged 176 kratom- and 7-OH-related calls through the end of September, ranging from overdoses to withdrawal cases. In September, the center received calls nearly every day.
    • Jimmy Leonard, PharmD, chief clinical officer at the Washington Poison Center, “told KIRO that 7-OH is “essentially an unregulated opioid” that can slow or stop breathing and may cause death. Dr. Leonard said he is particularly concerned about accidental exposures in children because some 7-OH products come as small, candy-like tablets in flavors such as Sour Strawberry and Blue Razz. A few children have required naloxone, he said.
    • “Washington has no statewide kratom regulations and no statewide minimum purchase age. Cities including Bellingham, Mount Vernon and Spokane have enacted local bans. Nationally, 33 states have adopted some form of kratom regulation and nine have banned it, according to the American Kratom Association.
  • Health Day informs us,
    • “Nicotine pouches are catching on in the U.S., as increasing numbers of Americans try and become regular users of the non-tobacco products, a new study says.
    • “More than 1 in 10 Americans (10.2%) have tried a nicotine pouch, researchers reported Oct. 28 in the journal Addiction.
    • “Further, among tobacco users — people who already smoke, vape or use chewing tobacco, for example — about 1 in every 10 were using nicotine pouches in 2024. That’s more than triple the 3% of tobacco users who were using them in 2021, the study says.
    • “That’s a swift increase, given that the pouches only hit U.S. markets a decade ago, in 2016, researchers said.
    • “Our data show that what was once considered a niche nicotine product is becoming a mainstream product among U.S. adult tobacco users,” said lead researcher Ashley Merianos, a professor of human promotion and education at the University of Cincinnati.”
  • Medscape points out,
    • “Waiting times for an initial neurology appointment for memory concerns average more than 4 months, potentially delaying diagnosis and treatment.
    • “In a nationwide telephone survey of 150 neurology clinics nationwide, researchers found that wait times averaged 21.1 weeks at specialized centers and 15.6 weeks at community neurology clinics. Forty-one clinics reported wait times of at least 6 months, and five were not accepting new patients.
    • “A wait of more than 4 months for a first visit is one step in an already long path to diagnosis, and it pushes back the testing, diagnosis, and treatment planning that start at that visit,” study investigators Jennifer C. Knox, MS, and Jeremy J. Pruzin, MD, of the Banner Alzheimer’s Institute in Phoenix, told Medscape Medical News in an email.”

From the U.S. healthcare business front,

  • Beckers Payer Issues reports,
    • “Insurers are rolling out commercial offerings for 2027, and many are navigating a landscape of greater affordability pressures on employers and, ultimately, their employees. 
    • “Professional services firm Aon projected that average employer healthcare costs could surpass $19,000 per employee in 2027, a 9.5% increase. Between 2025 and 2026, employee premiums increased by 6.4%.
    • “Some commercial payers are introducing products designed to give employers another option beyond HMOs and PPOs: exclusive provider organizations, or EPOs.
    • “An EPO offers a strong middle ground between a PPO and an HMO,” Chris Fanning, executive vice president and chief commercial officer at Independence Blue Cross, told Becker’s in a statement. “Members have access to a broad network of providers and can see specialists without referrals, while employers can often realize cost savings because coverage is generally limited to in-network care. We already offer a range of PPO and HMO options, and EPOs give employers another choice to meet the needs of their workforce.”
  • Beckers Hospital Review relates,
    • “Sacramento, Calif.-based Sutter Health has scrapped plans to build a hospital on its Emeryville, Calif., property. The system cited regulatory uncertainty and the risk of litigation as the main reasons.
    • “The most significant barrier was the lack of a clear and predictable regulatory path,” Sutter said in an Oct. 30 statement. “Over two years, we pursued relief under the California Environmental Quality Act, or CEQA. Those efforts did not secure the certainty needed to advance the hospital project, leaving it vulnerable to litigation that could delay construction and new hospital services for years.”
  • and
    • “Livonia, Mich.-based Trinity Health is working to make primary care, rather than the emergency department, the main way patients enter its system, executives said during the system’s fiscal 2026 investor call Oct. 26. 
    • “Health systems have historically treated the emergency department as the primary entry point to care, said Ray Anderson, PhD, executive vice president and chief strategy officer. 
    • “We’re looking to flip that pyramid upside down and really have primary care be the most important entry point,” he said.
    • “Dr. Anderson said routing patients from primary care to specialists and then to community-based services brings in more elective patients who are “choosing us,” creates a more balanced payer mix and makes the system less dependent on seasonal swings in emergency volumes.”
  • Fierce Pharma tells us,
    • “Facing looming patent cliffs, AstraZeneca has launched a restructuring initiative aimed at generating $1.5 billion in annual savings by 2029.
    • “Savings from the “Reshaping for Sustainable Growth” program will be reinvested “principally in the pipeline,” AZ said Friday in its third-quarter earnings announcement.
    • “The company expects the three-year initiative to incur up to $2 billion in one-time restructuring costs.”
  • and
    • “Prescriptions for Eli Lilly’s Foundayo and Novo’s Wegovy pill ticked back up last week, although neither matched previous records.
    • “Foundayo enjoyed 63,110 total scripts in its 29th week of launch, still shy of its 64,268-script record set in week 25, according to IQVIA data cited by Citi. 
    • “The Wegovy pill’s roughly 183K scripts also came slightly below the 184K height it had briefly reached five weeks ago. During the week, the oral version of Novo’s obesity med constituted 36% of all Wegovy scripts.
    • “Approximately 4 in 10 patients starting an oral obesity medicine choose Foundayo, and the number of new Foundayo patients in the third quarter doubled from the previous quarter, Lilly’s CFO said on the company’s Q3 earnings call Thursday.
    • “In Q3, Foundayo sales reached $184 million, including $124 million from the U.S., missing consensus estimates by $50 million, according to a Jefferies note. Still, Lilly’s stock price jumped during Thursday’s earnings report, “which to us suggests investors are increasingly focusing on the breadth and depth of [Lilly]’s obesity franchise rather than near-term Foundayo [numbers],” Jefferies’ analysts said. Sales from both of Lilly’s tirzepatide products, Mounjaro and Zepbound, came in above Wall Street’s projections during Q3.”
  • MedTech Dive shares “three highlights from EY’s report on 2026 medtech trends.”
    • “M&A rose, but company valuations declined in the first half of 2026 compared with the year-ago period, according to EY’s Pulse of the Industry report.”
  • MedCity News informs us,
    • “Direct-to-consumer diagnostics are becoming increasingly popular. But what’s driving the rise of consumer diagnostics? This was the topic of conversation during a Thursday panel at the MedCity INVEST Digital Health conference in Dallas.
    • “One panelist — Leo Grady, CEO of gut microbiome testing company Jona — noted that people have been interested in analyzing themselves for a long time. Genetic testing company 23andMe started about 20 years ago, and Everlywell made home testing mainstream, he said. But Covid-19 really drove the rise in at-home diagnostics.
    • “I think it was partly driven by the fact that everybody was home, partly because health became more on your mind, and also partly because of some of the regulatory relaxations that happened that made it more possible to ship tests across state borders, to have more clinical-grade tests prescribed without having them to come from your doctor,” he said. “That really standardized and made more mainstream the ability for people to access tests and to then be able to get those results and even talk to medical professionals online.” * * *
    • “Pita Navarro, chief scientific officer of Evvy, noted that the women’s health space has seen slower growth than other areas. Evvy is a vaginal microbiome testing company.
    • “I think for me as a scientist and going through Covid specifically, I was watching the vaccine develop within months, the causing agent identified within months as well. And yet, I was going to the OB/GYN, and they were counting shapes under a microscope. And so we thought, ‘We have this new technology; why isn’t it being applied in women’s health as it’s being applied across the healthcare system?’”
    • “She added that this was a major driver for the creation of Evvy. Vaginal health is a leading reason that women seek healthcare advice, and if a female goes to an OB/GYN, they’re more likely to get misdiagnosed than correctly diagnosed, Navarro said. The vaginal microbiome is also predictive of numerous outcomes across the lifespan, including cervical cancer, sexually transmitted infection and infertility.”