FEHBlog

Cybersecurity Saturday

David Ermer–Cybersecurity, Generative AI, Uncategorized–

From the cybersecurity policy front,

  • Federal News Network reports,
    • “The Cybersecurity and Infrastructure Security Agency typically marks October’s awareness month with a range of public engagements and outreach campaigns. But under the ongoing government shutdown, CISA has furloughed nearly two-thirds of its staff and curtailed most public communication.
    • “CISA is not actively managing its website under the shutdown. But the agency did establish a landing webpage for cybersecurity awareness month prior to the shutdown, detailing the campaign’s theme and linking to a toolkit.
    • “CISA Director of Public Affairs Marci McCarthy said, “CISA remains fully committed to safeguarding the nation’s critical infrastructure,” as part of a statement.” * * *
    • “Chris Cummiskey, a former state chief information officer and former chief management officer at DHS, said CISA typically retains enough employees to staff the agency’s watch floor, maintain technology that monitors federal networks for cyber threats, and collaborate with cyber defenders at other federal organizations, like U.S. Cyber Command.
    • “But if a major cyber incident were to occur, CISA may not have enough staff immediately on hand to manage the event.
    • “A key concern is, do you need to start recalling people?” Cummiskey said. “You probably wouldn’t have the onsite capacity to cover a major exploit without the additional help.”
    • “In addition to the shutdown, key privacy and liability protections under the Cybersecurity Information Sharing Act of 2015 expired on Sept. 30. Those protections had been pivotal to encouraging the private companies to share cyber threat data with each other and with government agencies, including CISA.
    • “Cyber experts say companies may be more hesitant to share information about new cyber threats and vulnerabilities without the statute’s protections.”
  • Cybersecurity Dive adds,
    • “Michael Daniel, president of the Cyber Threat Alliance, an information-sharing group, predicted that some companies will “suspend some sharing activities with the government,” but he added that a lot will depend on “each company’s risk tolerance.”
    • “I think some collaboration will continue,” he said, “but likely at reduced levels and requiring more human oversight.”
    • “Ari Schwartz, managing director of cybersecurity services at the law firm Venable, said, “There will just be many more lawyers involved, and it will all go slower, particularly new sharing agreements.” Venable has advised clients on what to consider when establishing such agreements.
    • “As for companies sharing information with each other, that likely will continue for now because of a lack of near-term concern about antitrust investigations, Daniel said. But companies’ attitudes could change if the program isn’t reauthorized.”
  • The National Institute of Standards announced on September 29, 2025,
    • “As part of ongoing efforts to strengthen the protections for securing controlled unclassified information (CUI) in nonfederal systems [which includes FEHB and PSHB claims data], NIST has released the following drafts for comment:
    • “SP 800-172r3 (Revision 3) fpd (final public draft), Enhanced Security Requirements for Protecting Controlled Unclassified Information, provides new enhanced security requirements that support cyber resiliency objectives, focus on protecting CUI, and are consistent with the source controls in SP 800-53r5.
    • “SP 800-172Ar3 ipd (initial public draft), Assessing Enhanced Security Requirements for Controlled Unclassified Information, provides a set of assessment procedures for the enhanced security requirements. These procedures are based on the source assessment procedures in SP 800-53Ar5.” * * *
    • “A public comment period will be open from September 29 through November 14, 2025. Reviewers should submit comments on all or parts of the drafts to 800-171comments@list.nist.gov.”
  • Cybersecurity Dive tells us,
    • “Barely any U.S. defense contractors say they’re fully prepared to comply with the Department of Defense’s new cybersecurity assessment program.
    • “Only 1% of companies say they’re completely ready to be assessed through the Cybersecurity Maturity Model Certification (CMMC) program, which takes effect on Nov. 10, according to a report that the managed security provider CyberSheath published on Wednesday.
    • “The percentage of respondents expressing confidence in their readiness has dropped over the past two years.”

From the cybersecurity vulnerabilities and breaches front,

  • NextGov/FCW reports on September 29, 2025,
    • “A “widespread cybersecurity incident” at the Federal Emergency Management Agency allowed hackers to make off with employee data from both the disaster management office and U.S. Customs and Border Protection, according to a screenshot of an incident overview presentation obtained by Nextgov/FCW.
    • “The hack is also suspected to have later triggered the dismissal of two dozen Federal Emergency Management Agency technology employees announced late last month, according to internal meeting notes and a person familiar with the matter.
    • “The initial compromise began June 22, when hackers accessed Citrix virtual desktop infrastructure inside FEMA using compromised login credentials. Data was exfiltrated from Region 6 servers, the image says. That FEMA region services Arkansas, Louisiana, New Mexico, Oklahoma and Texas, as well as nearly 70 tribal nations.” * * *
    • “DHS security operations staff were notified of the breach on July 7, the screenshot adds. On July 14, the unnamed threat actor used an account with high-level access and attempted to install virtual networking software that could allow them to extract information. Initial remediation steps were taken on July 16. 
    • “On Sept. 5, additional remediation actions were taken, including changing FEMA Zscaler policies and blocking certain websites, the screenshot says. Those actions were previously reported by Nextgov/FCW.”
  • Following up on last Saturday’s post about the Cisco KVEs, Cybersecurity Dive lets us know,
    • “Nearly 50,000 Cisco firewall devices with recently disclosed vulnerabilities are connected to the internet, according to new data.
    • “Statistics from the Shadowserver Foundation illustrate the extent of the world’s exposure to the three flaws in Cisco’s Adaptive Security Appliance devices and Firepower Threat Defense devices, which earned a rare emergency patching directive from the Cybersecurity and Infrastructure Security Agency (CISA) after the Sept. 25 disclosure.
    • “The United States has by far the most devices that have not been patched to block exploitation of the flaws, with Shadowserver tallying more than 19,000 vulnerable U.S. devices. The U.K. ranks second, with more than 2,700 vulnerable devices, followed by Japan, Germany and Russia. Other European countries have fewer than 1,000 vulnerable devices each.
    • “Shadowserver’s records will reveal how quickly different countries are reducing their exposure as the organization continues collecting data in the coming days and weeks.
    • “A sophisticated threat actor has been using two of the new Cisco flaws, CVE-2025-20362 and CVE-2025-20333, in a stealthy cyberattack campaign that has breached multiple federal agencies and other organizations worldwide. Both vulnerabilities involve improper validation of HTTPS requests, which could allow Cisco firewalls to accept malicious requests that bypass authentication. CVE-2025-20362 could allow hackers to access restricted VPN-related URLs, while CVE-2025-20333 could let intruders run arbitrary code as root.”
  • Cyberscoop points out,
    • “Red Hat on Thursday [October, 2, 2025] confirmed an attacker gained access to and stole data from a GitLab instance used by its consulting team, exposing some customer data. The open-source software company, a subsidiary of IBM, said the breach is contained and an investigation into the attack is underway. 
    • “Upon detection, we promptly launched a thorough investigation, removed the unauthorized party’s access, isolated the instance, and contacted the appropriate authorities,” Red Hat said in a security update. “Our investigation, which is ongoing, found that an unauthorized third party had accessed and copied some data from this instance.”
    • “Red Hat said the compromised GitLab instance contained work related to consulting engagements with some customers, including project specifications, example code snippets and internal communications about the consulting services. 
    • “This GitLab instance typically does not house sensitive personal data,” Red Hat said. “While our analysis remains ongoing, we have not identified sensitive personal data within the impacted data at this time.”
  • Dark Reading informs us,
    • “The month-long outage for luxury car maker Jaguar Land Rover appears to be at an end, with the company working through a “controlled, phased restart” of its manufacturing operations this week, following a massive cyberattack that forced the company to shut down its systems.
    • “JLR said on Sept. 2 that it had “proactively” shut down operations following a cyber incident, initially stating that customer data did not seem to be stolen, but revising that statement a week later. JLR, a subsidiary of Tata Motors, likely suffered $50 million to $70 million in lost revenue per week, with the total cost of the incident estimated at a staggering $1.7 billion to $2.4 billion.
    • “The attack, and its vast impact, should be a warning for companies, says Chris Gibson, executive director of the Forum of Incident Response and Security Teams (FIRST).
    • “The outage “highlights that even large corporations with substantial resources can be completely disrupted and that critical industries may be more vulnerable than previously thought,” he says. “This was far beyond data theft; it was a complete operational outage.”
  • Security Week adds,
    • “Japanese brewing giant Asahi Group Holdings on Monday [September 29, 2025] announced that its operations in the country have been disrupted by a cyberattack.
    • “The incident, the company said, resulted in system failures that affected orders and shipments at all its subsidiaries in the country, as well as call center operations, customer service desks included.
    • “Reuters reported that production at some of Asahi’s 30 domestic factories has been suspended due to the cyberattack.
    • “At this time, there has been no confirmed leakage of personal information or customer data to external parties,” the company said in a Monday notice.
    • “Asahi said it is investigating the attack and working on restoring the affected systems but could not provide an estimated timeline for recovery.
    • “The system failure is limited to our operations within Japan,” it said.
    • “The company has not disclosed the nature of the cyberattack it fell victim to, but the system-wide outage could indicate that file-encrypting ransomware might have been used.”

From the ransomware front,

  • Cybersecurity Dive reports,
    • “Corporate executives are being targeted in an email-based extortion campaign by a threat actor claiming affiliation with the notorious Clop ransomware gang, according to security researchers from Google Threat Intelligence Group and Kroll. 
    • “The hacker claims to have data stolen from breached Oracle E-Business Suite applications and has been demanding payment from various corporate executives, according to a LinkedIn post from Austin Larsen, principal threat analyst at GTIG.
    • “While researchers have not been able to substantiate the claims of a data breach, they have confirmed important links to a financially motivated threat group tracked under the name FIN11, which has prior associations with Clop.” 
  • Cyberscoop provides us with “the email Clop attackers sent to Oracle customers. The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment.”
  • Dark Reading adds,
    • After announcing its farewell last month, the cyber extortion group known as Scattered Lapsus$ Hunters returned on Friday with a website featuring stolen Salesforce data and a list of dozens of alleged victims.
    • Scattered Lapsus$ Hunters is an apparent combination of the Scattered Spider, Lapsus$, and ShinyHunters cybercriminal groups, which first emerged over the summer in a public Telegram channel. However, just a few weeks later, the collective published a goodbye letter on Telegram and the Dark Web marketplace BreachForums, saying the three groups, as well as other threat actors, had “decided to go dark.”
    • “But Scattered Lapsus$ Hunters burst back into the limelight this week with a Dark Web leak site devoted to the recent spate of Salesforce data thefts; one of the two distinct campaigns targeting Salesforce environments recently has been attributed to a threat group tracked by Google as UNC6040, which has claimed to be ShinyHunters in its extortion attempts.
    • “According to Google, UNC6040 actors used vishing calls to convince IT support personnel at targeted organizations to grant them access to or credentials for the organizations’ Salesforce environments. Mandiant researchers this week said the threat actors have impersonated third-party vendors in the vishing calls and had also targeted users in victim organizations with elevated access to other SaaS applications.’
  • The American Hospital Association points out,
    • “A Health-ISAC (Information Sharing and Analysis Center) bulletin released Oct. 1 warns of a recently released LockBit 5.0 ransomware variant that poses a threat to health care and other sectors. LockBit 5.0 is the latest version of the ransomware-as-a-service group that has previously attacked hospitals and other organizations in the U.S. and abroad. The notice said the new variant directly targets virtual environments and has improved and enhanced technical capabilities, evasion techniques and affiliate engagement. The variant is known to target Windows, Linux and VMware ESXi software. Health-ISAC said the new variant’s technical capabilities make it faster, more flexible for affiliates and harder for security to detect and analyze. LockBit was disrupted by authorities last year before resurfacing last month.
    • “This is a very technical bulletin, but it’s important to note that it addresses a new version of a well-known ransomware,” said Scott Gee, AHA deputy national advisor for cybersecurity and risk. “Hospitals should ensure that they have defensive measures in place and that those measures are tuned and working properly.”
  • HackRead reports on September 29,
    • “The Medusa ransomware group is claiming responsibility for a ransomware attack on Comcast Corporation, a global media and technology company best known for its broadband, television, and film businesses.
    • “According to the group’s dark web leak site, they exfiltrated 834.4 gigabytes of data and are demanding $1.2 million for interested buyers to download it. The same sum has been set as ransom for Comcast if the company wants the data deleted rather than leaked or sold.
    • “To back its claims, Medusa has posted around 20 screenshots allegedly showing internal Comcast files. The group also shared a massive file listing of 167,121 entries, suggesting access to actuarial reports, product management data, insurance modelling scripts, and claim analytics.” * * *
    • “Medusa ransomware is known for publishing file listings and partial screenshots as proof of compromise while holding back the bulk of the data to increase ransom pressure. In this case, the nature of the files points toward actuarial and financial datasets, some of which appear to involve insurance calculations, customer data processing, and claim management systems.”
  • HelpNetSecurity provides us background about and advice on how to avoid Akira ransomware.
  • Wired notes that “Google has launched a new AI-based protection in Drive for desktop that can shut down a [ransomware] attack before it spreads—but its benefits have their limits.”

From the cybersecurity defenses front,

  • Per ISACA,
    • “Cybersecurity professionals from around the world recently weighed in on some of the key findings from ISACA’s latest State of Cybersecurity survey report. Aparna Achanta, security leader, IBM (US); Simon Backwell, head of information security, Benefex (UK); Donavan Cheah, senior cybersecurity consultant, Thales (Singapore); Jenai Marinkovic, vCISO/CTO, Tiro Security, and CEO & chairman of the board, GRCIE (US); Kannammal Gopalakrishnan, cybersecurity and GRC professional (India), and Carlos Portuguez, Sr. Director BISO, Concentrix (Costa Rica)—all of whom are also members of ISACA’s Emerging Trends Working Group—reflect on how these stats show up for them in the profession.”
  • and
    • “Phishing has escalated beyond masquerading techniques. Traditional attacks depended on typos, being in a rush and not so well-disguised social engineering. But hackers today use generative AI, such as WormGPT or FraudGPT, and even deepfakes, to create perfect messages with contextual background that can effortlessly be mixed with everyday corporate messages. Cofense has noted that it receives an AI-enhanced malicious email every 42 seconds, with that pace expected to accelerate in the months to come. This hypergrowth is an indication that phishing is not an outlying issue anymore but a mainstream cyber-crime, now with AI-driven precision. 
    • “The next pivot is neuro-phishing, which can tie in the details of biometric and psycho-physiological indicators, like the EEG, micro-hesitation spikes, blink frequency, and the focus of the eyes, to see the response of the user in real-time and work a different approach. Previous and extensive studies have already established the reliability of finding recognition and stress using the EEG, when users are stimulated with phishing. This is not passive baiting anymore, but a dynamic, cognitive feedback loop, which transforms human users into interactive targets.”
    • The article offers advice on creating resilience against neuro-phishing.
  • Dark Reading adds,
    • “Email security has long dominated the enterprise security conversation — and rightfully so. It remains a key vector for phishing, credential theft, and social engineering. But in 2025, the threat landscape has shifted. Quietly yet decisively, attackers increasingly are bypassing the inbox and expanding their reach across multiple channels. 
    • “Recent data from TechMagic shows that 41% of phishing incidents now employ multichannel tactics, including SMS (smishing), voice calls (vishing), and QR codes (quishing). The trend is clear: While email still matters, adversaries are shifting to mobile-first platforms like text, iMessage, WhatsApp, and social direct messages. These attacks are harder to spot, more difficult to control, and more likely to succeed, because they target the most vulnerable point in the chain: the human behind the screen.
    • “To address this growing threat to mobile platforms, new security approaches are emerging that leverage AI-driven defenses to identify and prevent social engineering attacks in real-time. By training large language models (LLMs) to understand the content and intent behind messages, these systems can flag suspicious activity and enforce protective measures before users fall victim. Whether it’s a text message posing as IT support or impersonating a vendor, these next-generation solutions focus on stopping threats at the human layer — not just at the device.”
  • Infosecurity Magazine explains how “AI-Generated Code Used in Phishing Campaign Blocked by Microsoft.”
  • Per CISO Online,
    • “A surge in vulnerabilities and exploits leaving overloaded security teams with little recourse but to embrace risk-based approaches to patching what they can.
    • “Enterprise attack surfaces continue to expand rapidly, with more than 20,000 new vulnerabilities disclosed in the first half of 2025, straining already hard-pressed security teams.
    • “Nearly 35% (6,992) of these vulnerabilities have publicly available exploit code, according to the Global Threat Intelligence Index study by threat intel firm Flashpoint.
    • “The volume of disclosed vulnerabilities has more than tripled while the amount of exploit code has more than doubled since the end of February 2025 alone.
    • “These increases make it no longer feasible for most organizations to triage, remediate, or mitigate every vulnerability, Flashpoint argues, suggesting enterprises need to apply a risk-based patching framework. But some experts quizzed by CSO went further — arguing a complete operational overhaul of vulnerability management practices is needed.
    • The article delves into that approach.
  • Per the National Institute of Standards,
    • “The NIST National Cybersecurity Center of Excellence (NCCoE) has finalized a guide, NIST Special Publication (SP) 1334, Reducing the Cybersecurity Risks of Portable Storage Media in Operational Technology (OT) Environments, to help organizations protect their industrial control systems from cybersecurity threats when using removable media devices.
    • “Portable storage media devices, like USB flash drives, are commonly used to transfer data between computers. However, using them in OT environments and industrial control systems, such as those used in power plants or manufacturing facilities, can pose a cybersecurity risk. If a USB device is infected with malware, it can spread to the industrial control system and cause problems, such as disrupting operations or compromising safety.
    • “This NCCoE resource suggests implementing physical and technical controls to limit access to these devices and ensure they are used securely.”
  • Here is a link to Dark Readings’ CISO Corner.

Friday report

David Ermer–CDC, Congress, FDA, Medical / Rx research, NCQA, Obesity, SCOTUS, U.S. Healthcare–

From Washington, DC,

  • The Wall Street Journal reports,
    • “Senate Democrats again blocked Republicans’ seven-week stopgap spending bill, effectively guaranteeing that the government shutdown will stretch into next week, while the Trump administration froze funding for a Chicago transit project in its latest swipe at blue cities and states.
    • “The GOP measure failed with 54 in favor, and 44 opposed. Republicans control the chamber 53-47 but needed 60 votes to advance the measure under Senate rules.
    • “Earlier Friday, the Trump administration said it is freezing $2.1 billion in federal funds allocated for Chicago in its latest budgetary maneuver targeting Democratic priorities and projects during the shutdown.” 
  • Our OPM Director remains on the job. Today’s Secrets of OPM blog post from Director Scott Kupor discusses OPM’s efforts to handle the retirement surge stemming from the Fork in the Road program.
  • Tammy Flanagan, writing in Govexec, offers “Some good news for federal employees: TSP shows steady growth and healthy fund performance. The Thrift Savings Plan has surpassed $1 trillion in assets, providing steady returns in 2025.”
    • “There has been a lot to worry about for federal employees and their benefits in 2025, but one thing that has been doing very well is the Thrift Savings Plan! The TSP will continue its normal daily operations during the current lapse in appropriations. Visit tsp.gov/shutdown/  for additional information and updates.”  
  • NCQA, writing in LinkedIn, discusses what the organization has learned about defining best practices in wellness and patient engagement.

From the Food and Drug Administration front,

  • Per MedPage Today,
    • “The FDA approved lurbinectedin (Zepzelca) plus either atezolizumab (Tecentriq) or atezolizumab and hyaluronidase (Tecentriq Hybreza) as first-line maintenance therapy for extensive-stage small cell lung cancer, the agency announced on Thursday.
    • “As the first approved combination in this setting, lurbinectedin-atezolizumab is indicated for patients whose disease has not progressed after atezolizumab, carboplatin, and etoposide induction therapy.”
  • and

From the judicial front,

  • SCOTUSblog provides us with news from this week’s long conference.
    • “The Supreme Court on Friday morning agreed to hear oral arguments this winter in a challenge to a Hawaii law that makes it a crime for someone who has a concealed carry permit to carry a handgun on private property without the property owner’s affirmative permission. The announcement that the justices will take up Wolford v. Lopez came as part of a short list of cases from the court’s “long conference” on Monday, at which they considered all of the petitions that became ripe for review during the justices’ summer recess.
    • “In addition to the Hawaii case, the justices added four other new cases – on topics ranging from Cuba’s liability for its confiscation of property in that country in the 1960s to the Fifth Amendment’s takings clause – to the list of cases in which it will hear oral arguments during the 2025-26 term.”
  • Beckers Payer Issues points out,
    • “A federal judge in Massachusetts denied a bid by a coalition of 21 Democratic-led states to halt new ACA rules they argue will impose significant barriers to receiving health coverage.
    • “The lawsuit was filed in July challenging a final rule that CMS introduced earlier this year to amend ACA marketplace regulations, which the states argued will lead to millions of people losing access to health insurance, raise costs for states, and reduce the availability of essential health benefits.”
  • Modern Healthcare adds,
    • “The [District of Massachusetts] decision also sets the stage for a potential larger legal battle if various courts reach differing decisions on the rule’s implementation. The regulation was partially stayed across the country in August as part of a separate case out of the U.S. District Court for the District of Maryland, meaning several provisions in the rule aren’t in effect despite the latest ruling.” * * *
    • “Katie Keith, a director of the Center for Health Policy and the Law at the Georgetown University Law Center’s O’Neill Institute for National and Global Health Law, said the Maryland injunction keeps the same provisions being challenged in Massachusetts from kicking in. That includes a minimum $5 monthly premium for those automatically re-enrolled into fully subsidized health plans and new income verification requirements.
    • “It’s like the rule never went into effect,” Keith said.
    • “But if the attorneys general appeal, their case would head to the 1st U.S. Circuit Court of Appeals, Keith said. That could potentially set up differing rulings on the same regulation, known as a circuit split, since an appeal is pending at the 4th U.S. Circuit Court of Appeals in the Maryland case.”

From the public health and medical / Rx research front,

  • Health Day informs us,
    • “Cardiovascular diseases (CVDs) were the leading cause of disability-adjusted life-years (DALYs) and deaths in 2023, according to a study published online Sept. 24 in the Journal of the American College of Cardiology.
    • “Gregory A. Roth, M.D., M.PH., from the University of Washington in Seattle, and researchers from the Global Burden of Cardiovascular Diseases and Risks 2023 Collaborators described the global, regional, and national burden of CVDs and risk factors including 18 subdiseases and 12 associated modifiable risk factors in 1990 to 2023 in 204 countries and territories.” * * *
    • “Our analysis shows wide geographic differences in CVD burden that can’t be explained by income level alone,” Roth said in a statement. “Given this kind of variation, our findings offer the opportunity to tailor local health policies to target the most relevant risks for specific populations.”
  • The Wall Street Journal explains why it is so important for infants to receive the Hepatitis B vaccine at birth.
    • “It’s the first and only shot most U.S. babies receive: the hepatitis B vaccine—a constant for decades in U.S. newborn care that doctors say is responsible for virtually eliminating childhood cases of the disease.
    • “Now that routine protection could be at risk as the Trump administration considers delaying the shot, the latest in a string of moves that undercut longstanding vaccine recommendations. The president recently quipped that perhaps the vaccine could be delayed until as late as age 12.
    • “Say what? Doctors warn that even delaying the vaccine by a few months would lead to more childhood cases and, ultimately, deaths.”
  • The University of Minnesota’s CIDRAP informs us,
    • “A new study in npj Dementia using data from the UK Biobank shows that COVID-19 survivors aged 50 and older had a higher likelihood of developing new-onset dementia (NOD) compared to uninfected controls. 
    • “A total of 54,757 participants met the inclusion criteria for the study, including 16,017 with COVID-19 and 38,740 non-COVID participants. The median observation period was 24.1 months.
    • “According to the authors, compared with matched non-COVID controls, prior COVID-19 infection was associated with a 41% increased risk of all-cause dementia (hazard ratio [HR], 1.41; 95% confidence interval [CI], 1.13 to 1.75). Men, unvaccinated participants, those with high blood pressure, and those with frequent alcohol use had the highest association with NOD.”
  • Per MedPage Today,
    • “A decline in maternal smoking in the U.S. corresponded with a decline in infants born with gastroschisis, researchers found.
    • “In an examination of more than 25 million live births, maternal smoking fell from about 9.5% in 2017 to about 4% in 2023, and concurrently, the incidence of gastroschisis, a birth defect in which organs are outside the body, dropped from about 2.5 to about 1.5 per 10,000 births, reported Zane Hellmann, MD, MHS, of Yale University in New Haven, Connecticut.
    • “Mothers who had any history of smoking within 3 months of conception were significantly more likely to have a baby with gastroschisis, at a rate of 5.0 per 10,000 births — a nearly 3-fold increase compared to mothers without a history of smoking, at a rate of 1.75 per 10,000 births, Hellmann noted in a presentation during the American Academy of Pediatrics annual meeting.
    • “I think that this highlights the effects that national public health can have on the general population [and] on future generations,” Hellmann said.”
  • Per Medscape,
    • In adults with obesity who achieve ≥ 5% weight loss on a low-calorie diet, a 1-year exercise program produces a greater increase in late-phase postprandial GLP-1 response compared with usual activity, a change that may help curb appetite and prevent weight regain.
  • and
    • The benefits of omega-3 fatty acids (FAs) are well known to medical professionals, but your patients may not be as well versed on their benefits or where to find them or how to add them to their diets. [The article shares] some tips to help explain omega-3 FAs.

From the U.S. healthcare business front,

  • Kaufman Hall considers “Rethinking payer-provider relationships after the One Big Beautiful Bill: Where will the money come from?”
  • Per MedPage Today,
    • “With all the changes to the healthcare sector — from vaccine recommendations to efforts to crack down on pharmacy benefit managers — how are health insurers responding? 
    • ‘MedPage Today Washington Editor Joyce Frieden talked with Paul Markovich, CEO of Ascendiun, a healthcare company based in California, about how his company — which includes Blue Shield of California — is meeting the challenges.“
  • The University of Minnesota’s CIDRAP alerts us,
    • “Direct mailing human papillomavirus (HPV) self-testing kits to women’s homes was cost-effective for those who regularly undergo cervical cancer screening, those overdue for screening, and those with unknown screening histories who opted in, per a Kaiser Permanente–led study published today in JAMA Network Open.
    • “The cost-effectiveness and budget-impact analysis was based on the results of a randomized clinical trial conducted from November 2020 to July 2022. The test-delivery costs of Kaiser Permanente Washington and Medicare included wellness-based or screening-only visits. The 31,355 participants, aged 30 to 64 years, were identified through electronic medical records (EHRs).
    • “Regularly screened participants were randomly assigned to usual care (UC), education (UC and mailed educational materials), direct mail (UC, education, and mailed self-sampling kit), or opt-in (UC, education, and mailed invitation to request kit). 
    • “Participants overdue for screening were assigned to UC, education, or direct mail. Those with an unknown screening history were assigned to UC, education, or opt-in.
    • “Home-based testing addresses well-documented screening barriers and can mitigate the impact of appointment backlogs and scheduling constraints on patients and health care systems,” the study authors wrote. “However, cost-effectiveness has not been evaluated across other screening histories.” * * *
    • “In this economic analysis of a randomized clinical trial, directly mailing HPV kits to individuals who were screening adherent and overdue for screening was economically dominant over other strategies,” the researchers wrote. “Program costs declined rapidly over 4 years. Results support directly mailing HPV kits to eligible individuals as an effective, efficient, and affordable outreach strategy.”

Thursday report

David Ermer–CDC, CMS, Congress, FDA, Medical / Rx research, Medicare, Mental health care, U.S. Healthcare–

From Washington, DC,

  • Roll Call reports,
    • “The partial government shutdown rolled on Thursday with both sides dug in and President Donald Trump using the funding lapse as an excuse to cut billions of dollars in “dead wood,” as he put it, throughout the executive branch.
    • “Trump said in a social media post that he’d meet with Office of Management and Budget Director Russ Vought to go over “which of the many Democrat Agencies” should be cut as the GOP seeks to make the shutdown more painful for Democratic leaders.
    • “Neither chamber had votes on Thursday as lawmakers observed the Yom Kippur holiday, with the House not returning until Tuesday. The Senate will get another opportunity to vote Friday at 1:30 p.m., but there were no signs of a bipartisan breakthrough yet.
  • Beckers Hospital Review tells us what the Centers for Medicare and Medicaid Services (“CMS”) said will and won’t continue during a lapse in appropriations. Here’s what will continue:
    • “CMS said it will have sufficient funding for Medicaid to fund the first quarter of fiscal 2026, which runs through Dec. 31. 
    • “The agency will maintain the staff necessary to make payments to eligible states for the Children’s Health Insurance Program.
    • “Federal marketplace activities will continue, including eligibility verification.
    • “Other non-discretionary activities, including Health Care Fraud and Abuse Control and the Center Medicare & Medicaid Innovation will also continue. 
  • You can look at the article to find out what’s not continuing.
  • Avalere Health points out that “Part D Choices Continue to Shrink with Fewer PDPs in 2026.”
    • “The Part D market will contract even further in 2026, with a 22% decrease in standalone PDP options and a 9% decrease in non-SNP MA-PDs.”
    • SNP MA-PDs are a type of Medicare Advantage plan for people who are eligible for both Medicare and Medicaid.
  • The American Medical Association News relates,
    • “The Centers for Medicare & Medicaid Services Sept. 30 issued a memo, through the Health Plan Management system, finalizing the Medicare Advantage Utilization Management Annual Data Submission requirements for MA organizations. CMS has limited the scope of the annual data collection to internal coverage criteria for MA services — including Medicare Part B drugs — that require prior authorization. Criteria used exclusively for other review types, such as concurrent or payment reviews, will not be collected. CMS decided not to finalize the proposed audit protocol and corresponding audit tools, citing concerns about duplicative audits, but may consider incorporating review of internal coverage criteria into future program audits.”

From the Food and Drug Administration front,

  • The Wall Street Journal reports,
    • The FDA approved a new generic version of the abortion pill mifepristone, a 200-milligram oral tablet, from Evita Solutions.
    • The FDA’s approval of the generic mifepristone comes as the Department of Health and Human Services reviews the drug’s safety.
    • Antiabortion lawmakers and groups criticized the approval, while abortion-rights groups emphasized the drug’s safety and effectiveness.
  • BioPharma Dive adds,
    • “The Food and Drug Administration, already reeling from layoffs and leadership changes under the Trump Administration, warned that the government shutdown will delay or pause important work at the agency.
    • “In a memo released before the shutdown began, the FDA said it expects to retain 86% of its staff, or 13,872 employees. The agency can continue reviewing existing applications for products, including drugs and medical devices that are funded by user fees, but will not be able to accept new submissions. 
    • “The FDA will also stop many regulatory activities that don’t address “imminent threats to the safety of human life.” For instance, food safety efforts will be reduced during the shutdown, and the agency won’t be able to support much of the work done to protect Americans from unsafe and ineffective compounded drugs, the FDA said.”
  • MedTech Dive notes,
    • “The Food and Drug Administration has released a list of the medical device guidance documents that it plans to develop or publish in its 2026 financial year.
    • “The agency said Tuesday that its top priorities include the finalization of guidance on the use of real-world evidence to support regulatory decisions and on predetermined change control plans for medical devices. 
    • “Three of the FDA’s four priority draft guidance documents are holdovers from the 2025 list. Like last year, the FDA has listed guidance on air purifying respirators and menstrual products among its top draft document priorities for 2026.”

From the public health and medical / Rx research front,

  • The University of Minnesota’s CIDRAP informs us,
    • “In its latest weekly update [Wednesday], the US Centers for Disease Control and Prevention (CDC) reported 30 more measles cases, putting the national total at 1,544, a record high since the United States eliminated the disease in 2000.
    • “Two more outbreaks were reported, bringing the total to 42. The CDC said 86% of cases are linked to outbreaks, and 92% of patients are unvaccinated or have an unknown vaccination status. The number of affected jurisdictions remained the same, at 42. 
    • “So far, 21 cases have been reported in international visitors.”
  • The American Medical Association lets us know what doctors wish patients knew about vitamins and supplements.
  • Beckers Hospital Review notes,
    • “Nursing homes in Vermont and Wyoming had the highest percentage of residents experiencing one or more falls with major injury between April 1, 2024, and March 31, 2025, according to CMS data published Sept. 24. 
    • “The District of Columbia and California had the lowest percentage for the same time period. 
    • “A recent HHS report found that nursing homes fail to report 43% of falls that resulted in major injury and hospitalization among Medicare-enrolled residents.
    • “The national percentage of nursing home residents experiencing one or more falls with major injury was 3.28%.” 
  • CNN relates,
    • “A new report ranks US states on rates of mental well-being and mental health care, and New York, Hawaii and New Jersey have outperformed the rest — in that order.
    • “The 2025 State of Mental Health in America report sizes up how all 50 states and Washington, DC, fared on 17 measures of mental health in 2022 and 2023, according to Mental Health America, which published the report on Wednesday. The nonprofit promotes mental health and illness prevention through education, research and advocacy.
    • “The 17 factors mainly concern adults and youth who experienced mental illness, suicidal thoughts or substance use disorder in the past year; adults and youth who didn’t receive necessary treatment, couldn’t afford it or were uninsured; people with insurance that didn’t cover mental or emotional problems; and the availability of mental health providers.
    • “Nevada had the worst rating, followed by Arizona and Alabama — marking the second time Nevada and Arizona have ranked the lowest, “underscoring a high need for strategic investment in mental health in these states,” MHA said in a news release.”
  • NBC News reports
    • “People who learn they have autism after age 6 — the current median age at diagnosis — are often described as having a “milder” form of autism than people diagnosed as toddlers.
    • “A new study challenges that assumption.
    • “A genetic analysis finds that people with autism spectrum disorder diagnosed in late childhood or adolescence actually have “a different form of autism,” not a less severe one, said Varun Warrier, senior author of a study published Wednesday in Nature.
    • “The “genetic profile” of people with late-diagnosis autism actually looks more like depression, attention-deficit/hyperactivity disorder and post-traumatic stress disorder than early childhood autism, said Warrier, an autism researcher at the University of Cambridge. 
    • “The study illustrates that autism is not a single condition with one root cause, but rather an umbrella term for a cluster of conditions with similar — although not identical — features, said Geraldine Dawson, founding director of the Duke Center for Autism and Brain Development, who wasn’t involved in the new report.”
  • STAT News adds,
    • “Researchers have found that patients with amyotrophic lateral sclerosis have autoimmune responses, a finding with the potential to reshape how scientists think of the devastating and complex neurologic disorder.
    • “A team led by scientists at La Jolla Institute for Immunology analyzed blood samples from 40 ALS patients and 28 people without the disease. They found that those with ALS had on average stronger immune cell responses than healthy controls to C9orf72, a protein active in neurons and associated with the rare condition. Other proteins linked to ALS, however, were not preferentially targeted by patients’ immune systems.
    • “The authors discovered that, among patients with responses against C9orf72, those with immune cells that produced signals known to tamp down inflammation were predicted to have longer survival times than ALS patients with more inflammatory responses.
    • “The findings, published in the journal Nature on Wednesday, suggest to Samuel Pfaff, an ALS researcher at the Salk Institute, that there is an autoimmune component to the disease. That’s something previous studies have suggested but have not conclusively shown. The results raise the possibility that researchers could one day treat ALS patients in new ways by targeting their immune system, and that scientists might monitor disease progression by tracking autoimmune cells.
    • “I think it’s giving us a greater appreciation of a variety of aspects of the disease,” said Pfaff, who was not involved in the study. “It is providing some new thinking about how to consider treating the disease.”
  • and
    • “Researchers have shut pregnant women out of gold-standard clinical trials in order to protect them and their babies. But the practice has had the opposite effect.
    • “Instead, women have to wade through a chaotic data landscape, and many may choose to suffer through untreated illnesses. 
    • “Besides sowing confusion, the lack of data makes it easier for people to obfuscate and misconstrue existing data. That dynamic was on full display last week as President Trump and Health and Human Services Secretary Robert F. Kennedy Jr. urged pregnant women to avoid Tylenol as they claimed, without clear evidence, that the active ingredient acetaminophen causes autism. 
    • “The existence of this data gap is well established. But it’s gained new relevance as federal officials zero in on the medical decisions of pregnant women, searching for evidence of harm to fetuses.” 
  • Per Health Day,
    • “The early warning signs of multiple sclerosis appear to be the same for everyone, regardless of their background.
    • “The pain, mood changes, brain decline and neurological problems associated with early MS can appear years before diagnosis but appear to affect all types of people in similar ways, according to a new study.
    • “Our study shows that the very earliest features of MS are similar regardless of someone’s ethnic or socio-economic background,” said researcher Ben Jacobs, a clinical lecturer in neurology at Queen Mary University of London.
    • “Efforts to detect MS earlier or identify people at high risk should therefore be inclusive and representative of the whole population,” Jacobs said in a news release.” * * *
    • “The new study appeared Sept. 24 in the Annals of Clinical and Translational Neurology.”
  • Per BioPharma Dive,
    • “Amgen’s cholesterol-lowering shot Repatha met its main goals in a large trial evaluating use as a “primary prevention” therapy, besting a placebo at reducing the risk of cardiovascular events or death in people who’d never had a heart attack or stroke, the company said Thursday.
    • “Repatha, a so-called PCSK9 inhibitor, is currently available as a “secondary prevention” therapy for those with a history of heart disease and at high risk of experiencing another. Though it’s sometimes also used “off-label” in the much larger primary prevention setting, an approval backed by the latest study results — which Amgen referred to as a “landmark” finding — could substantially widen use. 
    • “Once forecast to achieve tens of billions of dollars in annual sales, Repatha has fallen short of those lofty projections amid pushback from insurers and a modest benefit in those with established heart disease. Still, sales surpassed the $1 billion mark in 2021 and have grown since. The Food and Drug Administration also recently expanded use in those at higher risk of major cardiovascular events.”
  • The New York Times reports,
    • “Jane Goodall, who died on Wednesday at the age of 91, followed several principles that geriatricians recommend for a long and healthy life.
    • “A scientist, conservationist and author, Dr. Goodall stayed active, working until the day she died. She had a clear sense of purpose for her life. And she was an enduring optimist.
    • “Over a nearly seven-decade career, Dr. Goodall taught us about the intelligence of chimpanzees. But she left behind powerful teachings about aging — and living well — too.”
      • “Her work kept her active.”
      • “She had a ‘reason for being.’”
      • “She maintained a positive outlook on life.”

From the U.S. healthcare business front,

  • Beckers Payer Issues lets us know,
    • “Despite Cigna launching its downcoding policy on Oct. 1, the insurer is temporarily holding off on implementing it for California HMO plans, according to the California Medical Association and Cigna.
    • “The policy allows Cigna to adjust some higher-level evaluation and management codes if they do not meet certain complexity standards. Codes 99204-99205, 99214-99215 and 99244-99245 fall under this policy. After receiving questions over its legality, the reimbursement policy is awaiting review by the California Department of Managed Health Care.
    • “This approach also introduces avoidable friction with physician practices into the process, erodes trust between providers and plans, and exacerbates the challenges of delivering high-quality care in a resource-constrained environment,” the California Medical Association wrote in a letter to Cigna.
    • “Our new policy that ensures the limited number of impacted physicians are reimbursed appropriately for E/M services took effect as planned, with the exception of California HMO plans regulated by the state Department of Managed Health Care,” a Cigna spokesperson told Becker’s. “We anticipate that the policy will also take effect for these plans’ claims in California after the DMHC completes its review of the additional information that we have provided.”
  • Beckers ASC Review adds,
    • “On Oct. 1, a new UnitedHealthcare policy went into effect, cutting reimbursements to certified registered nurse anesthetists by 15%. 
    • “The policy update was issued on July 1 and applies to claims for anesthesia services rendered by CRNAs practicing independently. For claims billed under the QZ modifier — those rendered by CRNAs — the provider will now receive 85% of the allowable. 
    • “CRNAs in Arkansas, California, Ohio, Colorado, Hawaii, Massachusetts, New Hampshire and Wyoming are exempt from the new reduction. 
    • “The update has drawn criticism from the American Association of Nurse Anesthesiology, who told Becker’s in an Oct. 1 email that the policy “threatens patient care” and could lead to delayed procedures and strained access to care, particularly in rural and underserved communities where CRNAs are more heavily utilized for anesthesia services. 
    • ‘The AANA also claims the policy is in violation of a provider nondiscrimination provision outlined in the ACA. The organization has also written a coalition letter urging the secretaries at the Department of Labor, HHS and Department of Treasury to investigate and prohibit commercial payers from violating this nondiscrimination provision.”
  • The Healthcare Cost Institute tells us what preventive care costs.
  • STAT News reports,
    • “UnitedHealth Group has tapped a Duke University artificial intelligence expert to be its chief AI scientist as the health care giant ramps up the use of the technology across its sprawling network of businesses, according to a memo obtained by STAT.
    • “Michael Pencina, chief data scientist for Duke Health, stepped down from his role at Duke on Wednesday to take the job at UnitedHealth, according to the memo from Mary Klotman, dean of the Duke University School of Medicine.”
  • Per Modern Healthcare,
    • “Providence finalized Wednesday the second phase of a joint venture with Compassus to manage the health system’s home care operations in California.
    • “Under the terms of the deal, Compassus will manage approximately 20 home health, hospice, personal home care and palliative care locations under the name Providence at Home with Compassus.
    • “The deal is part of a broader initiative Renton, Washington-based Providence inked with Compassus last year to operate home care locations across Alaska, Texas, Washington, California and Oregon. Compassus began managing 14 locations in Alaska, Texas and Washington in March.”
  • Per Fierce Healthcare,
    • “NeueHealth officially ceased trading on the New York Stock Exchange after completing its go-private deal with an affiliate of New Enterprise Associates.
    • “The company, once known as Bright Health Group, was scooped up on Thursday by the NEA unit with an enterprise value of about $1.5 billion, following a series of financial struggles. Common stockholders in NeueHealth will receive $7.33 per share as part of the sale, according to an announcement.
    • “Certain shareholders in the company—including New Enterprise Associates and 12 other investors who hold all of its preferred stock—will instead enter into a rollover agreement, where they will exchange shares for equity interest in the now-private enterprise.
    • “In addition, NeueHealth’s leadership will continue in their roles and have similarly rolled their holdings into equity in the private company.”
  • and
    • “Startup SpotitEarly is pioneering an innovative early cancer screening test based on breath samples and powered by artificial intelligence and the strong scent detection of trained dogs.
    • “SpotitEarly launched in the U.S. market in May, armed with $20 million in funding. The company, initially founded in Israel, plans to roll out its breath-based, at-home early detection test in the U.S. next year. It’s preparing for an FDA pre-submission as part of a phased regulatory strategy, executives said.
    • “New Jersey-based Hackensack Meridian Health is teaming up with the startup to validate its non-invasive approach to early cancer detection.
    • “As part of the research collaboration, SpotitEarly will work with the Hennessy Institute for Cancer Prevention and Applied Molecular Medicine, part of the Hackensack Meridian John Theurer Cancer Center, and Hackensack University Medical Center.”
  • Beckers Hospital Review relates,
    • “Eight states tied for having the lowest rates of patients who left hospital emergency departments without being seen, at 1%, CMS data showed.
    • “CMS’ Timely and Effective Care dataset, updated Aug. 6, tracks the percentage of patients who left an ED before being seen between January and December 2023. The measures apply to children and adults treated at hospitals paid under the inpatient or the outpatient prospective payment systems, as well as hospitals that voluntarily report data on relevant measures for Medicare, Medicare-managed care and non-Medicare patients. Averages include data for Department of Veterans Affairs and Defense Department hospitals. Read the methodology here. 
    • “The national average showed 2% of patients left EDs before being seen in 2023. This is returning to prepandemic levels, after the rate went up to 3% in 2022.”

Midweek report

David Ermer–CDC, CMS, Congress, Medical / Rx research, Medicare, OPM, U.S. Healthcare–

From Washington, DC,

  • Roll Call reports,
    • “Amid tough talk from both sides of the aisle about who’s to blame for the partial government shutdown, bipartisan talks began to take shape as the rank-and-file sought a way out of the impasse.
    • “Various groups of senators were seen huddling on the floor Wednesday during a vote series, even as Democrats again mostly rejected the House-passed stopgap funding bill that would reopen the government through Nov. 21.
    • “The 55-45 margin on the procedural vote was the same tally as the night before, with the same three Democratic caucus members crossing the aisle to support it: Nevada’s Catherine Cortez Masto, Pennsylvania’s John Fetterman and Maine’s Angus King, an independent who caucuses with the party.
    • “That’s two more Democratic caucus members than voted for the measure 10 days ago, which Republicans believe demonstrates fissures in the ranks that will only grow as the shutdown’s impacts build. But it’s five votes short of the 60 needed to overcome a filibuster.”
  • The Wall Street Journal adds,
    • “During a huddle with a bipartisan group of senators on the floor Wednesday, Sen. Ruben Gallego (D., Ariz.) floated the idea of voting to reopen the government with a commitment from Republicans to negotiate on the healthcare subsidies by Nov. 1. Republicans reiterated they didn’t want to negotiate while the government was shut down, according to a person familiar with the conversation.
    • “This is us, just senators randomly getting together and spit balling, and then see if we can get to some kind of consensus,” Gallego said. “And then I think a lot of us would then go back to our leadership and then go from there.”
  • Federal News Network informs us,
    • “After congressional appropriations lapsed and a government shutdown began at midnight on Oct. 1, the Trump administration now warns that further federal employee layoffs are imminent.
    • “It’s unclear which agencies will move forward with potential layoffs, beyond at least one agency — the U.S. Patent and Trademark Office — that on Wednesday issued layoff notices. Vice President JD Vance doubled down on the Office of Management and Budget’s last week’s directive to terminate more federal employees in the case of a government shutdown.
    • “If this thing drags on for another few days, or, God forbid, another few weeks, we are going to have to lay people off,” Vance told reporters during a White House press conference Wednesday afternoon. “We’re going to have to save money in some places so that essential services don’t get turned off in other places.”
    • “OMB Director Russell Vought took a more immediate stance on how quickly he expected RIFs to take place. In a private call with House Republicans on Wednesday, Vought said agency RIFs would begin “in a day or two,” according to reporting from Politico.”
  • Fierce Healthcare offers a look at the major insurers’ 2026 Medicare Advantage plans and adds,
    • “On day one of the government shutdown, the Centers for Medicare and Medicaid Services (CMS) sent out a Medicare Learning Network Connects Newsletter offering guidance on Medicare billing and telehealth services during the lapse in appropriations. 
    • “CMS reaffirmed in the guidance that pandemic-era expanded telehealth flexibilities have ended for Medicare beneficiaries. Per standard course of action, CMS has directed Medicare Administrative Contractors (MACs) to implement temporary claims hold for 10 business days on telehealth claims. 
    • “Assuming the hold starts Oct. 1, claims will begin to be processed on Oct. 15. The guidance says that providers can still submit claims during the temporary hold, but they will not receive payment. 
    • “The claims hold is meant to avoid the reprocessing of claims in the event that Congress re-ups the flexibilities.” 
  • The White House posted a fact sheet about “the first agreement with a major pharmaceutical company, Pfizer, to bring American drug prices in line with the lowest paid by other developed nations (known as the most-favored-nation, or MFN, price).”
  • The Wall Street Journal explains “How Trump’s Drug-Buying Site ‘TrumpRx’ Will Work. If you are among the 90% of Americans who have health insurance, it’s unlikely to save you much money.”
    • “President Trump announced a deal with Pfizer to sell drugs at reduced prices via TrumpRx.gov and to Medicaid at Most Favored Nation prices.
    • “TrumpRx.gov, launching in early 2026, will offer Pfizer drugs, including Eucrisa and Xeljanz, with average savings of 50%.
    • “The initiative primarily benefits the 27 million uninsured Americans, as 90% with insurance likely save more using their plans.”

From the public health and medical / Rx research front,

  • The New York Times reports,
    • “Children and teenagers are twice as likely to develop long Covid after a second coronavirus infection as after an initial infection, a large new study has found.
    • “The study, of nearly a half-million people under 21, published Tuesday in Lancet Infectious Diseases, provides evidence that Covid reinfections can increase the risk of long-term health consequences and contradicts the idea that being infected a second time might lead to a milder outcome, medical experts said.
    • “Dr. Laura Malone, director of the Pediatric Post-Covid-19 Rehabilitation Clinic at Kennedy Krieger Institute in Baltimore, who was not involved in the study, said the findings echo the experience of patients in her clinic.
    • “Just because you got through your first infection and didn’t develop long Covid, it’s not that you are completely out of the woods,” she said.”
  • STAT News tells us “Leucovorin has a place in autism treatment, researcher says, but he tamps down parents’ expectations. ‘I haven’t seen a remarkable response,’ says Robert Hendron, who studied its use in kids with ASD.”
  • The Washington Post calls attention to “what you should know before buying folate and folinic acid supplements. Medical experts warn against treating over-the-counter supplements the same as leucovorin, the drug the Trump administration has touted as an autism treatment.”
  • Cigna, writing in LinkedIn, discusses the unique health needs of women.
  • Medscape lets us know that “A prospective cohort study found that a high intake of ultraprocessed foods (UPFs) was associated with an increased risk for overall colorectal cancer (CRC) and right-sided colon cancer.”
  • The Washington Post relates,
    • “Walmart will stop using synthetic dyes and certain preservatives, artificial sweeteners and fat substitutes in its private-label offerings, adding the world’s largest retailer to the growing contingent of brands moving to banish food additives amid questions about their health risks.
    • “The announcement Wednesday comes as consumers are pressing for healthier options, and as state and federal officials crack down on the use of petroleum-based dyes in cereals, condiments and a variety of other foods. Health and Human Services Secretary Robert F. Kennedy Jr. — who has likened such additives to “poisonous compounds” — said in April that the administration had reached an “understanding” with the food industry to phase out several colorings over the next few years. General Mills, Kraft Heinz and other foodmakers have since issued statements to that effect.”
    • “Walmart said it will excise nearly 30 additives from its private-label food portfolio by January 2027, including its Great Value, Freshness Guaranteed, Bettergoods and Marketside brands.”
  • Medscape points out what scientists are learning about laser tattoo removal.

From the U.S. healthcare business front,

  • Modern Healthcare reports,
    • “CommonSpirit is betting on ambulatory care expansion to shore up operations and putting hospital deals on ice.
    • “The Chicago-based system has added 90 ambulatory care sites to its footprint in its last two fiscal years, 34 of which opened across nine states in fiscal 2025, which ended June 30.
    • “At this point, we’re not focused on hospital acquisitions. We’re primarily looking at ambulatory growth to meet the needs of our consumers,” said CommonSpirit CEO Wright Lassiter III on a Wednesday earnings call. “We are very intentional about where we’re headed and what we believe we need to do to create the kind of success we want as a ministry.”
  • and
    • “Health insurance companies and health systems are familiar with heated contract battles, but the scramble to lock down favorable terms is rising.
    • “Hospitals, under pressure to operate within tight margins, are wrestling with the financial ramifications of looming federal healthcare cuts and coping with sustained labor shortages Insurers seek to clamp down on rising utilization and appease dissatisfied investors.
    • “Those dynamics have fostered an environment that’s led to more messy public contract fights than usual. “We’ve just never seen anything like it,” said Brandon Edwards, CEO of Unlock Health, a marketing agency for providers.
    • “There were 79 confirmed contract disputes between insurers and providers this year as of Sept. 1, according to an FTI Consulting analysis of publicly reported negotiations. Half related to Medicare Advantage, and 20% were unresolved at the beginning of September. The trend has been rising since last year, the analysis shows.”
  • Per Fierce Healthcare,
    • “General Catalyst’s Health Assurance Transformation Company (HATCo) has wrapped its acquisition of Summa Health, shifting the Akron, Ohio-based healthcare system from a nonprofit to a taxed subsidiary.
    • “The deal was first announced in early 2024 and underwent a lengthy regulatory review amid pushback from local residents. Ohio Attorney General Dave Yost gave the transaction a green light during the summer with certain conditions, including an increase in the sale price from $485 million to $500 million.
    • “Today is the culmination of months of collaboration between our organizations and marks the start of a new chapter for Summa Health and those we serve,” Cliff Deveny, M.D., Summa Health President and CEO, said in Wednesday morning’s announcement. “With HATCo, we can preserve our community roots, invest in our team and take bold steps to modernize and expand access to ensure Summa remains strong for decades to come.”
    • “Summa Health is among Ohio’s larger health systems. It employs more than 8,500 people across two acute care hospital campuses, 15 community medical centers, a rehab hospital, a health insurance arm, a multispecialty group practice and a research and medical education program. It reported about $2 billion in total revenue, but a narrow operating loss of $8 million in fiscal year 2024.”
  • and
    • “With $10 billion earmarked to grow its U.S. operations through 2035, AbbVie continues to lay out the particulars on its decade-long domestic investment strategy.
    • “The Chicago-area Big Pharma has kicked off work on a $70 million expansion of its bioresearch center in Worcester, Massachusetts, where the company conducts both manufacturing and R&D for biologic medicines.
    • “The project, which falls under the banner of AbbVie’s broader U.S. investment announced in April, will beef up capacity at the Worcester site that AbbVie plans to use for local production of current and upcoming drugs in cancer and immunology, according to a Sept. 30 press release.
    • “AbbVie is specifically building out additional biologics manufacturing areas at the site, as well as a new three-story building that will contain a laboratory, warehouse and office space. The company said it expects the project to hasten the production transfer of certain oncology meds from Europe to the U.S.”
  • The Wall Street Journal notes,
    • “Patients are increasingly managing their own healthcare due to doctor shortages and chronic diseases.
    • “Direct-to-consumer lab tests are expanding, with Quest Diagnostics, for instance, offering more than 150 tests.
    • “AI chatbots and wearable devices are emerging tools, but concerns exist regarding data privacy, misinformation and clinical validation.”

Tuesday report

David Ermer–CDC, CMS, Congress, FDA, NIH, OPM, U.S. Healthcare–

From Washington, DC,

  • The Wall Street Journal reports,
    • “The federal government was on course to shut down early Wednesday, as hopes of any last-minute deal evaporated and both Republicans and Democrats appeared content to trigger the first lapse in funding since President Trump’s first term.”
  • The Senate voted 55-45 on accepting the House Continuing Resolution this evening. A 60 vote in favor was required due to cloture rules. Three Democrats voted in favor and Sen. Rand Paul voted against due to his disdain for continuing resolutions. Roll discusses the vote and next steps in Congress.
  • Govexec adds,
    • “The Trump administration is planning to furlough around 550,000 federal employees on Wednesday if Congress fails to act before government funding expires late Tuesday evening, representing an unusually low less than one-quarter of the workforce. 
    • “The White House is also vowing to oversee large-scale layoffs if a government shutdown occurs, though that would play out through a separate process than the one that sends home certain employees only until funding is restored. In the last 15 years, administrations have typically prepared to furlough between 35% and 40% of the federal workforce.”
  • Federal News Network shares agency shutdown contingency plans.
  • OPM Director Scott Kupor writes in his blog about how he spent days leading to the end of federal fiscal year.
  • The NBC station in Washington, DC, reminds us,
    • “Tens of thousands of government workers are preparing to leave the federal workforce Tuesday, the final day for many who took the government’s “Fork in the Road” resignation offer earlier this year.
    • “Among those are as many as 60,000 retirees who will now anxiously wait for their federal retirement benefits to kick in – a process that could take months and is potentially impacted by the looming government shutdown.
    • “There’s no question there’s going to be a surge. We’re doing everything we can to try and address it,” Office of Personnel Management (OPM) Director Scott Kupor told the News4 I-Team. * * *
    • “Even though OPM knew months ago thousands of employees were leaving, he said their retirements can’t start processing until after they’re off the federal payroll. That’s because each department in the federal government has to wait for an employee’s final paycheck before finalizing their application and sending it to OPM.
    • “Now look, it sounds crazy to me, as well,” he told the I-Team. “And so, one of the things we’re looking at is we’re trying to just basically redesign the entire process from start to finish.”
  • The Wall Street Journal lets us know,
    • “President Trump unveiled plans Tuesday to launch a government-run website, dubbed TrumpRx, for consumers to buy drugs directly from manufacturers, and he said Pfizer plans to offer some of its drugs on the site at a reduced rate.
    • “Separately, Trump said Pfizer would offer all of its drugs to Medicaid at a reduced, “most favored nation” price, as well as introduce any new drugs to the U.S. market at the reduced prices. In return, the company gains a three-year grace period to exempt it from national-security-related tariffs, as long as the company invests in domestic manufacturing, the company said.
    • “The American consumers have been subsidizing research-and-development costs for the entire planet,” Trump said in the Oval Office, flanked by top health officials and Pfizer Chief Executive Albert Bourla.” * * *
    • “Pfizer also announced a $70 billion investment on research and development and manufacturing medications in the U.S.”
  • Per a Centers for Medicare and Medicaid news release,
    • “The Centers for Medicare & Medicaid Services (CMS) released final guidance for the third cycle of negotiations under the Medicare Drug Price Negotiation Program (Negotiation Program). This final guidance incorporates significant policy refinements based on public feedback, with a particular focus on increasing transparency, and implements expanded protections for orphan drugs enacted in the Working Families Tax Cuts Act (Public Law 119-21).” * * *
    • “[The] final guidance addresses how drugs payable under Medicare Part B will be eligible for negotiation, requirements and process for renegotiation.”
    • “The Fact Sheet for the Final Guidance for Initial Price Applicability Year 2028 and Manufacturer Effectuation of the Maximum Fair Price in 2026, 2027, and 2028 is available at: https://www.cms.gov/files/document/ipay-2028-final-guidance-fact-sheet.pdf.
    • “Additional information about the Medicare Drug Price Negotiation Program can be found at: https://www.cms.gov/priorities/medicare-prescription-drug-affordability/overview/medicare-drug-price-negotiation-program.” 
  • Per a Department of Health and Human Services news release,
    • “The U.S. Department of Health and Human Services’ (HHS) Administration for Community Living (ACL) today announced $60 million in new grant awards to states, territories, tribes, and local organizations supporting older adults and Americans with disabilities. These awards will strengthen existing programs that protect health, preserve independence, and support caregivers — key priorities of the Make America Healthy Again agenda.”
  • Per a National Institutes of Health news releases,
    • Anthony Letai, MD, Ph.D., was sworn in [yesterday September 29, 2025] as director of the National Cancer Institute (NCI), part of the National Institutes of Health (NIH), by Health and Human Services Secretary Robert F. Kennedy, Jr.
    • Dr. Letai takes the helm of the world’s most prestigious cancer research agency after serving as professor of medicine at Harvard Medical School and medical oncologist at the Dana-Farber Cancer Institute. He possesses decades of experience studying cell death in cancer, developing treatments, and identifying predictive biomarkers.
  • and
    • “The U.S. Department of Health and Human Services today announced a doubling of funding for its Childhood Cancer Data Initiative (CCDI) at the National Institutes of Health (NIH). The funding surge is designed to accelerate the development of improved diagnostics, treatments, and prevention strategies.
    • “President Trump in 2019 established the CCDI to collect, generate, and analyze childhood cancer data. Its budget will rise from $50 million to $100 million, giving the federal government stronger data for this effort. The initiative will also bring in private-sector partners to apply advanced artificial intelligence to speed up cures for pediatric cancer.
    • “Health and Human Services Secretary Robert F. Kennedy, Jr., NIH Director Jay Bhattacharya, and National Cancer Institute (NCI) Director Anthony Letai joined President Trump at the White House today to discuss their commitment to eradicating childhood cancer and to mark the signing of the president’s executive order, Unlocking Cures for Pediatric Cancer with Artificial Intelligence.“

From the Food and Drug Administration front,

  • FDA Director Marty Makary, MD, announced today,
    • “As part of the FDA’s broader strategy to combat the crisis of youth vaping, we are launching an initiative to increase voluntary compliance from retailers—including vape shops, convenience stores and gas stations—that play a key role in the distribution of both legal and illegal products into American communities.” * * *
    • “We have received questions from retailers about which tobacco products are legal to sell, so we’re mailing materials to more than 300,000 retailers nationwide containing: 
      • “A list of the 39 vapes and 20 nicotine pouch products that can be legally marketed in the United States, which features QR codes linked to the FDA real-time digital versions of these lists (www.fda.gov/authorizedecigs and www.fda.gov/authorizednicotinepouches); 
      • “Information on accessing FDA’s new Searchable Tobacco Product Database, a database of over 17,000 tobacco products—covering all categories, such as cigarettes, cigars, hookah, and e-cigarettes—that may be legally marketed in the United States; and  
      • “New tobacco retailer education materials, including a wall calendar of reminders focused on retailer requirements such as only selling tobacco products to those 21 and older and requiring a photo ID check of anyone under 30.” * * *
    • “Mailings will begin this fall. Retailers looking to order additional free materials—including a digital age verification calendar—can do so via FDA’s Tobacco Education Resource Library.”  
  • The American Hospital Association News tells us,
    • “The Food and Drug Administration today issued a request for public comment on a series of questions regarding current approaches to evaluating artificial intelligence-enabled medical device performance in real-world applications. This includes approaches to detect, assess and mitigate performance changes over time to help assure the devices remain safe and effective throughout their life cycle. The FDA is accepting comments at www.regulations.gov until Dec. 1. The notice follows a request by the Office of Science and Technology Policy issued Sept. 26 that seeks feedback on federal regulations that hinder AI development, deployment or adoption.”
  • Per MedTech Dive,
    • “The Food and Drug Administration has expanded its early alert communication initiative to cover potentially high-risk removals or corrections for all medical devices, the agency said Monday.
    • “Officials announced a pilot of the initiative late last year. Since then, the agency has issued early alerts shortly after companies have told customers about issues with certain medical devices. 
    • “The FDA said the pilot was successful, leading it to expand the program beyond the initial five therapeutic areas and include potentially high-risk safety events of all medical devices.”
  • BioPharma Dive points out five FDA decision to watch for in the fourth quarter of 2025. “The agency is set to decide by the end of the year whether to approve an obesity pill, a new kind of kidney disease drug and a long-awaited heart medicine.

From the public health and medical / Rx research front,

  • STAT News interviews “Lilly’s head scientist [about] its GLP-1 pill, Alzheimer’s strategy, and finding promising ideas and startups. CSO Daniel Skovronsky’s long-term vision: ‘We’re trying to invest in the babies’” 
  • Biopharma Dive reports,
    • “Metsera’s top obesity drug succeeded in a Phase 2 trial, helping enrollees treated with the highest dose lose an average of 14 percentage points more of their body weight than placebo recipients after 28 weeks, the company said Monday.
    • “Interim results from a separate trial also showed that a step-up, or “titrated,” dosing regimen limited the kind of gastrointestinal side effects that often lead people to stop taking GLP-1 drugs for obesity. That finding suggested Metsera’s drug, MET-097i, could have a tolerability profile “better than tirzepatide,” which Eli Lilly sells as Zepbound for weight loss, wrote Leerink Partners analyst David Risinger in a Tuesday client note.
    • “The announcement comes one week after Pfizer reached a deal to acquire Metsera for $4.9 billion. The buyout puts Pfizer back in the chase to develop obesity drugs, a market that could be worth more than $100 billion a year in sales by the next decade.”
  • Per Fierce Pharma,
    • “Two clinical trials of Merck’s pulmonary arterial hypertension (PAH) drug Winrevair were so conclusive that the studies were halted within the last year because the efficacy of the treatment was assured.
    • “Tuesday, Merck reported results from the phase 3 Hyperion study, which showed that Winrevair, when combined with background therapy, achieved its primary endpoint by reducing the risk of clinical worsening events by 76% compared with placebo in recently diagnosed adults.”
  • Per MedPage Today,
    • “Gabapentin prescribing rose sharply in recent years, with the generic drug becoming the fifth most dispensed product in retail pharmacies in 2024, a CDC analysis showed.
    • “From 2010 to 2024, prescriptions jumped from 79.5 to 177.6 per 1,000 people, according to Gery Guy Jr., PhD, of the CDC National Center for Injury Prevention and Control, and co-authors.
    • “The number of persons who received gabapentin soared from 5.8 million in 2010 to 15.5 million in 2024, Guy and colleagues reported in Annals of Internal Medicine. That represented an increase from 18.9 per 1,000 people in 2010 to 46.9 per 1,000 people in 2024.” * * *
    • “Gabapentin is approved for seizures and postherpetic neuralgia; gabapentin enacarbil is approved for restless legs syndrome. Despite limited indications, gabapentin and its cousin pregabalin are widely prescribed off-label for various other pain syndromes.
    • “Common side effects of gabapentin include drowsiness, dizziness, blurry or double vision, and difficulty with coordination and concentration. In 2019, the FDA warned about serious breathing problems that may occur in patients using gabapentin or pregabalin who have respiratory risk factors. These factors included taking opioids or other drugs that depress the central nervous system, conditions like chronic obstructive pulmonary disease that reduce lung function, and older age.”
  • Per Health Day,
    • “An invisible storm might rage for years inside the bodies of people at risk for rheumatoid arthritis, prior to any joint pain occurring, a new study says.
    • “These folks experience dramatic immune system changes long before they feel symptoms, researchers reported in the journal Science Translational Medicine.
    • “Overall, we hope this study raises awareness that rheumatoid arthritis begins much earlier than previously thought and that it enables researchers to make data-driven decisions on strategies to disrupt disease development,” senior researcher Mark Gillespie, an assistant investigator at the Allen Institute in Seattle, said in a news release.”
  • Pulmonary Advisory informs us, “Asthma risk in women has significant associations with body mass index (BMI), body roundness index (BRI), and white blood cell count (WBC), according to study findings published in BMC Pulmonary Medicine.”

From the U.S. healthcare business front,

  • The Wall Street Journal reports,
    • “Cardinal Health CAH is building a flagship pharmaceutical distribution center in Indianapolis to keep up with its growing customer base and the shifting needs of drug companies.
    • “The planned 230,000 square-foot plant is the healthcare company’s latest step in a 10-year plan to modernize and expand its distribution network. Pharmaceutical distribution remains Cardinal’s most lucrative business, and it is continuing to gain customers. The Dublin, Ohio, company added more than $10 billion of new business in the last fiscal year, said Debbie Weitzman, chief executive of Cardinal’s pharmaceutical and specialty solutions business.
    • “That comes with it a lot of volume that we need to be prepared for,” she said.”
  • Fierce Healthcare relates,
    • “Millie, a California-based hybrid women’s health clinic, is expanding its offerings with perimenopause and menopause care.
    • “The offering, available in person and virtually, includes hormone therapy, nonhormonal treatments, vaginal treatments and lifestyle strategies. Millie currently has two clinics in the Bay Area.
    • “The company, which launched in 2022, was originally focused on maternity care. Staffed with nurse-midwives and doulas, Millie provides care for low-risk pregnancies out of its clinic. Millie also partners with hospitals, where its providers support labor and deliver babies. Midwives drive lower caesarean section rates and higher patient satisfaction scores and can help fill crucial gaps in obstetrics care. As of 2024, more than a third of U.S. counties were designated maternity care deserts. 
    • “In 2023, Millie introduced preconception counseling and gynecology offerings, recognizing that optimizing these areas of health can support better maternal and overall health outcomes. It has now further expanded its continuum of care with menopause care, since many of its patients are becoming parents in their late 30s and navigating postpartum and perimenopause at the same time.” 
  • Beckers Hospital Review shares “the days cash on hand at 40 health systems as of June 30, according to their most recent financial reports.”
  • Beckers Payer Issues offers eight things to know about catastrophic health claims.

Monday report

David Ermer–CDC, CMS, Congress, FDA, Federal employment benefits, Medical / Rx research, Medicare, NCQA, OPM, U.S. Healthcare–

From Washington, DC,

  • The Wall Street Journal reports,
    • “Top Democrats made their case to President Trump for restoring billions of dollars in healthcare spending as part of any deal to avoid a government shutdown, but they said there was no breakthrough in talks, further dimming hopes of a last-minute deal.
    • “It was a frank and direct discussion” with the president and Republican leaders, “but significant and meaningful differences remain,” said House Minority Leader Hakeem Jeffries (D., N.Y.) after leaving the meeting at the White House.” * * *
    • “The open question headed into Monday’s meeting was whether Trump the dealmaker would show up, or if he was content to let Democrats go home empty-handed. Trump believes he is in a strong position and that Democrats will be blamed for shutting down the government, according to allies. A Republican close to the talks said that while Trump likes to be a dealmaker, there may not be much of a deal to be made.
    • “[Senate Minority Leader Chuck] Schumer [D., N.Y.] and Senate Majority Leader John Thune (R., S.D.) have signaled any deal would likely focus on extending health-insurance subsidies. Those enhanced Affordable Care Act tax credits, first passed in 2021 by Democrats, are set to expire at year’s end. Democrats and some Republicans want an extension, but Republicans are seeking some new income limits on who receives subsidies. They also say discussions should only take place after Congress passes the stopgap bill keeping the government funded through late November.
    • The Senate was set to vote again before the Wednesday deadline on the same GOP bill that Democrats had previously rejected. Republicans have a 53-47 majority, but they need 60 votes to pass most legislation. With the House out this week, that is currently the only option available.
  • Modern Healthcare adds,
    • “The federal government is on track to shut down at midnight EST Wednesday, when fiscal 2026 begins. President Donald Trump and the Republican-led Congress have failed to enact annual appropriations bills to finance government operations. Negotiations with Senate Democrats continued Monday.
    • “Medicare, Medicaid, the Children’s Health Insurance Program and the federal health insurance exchanges would continue operating for the immediate future, HHS announced. The first three programs are mandatory and not subject to annual appropriations and CMS would cover exchange expenses with insurance company user fees.”
  • Federal News Network reminds us,
    • “Even if an agency doesn’t pay health premiums on time to OPM, federal employees and other enrollees in the Federal Employees Health Benefits (FEHB) program, as well as participants in the Postal Service Health Benefits (PSHB) program, maintain coverage throughout the duration of a shutdown, OPM has said in shutdown guidance.
    • “Those same rules apply to coverage through the Federal Employees Dental and Vision Insurance Program (FEDVIP), the Federal Employees’ Group Life Insurance (FEGLI) program and the Federal Long Term Care Insurance Program (FLTCIP).
    • “While all FEHB and PSHB participants maintain health coverage during a shutdown, those who are excepted or furloughed are not expected to pay health premiums while a shutdown is ongoing. Enrollees, however, will have to make any payments for premiums that accumulate during a shutdown, once the shutdown ends.”
  • Govexec offers part 2 of a series of commentaries about OPM in the second Trump Administration while FedSmith reminds folks about five mistakes to avoid during the upcoming FEHB / PSHB / FedFlex Open Season.
  • Avalere Health calls attention to key health policy actions to watch for during the rest of this year.
  • Mercer Consulting informs us,
    • “The 2026 changes to the Medicare Part D drug benefit passed under the Inflation Reduction Act are generally modest compared to the significant adjustments made in 2025. However, new instructions related to determining the creditable coverage status of prescription drug coverage allow plan sponsors to utilize a revised methodology for 2026. Plan sponsors should review the new methodology as they determine the most suitable one for their particular group health plan.
    • “Prior to Oct. 15 each year, plan sponsors providing prescription drug coverage must notify Part D-eligible individuals enrolled, or seeking to enroll, in their group health plan about whether the plan’s drug coverage is creditable — generally, whether it’s expected to pay, on average, at least as much as the Part D standard prescription drug coverage. Additionally, plan sponsors are required to report the creditable coverage status of their prescription drug plans to the Centers for Medicare and Medicaid Services each year, within 60 days of the plan year’s start.
    • “The IRA significantly enhanced Medicare Part D beginning in 2025, raising concerns among some plan sponsors about whether their drug coverage would remain creditable.  Instructions provided by CMS for 2026 take into account the IRA’s enhancements and increased flexibility in how plan sponsors may determine whether their drug coverage is creditable going forward, updating their Simplified Determination Methodology for 2026. And for the first time, some Health Savings Account-qualifying High-Deductible Health Plans may be able to use the SDM to determine creditable coverage status.”
  • The American Hospital Association News tells us,
    • “The Office of Science and Technology Policy issued a request for information Sept. 26 seeking feedback on federal regulations that hinder AI development, deployment or adoption. The OSTP is requesting comments on regulations across all sectors, including health care, where the underlying assumptions, technical requirements or compliance frameworks may create unnecessary barriers to beneficial AI applications. The agency is accepting comments through www.regulations.gov until Oct. 27.”
  • and
    • “The AHA Sept. 29 sent recommendations to the Department of Health and Human Services and the Centers for Medicare & Medicaid Services to help ensure insurance plans adhere to the agencies’ health insurer pledge to reform prior authorization processes. They include monitoring plans’ progress in fully implementing existing regulations, such as the interoperability and prior authorization final rule and reforms issued in the 2024 Medicare Advantage final rule. “As a result of the enormous detrimental impact that certain prior authorization practices routinely place on patients, physicians and hospitals, the AHA has been actively pushing for reforms in this area for a long time and working with health plans to collaboratively reduce the burdens associated with these programs,” the AHA wrote.”
  • and
    • “The AHA Sept. 29 asked the Trump administration to provide exemptions for health care personnel from the proclamation issued Sept. 19 announcing changes to the H-1B visa program. The proclamation increases the fee to $100,000 for new H-1B petitions filed by employers, as well as implements other restrictions on the entry of certain nonimmigrant workers. Of nearly 400,000 H-1B petitions approved in fiscal year 2024, 16,937 of those, or 4.2% of the total filed petitions, were for medicine and health occupations, and half of those approved petitions were for physicians and surgeons.” 
  • The Labor Department’s Bureau of Labor Statistics issued its annual report
    • “Seventy-two percent of private industry workers had access to medical care plans and 45 percent of workers participated. Dental care was available to 30 percent of private industry workers in establishments with less than 100 workers, 50 percent of private industry workers in establishments with 100-499 workers, and 70 percent of private industry workers in establishments with 500 workers or more. Vision care benefits were available for 21 percent of workers in establishments with less than 100 workers, 34 percent of private industry workers in establishments with 100-499 workers, and 44 percent of private industry workers in establishments with 500 workers or more. on employee benefits in the United States.
  • Per Beckers Payer Issues,
    • “The National Committee for Quality Assurance has named Vivek Garg, MD, as its next president and CEO, effective Jan. 5.
    • “Dr. Garg succeeds NCQA founder and current president Margaret O’Kane, who will retire at the end of this year. He currently serves as chief medical officer at Humana’s CenterWell Senior Primary Care.
    • “Dr. Garg previously held leadership positions at CareMore and Aspire Health, Oscar Health and One Medical Group.”

From the Food and Drug Administration front,

  • Fierce Pharma lets us know,
    • “Kedrion Biopharma has scored an FDA approval for Qivigy for adults with primary humoral immunodeficiency (PI), a group of disorders that prevent the immune system from operating effectively. 
    • “As an intravenous immunoglobulin (IVIG) therapy, Qivigy provides patients with antibodies that are intended to help them ward off infections.
    • “Along with the approval, the Italian plasma collection specialist was quick to point out in a release that it plans to increase its investments in the United States. To support the production of Qivigy, Kedrion announced plans to invest more than $260 million in expanding its U.S. network with over 40 new plasma collection centers. 
    • “The company also said it will invest more than $60 million to expand capacity at its manufacturing facility in Melville, New York.”
  • and
    • “Johnson & Johnson’s Tremfya continues to expand its reach as now the FDA has approved the IL-23 inhibitor as a treatment for two pediatric patient populations.
    • “The agency endorsed Tremfya as a treatment for children 6 years and older who weigh at least 40 kg (88 pounds) with moderate to severe plaque psoriasis (PsO) who are candidates for systemic therapy or phototherapy.
    • “In addition, children 6 and older with active psoriatic arthritis are now eligible for the drug, provided they weigh at least 40 kg, J&J said in a Sept. 29 release.”

From the public health and medical / Rx research front,

  • MedPage Today reports,
    • “About 58 million pounds of corn dogs and other sausage-on-a-stick products were recalled across the U.S. because pieces of wood may be embedded in the batter. (AP)
    • Meanwhile, supermarket chain Albertsons recalled several of its store-made deli products because they may contain Listeria, shortly after federal health officials warned consumers not to eat certain pasta meals sold at Walmart and Trader Joe’s over Listeria concerns. (AP)
  • and
    • “Widespread HPV vaccination slashed infection risk and delivered protection for vaccinated and unvaccinated adolescent girls and young women alike, according to a cross-sectional analysis of six regional surveillance studies.
    • “Between 2006 and 2023, the adjusted proportion of vaccinated women in the six studies who were positive for the high-risk HPV-16 and HPV-18 types covered by the first FDA-approved 2-valent HPV vaccine (2vHPV) dropped 98.4%, said Jessica Kahn, MD, MPH, of Albert Einstein College of Medicine in New York City, and colleagues.
    • “In the 17-year period, the proportion of vaccinated women who tested positive for HPV types covered by the later 4-valent vaccine (4vHPV) dropped 94.2% and fell 75.7% for types covered by the current 9-valent vaccine (9vHPV).
    • “Those declines were paired with evidence of herd protection. The proportion of unvaccinated adolescent girls and young women who were positive for at least one HPV type covered by 2vHPV dropped 71.6%. The proportion positive for at least one HPV type covered by 4vHPV fell 75.8%, they noted in JAMA Pediatrics.”
  • and
    • “In the Southern Hemisphere, the adjusted flu vaccine effectiveness rates against outpatient visits and hospitalizations were 50.4% and 49.7%.
    • “Only 21.3% of flu outpatients and 15.9% of hospitalized flu patients were vaccinated.
    • “Health authorities in the Northern Hemisphere might expect similar levels of protection against influenza, experts said.”
  • STAT News notes,
    • “Heart attacks, heart failure, and strokes don’t come out of nowhere, a new study concludes. The first time they strike, patients, clinicians, and researchers might think there were no red flags.  
    • “But a prospective cohort study reports that more than 99% of people who experienced these illnesses had at least one of four risks for cardiovascular disease. They had “suboptimal” high blood pressure, cholesterol, or blood glucose, or they were current or former smokers. More than 93% of the more than 9.3 million people in two national cohorts followed for 20 years had more than one risk factor.
    • “Among women under 60, often considered to be at lowest risk, more than 95% had at least one nonoptimal risk factor before heart failure or stroke.
    • “This almost universal prevalence of warning signs is far higher than reported in other studies, the new paper asserted.
    • “Every practicing cardiologist has seen cases in which individuals without any known risk factors sustain an MI or develop significant coronary disease,” Neha Pagidipati of the Duke Clinical Research Institute wrote in a companion editorial, referring to myocardial infarction, or heart attack. “However, the prevalence of CVD without traditional risk factors may be significantly lower than previously described.”
  • MedPage Today adds,
    • “The increase in early-onset cancers is not necessarily due to a rise in clinically meaningful cancers, researchers argued, but may be due to increased diagnostic scrutiny and overdiagnosis.
    • “Of the eight fastest-rising cancers, only two — colorectal and endometrial cancer — have shown a slight increase in early-onset mortality.
    • “For the six other cancers, stable or declining mortality rates alongside rising diagnoses suggest that greater detection (rather than more disease) may account for the trend.”
  • Per Health Day,
    • “Acute cystitis may signal the presence of urogenital cancers in middle-aged adults, according to a study published online Sept. 16 in BMJ Public Health.
    • “Filip Jansåker, M.D., Ph.D., from Lund University in Sweden, and colleagues examined the subsequent risks for urogenital cancers in men and women aged 50 years and older diagnosed with acute cystitis. The analysis included roughly 1.67 million men and 1.89 million women, including 177,736 men and 427,821 women diagnosed with acute cystitis (first event) from 1997 to 2018.” * * *
    • “It is plausible that urogenital cancer, and perhaps even precancerous changes in the urogenital organ, might increase the risk of cystitis because of compromised urinary tract and host defense,” the authors write.”
  • Genetic Engineering and Biotechnology News relates
    • “Bispecific antibodies and chimeric antigen receptor (CAR) T cells demonstrate potent cancer immunotherapy in clinical use, yet most cancers remain poorly targetable. High-affinity antibodies needed to maximize cancer killing also detect low antigen expression in normal tissue, which causes toxicity in healthy tissue. Identifying cancer-restricted cell-surface protein antigens remains an ongoing challenge. 
    • “In a new study published in Cell titled, “Safe immunosuppression-resistant pan-cancer immunotherapeutics by velcro-like density-dependent targeting of tumor-associated carbohydrate antigens,” researchers from the University of California (UC), Irvine, have reported that targeting cancer-associated glycans with binding proteins can trigger tumor cell death without toxicity to surrounding tissue. The biologically engineered immunotherapies, known as glycan-dependent T cell recruiter (GlyTR) compounds, were shown to be safe and effective in models for a spectrum of cancers, including breast, colon, lung, ovaries, pancreas and prostate. 
    • “It’s the holy grail—one treatment to kill virtually all cancers,” said Michael Demetriou, MD, PhD, a professor of neurology, microbiology and molecular genetics at the UC Irvine School of Medicine and corresponding author of the study. “GlyTR’s velcro-like sugar-binding technology addresses the two major issues limiting current cancer immunotherapies: distinguishing cancer from normal tissue and cancer’s ability to suppress the immune system.”

From the healthcare business front,

  • STAT News reports,
    • “Perimenopause is the new buzzword in the business of women’s health.
    • “The menopause market has proved so successful that companies are increasingly pushing products aimed at younger women too.”
  • Beckers Hospital Review breaks down the massive 138-hosptial Common Spirit health system’s revenue by region for the fiscal year ending June 30 in 2025 and 2024.
  • MedPage Today points out,
    • “Among more than 3 million Medicare Advantage enrollees, value-based payment models outperformed fee-for-service models for all 15 clinical quality outcomes.
    • ‘The mean score differences for blood glucose control and blood pressure control indicated “markedly better performance” with value-based payment models.
    • “Clinical quality performance consistently improved as financial arrangements moved toward 2-sided risk sharing.”
  • The Brown & Brown consulting firm discusses “Practical Approaches for Employers to Manage High-Cost Claimants in Health Plans.”
    • “Managing high-cost claimants requires a delicate balance of cost control, care quality and employee experience. Employers who invest in data-driven decision making, proactive care management and thoughtful plan design are best positioned to reduce the financial impact of high-cost claimants without sacrificing the well-being of their workforce.
    • “By taking a strategic and holistic approach, employers can turn a major cost challenge into an opportunity to enhance healthcare delivery, improve outcomes and foster a healthier, more productive employee population.”
  • The Institute for Clinical and Economic Review (ICER) announced,
    • “today that it will assess the comparative clinical effectiveness and value of Comirnaty® (Pfizer, BioNTech), Spikevax® (Moderna), mNexspike® (Moderna), and Nuvaxovid® (Novavax) for the prevention of COVID-19, including both the short- and long-term effects of the infection.
    • “The assessment will be publicly discussed during a meeting of the New England CEPAC in June 2026, where the independent evidence review panel will deliberate and vote on evidence presented in ICER’s report.
    • “ICER’s website provides timelines of key posting dates and public comment periods for this assessment.”
  • The Wall Street Journal reports,
    • “Novartis NOVN said it is launching a direct-to-patient platform in the U.S. to sell a discounted version of its Cosentyx drug, the latest big pharma company to move to cut prices ahead of the Trump administration’s deadline.
    • “The Swiss pharmaceutical company said Monday that it would offer select units of Cosentyx—a drug treating immune-mediated inflammatory conditions like psoriasis and psoriatic arthritis—at a 55% discount to cash-paying patients with a prescription. The platform will come into effect on Nov. 1.
    • “Novartis’s launch of a direct-to-patient platform and the discount comes after President Trump said in a letter to pharmaceutical companies in July setting a deadline of Sept. 29 to impose cuts on drug prices.”
  • Fierce Pharma adds,
    • “As pharma companies face an imminent deadline from President Donald Trump related to his “Most Favored Nation” (MFN) drug pricing demands, the industry’s top U.S. lobbying group is touting three “major actions” by its members and calling for some policy shifts of its own.
    • “The timing of the Sept. 29 press release by the Pharmaceutical Research and Manufacturers of America (PhRMA) coincides with the deadline set by the president when he laid out the steps pharma companies “must take” to align certain U.S. prices with lower prices overseas. 
    • “But rather than directly addressing the core component of Trump’s demand, the PhRMA communication centers on its members’ infrastructure spending, patient financial assistance programs and a new website designed to compile drugmakers’ direct sales offerings.
    • “PhRMA members are planning $500 billion in U.S. investments over the next 10 years, including $100 billion in projects that haven’t been announced yet, PhRMA CEO Steve Ubl wrote in an accompanying Washington Post op-ed piece Monday.
    • “Besides the capital projects, the industry trade group also plans to launch a website compiling its members’ direct sales offerings. Over the last several months, Big Pharma players have been rolling out new direct-to-patient sales platforms that offer cash-paying patients steep discounts to list prices for certain medicines. This is one component of the president’s push to rein in U.S. prices, and pharmaceutical companies are happy to stick it to middlemen in the U.S. whenever possible.”
  • Per BioPharma Dive,
    • “Antibody drug specialist Genmab on Monday agreed to acquire Dutch biotechnology company Merus in an $8 billion deal centered around a drug that’s shown potential treating head and neck cancer.
    • “Per deal terms, Genmab will pay $97 per share in cash to acquire Merus, representing a 41% premium to the biotech’s closing price on Friday of about $68.  
    • “The deal hands Genmab a drug called petosemtamab and that’s in late-stage testing for head and neck cancer. Phase 2 data presented at the American Society of Clinical Oncology meeting in May showed that the drug helped extend survival when used alongside Merck & Co.’s immunotherapy Keytruda, a result that boosted shares and suggested it could change care for those tumors.”
  • and
    • “Emma Walmsley, the first woman to lead a big pharma company as CEO, will step down from that post Dec. 31, handing the reins of one of Britain’s premier drugmakers to commercial chief Luke Miels.
    • “In a statement Monday, GSK said Walmsley, who has been running GSK since 2017, will depart as part of a succession plan. Miels’ selection was the outcome of a “rigorous process” conducted over the last few months and that included consideration of “internal and external candidates.” He’ll start serving as GSK’s full-time CEO on Jan. 1.
    • “The CEO change ends a nine-year run for Walmsley atop GSK. During that time, Walmsley steered the big drugmaker through a turbulent period, during which it spun out its consumer health business to focus on innovative drugs while facing persistent investor pressure to boost its productivity and growth prospects.
    • “GSK also deepened its investment in oncology, expanded its HIV drug portfolio and brought to market the first vaccine for respiratory syncytial virus.
    • “Yet GSK missed an opportunity during the COVID-19 pandemic, when it decided against developing its own vaccine and partnerships with Sanofi and CureVac hit setbacks and delays.” * * *
    • ‘Miels joined GSK in 2017 after stints at AstraZeneca, Roche and Sanofi, in positions in Europe, Asia and the U.S. He will be paid a base salary of nearly 1.4 million pounds and qualify for bonuses of up to 300%, in addition to other incentives and benefits, according to GSK’s statement.
    • “Walmsley, meanwhile, will also step down from GSK’s board effective Dec. 31, but will remain with the company through Sept. 30, 2026, to support Miels “given the potential impact to GSK’s operating environment arising from geopolitics and new technologies.”

Weekend Report

David Ermer–CDC, CMS, Congress, COVID-19 vaccine, FDA, Medical / Rx research, Medicare, OPM, SCOTUS, U.S. Healthcare–

From Washington, DC,

  • Roll Call reports,
    • “The top four congressional leaders will head to the White House on Monday for a meeting with President Donald Trump in a last-ditch effort to prevent a partial government shutdown.
    • “The meeting, confirmed by sources familiar with the plans, comes after the president scrapped a separate discussion planned with just the two Democratic leaders.” * * *
    • “The Senate is back in session on Monday with 48 hours until agencies would have to start shutting down Oct. 1. The House, which on Sept. 19 passed a partisan GOP-drafted stopgap funding bill that would keep the government operating for seven weeks until the Thanksgiving recess, isn’t planning to return until at least Oct. 7.
    • “Speaker Mike Johnson wrote Friday on X that House Republicans “have done our job” and now it’s the Senate’s turn to act.” 
  • Here is link to the Congressional committee schedule for this week.
  • Roll Call notes,
    • “The Senate does have another option in the queue aside from leadership-driven proposals [for a continuing resolution], with a procedural vote expected Monday on a bill from Sen. Ron Johnson, R-Wis., to provide for automatic two-week continuing resolutions.
    • “My new bill simply provides for automatic two-week rolling continuing resolutions for any department for which an appropriation bill or longer-term continuing resolution hasn’t been passed. This would keep spending flat by prorating the previous year’s spending level,” Johnson wrote in a Sept. 21 Wall Street Journal opinion piece.”
  • SCOTUSblog informs us,
    • “Edward Lazarus, a former clerk to the late Justice Harry Blackmun, called it a “single marathon session.” Gregory Garre, who served as the U.S. solicitor general during the George W. Bush administration, described it as the place “where petitions go to die.” Lazarus and Garre were both referring to the “long conference” – a private meeting, taking place this year on Sept. 29, at which the justices will consider the roughly 2,000 petitions for review that have built up since their last regularly scheduled conference (on June 26) before their summer recess.
    • “The long conference is the unofficial start to the court’s new term, which by law officially begins on the first Monday in October. The tradition of a “long conference” at the end of September or in early October, before the justices take the bench to hear oral arguments, dates back to the early 1970s, according to a book by the late Chief Justice William Rehnquist. Until then, the court held its long conference during the first week in October and had oral arguments thereafter. But Blackmun suggested that the court should move its meeting to the last week in September, allowing it to begin oral arguments on the first Monday in October instead.”
  • Modern Healthcare lets us know,
    • “Medicare Advantage enrollment could slip next year, the Centers for Medicare and Medicaid Services announced Friday.
    • “Health insurance companies project Medicare Advantage membership will fall from 34.9 million this year to 34 million in 2026, CMS said in a news release. 
    • “That would mark the first annual decline in Medicare Advantage enrollment since at least 2007, according to CMS data analyzed by the health policy research organization KFF. The annual enrollment period runs Oct. 15-Dec. 7.
    • “Insurers also predict that Medicare Advantage will lose ground to fee-for-service Medicare next year. The privatized program surpassed traditional Medicare in 2023 but will cover 48% of beneficiaries in 2026, down from 50% this year, according to industry estimates reported to CMS.
    • “CMS offered a rosier assessment. “Based on recent historical experience and enrollment trends, CMS anticipates that enrollment in [Medicare Advantage] in 2026 will be more robust than the plans’ projections and that enrollment will be stable,” the agency said in the news release.”
  • Per MedTech Dive,
    • “The Food and Drug Administration has granted de novo classification to a continuous glucose monitor made by Biolinq for people with Type 2 diabetes.
    • “Biolinq says its device is the first CGM that does not require a needle to place the sensor beneath the skin, instead using a microsensor array that sits less deep in the skin.
    • “People with diabetes have a growing number of CGM options as the FDA has authorized new sensors in recent years, including the first over-the-counter sensors and implanted CGMs that can be worn for one year.“
  • P.S. The OPM Director did not add a new post to his Secrets of OPM blog on Friday.

From the public health and medical / Rx research front,

  • Healio tells us,
    • “A federal law required all new cars to be equipped with backup cameras after May 2018.
    • “The mandate was associated with a 62% reduction in back over injuries in a trauma center in Houston.”
  • and
    • “COVID-19 vaccination during pregnancy provides significant protection for mothers and their babies with no associated increase in risk, according to data from more than 1.2 million pregnancies presented at the AAP’s annual meeting.
    • “COVID-19 vaccination reduced admission, mortality and pregnancy-specific complications,” Nikan Zargarzadeh, MD, a postdoctoral research fellow in the division of fetal medicine and surgery at Boston Children’s Hospital, told reporters on Saturday. “On the neonatal side, it reduced NICU admission.”
  • and
    • “Many women suffer complications in the time between giving birth and the 6-week visit.
    • “A Women in Medicine Summit presenter discussed how her own journey informs her work and what she is doing to help new moms.”
  • NPR Shots reports,
    • “For more than four years, Lynn Milam’s life was bound by the pain that radiated from her swollen joints.
    • “My children could not hug me,” she says. “I couldn’t hold my husband’s hand.”
    • “Milam also couldn’t climb stairs or help raise her teenage son. She spent most days on the couch.
    • “The reason was rheumatoid arthritis, which occurs when the immune system starts attacking the lining of joints.
    • “Milam tried everything: physical therapy, acupuncture, steroids and even the latest immune drugs. Nothing worked.
    • “That changed in October of 2023, when a surgeon implanted an experimental device in Milam’s neck. For a minute each morning, it delivers pulses of electricity to her vagus nerve, which connects the brain with internal organs.
    • “Three weeks in, my elbow pain was completely gone,” she says. “Then my hands didn’t hurt anymore, the swelling started going away.”
    • “Eventually, all symptoms of rheumatoid arthritis had vanished. Milam, 60, says she and her husband have regained the life they enjoyed before she got sick.”
  • Per Medscape,
    •  “Tirzepatide was associated with improvements in body weight and body composition, and with lower insulin doses, in the first-ever randomized controlled trial (RCT) of the drug in people with type 1 diabetes (T1D).
    • “Tirzepatide may play a role in weight management in adults with T1D and obesity, even at low doses,” Jennifer R. Snaith, MD, of the Garvan Institute of Medical Research and St. Vincent’s Hospital Sydney, both in Darlinghurst, Australia, said at European Association for the Study of Diabetes (EASD) 2025 Annual Meeting.” * * *
    • [A]sked to comment, independent industry consultant Charles Alexander, MD, noted that, while the data look good, it’s a small study and that Lilly’s two much larger ongoing phase 3 trials of tirzepatide in T1D, SURPASS-T1D-1 (NCT06914895), and SURPASS-T1D-2 (NCT06962280), aimed at obtaining FDA approval, will produce more definitive results.
    • Alexander also pointed out that Novo Nordisk is not conducting a similar RCT of semaglutide in T1D. “At the end of the day,” if it’s approved, “all you’re going to have [in terms of incretin drugs] is tirzepatide licensed for T1D.” 
    • Snaith’s team is also conducting a further study, TIRTLE2, with insulin resistance as the primary outcome.

From the U.S. healthcare business front,

  • HR Dive reports,
    • “Amid rising healthcare costs, Amazon announced benefit updates Sept. 17 that include a “reduced-cost” healthcare plan for its fulfillment and transportation employees. Workers on the plan will only need to pay $5 a week and $5 for copays starting in 2026.
    • “Those costs amount to about $22 per month or $260 per year for employees. This results in reductions of weekly contributions by workers by 34% and copays for primary care, mental health and nonspecialist visits by 87%, Amazon said.
    • “The changes were made based on feedback offered by workers, Udit Madan, senior vice president of Amazon Worldwide Operations, said in the announcement.”
  • Fierce Pharma notes,
    • “Serial entrepreneur Robert Wessman, who has had a golden touch creating, acquiring and spinning off companies that primarily sell generic drugs, has brought together two of his fastest-growing enterprises as Lotus Pharmaceuticals has acquired a 100% equity stake in [U.S. based] Alvogen.
    • “The move, which transforms Alvogen into a subsidiary, catapults Taiwan-based Lotus into a top-20 specialty pharmaceutical company worldwide, according to a release. The deal has a total value of up to $2 billion.
    • The deal could also help shield Lotus—which does most of its business in Asia—from U.S. tariffs on pharmaceutical products. Thursday night, in a post on social media, President Donald Trump wrote that starting Oct. 1, the U.S. would impose a 100% levy on drugs imported by companies that aren’t in the process of building U.S. facilities.
    • “The transaction gives Lotus “access to U.S. R&D, manufacturing and commercial capabilities alongside our established strengths in Asia,” the company said in a release.”

Cybersecurity Saturday

David Ermer–Cybersecurity, Generative AI–

From the cybersecurity policy and law enforcement front,

  • Health ISAC reminds us,
    • “Despite widespread public and private interest in reauthorizing the U.S. Cybersecurity Information Sharing Act of 2015 (“CISA 2015”)[i], we are rapidly approaching September 30th, the date when the Act is set to expire barring congressional action to extend it. With time running short, let’s assess the options still being considered and breakdown how and why reauthorization is going down to the wire.” * * *
    • “The current most likely path for a CISA 2015 reauthorization is not a simple standalone bill that is quickly passed by both chambers. Instead, the most likely path runs through a short term extension as part of a continuing resolution (“CR”) and then through the National Defense Authorization Act (“NDAA”).
    • “For those who are unfamiliar, a CR is a “temporary spending [bill] that [allows] federal government operations to continue when final appropriations have not been approved by Congress and the President. Without final appropriations or a CR, there could be a lapse in funding that results in a government shutdown.”[ii] The NDAA is an annual end of year bill that provides appropriations for the Department of Defense (“DOD”). It is generally considered to be a “must pass” piece of legislation that lawmakers attempt to add otherwise unrelated policy matters.”
  • Nextgov/FCW tells us,
    • “Greg Barbaccia, the federal chief information officer, says that the Office of Management and Budget is backing the General Services Administration’s overhaul of FedRAMP, the government’s cloud security assessment and authorization program. 
    • “GSA launched FedRAMP 20x — meant to use more automation in place of annual assessments, cut red tape and speed up authorizations — in March. It announced its phase two pilot on Wednesday.
    • “Barbaccia acknowledged the past problems with FedRAMP at a Wednesday event held by the Alliance for Digital Innovation. 
    • “I have done FedRAMP in my past life,” said Barbaccia, who previously worked at Palantir and more recently at a machine-learning enabled asset manager. “What a pain in the butt.”
    • “The FedRAMP program is planning on pursuing 10 pilot authorizations at the Moderate security level as part of the new phase of FedRAMP 20x, said FedRAMP Director Pete Waterman.”
  • Per a Cybersecurity and Infrastructure Security Agency (“CISA”) news release,
    • Today [September 23, 2025], the Cybersecurity and Infrastructure Security Agency (CISA) announced the appointment of Stephen L. Casapulla as the Executive Assistant Director for Infrastructure Security.
    • “I am pleased to have Steve expand his role on CISA’s leadership team,” said Acting Director Madhu Gottumukkala. “With his extensive experience in critical infrastructure security and working with stakeholders, he is perfectly poised to lead our efforts in securing the nation’s critical infrastructure. I look forward to working with him on this important mission.”
    • Prior to joining CISA, Casapulla served as the Director for Critical Infrastructure Cybersecurity in the Office of the National Cyber Director. He previously spent over thirteen years at CISA and its predecessor, holding a variety of senior roles. His prior federal service includes work at the Small Business Administration and at the Department of State in Iraq. He also serves as an officer in the U.S. Navy Reserve, with over twenty years of service and multiple overseas deployments.

From the cybersecurity vulnerabilities and breaches front,

  • Cybersecurity Dive reports,
    • “The Cybersecurity and Infrastructure Security Agency on Thursday [September 25, 2025,] ordered U.S. government agencies to patch multiple vulnerabilities in Cisco networking products, saying an “advanced threat actor” was using them in a “widespread” campaign.
    • “This activity presents a significant risk to victim networks,” CISA said in an emergency directive that laid out a mandatory timeline for agencies to identify, analyze and patch vulnerable devices.
    • “The hacking campaign — an extension of the sophisticated “ArcaneDoor” operation that Cisco first revealed in April 2024 — has compromised multiple federal agencies, two U.S. officials told Cybersecurity Dive. Both officials requested anonymity to discuss a sensitive and evolving investigation.”
  • Cyberscoop adds,
    • “Cisco said it began investigating attacks on multiple government agencies linked to the state-sponsored campaign in May. The vendor, which attributes the attacks to the same threat group behind an early 2024 campaign targeting Cisco devices it dubbed “ArcaneDoor,” said the new zero-days were exploited to “implant malware, execute commands, and potentially exfiltrate data from the compromised devices.” 
    • “Cisco disclosed three vulnerabilities affecting its Adaptive Security Appliances — CVE-2025-20333, CVE-2025-20363 and CVE-2025-20362 — but said “evidence collected strongly indicates CVE-2025-20333 and CVE-2025-20362 were used by the attacker in the current attack campaign.” 
    • “The Cybersecurity and Infrastructure Security Agency said those two zero-days pose an “unacceptable risk” to federal agencies and require immediate action.”
  • Dark Reading points out,
    • “The Cybersecurity and Infrastructure Security Agency (CISA) this week disclosed that threat actors breached a federal agency last year by exploiting a critical vulnerability in the open source GeoServer mapping server.
    • “In the advisory, CISA said it conducted incident response at a large, unnamed federal civilian executive branch (FCEB) agency after malicious activity was flagged by the agency’s endpoint detection and response (EDR) platform, but found the agency’s response playbook to be lacking; so lacking in fact that it hampered CISA’s investigation and allowed the attackers to burrow deeper into the network unchecked.
  • Cybersecurity Dive adds,
    • “[On September 23, 2025,] the Cybersecurity and Infrastructure Security Agency urged security teams to monitor their systems following a massive supply chain attack that struck the Node Package Manager ecosystem. 
    • “The attack, tracked under the name Shai-Hulud, involved a self-replicating worm that compromised more than 500 software packages, according to StepSecurity. 
    • “After gaining access, a malicious attacker injected malware and scanned the environment for sensitive credentials. The credentials included GitHub Personal Access Tokens and application programming interface keys for various cloud services, including Amazon Web Services, Google Cloud Platform and Microsoft Azure. 
    • “The stolen credentials were uploaded to an endpoint controlled by the attacker and then uploaded to a public repository called Shai-Hulud. 
    • “Researchers at Palo Alto Networks said the attacker used an LLM to write the malicious script, according to an updated blog post released Tuesday.” 
  • Cybersecurity Dive relates,
    • “Hackers are conducting brute force attacks against the MySonicWall.com portal in order to access the company’s cloud backup service for firewalls, SonicWall and federal authorities warned in advisories released Monday [September 22, 2025].
    • “SonicWall said its investigation found that hackers gained access to 5% of backup firewall preference files. The company warned that while credentials inside the files were encrypted, the files contained other information that could help attackers exploit the firewall, according to the advisory.  
    • “SonicWall also released a video explaining the scope of the incident. 
    • “In an advisory on Monday, the Cybersecurity and Infrastructure Security Agency urged customers to log into their accounts to determine whether their devices are at risk.” 
  • Cyberscoop reports,
    • “The Secret Service said Tuesday [September 23, 2025] that it disrupted a network of electronic devices in the New York City area that posed imminent telecommunications-based threats to U.S. government officials and potentially the United Nations General Assembly meeting currently underway.
    • “The range of threats included enabling encrypted communications between threat groups and criminals or disabling cell towers and conducting denial-of-service attacks to shut down cell communications in the region. Matt McCool, special agent in charge of the Secret Service’s New York field office, said the agency’s early analysis of the network indicated “cellular communications between foreign actors and individuals that are known to federal law enforcement.”
    • “In all, the agency said it discovered more than 300 servers and 100,000 SIM cards spread across multiple sites within 35 miles of the U.N. meeting. The Secret Service announcement came the same day President Donald Trump was scheduled to deliver a speech to the General Assembly.
    • “The potential for disruption to our country’s telecommunications posed by this network of devices cannot be overstated,” U.S. Secret Service Director Sean Curran said in a news release.”
  • Cyberscoop warns,
    • “Ambitious, suspected Chinese hackers with a slew of goals — stealing intellectual property, mining intelligence on national security and trade, developing avenues for future advanced cyberattacks — have been setting up shop inside U.S. target networks for exceptionally long stretches of time, in a breach that the researchers who uncovered it said could present problems for years to come.
    • “Mandiant and Google Threat Intelligence Group (GTIG) researchers described the campaign as exceptionally sophisticated, stealthy and complex, calling those behind it a “next-level threat.” But they don’t yet have a full handle on who the hackers are behind the malware they’ve dubbed Brickstorm, or how far it stretches. A blog post the company posted Wednesday sheds light on the group.
    • “The primary targets are legal services organizations and tech companies that provide security services, the researchers said. But the hackers aren’t limiting their interest to the primary targets, since they’ve used that access to infiltrate “downstream” customers. The researchers declined to describe those downstream customers or say whether U.S. federal agencies are among those targeted. A great many of them don’t know yet that they’re victims, they said.
    • “By stealing intellectual property from security-as-a-service (SaaS) firms, the hackers aim to find future zero-day vulnerabilities, a kind of vulnerability that is previously unknown and unpatched and thus highly prized, in order to enable more attacks down the line, the researchers from Mandiant and its parent company Google said.”
  • Per Dark Reading,
    • “Salesforce Web forms can be manipulated by the company’s “Agentforce” autonomous agent into exfiltrating customer relationship management (CRM) data — a concerning development as legacy software-as-a-service (SaaS) providers race to integrate agentic AI into their platforms to zhuzh up the user experience and generate buzz among investors.
    • “Agentforce is an agentic AI platform built into the Salesforce ecosystem, which allows users to spin up autonomous agents for most conceivable tasks. As the story often goes though, the autonomous technology appears to be the victim of the complexity of AI prompt training, according to researchers at Noma Security. 
    • “To wit: The researchers have identified a critical vulnerability chain in Agentforce, carrying a 9.4 out of 10 score on the CVSS vulnerability-severity scale. In essence it’s a cross-site scripting (XSS) play for the AI era — an attacker plants a malicious prompt into an online form, and when an agent later processes it, it leaks internal data. In keeping with all of the other prompt injection proofs-of-concept (PoCs) coming out these days, Noma has named its trick “ForcedLeak.”

From the ransomware front,

  • Cybersecurity Dive reports,
    • “RTX Corp., the parent firm of Collins Aerospace, confirmed that ransomware was used in the hack of its airline passenger processing software, in a filing with federal regulators. 
    • “The attack, discovered on Sept. 19, has disrupted flights across Europe since last week, including at London’s Heathrow Airport, Brussels Airport, and airports in Berlin and Dublin. 
    • “The Multi-User System Environment software, known as MUSE, is used by multiple airlines to check-in and board passengers and is also used to track baggage, according to the filing with the U.S. Securities and Exchange Commission. 
    • “Virginia-based RTX said the MUSE system operates on a customer-specific network outside of the company’s enterprise network.
    • “U.K. authorities said Wednesday that a man in his 40s had been arrested on suspicion of violating the Computer Misuse Act. The police investigation is ongoing.” 
  • Dark Reading points out,
    • “Volvo Group North America (Volvo NA) has been breached via a third-party human resources (HR) software provider.
    • “At the root of the story is Miljödata, a Swedish company specializing in occupational software-as-a-service (SaaS), whose cloud infrastructure was breached in August. Thanks to its centralized, multi-tenant arrangement, hundreds of customers and millions of individuals have been affected. In a recent letter to its staff, Volvo NA, whose parent company is based in Sweden, revealed itself to be one such victim.
    • “Like other Miljödata customers, Volvo NA’s systems were untouched by the attack. Still, its employees’ names and Social Security numbers (SSNs) were stolen, and potentially published to the Dark Web. According to its website, Volvo NA employs just shy of 20,000 people.
    • “For municipalities, universities, and even big corporations like Volvo, this isn’t just a security issue, it’s an integrity issue,” says Anders Askasen, vice president of product marketing at Radiant Logic. “People suddenly wonder whether the systems handling their most sensitive data are fit for the purpose, and with good reason. That loss of confidence is as damaging as the leak itself.”
  • Industrial Cyber tells us,
    • “The Rhysida ransomware gang claimed responsibility for a late-August data breach at the Maryland Transit Administration. Exposed data includes names, surnames, dates of birth, driver’s licenses, SSNs, passports, and confidential information.
    • “The group is said to have demanded a ransom of 30 bitcoin, around US $3.4 million at the time of writing, to be paid within seven days. To support its claim, Rhysida posted images of documents allegedly stolen from the MTA, including scans of a Social Security card, driver’s license, passport, and several other records.
    • “Comparitech identified that to prove its claim, Rhysida posted images of what it says are documents stolen from the MTA. They include scans of a Social Security card, driver’s license, passport, and several other documents. 
    • “The Maryland Transit Administration is a division of the state’s Department of Transportation. It operates buses, light rail, subways, commuter trains, taxis, and a paratransit system. The MTA specifically mentioned the paratransit system, MobilityLink, being disrupted by the cyber attack.”
  • Per the Record,
    • “Ransomware hackers stole Social Security numbers, financial information and more during a recent cyberattack on Union County in Ohio. 
    • “The county government began sending out breach notifications to 45,487 local residents and county employees this week. The letters say ransomware was detected on the county’s network on May 18, prompting officials to hire cybersecurity experts and notify federal law enforcement agencies.  
    • “The hackers stole documents that had names, Social Security numbers, driver’s license numbers, financial account information, fingerprint data, medical information, passport numbers and more.  
    • “No ransomware gang has taken credit for the attack publicly, and the letters said the county has been monitoring internet sources but have not found any indication the stolen information was released or offered for sale.  
    • “The county has about 71,000 residents and is 45 minutes outside of Columbus — which dealt with its own ransomware attack one year ago.” 
  • HIPAA Journal lets us know,
    • “There’s good and bad news on the ransomware front. Attacks are down year-over-year; however, successful attacks are proving even costlier to mitigate, according to the Mid-Year Risk Report from the cyber risk management company Resilience. The company saw a 53% reduction in cyber insurance claims in the first half of the year, which indicates organizations are getting better at preventing attacks; however, when ransomware attacks succeed, they have been causing increased financial harm, with losses 17% year-over-year. While ransomware accounted for just 9.6% of claims in H1, 2025, ransomware attacks accounted for 91% of incurred losses.
    • “On average, a successful ransomware attack causes $1.18 million in damages, up from $1.01 million in 2024, and the cost is even higher in healthcare. Resilience’s healthcare clients suffered average losses of $1.3 million in 2024, and in the first half of 2025, some healthcare providers faced extortion demands as high as $4 million. While it is too early to tell what the severity of claims will be in 2025 until claims are settled, Resilience said there are indications that the average severity of incurred losses for healthcare ransomware attacks this year could be $2 million, up from an average of $705,000 in 2024 and $1.6 million in 2023.”

From the cybersecurity defenses front,

  • Cyberscoop advises,
    • “Artificial intelligence is no longer a future concept; it is being integrated into critical infrastructure, enterprise operations and security missions around the world. As we embrace AI’s potential and accelerate its innovation, we must also confront a new reality: the speed of cybersecurity conflict now exceeds human capacity. The timescale for effective threat response has compressed from months or days to mere seconds. 
    • “This acceleration requires removing humans from the tactical security loop. To manage this profound shift responsibly, we must evolve our thinking from abstract debates on “AI safety” to the practical, architectural challenge of “AI security.” The only way to harness the power of probabilistic AI is to ground it with deterministic controls.”
  • A Dark Reading commentator recommends that “With the emergence of AI-driven attacks and quantum computing, and the explosion of hyperconnected devices, zero trust remains a core strategy for security operations.”
  • Per a CISA news releases,
    • “In today’s increasingly interconnected industrial landscape, operational technology (OT) systems are no longer isolated islands of automation—they’re deeply entwined with information technology and business networks, making them prime targets for cyber threats. Recognizing this growing risk, the Cybersecurity and Infrastructure Security Agency (CISA) collaborated with three U.S. federal agencies and five international partners and received contributions from twelve private sector stakeholders to develop and publish, “Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators”.
    • “This key resource helps owners and operators of OT systems create stronger, more secure infrastructures by building a clear inventory and classification of their assets. By identifying, organizing, and managing OT assets effectively, organizations can not only improve cybersecurity but also enhance operational reliability, safety, and resilience.”
  • Per National Institute of Standards news releases,
    • “NIST has released Special Publication (SP) 800-88r2 (Revision 2), Guidelines for Media Sanitization.
    • “Media sanitization is a process that renders access to the target data on media infeasible for a given level of effort. This guide will assist organizations and system owners in setting up a media sanitization program with proper and applicable methods and controls for sanitization and disposal based on the sensitivity of their information.”
  • and
    • “NIST has released Special Publication (SP) 800-90C, Recommendation for Random Bit Generator (RBG) Constructions. It is the final document in the SP 800-90 series, which supports the generation of high-quality random bits for cryptographic and non-cryptographic use.
    • “SP 800-90C specifies constructions for implementing random bit generators (RBGs) that include deterministic random bit generator (DRBG) mechanisms as specified in SP 800-90A and use entropy sources as specified in SP 800-90B.”
  • Here is a link to Dark Reading’s CISO Corner.

Friday report

David Ermer–CDC, CMS, Congress, COVID-19, Medical / Rx research, Medicare, Mental health care, NCQA, U.S. Healthcare, Uncategorized–

From Washington, DC,

  • Govexec tells us,
    • “Federal employees have been asking a lot of questions since the White House put out guidance this week suggesting large swaths of them would face layoffs under a government shutdown if one occurs next week.
    • “So far the answer many of them are getting is: we are planning to send you home without pay, but only until the shutdown ends. That is to say, agency officials are telling employees they will face their normal shutdown furloughs, but not reduction-in-force notices. 
    • “We were told we won’t be RIF’d, regardless of whether we have to work,” said one General Services Administration employee, whose office is typically furloughed during a funding lapse. 
  • The Centers for Medicare and Medicaid Services announced,
    • [A]verage premiums, benefits, and plan choices for Medicare Advantage (MA) and the Medicare Part D prescription drug program are expected to remain stable in 2026. Average premiums are projected to decline in both the MA and Part D programs from 2025 to 2026.
    • CMS is committed to ensuring these programs work for Medicare beneficiaries while maintaining access to high-quality, affordable healthcare options, safeguarding taxpayer dollars, and making sure beneficiaries have the information they need to make informed choices about what is best for them. 
    • CMS releases this key information, including 2026 premiums, benefits, and access to plan options for MA and Medicare Part D prescription drug plans, ahead of the upcoming Medicare Open Enrollment, which runs from October 15, 2025, to December 7, 2025.
    • “Millions of Medicare beneficiaries will continue to have access to a broad range of affordable coverage options in 2026,” said CMS Administrator Dr. Mehmet Oz. “We want every beneficiary to take advantage of Open Enrollment—compare your options and choose the plan that gives you the right care at the best price.”
  • The American Hospital Association News informs us,
    • President Trump, late Sept. 25, announced that starting Oct. 1, the U.S. will impose a 100% tariff on any branded or patented pharmaceutical product, unless a company is building its pharmaceutical manufacturing plant in America. The president’s post on Truth Social said “is building” will be defined as “breaking ground” or “under construction” and that there would be no tariff on “these Pharmaceutical Products if construction has started.”   
    • As of 3 p.m. ET on Sept. 26, the administration has not released any official documents related to the tariff announcement.  
  • BioPharma Dive adds,
    • “The new pharmaceutical tariffs President Donald Trump announced on Thursday, which will go into effect on Oct. 1, could have a limited impact on the pharmaceutical industry due to multiple exemptions for generics, exports from Europe and companies already onshoring manufacturing.
    • “The tariffs, unveiled via a post on the social media platform Truth Social, haven’t been accompanied by legal documents, leaving key details unclear. However, the 100% levies, which are much smaller than the figure previously floated by the Trump administration, alleviate some uncertainty around U.S. drug pricing policy.
    • “The announcement comes days before the expected release of programs meant to align U.S. drug prices with what’s paid in Europe and elsewhere. Published reports have suggested those policies may be more modest than Trump originally proposed, however.”
  • FedWeek points out,
    • “A new bipartisan group of House members has been formed with a focus on the impact on jobs and delivery performance of the Delivering for America reorganization initiative.
    • “The Congressional Postal Service Caucus will focus on improving on-time delivery rates, protecting postal employees, and stopping harmful facility consolidations that reduce access in rural and underserved areas,” said a statement from the founding members. A caucus is a less formal organization than a congressional committee, typically focusing on issues—and trying to build consensus on them—that cross committee areas of jurisdiction.”
  • NCQA, writing in LinkedIn, lets us know about NCQA researchers sharing findings on emerging topics in health care.

From the public health and medical research front,

  • The Centers for Disease Control and Prevention announced today,
    • “COVID-19 activity has peaked and is declining in many areas of the country, but emergency department visits and hospitalizations are elevated nationally. Seasonal influenza and RSV activity is low.
    • “COVID-19
      • “The percentage of COVID-19 laboratory tests that are positive is declining nationally. The percentage of emergency department visits for COVID-19 are highest in children 0-4 years old. Hospitalization numbers and the percentage of emergency department visits are elevated in adults 65 years and older.
    • “Influenza
    • “RSV
      • “RSV activity is low nationally.
  • The University of Minnesota CIDRAP adds,
    • “The current COVID wave began in June, marked by a slow rise that never approached levels seen last summer.
    • “Wastewater SARS-CoV-2 detections are now at the moderate level and are highest in Northeast, followed by the West and the South.”
  • Prevention notes,
    • “The Stratus COVID variant, a.k.a. XFG, is currently the dominant strain of the virus in the U.S., causing 78% of cases in the country, according to CDC data.
    • “It’s an Omicron variant, and it’s a hybrid of two strains—LF.7 and LP.8.1.2,” says Thomas Russo, M.D., professor and chief of infectious disease at the University at Buffalo in New York.
    • Stratus has several mutations to the spike protein, which the virus uses to infect your cells and make you sick, per the World Health Organization (WHO). But the WHO also notes that the threat posed by Stratus is “low.”
  • The Wall Street Journal reports,
    • “President Trump’s return to office has supercharged the debate about childhood vaccinations. Trump himself recently stated that “children get these massive vaccines…like you give to a horse…they get like 80 vaccines,” while Health Secretary Robert F. Kennedy Jr. asserts that babies get up to 92 vaccine doses. In justifying Florida’s decision to end mandatory vaccine mandates for children, state surgeon general Joseph Lapado asked: “Who am I to tell you what your child should put in [their] body? I don’t have that right.”  
    • “These statements misstate the amount and number of vaccines administered to children. Over the course of 18 years, it’s typically 30 doses—in quantities about a tenth of a teaspoon—for about 16 different pathogens. But the critics raise important questions that parents have every right to ask. Why give vaccines so early in a baby’s life? And why shouldn’t parents just pick and choose what goes into their child?  
    • “The crucial context for this discussion is two facts. First, vaccines constitute only a minuscule fraction of the exposure to pathogens that children’s immune systems must contend with. Second, our bodies develop the most enduring antibodies in the early years of life.”
  • JAMA relates,
    • “For years, most observers attributed the higher number of Alzheimer disease cases among women to the simple fact that they live longer than men on average.
    • “Recently, though, scientists have come to recognize that the explanation for the sex gap in the prevalence of Alzheimer disease, the cause of most cases of dementia, is far more nuanced and complex, involving both biological and sociocultural factors.
    • “Research has focused on such potential contributors as women’s exposure to sex hormones, the genes in the X chromosome, the prevalence and effect of risk factors such as hearing loss, the apolipoprotein E ε4 (APOE4) variant, and diminished cognitive reserve related to lower education levels.
    • “Approximately 2 out of every 3 people living with Alzheimer disease in the US is a woman, Harvard neuropsychologist Rachel Buckley, PhD, noted. “Women actually tend to live with dementia for much longer than men.”
  • Per Health Day,
    • “An experimental pill can significantly reduce hot flashes and night sweats for women after menopause a new clinical trial has determined.
    • “Elinzanetant produced a nearly 74% reduction in the frequency and severity of these menopause symptoms within three months, researchers reported recently in JAMA Internal Medicine.
    • “Further, this relief lasted for a year, the trial found.
    • “This yearlong study not only confirmed the initial findings of rapid and significant reduction in the frequency and severity of hot flashes and night sweats but also provided evidence that these effects were sustained over a year, offering hope for longer-term relief,” researcher Dr. JoAnn Pinkerton said in a news release. She’s director of midlife health at University of Virginia Health in Richmond.”
  • and
    • “Routine screening can help find kids who are suffering from undiagnosed asthma in communities with high levels of the breathing disorder, a new study says.
    • “Asthma screening during well-child visits found that more than two-thirds (35%) of children with no previous diagnosis of asthma had at least one risk factor for the disease, researchers will report Monday at an American Academy of Pediatrics’ meeting in Denver.
    • “Further, about 24% of kids with risk factors were subsequently diagnosed with asthma, researchers said.”

From the U.S. healthcare business front,

  • Beckers Payer Issues reports,
    • “Commercially insured patients pay substantially different rates for the same procedure, with negotiated costs for inpatient procedures varying by an average ratio of 9.1, according to an August report from market intelligence firm Trilliant Health.
    • “The report reviewed health plan transparency data from Aetna and UnitedHealthcare, focusing on 11 inpatient and outpatient procedures.
    • “A coronary bypass without cardiac catheterization, excluding major complications or comorbidities, had negotiated rates ranging from $27,683 to $247,902. Another finding: Outpatient procedures at ambulatory surgery centers would often cost less than those taking place in a hospital’s outpatient department. Colonoscopies, for example, would cost 67.5% less on average than the median hospital rate.
    • “By reviewing a sample of 10 hospitals featured on a collection of “best hospitals” rankings, the researchers also found no correlation between cost and quality.”
  • and
    • “Regional, nonprofit health plans are falling behind large national insurers, with 71% recording an operating loss in 2024 and more than half having two years or less before regulatory intervention is triggered, according to a Sept. 24 report from HealthScape Advisors.
    • “Executives and boards of directors now face the most important decision of their leadership tenures: How do we survive?” the report said.” 
  • Kauffman Hall explains,
    • “The rise of ambulatory surgery centers (ASCs) marks a shift in how surgical care is delivered across the U.S. Amid soaring healthcare costs, tighter reimbursement and advancing surgical technology, health systems are rethinking where and how procedures are done. Many are moving complex surgeries like total joint replacement and spine out of hospitals and into ambulatory settings. Once limited in scope, ASCs are becoming key players in strategically important service lines like orthopedics.” * * *
    • “ASCs are not a magic wand for health systems. While they offer savings to payers, the economics are fragile for providers. Healthy margins require lean operations, smart sourcing and trusted partnerships.
    • “There’s a growing demand for more complex procedures in outpatient settings, but ASCs need to strategically position themselves to meet this demand in an operationally and financially sustainable way.
    • “With advances in surgical technology and care coordination, ASCs are ready to deliver on the promise of value-based care. The challenge for health systems isn’t just to shift where care is delivered, but to rethink how surgical care is structured, managed and financed for long-term performance.”
  • Optum, writing in LinkedIn, discusses how “breakthrough cancer drugs offer better outcomes – but soaring costs pose challenges.”
  • The Wall Street Journal reports,
    • “AstraZeneca AZN said it will offer its asthma and diabetes drugs at an up to 70% discount in the U.S. ahead of a Trump administration deadline for pharmaceutical companies to cut drug prices.
    • “The company said it would launch a direct-to-consumer platform on which eligible patients with prescriptions will be able to purchase its Airsupra and Farxiga drugs in cash at a discount. The platform will be available beginning Oct. 1.
    • “In July, President Trump sent pharmaceutical companies a letter setting a Sept. 29 deadline to propose cuts to their drug prices.
    • “In response, several drugmakers have rolled out direct-to-consumer platforms to offer discounted drugs. Earlier this week, Bristol Myers Squibb said it would offer its plaque psoriasis drug at an up to 80% discount, expanding on its discounted program for blood clot drug Eliquis, which it announced in July.”
  • Fierce Pharma adds,
    • “In an expansion of its previous moves to cut insulin prices, Sanofi will cap the price of each of its insulin products at $35 per month in the U.S. regardless of a patient’s insurance status.
    • “The move, which goes into effect at the start of next year, comes two years after the company slashed the price of its most popular insulin, Lantus, to $35 monthly for those with commercial insurance.
    • “Before that, in June of 2022, Sanofi reduced the price of an unbranded Lantus biologic from $99 per month to $35 for those in the U.S. without insurance.
    • “Sanofi’s cost-cutting efforts have mirrored those of the world’s other two primary sellers of insulin—Novo Nordisk and Eli Lilly—and come as advanced insulin products and insulin biosimilars are reaching the market.”


Thursday report

David Ermer–CMS, Congress, FDA, Generative AI, Medicare, OPM, U.S. Healthcare–

From Washington, DC,

  • The Wall Street Journal reports,
    • “The U.S. government is hurtling toward a shutdown in a matter of days with no exit ramp in sight, as Republicans and Democrats latch onto starkly different positions and the White House threatens to lay off more federal workers.
    • “Republicans are seeking a seven-week extension in federal funding at current levels, and they have dismissed Democrats’ demands for hundreds of billions of dollars in healthcare spending. In a move to raise the political pressure, President Trump’s budget chief late Wednesday vowed to use any lapse in funding to make deeper cuts in the federal workforce, a threat Democrats rejected as blackmail.
    • “Democrats see the funding deadline as a rare opportunity to shape legislation, and the party’s base voters are desperate for elected representatives to show more fight after months of demoralizing political defeats. Republicans are loath to offer any concessions, putting both parties on a collision course ahead of the Oct. 1 deadline.
    • “Democrats have “asked us to do something that’s totally unreasonable,” President Trump told reporters on Thursday. Asked about the possibility of a shutdown, he said: “Could be. Because the Democrats are crazed. They don’t know what they are doing.”
    • “Senate Minority Leader Chuck Schumer (D., N.Y.) has said he plans to stand firm this time and demand bipartisan talks, rather than acquiesce to a Republican plan to keep the government open, like he did in March. He said Democrats won’t be intimidated by the latest threat of federal layoffs.
    • “This is one of their threats, and their threats are not going to succeed,” Schumer said in an interview. “A lot of my colleagues who I’ve talked to today are very angry about this.”
  • Per Roll Call,
    • “Sources on both sides of the aisle and nonpartisan analysts agreed that, beyond the tough talk, top congressional Democrats have a weak hand to play and no discernible strategy for extracting the concessions from President Donald Trump and GOP leaders that they want on health care policy.
    • “A shutdown for the sake of a shutdown doesn’t help anyone,” a former Democratic congressional aide granted anonymity to speak candidly said. “If there is a shutdown, there also needs to be a plan to get out of it — and it will require a deal on all sides to end it, at a time when tensions would be even higher. It’s hard to turn back to bipartisan negotiations after that.”
  • Federal News Network adds,
    • “The Trump administration is taking a more aggressive approach than usual to what would happen in a government shutdown, after a White House memo Wednesday night told agencies to plan for further reductions in force if government funding lapses early next week.
    • “But with just days left before a government shutdown, many are questioning the ability for agencies to put together further RIF plans at all, since the reduction-in-force process is typically complicated and time-consuming, often taking months or longer.”
  • Bloomberg reports,
    • “The US will impose a 100% tariff on branded or patented pharmaceuticals, President Donald Trump announced Thursday.
    • “Starting October 1st, 2025, we will be imposing a 100% Tariff on any branded or patented Pharmaceutical Product, unless a Company IS BUILDING their Pharmaceutical Manufacturing Plant in America,” Trump said in a social media post.
    • “Trump said there would be no tariffs on pharmaceutical products if companies have broken ground on a US manufacturing plant, or if such a plant is under construction.”
  • and
    • “Pharmacy middlemen are working on a proposal to voluntarily change some of their business practices to avoid new regulation from the Trump administration.
    • “The proposals under discussion include ensuring patients don’t pay more than a pharmacy would charge to someone without insurance and increasing the use of lower-cost versions of expensive biologic drugs.
    • “The Pharmaceutical Care Management Association has drafted proposals to bring to the Centers for Medicare and Medicaid Services, according to a document viewed by Bloomberg News.”
  • The American Medical Association adds,
    • “The Department of Commerce Sept. 24 released a notice seeking public comment on an investigation it launched Sept. 2 on imports of personal protective equipment, medical consumables and medical equipment under Section 232 of the Trade Expansion Act of 1962. The provision authorizes the president to impose tariffs or other trade restrictions if an investigation determines that the importation of particular goods affects national security. The department is seeking comment on a range of criteria, including the current and projected demand for PPE, medical consumables and medical equipment; the extent to which production can meet demand; the role of foreign supply chains in meeting U.S. demand; the concentration of U.S. imports of those products and more. Comments are being accepted for 21 days following publication in the Sept. 26 Federal Register.”
  • Bloomberg tops it off with this,
    • “Three hours inland from Chennai, India, traffic crawls on a half-finished road past rice fields and cow crossings until it reaches a newer complex of neat white buildings. Among them is the cancer wing of a hospital founded over a century ago by American missionaries.
    • “By morning, the line of people waiting to be seen at Christian Medical College Vellore’s Ranipet Campus snakes from the parking lot to the front door. In a basement treatment room one day in May, several of those who’ve made it inside sit in beds getting an intravenous drip of a Bristol Myers Squibb Co. drug called Opdivo or a competing Merck & Co. drug, Keytruda. A single infusion might cost at least $7,000 at the standard dose in the US, and a year’s treatment more than $200,000. Here, by financial necessity, most of the patients are getting as little as one-sixth of that.  
    • “The remarkable thing is that the radically low doses may also be effective at keeping cancer sufferers alive, doctors here and in other hospitals across India say. The science isn’t settled, but hospitals in Israel, France, the Netherlands, Canada and the UK are all testing or implementing more modest dose reductions. A small trial in the US also found some benefits. The consequences could be dramatic, expanding access to cancer treatment in poor countries and bending the curve of skyrocketing drug prices in the developed world. Smaller doses could also help limit the serious side effects many patients endure, from diarrhea to thyroid problems.
    • “A broad reevaluation of dosing has the potential to benefit hundreds of thousands of people in developing countries who otherwise wouldn’t be able to afford the drugs. One obstacle has stood in the way: the drugmakers themselves. Paid per dose, they stand to lose billions of dollars if doctors prescribe less medicine to their patients.”
  • From ARPA-H news releases
    • The Advanced Research Projects Agency for Health (ARPA-H), an agency within the U.S. Department of Health and Human Services (HHS), today announced a new research and development opportunity through its Treating Hereditary Rare Diseases with In Vivo Precision Genetic Medicines (THRIVE) program. THRIVE intends to develop integrated platform technologies to accelerate precision genetic medicines (PGMs) and provide single-intervention precision treatments to slow, reverse, or prevent diseases at the genetic level. The program is designed to optimize affordability, scalability, and sustainability of lifesaving PGMs for patients through existing regional treatment centers and virtual clinics. This will allow patients to be seen and treated where they live.” * * *
    • “Learn more about THRIVE on its program page, including information about the solicitation and Proposers’ Day.” 
  • and
    • “The Advanced Research Projects Agency for Health (ARPA-H), an agency within the U.S. Department of Health and Human Services (HHS), today announced a new funding opportunity through its Genetic Medicines and Individualized Manufacturing for Everyone (GIVE) program. With cutting-edge production technologies, the program seeks to establish the U.S. as a frontrunner in advanced manufacturing methods for high-quality genetic medicines.” * * *
    • “Learn more about GIVE on its program page, including information about the ISO solicitation and Proposers’ Day registration.”
  • Per a U.S. Office of Personnel Management news release,
    • The U.S. Office of Personnel Management (OPM) today announced record levels of engagement and leadership from the Chief Human Capital Officers Council (CHCOC) under the Trump Administration, underscoring the Council’s critical role in driving forward personnel policy and workforce reform across the federal government. The Chief Human Capital Officers Council is the principal interagency forum for federal human capital leaders, bringing together the Chief Human Capital Officers from across the Executive Branch to coordinate policy, share best practices, and advance government-wide workforce initiatives.
    • Since January of this year, the Council has held 71 sessions, an increase of almost double compared to the 40 sessions held last year. These sessions cover everything from discussing the Deferred Resignation Program and return-to-office policies to SES performance and collective bargaining. Between January and March alone, the Council convened 34 times in just 50 workdays. Alongside these sessions, the Council has distributed more than 200 communications to federal agencies this fiscal year, including official memos, weekly updates, and special notices.
  • OPM also recently posted Benefits Administration Letter 25-102 about FEHB Enrollment Coordination for Married Federal Employees and Annuitants.
  • Avalere Health discusses an upcoming meeting at which new ICD-10 codes for 2026 will be selected.

From the Food and Drug Administration front,

  • BioPharma Dive relates,
    • “Capricor Therapeutics executives came out of a meeting with Food and Drug Administration officials confident that they can reverse a rejection of their experimental cell therapy for Duchenne muscular dystrophy. 
    • “The FDA turned down Capricor’s application for the drug, deramiocel, in July after questioning the research supporting its effectiveness. At the time, Capricor CEO Linda Marbán said the rejection was a surprise and that no major issues had been raised during the review.
    • “Now, FDA officials are indicating that they will reconsider the application with new data from a clinical trial called Hope-3 that’s already been completed, Capricor said Thursday. That’s important because Capricor won’t have to start all over with a new submission. “This is a giant win for us,” Marbán said during a conference call with analysts. Initial trial results are expected in the middle of the fourth quarter.”
  • and
    • “The Food and Drug Administration on Thursday approved a new medicine for breast cancer, clearing Eli Lilly’s Inluriyo for people with a specific genetic mutation.
    • “Previously known as imlunestrant, the drug has been cleared for use in a subgroup of adults whose metastatic, estrogen receptor-positive, HER2-negative breast cancer has progressed after at least one hormone therapy. The approval makes the treatment available specifically to people who fit that criteria and have mutations to a gene called ESR1 — an alteration Lilly believes to occur in about half of people with that form of the disease either during, or after, exposure to hormone therapy.
    • “The clearance was based on results published in the New England Journal of Medicine last year. Those findings, from a study called EMBER-3, showed that Inluriyo helped reduced the risk of disease progression or death among those with ESR1 mutations by 38% when compared to standard hormone-suppressing therapies. Inluriyo delayed tumor progression by a median of 5.5 months, or close to 2 months longer than those on typical drugs.”  
  • and
    • “Heartflow has received 510(k) clearance for an updated version of its plaque analysis algorithm, the company said Monday.
    • “The updated algorithm shows a 21% improvement in plaque detection, compared to the original version of the technology, the company said. 
    • “Heartflow disclosed the clearance alongside news that Cigna has become the second national insurer after UnitedHealthcare to update its policies to cover the plaque analysis product.”
  • MedPage Today points out,
    • “A risk evaluation and mitigation strategies (REMS) program is no longer required for the thyroid cancer therapy vandetanib (Caprelsa), the FDA announced on Thursday.
    • “The agency had required the safety program for vandetanib to ensure appropriate heart rhythm monitoring and safe use since its approval in 2011opens in a new tab or window as treatment for medullary thyroid cancer in patients whose disease has spread or cannot be surgically removed.
    • The approval of vandetanib was based on results from the phase III randomized ZETA trial in which patients randomized to receive vandetanib experienced a 65% reduction in the risk of disease progression compared to patients on placebo. A REMS was required for vandetanib due to potential for QT prolongation and reported cases of torsades de pointes and sudden death in patients taking the drug.
  • Fierce Pharma informs us,
    • “After nearly two decades in the endocrine scene, Crinetics is making its commercial debut with the approval of a game-changing treatment for the rare growth disorder acromegaly.
    • “The FDA on Thursday signed off on Crinetics’ paltusotine—now christened Palsonify—as a first-line treatment for adults with acromegaly for whom surgery didn’t work or isn’t an option.
    • “The drug is a selectively targeted somatostatin receptor type 2 (SST2) agonist. Unlike other somatostatin drugs that make up the bulk of current acromegaly care options, Palsonify is a small molecule, non-peptide therapy that can be taken orally, freeing up patients from frequent and often painful injections.
    • “The treatment marks the “next level of care for patients with acromegaly,” Scott Struthers, Ph.D., co-founder and CEO of Crinetics, said in a recent interview with Fierce Pharma, staking that claim on the drug’s ability to both help control patients’ hormone levels and address their symptoms in a once-daily treatment option.”
  • Per FDA news release,
    • “Today, the U.S. Food and Drug Administration authorized marketing of the Essilor Stellest eyeglass lenses to correct myopia, commonly referred to as nearsightedness, with or without astigmatism and to slow the progression of the disease in children 6 to 12 years old at the initiation of treatment.”

From the judicial front,

  • Modern Healthcare reports,
    • “A federal court has tossed a rule outlining how auditors must review Medicare Advantage insurance companies for overpayments, adding uncertainty to the federal government’s plan to audit every plan annually.
    • “On Thursday, Judge Reed O’Connor, of the U.S. District Court for the Northern District of Texas in Fort Worth, vacated the 2023 Medicare Risk Adjustment Data Validation, or RADV, rule, on the grounds that regulators violated the Administrative Procedure Act of 1946.”
    • “Under the rule, which was finalized in January 2023, the Centers for Medicare and Medicaid Services eliminated a key statistical tool, the fee-for-service adjuster, used to compare error rates in traditional Medicare versus Medicare Advantage. Regulators planned to apply the new audit method retroactively to insurers’ risk-adjustment code reviews dating back to 2018. When the rule was finalized, CMS estimated that the more stringent reviews would result in insurers returning $4.7 billion to the agency between 2023 and 2032. 
    • “Humana sued over the rule in September 2023, alleging the new audit methodology held private Medicare insurers to a higher standard than the fee-for-service program. 
    • “O’Connor sided with the insurer.  In a Thursday order, he ruled that CMS failed to adequately notify the industry that actuarial equivalence between traditional and Medicare Advantage plans no longer applied.
    • “Because there was no meaningful notice of defendants’ ultimate finding that actuarial equivalence does not apply to RADV audits, there was no meaningful dialogue regarding the costs and benefits of the surprise changes,” O’Connor wrote in the order.” 

From the public health and medical / Rx research front,

  • MedPage Today lets us know,
    • “Women who missed their first screening mammogram had a 53% higher risk of stage III breast cancer over the next 25 years and almost a fourfold higher risk of stage IV breast cancer.
    • “Breast cancer mortality was 40% higher among screening nonparticipants.
    • “Breast cancer incidence was nearly identical, suggesting the increased risk of later-stage diagnosis and breast cancer mortality resulted from delayed detection.”
  • Per Health Day,
    • “During August 2021 to August 2023, only 36.4 percent of U.S. adults had no cardiovascular disease (CVD) risk factors, according to a September data brief published by the National Center for Health Statistics.
    • “Catharine A. Couch, Ph.D., R.D., from the National Center for Health Statistics in Baltimore, and colleagues presented prevalence estimates for none, one, or two or more CVD risk factors (uncontrolled high blood pressure, uncontrolled high blood lipids, uncontrolled high mean blood glucose, and high body mass index) in U.S. adults from August 2021 to August 2023.
    • “The researchers found that 36.4, 34.9, and 28.7 percent of U.S. adults had no, one, and two or more CVD risk factors, respectively. More men than women had two or more CVD risk factors (31.7 versus 25.8 percent). With age, there was a decrease in the percentage of adults with no CVD risk factors, while a higher percentage of older adults had one or two or more CVD risk factors. Those with family income 350 percent or more of the federal poverty level had the highest percentage of adults with no CVD risk factors and the lowest percentage with two or more CVD risk factors. The percentage of adults with two or more CVD risk factors increased from 2013 to 2014 to August 2021 to August 2023.”
  • and
    • “Physical frailty may contribute to the development of dementia, according to a study published online Sept. 17 in Neurology.
    • “Xiangying Suo, from the School of Public Health of Zhengzhou University in China, and colleagues conducted a prospective cohort study based on U.K. Biobank participants without dementia to examine the link between physical frailty and dementia. Five criteria were used to define physical frailty (weight loss, exhaustion, physical inactivity, slow walking speed, and low grip strength).
    • “A total of 8,900 dementia cases were documented during a median follow-up of 13.58 years among 489,573 participants. The researchers found that the risk for dementia was significantly higher in those with prefrailty and frailty compared with nonfrail individuals (hazard ratios, 1.50 and 2.82, respectively). Compared with those with low genetic risk and nonfrailty, the highest risk for dementia was seen for participants with frailty and high genetic risk (hazard ratio, 3.87 for high polygenic risk score; 8.45 for APOE-ε carriers). A potential causal relationship was seen between physical frailty and dementia in the forward Mendelian randomization (MR) analysis (odds ratio, 1.79), while a null causal association was suggested in the reverse MR. Potential underlying mechanisms linking physical frailty to dementia include genetic background and neurologic and immunometabolic function.”
  • BioPharma Dive considers “Cancer patients are living longer than ever. Pain drugmakers haven’t kept up. Decades of slow-moving research, along with broader failures of the healthcare system, have left millions of people in daily pain. Doctors fear that’s bound to continue.”
  • BioPharma Dive also notes,
    • “Eli Lilly has canceled one clinical trial of an experimental muscle-sparing obesity drug, citing “strategic business reasons,” according to a federal database. The study was one of two Phase 2 trials testing the drug, known as bimagrumab, alone or with Lilly’s marketed medicine in people with obesity. The now-halted study included Type 2 diabetics as well.
    • “In an email to BioPharma Dive, a Lilly spokesperson said company executives “routinely evaluate our clinical development programs to optimize the potential for each product” and noted that a separate trial involving non-diabetic people with obesity is still underway. The trial stoppage was first reported by Bloomberg.
    • “Bimagrumab is among the drugs designed to preserve muscle in people taking weight loss drugs like Zepbound and Novo Nordisk’s Wegovy, which can cut lean mass as well as fat. But at least one biotech has said that additive weight loss effects are an approval requirement, suggesting higher clearance standards have been established by the Food and Drug Administration.”
  • The Washington Post explains why the brain hangs on to some memories but allows others to fade. Tying “fragile” memories to emotional events could help people remember them better in the future, researchers at Boston University believe.”
  • Per a National Institutes of Health news release,
    • “Today, the National Institutes of Health (NIH) announced the award of contracts for launching the Standardized Organoid Modeling (SOM) Center, a national resource that will be dedicated to using cutting-edge technologies to develop standardized organoid-based new approach methodologies (NAMs) that deliver robust, reproducible, and patient-centered research findings. With contracts totaling $87 million for the first three years, the center will be housed at the Frederick National Laboratory for Cancer Research (FNLCR), a facility supported by NIH’s National Cancer Institute (NCI). The center’s goal will be to leverage the latest technologies to enable real-time optimization of organoid protocols.
    • “This groundbreaking initiative will transform how we conduct biomedical research through innovative approaches to advancing human-based technologies,” said NIH Director Dr. Jay Bhattacharya. “By creating standardized, reproduceable, and accessible organoid models, we will accelerate drug discovery and translational science, offering more precise tools for disease modeling, public health protection, and reducing reliance on animal models.”

From the AI front,

  • STAT New reports,
    • “Artificial intelligence may help radiologists spot disease, but throwing the technology at millions of CT scans or mammograms is not without risks to patients and may drive up costs without showing much benefit. Katie Palmer reports on two efforts to prove out the potential.
    • “A large randomized controlled trial will explore the value of AI-aided mammography in screening for breast cancer. The technology is already widely used in the U.S., but the best evidence that it’s useful comes from Europe. The $16 million trial is funded by the Patient-Centered Outcomes Research Institute. Read more on what researchers may find here.
    • “Next month, NYU Langone Health will begin checking bone density in CT scans of people over 65 for osteoporosis, a condition that often goes undetected until someone breaks a bone. The health system may expand the work if it’s proven to help. This kind of opportunistic screening, which repurposes otherwise acquired scans, could be used to identify many treatable conditions. Katie’s interview is worth a read.”

From the U.S. healthcare business front,

  • Fierce Healthcare reports,
    • “CommonSpirit Health closed another fiscal year with operations in the red, with the large Catholic nonprofit pointing to expenses growth outpacing revenues “despite strong volume, salary cost management and higher productivity.”
    • “The 138-hospital system reported an as-recorded operating loss of $687 million (-1.8% operating margin) for the fiscal year ended June 30, 2025, as compared to the prior year’s $581 million operating loss (-1.5% operating margin).
    • “However, after adjustments to normalize delayed income from the California Provider Fee Program, CommonSpirit somewhat improved its stature with a $225 million operating loss (-0.6% adjusted operating margin) as opposed to fiscal 2024’s $875 million operating loss (-2.4% adjusted operating margin).
    • “Net income in fiscal 2025 was $1.1 billion as recorded and nearly $1.6 billion as adjusted, both increases over the prior year’s respective $797 million and $503 million.”
  • and
    • “Value-based cancer care navigation company Thyme Care raised $97 million in series D funding backed by major strategic investors across payers, employers, health systems and retail health.
    • “The latest funding propels Thyme Care’s valuation to north of $1 billion, a 2x increase from its valuation in July 2024 when it raised $95 million, according to a company spokesperson.
    • “The company plans to use the new funding to expand its business across verticals and to take on more breaking points in the oncology journey that drive up costs and cause friction in the patient experience, Robin Shah, CEO and co-founder of Thyme Care, told Fierce Healthcare.
    • “Thyme Care is now focused on tackling treatment denials, high drug costs and “the barriers that delay or prevent access to timely, affordable and appropriate care,” Shah said.’
  • and
    • “Medicare Advantage (MA) has been a consistent earnings booster for insurers, but recent challenges in this space are likely to ding profitability, according to a new report.
    • “Analysts at AM Best found that elevated utilization trends beginning in 2023 led to a $5.7 billion underwriting loss in 2024 for MA plans, while insurers reported gains in the previous five years. Underwriting gains in MA accounted for 40% of total gains from 2019 to 2022, but that dropped to 20% in 2023.
    • “The report found that close to three-quarters of companies with a significant concentration in MA reported underwriting losses in 2024.
    • “Medicare Advantage enrollment and premium continue to grow as more people are aging into the program. However, plans have experienced an increase in utilization and medical trends that have persisted longer than expected,” said Jason Hopper, associate director for industry research and analysis at AM Best, in a press release.“
    • “Changes to the risk-adjustment payment model by the Centers for Medicare and Medicaid Services, as well as lower Star Ratings across the industry, also have contributed to recent underwriting losses,” Hopper said.
  • MedTech Dive informs us,
    • “Guardant Health and Quest Diagnostics will collaborate to offer Guardant’s Shield blood-based colorectal cancer test through Quest’s distribution network, the companies said Wednesday.
    • “Physicians will be able to order the test through their Quest accounts and electronic health record starting in the first quarter of 2026.
    • “In an investor day presentation, Guardant Co-CEO AmirAli Talasaz also revealed plans to expand Shield to include multi-cancer detection. The multi-cancer offering will be available nationally in October.”
  • Modern Healthcare reports,
    • “As more upstarts strive to make a splash in the pharmacy benefit manager sector, RxBenefits CEO Robert Gamble thinks his company has devised something truly novel.
    • “Like other companies seeking to disrupt a market dominated by CVS Health subsidiary CVS Caremark, UnitedHealth Group division Optum Rx and Cigna unit Express Scripts, Illuminate Rx promises pharmacy benefits without spread pricing or hidden fees, and with transparency and a focus on generic and biosimilar drugs. The company launched Illuminate Rx this month.
    • “What Gamble said differentiates this offering is that RxBenefits has added an in-house PBM to its marketplace platform, where self-funded employers, brokers and benefits consultants can select among Illuminate Rx and other PBMs for the best deals.”
    • “RxBenefits, which serves 3 million insurance members and manages $3 billion in annual pharmacy spending, named veteran executive Gamble as CEO last December following Wendy Barnes’ departure to become president and chief executive of the pharmaceutical discount vendor GoodRx.”