Weekend update

Agentic & Generative AI

Weekend update

David Ermer–Agentic & Generative AI, CMS, Congress, FDA, Federal employment benefits, Medical / Rx research, Medicare, No Surprises Act, OPM, SCOTUS, U.S. Healthcare, Uncategorized–

Simplicity is a virtue.

From Washington, DC

  • Both Houses of Congress have left Capitol Hill for the campaign trail.
  • SCOTUSblog reports,
    • The Supreme Court’s 2026-27 term will officially kick off on Monday [October 5]. The justices will hear argument that morning in two cases: Suncor Energy Inc. v. County Commissioners of Boulder County, on whether a lawsuit filed in Colorado state court seeking to hold energy companies responsible for their alleged role in climate change can go forward, or whether federal law instead bars such claims; and Johnson v. United States Congress, on whether a federal district court may hear a constitutional challenge to a law limiting disability benefits for certain incarcerated veterans.”
  • The Centers for Medicare and Medicaid Services announced last Thursday,
    • Medicare Improvement Fund Premium Rebate Frequently Asked Questions
    • Q: What will the Medicare Improvement Fund do for Medicare beneficiaries? 
    • A: The Administration is making a $90 Premium Rebate available for Part B premiums to certain Medicare beneficiaries because the best way to improve Medicare is to put healthcare dollars back where they belong – in the hands of our Medicare beneficiaries – and make coverage more affordable. 
    • Q: How much is the Medicare Improvement Fund Premium Rebate and when will beneficiaries receive it?
    • A: Eligible beneficiaries will receive one $90 rebate in October 2026. Most beneficiaries will receive a direct deposit for $90 on or around October 8th followed by an email or a letter from the President in mid-October. Some beneficiaries will receive a paper check for $90 from the U.S. Department of the Treasury later in October with the following accompanying message “Medicare Improvement Fund Payment; $90 Payment to Offset October Premium.” 
    • Q: Who will receive the Medicare Improvement Fund Premium Rebate?
    • A: The 20.8 million Americans in Original Medicare Part B who are: (1) Living in the United States, are (2) not receiving premium assistance from Medicaid; or, (3) not paying an Income-Related Monthly Adjustment Amount. Beneficiaries enrolled in Medicare Advantage are not eligible.
  • FEHBlog observation — While the FEHBlog is on Original Medicare Part B and lives in the U.S. he is ineligible for the rebate because he pays an IRMAA fee on top of his Part B premiums. It’s still a good deal.
  • The Wall Street Journal reports
    • “A new White House task force will have 120 days to report on the risks and opportunities of artificial intelligence—and determine the federal government’s responsibility—according to Jay Clayton, the director of national intelligence who effectively becomes the administration’s AI czar.
    • “The president asked that a group be put together that was going to ensure exactly what he said,” Clayton said, that “we stay the leaders in superintelligence, and that the interests of the American people are put first.” 
    • “Clayton will chair the “Super Intelligence Force” which takes President Trump’s preferred name for AI: super intelligence or SI.” * * *
    • “The task force will have three vice chairs: Emil Michael, undersecretary of war for Research and Engineering, who will be responsible for coordination with AI companies; Scott Kupor, director of the Office of Personnel Management, who will be responsible for coordination with critical infrastructure providers and other industry stakeholders; and Andrew Ferguson, chairman of the Federal Trade Commission, who will oversee consumer interests and groups advocating for people of faith, children, privacy, freedom of speech, freedom of expression, and freedom of association.
    • “Members of the task force will include Vice President JD Vance, Defense Secretary Pete Hegseth, Richard Walters, White House deputy chief of staff, Bessent, Wiles and others. External participants will include venture capitalists David Sacks, co-chair of the president’s Council of Advisors on Science and Technology and Condoleezza Rice, former Secretary of State in the George W. Bush administration, who will provide advice on national security.”

From the U.S. Office of Personnel Management front,

  • My Federal Retirement considers whether “Fraud is driving your FEHB premium increase based on what OPM’s numbers reveal.
    • OPM’s numbers fail to consider that the proper payment rate for the carriers that cover the vast majority of FEHB and PSHB members is 99.9% according to paymentaccuracy.gov and what’s more OPM, not withstanding carrier requests, has not implemented the HIPAA 820 electronic roster transaction which would allow carriers to reconcile premiums with individual enrollee coverage. The HIPAA 820 has been around since 2012.
  • FedSmith reports,
    • “Seven months ago, the OPM retirement backlog stood at a record 65,237 claims. At the end of September 2026, it stood at just 8,814, the lowest total in data going back to January 2012.
    • “September also closed out fiscal year 2026 (FY 2026), which ran from October 2025 through September 2026. It was by far the busiest year in the data for both incoming and completed retirement claims.
    • “New claims received: 179,958, up 59% from FY 2025 (112,857) and well above the previous high of 116,463 in FY 2013
    • “Claims processed: 178,551, up 70% from FY 2025 (104,800)
    • “Backlog: began the year at 23,552, peaked at 65,237 in February, and ended at 8,814
    • “The wave of claims that defined the first half of the year followed the end of the deferred resignation period in September 2025 and broader reductions to the federal workforce. Monthly intake has since settled back toward more typical levels, with fewer than 9,000 new claims in three of the last four months.”
  • FEHBlog observation: The favorable change is attributable to the OPM Director’s implementation of a digital retirement claim system. The HIPAA 820 would similarly reduce the time needed to process premiums and for the first time allow carriers to reconcile premiums with individual enrollments.

No Surprises Act News,

  • The Centers for Medicare and Medicaid Services announced last Friday
    • “On November 1, 2026, the Notice of IDR Initiation web form will include new functionality to enforce certain batching provisions under the Federal IDR Operations Final Rule (final rule).
    • “The new functionality to be added to the Notice of IDR Initiation web form includes:
    • Any batched dispute submitted with an open negotiation period start date on or after November 1, 2026, will be limited to 50 dispute line items.
    • “System validations will enforce the timely initiation of a dispute after a 30-business-day cooling off period by preventing any dispute initiated after the cooling off period from being initiated before the end of the cooling off period or more than 4 business days after the end of the cooling off period.
    • “In addition to the Notice of Initiation web form changes, the payment determination letters will reflect the correct cooling off period based on the dispute type and open negotiation period start date.”
  • CMS Notes:
    • “Batched disputes with an open negotiation period start date before November 1, 2026, will continue to be subject to the 90-calendar-day cooling off period.
    • “Single and bundled disputes will also continue to be subject to the 90-calendar-day cooling off period regardless of the open negotiation period start date.
    • “For disputes subject to a 90-calendar-day cooling off period, disputing parties will continue to have 30 business days after the end of the cooling off period to submit a dispute to the Federal IDR process for any items or services whose open negotiation period expired during the cooling off period.
    • “System validations will continue to prevent any dispute from being initiated before the end of the 90-calendar-day cooling off period.
    • “Furthermore, system validations were added on September 24, 2026, to enforce timely initiation of disputes following a 90-calendar-day cooling off period, preventing any dispute initiated after the cooling off period from being initiated more than 30 business days after the end of the cooling off period.”‘

From the public health and medical research front,

  • The New York Times reports.
    • “The Food and Drug Administration said on Friday that it had found two samples of the cyclospora parasite during its investigation of Taylor Farms facilities in Mexico, strong new evidence that an outbreak that sickened thousands in the United States this summer came from lettuce produced by the company.” * * *
    • “Also on Friday, the F.D.A. announced a series of actions intended to prevent future cyclospora outbreaks. Those included greater surveillance of foods that have caused past outbreaks, which can include cilantro and raspberries, and outreach to growers about how to reduce the risk of produce contamination with the parasite.
    • “It is difficult to know whether those steps will be effective at preventing future outbreaks, since the F.D.A. has not yet determined how the lettuce at Taylor Farms was contaminated, said Jim Gorny, a produce safety expert who retired from the agency in 2024.
    • “Aside from that,” he said, “it’s just a recommitment to employ the same strategies and tactics over and over again hoping for a different outcome.”
    • “Bill Marler, a lawyer based in Washington State whose office represents about 500 people sickened in the outbreak, said there is still more to learn from additional analysis of the samples from the inspection and stool samples of those who fell ill.
    • “But before next growing season, he said, it would be ideal if federal officials could invest in the development of a water test to routinely surveil water for cyclospora, which does not currently exist. He would also like to see officials enforce a federal rule requiring food companies to hand over supply chain records in 24 hours after a product is implicated in an outbreak.
    • “The F.D.A. finalized such a rule but delayed its implementation last year, potentially slowing down the response to this outbreak, The New York Times found.”
  • The Independent relates,
    • “Florida is experiencing its largest dengue outbreak in decades, with 252 locally acquired cases reported as of late September, among the highest totals seen in the continental U.S. in several decades.
    • “The vast majority of cases have been reported in Hillsborough County, home toTampa, where officials are ramping up mosquito-control efforts, according to the latest numbers released by state health officials. Florida has also recorded 245 travel-associated cases this year, while at least 13 Hillsborough County cases involved people who had recently traveled.
    • “The surge has prompted Hillsborough, Pasco and Pinellas counties to declare local states of emergency and step up efforts to kill mosquitoes and eliminate standing water where they breed.” * * *
    • “Dengue is a viral infection spread primarily through bites from infected Aedes aegypti and Aedes albopictus mosquitoes, both of which are found in Florida. Some people have no symptoms, while others can develop a sudden fever, severe headache, pain behind the eyes, muscle and joint pain, nausea or vomiting.
    • “Most people recover, but dengue can sometimes become severe, causing bleeding, shock and death. Florida has reported one dengue-related death this year, involving an elderly Tampa woman who died on September 4.”
  • MedPage Today reminds us,
    • “It’s October and time for flu shots.
    • “Medical experts urge getting a flu vaccination soon, before influenza starts spreading widely — and to get up to date on protection against other fall respiratory viruses, too. Updated COVID-19 shots are available now, plus shots for people especially vulnerable to another winter risk, respiratory syncytial virus (RSV).
    • “While these infections make many people feel miserable for a few days before they recover, every year flu alone causes hundreds of thousands of hospitalizations in the U.S. and kills tens of thousands.”
  • Surprisingly, Health Day informs us,
    • “Colon cancer in U.S. adolescents is on the rise, experts say, and a new report finds it’s typically caught in its more deadly later stages.
    • “Colorectal cancer is, unfortunately, becoming more common in adolescents and young adults and represents a different disease than colorectal cancer diagnosed in older adults,” said study author Dr. Erica Arnold, a pediatric surgery research fellow at Nationwide Children’s Hospital in Columbus, Ohio.
    • “She said colon cancer diagnosed in adolescents “is often aggressive, presenting with late-stage disease and associated with high rates of disease relapse and mortality.” She spoke in a news release from the American Academy of Pediatrics (AAP).” * * *\
    • “The study said symptoms that could indicate colon cancer in young people include unexplained weight loss, rectal bleeding, back/abdominal pain and changes in bowel habits. 
    • “Because colon cancer is so unexpected in this age group, diagnosis is often delayed, the study group warned. 
    • “Children and adolescents without known colorectal cancer predisposition syndromes experience delays in diagnosis and the majority do not have a known family history,” the researchers noted in their study. 
    • “Routine colon cancer screening for people at average risk usually begins at age 45.
    • “The study authors urged physicians to consider this cancer in any young person presenting with symptoms such as abdominal pain or rectal bleeding. 
    • “Because these findings were presented at a medical meeting, they should be considered preliminary until published in a peer-reviewed journal.”

From the U.S. healthcare business and artificial intelligence front,

  • The New York Times reports,
    • Starting Thursday [October 1], women across the United States will be able to find out their risk of developing breast cancer in the near future with the help of an A.I. tool that examines a single recent mammogram.
    • “Everlywell, a digital health company, announced it would now offer patients nationwide access to Clairity Breast, an A.I. tool approved by the Food and Drug Administration last year to predict a woman’s five-year risk of breast cancer based on imaging. The test, which was previously available only at select locations in Massachusetts and Colorado, will cost $249. It is not covered by insurance.
    • “Doctors use mammograms to detect the presence of cancer, sometimes with the help of A.I. models that can read the images. But Clairity’s software uses the scans for a different purpose: predicting the risk of developing cancer and providing a probability score that reports the patient’s future risk in the form of a percentage, from zero to 100.
    • “That score, which doctors should consider along with other clinical information like family and patient medical history and other risk factors, could aid in efforts to detect cancers earlier, when they are more treatable and more likely to have better outcomes, said Dr. Eleonora Teplinsky, head of breast and gynecologic medical oncology at Valley Health System in Paramus, N.J.”
  • BioEngineer relates,
    • “Sleep problems in children are far more than a nightly nuisance for exhausted families. According to a recent nationally representative study by Carney and colleagues published in the Journal of Clinical Sleep Medicine, sleep disorders among children and adolescents in the United States add an estimated 2.88 billion dollars in health care expenditures every year, a burden significantly higher than that carried by children without sleep disorders.
    • “The finding, highlighted in an open access commentary by pediatric sleep specialist Sally L. Davidson Ward of Children’s Hospital Los Angeles and the Keck School of Medicine of USC, reframes pediatric sleep health as a major economic and public health issue rather than a niche clinical concern. The commentary argues that recognizing, treating, and where possible curing sleep disorders in individual children could simultaneously reduce spending, improve quality of life, boost school attendance, and free parents to work and care for their families.
    • “The underlying evidence comes from the Medical Expenditure Panel Survey, administered by the US Agency for Healthcare Research and Quality, covering the years 2017 through 2022. This survey is unusual in that it captures data from households themselves as well as from their medical providers, including clinics, hospitals, home health agencies, and pharmacies, along with a sample of insurance plans offered by employers. Crucially, the analysis adjusted for covariates and comorbidities that either facilitate or impede access to health care, or that influence the perceived need for care. That methodological rigor matters, because the question of whether sleep disorders drive excess spending, or whether sicker children simply use more services of every kind, is exactly the kind of confounding that national datasets can help untangle when handled carefully.”
  • The Washington Post discusses how to use patient advocates at the time of a family health crisis.
  • Last but certainly not least, AHIP created an illuminating infographic breaking up a dollar bill based on prescription drug spending.
    • “Health plans and PBMs [combined] retain just over one cent of every dollar spent on prescription drugs as profits — compared to 6.5 cents brand manufactures take in profits.”

Cybersecurity Saturday

David Ermer–Agentic & Generative AI, Congress, Cybersecurity, OPM, Uncategorized–

From the frontier AI and Project Glasswing front,

  • OPM’s CIO Adam Starr, writing in the OPM Director’s Secrets of OPM blog, lets us know,
    • “OPM has joined Anthropic’s Project Glasswing and OpenAI’s Daybreak, two industry initiatives that provide cyber defenders with access to advanced AI tools. Early results across Glasswing’s partner organizations are promising — more than 10,000 high- or critical-severity vulnerabilities identified in the first month. OPM will continue to pursue partnerships and capabilities that strengthen our defensive posture and protect the federal workforce data we are entrusted to secure.
    • “That moves the bottleneck. The hard part isn’t finding the hole anymore. It’s patching it.
    • “The flaws attackers are already exploiting have a name: KEVs, for the Known Exploited Vulnerabilities in the Cybersecurity and Infrastructure Security Agency’s catalog. My top security metric at OPM is simple: whether we’ve patched every KEV, and how fast.
    • “Now do that 119 times.
    • “The federal government runs roughly 119 separate HR IT systems. When a vendor ships a critical fix, every agency running that software applies it separately, on its own timeline. An attacker only needs one that’s behind.”
  • Tech Target adds,
    • “When Anthropic introduced Project Glasswing in April, the tech industry braced for impact. Five months in, DevSecOps teams are wading through the glut of discoveries to find out what’s worth patching – and so far, it isn’t much, according to one cybersecurity researcher.
    • “Anthropic updated its Vulnerability Disclosure ledger for the first time in August. A small percentage of initial Mythos vulnerability findings made it into the ledger, and fewer than 1% of the vulnerabilities Mythos found were marked as fixed, according to Patrick Garrity, a security researcher at vulnerability prioritization tool maker Vulncheck.
    • “Garrity and Vulncheck have also been tracking whether vulnerabilities discovered with AI are actually exploited in the wild. This research combined vulnerabilities attributed to Anthropic’s model with data from the Berkeley Vulnerability Research Initiative and correlated them with Vulncheck’s known-exploited vulnerability data.
    • “Of the 1,061 vulnerabilities attributed to AI-assisted discovery, only 14 had been listed as exploited in the wild as of June 2026. That’s roughly 1%.
    • “You discover a vulnerability — that doesn’t mean it’s necessarily useful for an attacker. It doesn’t mean it’s necessarily going to be exploitable with certain conditions,” Garrity said.”
  • The Wall Street Journal relates,
    • “OpenAI says it is scrapping the release of its next-generation AI model over safety concerns that researchers raised during internal testing, in one of the clearest signs so far that agent misbehavior could stymie the industry’s rapid progression.
    • “The move follows a summer punctuated by reports of artificial-intelligence systems industrywide going rogue, and marks a rare case of a major AI developer ditching a new release because of safety concerns.
    • “The company had planned to launch the model, known as GPT-6.1 Astra, in the coming days or weeks, aiming for an October debut. The model was more capable than the company’s previous models in completing challenging tasks from end-to-end without human assistance, as well as writing.
    • “The company instead will focus on improving the safety of future models, which it expects to be even more capable.”
  • and
    • “Nvidia NVDA  launched a software platform to help developers test and deploy artificial-intelligence agents and keep them in a secure environment, ramping up efforts to contain the technology following a string of rogue incidents in recent months.
    • “The chip giant said its Nvidia Open Agent Safety Platform includes tools that let developers continuously monitor and govern AI behavior, ensuring agents follow the rules. Nvidia said the platform included a watchdog that can quarantine agents that attempt to move outside their boundaries in milliseconds, as well as software to enforce what agents can see, do, and interact with.”

From the cybersecurity policy and law enforcement front

  • Beckers Health IT reports,
    • “The Senate passed the bipartisan Health Care Cybersecurity and Resilience Act (S. 3315) by unanimous consent.
    • “The legislation aims to help healthcare providers strengthen their cybersecurity defenses and protect patient information, according to an Oct. 1 news release from the Senate Committee on Health, Education, Labor and Pensions.
    • “Sens. Bill Cassidy, MD, R-La., Maggie Hassan, D-N.H., John Cornyn, R-Texas, and Mark Warner, D-Va., released statements on the Senate’s passage. Sens. Cindy Hyde-Smith, R-Miss., and Angus King, I-Maine, also co-sponsored the bill.
    • “Mr. Cornyn said the legislation would strengthen coordination among federal agencies and improve security practices for rural providers. Ms. Hassan said it would help hospitals and other providers, particularly rural organizations with fewer resources, strengthen cybersecurity and respond faster to attacks.”
  • The Wall Street Journal notes,
    • “President Trump is expected to name Director of National Intelligence Jay Clayton as the new artificial intelligence czar, spearheading AI policy across the administration, according to people familiar with the decision.
    • “The decision isn’t final, the people said, and no official announcement has been made. But the appointment comes as the White House is racing to address the threats posed by the latest models and boost the technology’s popularity. 
    • “Before Clayton was confirmed in July to lead the Office of the Director of National Intelligence, he served as the U.S. attorney for the Southern District of New York. He attended Tuesday’s meeting at the White House with AI leaders including OpenAI President Greg Brockman, Anthropic’s Dario Amodei, and Nvidia CEO Jensen Huang. Afterward, Trump was asked by a reporter if Clayton was under consideration for the role. He responded that Clayton is a “good man” and a “good idea.” CBS News earlier reported the potential appointment.”
  • The Wall Street Journal further relates,
    • “The Federal Trade Commission is investigating Anthropic and OpenAI to determine whether they deceived consumers about the potential harms of their artificial intelligence, the WSJ reports. The agency plans to send civil subpoenas to the two companies in the coming weeks, as well as third-party AI evaluator METR, author of an August report revealing how OpenAI agents secretly collaborated on a message board they built inside OpenAI.
    • “AI CEOs publicly signed White House safety principles alongside President Trump this week, but privately executives like Nvidia’s Jensen Huang pressed Anthropic’s Dario Amodei over his stark public warnings about AI risks, revealing tensions that could complicate the industry’s self-regulation plans, the WSJ reports.”
  • Cyberscoop tells us,
    • “Collaboration with industry is key to balancing AI security risks and benefits, as well as staying ahead of China and other adversarial nations, National Cyber Director Sean Cairncross said Thursday [October 1].
    • “The Trump administration is facing pressure from some quarters of Capitol Hill and even some artificial intelligence executives to establish regulations or embrace legislation to guard against the technology’s risks, something the president himself has rejected.
    • “We’ve never faced a world where our adversaries have the frontier in this space, and so our attempts to optimize that innovation and security is is something that is ongoing, but is increasingly efficient, and it depends on our relationship with industry and our ability to work collaboratively among the the interagency,” Cairncross said at the AI Edge event hosted by The Washington Post.
    • “That collaboration is ever-increasing, he said, such as with the National Institute of Standards and Technology’s Center for Advancing Innovation and Standards for Super Intelligence (CAISSI).
    • “Industry coordination on this, across critical infrastructure sectors, is improving both on industry-to-government and within industry,” he said. “There is collaboration with CAISSI and others as well to do evaluation and testing on these models. That includes work on guardrailing, sandboxing, et cetera.”
  • Cybersecurity Dive points out,
    • Policymakers should fix duplicative and contradictory regulations that currently impede the government’s ability to oversee the cybersecurity of critical infrastructure, industry representatives told the Government Accountability Office during a recent panel discussion.
    • The industry feedback, revealed in a GAO report published on Monday, is the latest evidence that the private sector is deeply unsatisfied with the patchwork of rules governing infrastructure security in the U.S. The new report also comes as the Cybersecurity and Infrastructure Security Agency (CISA) works to finish a congressionally mandated cybersecurity incident reporting rule that could impose sweeping requirements on a broad swath of infrastructure operators.
  • Per a Cybersecurity and Infrastructure Security Agency news release.
    • “The Cybersecurity and Infrastructure Security Agency (CISA) kicks off Cybersecurity Awareness Month today [October 1]. CISA updated our Cybersecurity Awareness Monthpage with additional information, tips, and resources, including for business and government organizations—if you haven’t done so yet, be sure to check out this year’s toolkit.  
    • This year’s theme is Securing the Next 250, highlighting the need for everyone to play their part in strengthening the country’s infrastructure against cyber threats. At a time when nation-state backed cyber threats continue to increase and super intelligence is transforming both threats and security, it is more important than ever that those that own and operate the nation’s critical infrastructure take steps to protect it. 
    • “Whenever critical infrastructure is disrupted, so are the businesses and communities that depend on vital services,” said Acting CISA Director Nick Andersen. “That’s why CISA is prioritizing the security and resilience of critical infrastructure, and state, local, tribal, and territorial government (SLTT), whose systems and services sustain us every day. This includes things like clean water, secure transportation, quality healthcare, secure financial transactions, rapid communications, and more. However great or small—every organization that touches critical infrastructure is vital to ensuring uninterrupted services to America’s communities.” 
  • The American Hospital Association News informs us,
    • “The AHA provided comments Sept. 30 to the Senate Homeland Security and Governmental Affairs Subcommittee on Disaster Management, District of Columbia and Census for a hearing, “Rogue AI: Securing the Homeland Against AI Agent Attacks.” The AHA discussed how it has worked closely with federal agencies to build relationships and channels for the mutual exchange of cyber threat information, risk mitigation practices and resources to implement such practices. The AHA shared information on a rise of cyberattacks in healthcare and increased risk from artificial intelligence tools, the need for federal agencies to protect hospitals and health systems from nation-state-level cyberattacks, and the unique risks rural hospitals face when defending against cyberattacks.”
  • and
    • “The FBI Sept. 29 announced an arrest of one of the alleged leaders of ShinyHunters, a cybercriminal group linked to cyberattacks in the U.S. and internationally on more than 140 organizations, including healthcare, with at least $70 million taken in extortion payments. ShinyHunters has used targeted voice phishing campaigns to deceive personnel into exposing credentials on malicious, medical-themed impersonation domains, Health-ISAC announced in August. ShinyHunters threat actors have been observed contacting employees directly on personal devices through calls, voicemail messages and emails from multiple random accounts.
    • “ShinyHunters is currently one of the most prolific and aggressive cybercriminal groups targeting healthcare and third-party healthcare vendors,” said John Riggi, AHA national advisor for cybersecurity and risk. “They are known for stealing highly sensitive personal information, including health information and extorting victims with threats to publish it. Today’s highly commendable arrest and other recent enforcement actions align with the FBI’s new cyber strategy to impose costs on adversaries, support victims of cybercrime, and join forces with the private sector, including healthcare.”

From the cybersecurity breaches and vulnerabilities front

  • The New York Times reports,
    • “A criminal hacking group known as ShinyHunters revealed last week that it had stolen a vast trove of sensitive personal data from the F.B.I., potentially one of the worst breaches of sensitive government information in the internet age.
    • “The breach may have compromised information about tens of thousands of former and current F.B.I. employees, including data like home addresses, Social Security numbers and even secretive job assignments.
    • “In a series of cryptic statements, ShinyHunters demanded that the F.B.I. retract a public advisory the bureau had issued this springwarning of the group’s cyberattacks. In an email to The New York Times on Friday, ShinyHunters said that the bureau had until the end of Tuesday to fulfill its request. But on Monday, it appeared to walk back that demand, saying it would not publish the data, as it typically does with the information it steals.
    • “In a video posted online on Tuesday, the F.B.I. warned the group that it would aggressively pursue its members as it promoted the recent arrest of a suspect it said was affiliated with the group.”
  • The HIPAA Journal relates,
    • “There has been a 5.9% decline in healthcare breaches compared to H1 2025. Between January 1 and June 30, 2026, 397 data breaches affecting 500 or more individuals were reported to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights – the lowest H1 total since 2023. While the year-over-year reduction in healthcare data breaches is a step in the right direction, healthcare data breaches continue to be reported in high numbers. In the first six months of the year, large healthcare data breaches were reported at a rate of more than 2.2 per day.
    • “Across the 397 reported data breaches, the protected health information of 33.77 million individuals was exposed or impermissibly disclosed. That represents a 22.6% reduction in affected individuals compared to H1 2025, and it is the lowest number of affected individuals in H1 since 2023.”
  • Cybersecurity Dive tells us,
    • “Fortinet on Thursday [October 1] warned of a critical path traversal vulnerability in Fortinet FortiMail, which has been exploited in the wild. 
    • “The zero-day vulnerability, tracked as CVE-2026-104286, allows an unauthenticated attacker to write arbitrary files on a system through the use of specially crafted HTTP or HTTPS requests. 
    • “Fortinet said it has been in touch with government authorities and other stakeholders regarding the threat, and urged customers to apply a workaround. The company did not say when a security patch would be available. 
    • “We are communicating with relevant government organizations, including CISA, on the content of this advisory,” a spokesperson told Cybersecurity Dive.
    • “FortiMail is a platform that provides companies protection from phishing, malware, business email compromise and other potential attacks.”
  • and
    • “Exploitation activity linked to zero-day vulnerabilities in Citrix NetScaler were initially detected on Thursday, days before public disclosure, according to a report Monday [September 28] from GreyNoise. 
    • A malicious cyber actor tried to exploit a zero-day flaw against Citrix NetScaler on Thursday [September 24], according to GreyNoise researchers. At the time, there were no detections available that were specific to this CVE, but researchers labeled the activity malicious. 
    • Two days later, Citrix NetScaler customers began receiving warnings to disconnect their servers due to suspected exploitation activity. By Sunday, Citrix released an official security bulletin warning of multiple vulnerabilities in NetScaler ADC and NetScaler Gateway. 
    • The exploitation activity involved a remote code execution (RCE) vulnerability, tracked as CVE-2026-88771 and a memory overflow vulnerability, tracked as CVE-2026-88772. 
    • Citrix urged customers to immediately patch their systems, warning that successful exploitation could result in RCE, denial of service, HTTP request smuggling and other consequences. 
  • The Cybersecurity Hub Newsletter, posted on LinkedIn, notes,
    • “Dell has released security updates for its Container Storage Modules (CSM) after disclosing vulnerabilities that could allow attackers to take control of infrastructure connecting Kubernetes applications to enterprise storage.
    • “Two flaws carry the maximum CVSS severity score of 10.0. They affect the CSM Authorization module, putting a security component responsible for controlling storage access at the centre of the disclosure. Additional critical vulnerabilities raise concerns about cluster privileges, authentication tokens and sensitive credentials.
    • “The advisory was published on October 1. Dell had not flagged the issues as actively exploited at the time of publication. That distinction matters: the disclosure describes serious opportunities for compromise, but does not establish that customers have already been attacked.
    • “The potential impact deserves attention beyond infrastructure teams. Storage services underpin the availability and integrity of business applications. A failure in the systems governing access to those services can affect several workloads at once, making the scope of a deployment as important to an organisation’s response as the severity score.”

From the ransomware front,

  • Tech Target lets us know that “August’s ransomware activity hit new high for the year.
    • “NCC Group identified 83 ransomware groups active last month, but it said AI wasn’t necessarily what drove the increase in the number of bad actors.”
  • VMblog reports,
    • “Most ransomware defenses rest on a simple assumption: if files look encrypted, you’ve been hit, and if they look normal, you’re safe. New research suggests that assumption is outdated. After detonating 1,064 real ransomware strains in a controlled environment during the first half of 2026, Index Engines’ CyberSense Research Lab found that directory-entry destruction (47.8%) was far more common than full encryption (18.3%). Some strains even scrambled data while leaving filenames, file sizes, timestamps, and entropy untouched, so corrupted files looked perfectly healthy.
    • “To mark Cybersecurity Awareness Month, we spoke with Jim McGann, CMO of Index Engines, about what these findings mean for detection, recovery, and the role of AI in modern attacks. He explains why signature-based detection is losing ground, how quickly damage can spread, and why leaders should move from asking “Do we have backups?” to “Can we prove our recovery data is clean?”
  • Dark Reading tells us,
    • “German authorities have identified a 16-year-old as the alleged mastermind of the KillSec ransomware operation, following a coordinated law enforcement operation that resulted in the arrests of three suspects and searches of eight properties in Spain, Greece, Romania, and the UK.
    • “In an Oct. 1 statement, Hamburg police said investigators also took control of KillSec’s leak website and secured at least 110TB of data to prevent further unauthorized access.”

From the cybersecurity business and defenses front,

  • The Wall Street Journal reports,
    • “Google unveiled its latest AI model, Gemini 4 Argon, with a notice up top that its release would be limited, at least for now, to a list of “trusted cybersecurity vendors.” Such has become the new normal for frontier-model announcements in the post-Mythos age, where touting the guardrails can seem to outweigh posting the wins.
    • “And Gemini 4 Argon, which comes out nearly a year after Gemini 3 enabled the company to leapfrog rivals, clocks some wins. According to the company, the model sets new highs on several coding and knowledge-work benchmarks.
    • “Google says Gemini 4 Argon is already in use inside the company. It has helped quantum computing researchers “optimize the spacetime resources” of certain subroutines and has optimized memory use across its data centers. Argon agents are also migrating C/C++ codebases to Rust across Google.”
  • Beckers Health IT adds,
    • “Google says its new frontier AI model, Gemini 4 Argon, uncovered a critical vulnerability in healthcare software used by hospitals worldwide that put sensitive personal information at risk.
    • “Google-owned cybersecurity company Wiz found the flaw through its Scan for Good initiative, which offers free scanning to find and fix high-risk exposures at organizations that run critical public infrastructure. Koray Kavukcuoglu, senior vice president of Google DeepMind and chief AI architect at Google, described the finding in a Sept. 30 blog post. Mr. Kavukcuoglu said earlier frontier models had missed the risk.
    • “Google did not name the software or its vendor. It also did not say what specific data was at risk or whether the vulnerability has been patched.
    • “Wiz said Sept. 24 that Scan for Good, using Google’s Gemini 3.8 Flash Cyber model, had found exposures at two unnamed hospitals, which it said were fixed before disclosure. Google did not say whether the Argon finding is related to either case.”
  • The New York Times relates,
    • “Epic Systems, the nation’s largest medical records vendor that is relied on by thousands of hospitals and doctors’ offices, is using artificial intelligence tools to patch security risks that could give hackers undetectable access to patient health data, company officials said.
    • “The unusual nature of the vulnerability and the urgency to fix it prompted Epic to slow down development of some product lines while it sent engineers into a sprint to patch security holes.
    • “Judy Faulkner, Epic’s chief executive, revealed the security weakness and a six-week plan to shore up the gaps at an industry conference last week, but most details about the danger have not previously been reported.
    • “You worry that after a month and a half of working almost primarily on safeguarding the software, that new things will be created by those who are trying to bust the software, and it will be in a never-ending cycle,” Ms. Faulkner said.
    • “According to company representatives, Epic deployed Anthropic’s Claude Mythos artificial intelligence agent to stress-test its systems, to hunt for ways that hackers could unleash open-source A.I. agents and unlock confidential patient records.
    • “The security weaknesses pose a particularly acute threat for Epic, which maintains records of 325 million patients in the United States and other countries.
    • “And it underscores the competing forces surrounding the ever-expanding uses of artificial intelligence in health care.”
  • Cyberscoop informs us,
    • “OpenAI said it disrupted a “coordinated campaign” to distill and extract reasoning capabilities from its AI models, pointing the finger at a Chinese rival.
    • “On Wednesday [September 30], OpenAI said it first spotted low-level activity on July 1 that gradually increased until July 24 and 25, when it observed 16,000 prompts from 4,000 users that fit a similar “relevant extraction pattern.” The number of suspicious users had climbed to 15,000 by July 28, when OpenAI said it “fully disrupted” the operation.
    • “The company called the attackers’ method “novel.” They copied encrypted reasoning data from one conversation, then asked the model in a separate conversation to decrypt the content and transcribe it in plain text. Outside researchers reported a similar vulnerability to OpenAI in August.
    • “The operators did not break our encryption, compromise a database, or gain direct access to stored user conversations,” OpenAI wrote in an unsigned blog post. “Instead, they manipulated model interactions so that protected reasoning could be reproduced in forms visible to the requester in a coordinated, scaled manner that violated our terms of service.”
  • Cybersecurity Dive tells us,
    • “Businesses need to prepare for the ways in which AI is changing the cyberattack landscape, Microsoft warned on Thursday [October 1].
    • “AI is speeding up attacks, making advanced techniques easier and putting stress on systems that organizations have long overlooked, the company said in its annual Digital Defense Report.
    • “The report also describes nation-state and cybercrime threat actors’ most significant activity from the past year, including their targets and motivations.”
  • The Wall Street Journal points out,
    • “Cybersecurity startup Armadin has raised $255.5 million to boost its force of AI agents trained to find security flaws cybercriminals are most likely to exploit—in part by attacking customers with swarms of autonomous hackers.
    • “Total funding for Armadin, which security veteran Kevin Mandia founded a year ago, is now $445 million. The company’s market valuation tops $2.5 billion. More here from my colleague Angus Loten.”
  • Here is a link to Dark Reading’s CISO Corner

Friday report

David Ermer–Agentic & Generative AI, CDC, CMS, Congress, COVID-19, FDA, Federal employment benefits, Medical / Rx research, Medicare, Obesity, OPM, Rx coverage, SCOTUS, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC

  • AHIP reports,
    • “The House Ways and Means Committee’s recent advancement of the Apples to Apples Comparison Act (H.R. 4093) signals policymakers recognize the growing need for more accurate data and assessments comparing Medicare Advantage (MA) and fee-for-service (FFS) Medicare. If enacted, this legislation would require Medicare to report more complete expenditure data and direct the Medicare Payment Advisory Commission (MedPAC) to compare MA and FFS using a more transparent and reliable methodology. 
    • “Key Context: Accurate and reliable analyses are essential to understanding how MA compares to FFS. It requires accounting for key differences between the programs – including the benefits provided within MA, different enrollment requirements, and demographics and health characteristics among MA enrollees. 
    • “A growing body of research points to significant questions and concerns with MedPAC’s current approach to comparing spending in MA and FFS, including its estimates of alleged favorable selection into MA and failure to account for the key programmatic, enrollment, and other differences.
    • “The Apples to Apples Comparison Act would address these concerns and ensure that policymakers have the information needed to accurately assess both programs.
    • “Why It Matters: Accurate comparisons between MA and FFS show that MA provides better care at lower costs than FFS. With 36 million American seniors and people living with disabilities choosing MA, policymakers should ensure they protect and strengthen MA for the seniors who count on it.”
  • Beckers Behavioral Health relates,
    • “HHS will provide $96 million over four years to eight communities through its new Safety Through Recovery, Engagement, and Evidence-based Treatment and Support program.
    • “The funding will help communities build coordinated systems of care for people who are homeless and have serious mental illness, substance use disorders or co-occurring disorders.
    • “The program combines street-based engagement and treatment with recovery supports, housing and other community services.
    • “The Substance Abuse and Mental Health Services Administration will administer the STREETS program, according to an Oct. 2 news release from HHS. Each selected community will receive $3 million a year for four years.”
  • and
    • “The 988 Suicide & Crisis Lifeline has brought back specialized crisis support for LGBTQ+ youth through its “Press 3” option, with the service available again starting Sept. 30, the Los Angeles Times reported Oct. 1.
    • “Launched in 2022 in partnership with the Trevor Project, the option connects callers and texters directly with counselors trained to support young LGBTQ+ people. The service was suspended in July 2025 after the Substance Abuse and Mental Health Services Administration said it would “no longer silo LGB+ youth services” from the general hotline.”
  • STAT News tells us,
    • “Finding information from the National Institutes of Health about human health, disease, and biomedical research is about to look a lot different. On Monday, the NIH will unveil a new version of its website that shifts attention away from individual institutes and centers and towards eight thematic hubs focused on health, research, data, clinical studies, rare diseases, technology, cancer, and grants.
    • “Agency officials say the redesign — which is part of an ambitious project to consolidate the NIH’s digital footprint — is intended to streamline what was a sprawling and fractured information ecosystem, requiring users to understand NIH’s organizational structure, into an intuitive experience that more closely reflects what type of information people seek out most often.
    • “The goal, said NIH deputy director for public affairs, Amanda Fine, is “to make trusted NIH information across the agency easier and faster to find.”
    • “The beta version, which was soft-launched this week, is still under development and will continue to evolve in the coming months, NIH officials told STAT. Some functions, including search, do not yet appear to be operational. During this transition period, NIH’s existing websites will continue to remain available, and they will sunset on a rolling basis “as critical and mandated content is verified and redirects are put in place,” Fine told STAT.” 

From the Medicare Advantage front,

  • Beckers Hospital Review reports,
    • “SCAN Health Plan and Costco shared Oct. 1 that their co-branded Medicare Advantage plans will go live in California and Nevada in 2027.
    • “The HMO will be available in 17 California counties and two Nevada counties on Jan. 1, a SCAN news release said. This is Costco’s first time offering MA.
    • “Entering Medicare Advantage is a natural extension of our commitment to delivering quality and value for our members,” Richard Stephens, Costco’s senior vice president of pharmacy, said.
    • “The plans do not include Costco memberships, but non-Costco plan members can use over-the-counter benefits and get hearing aids and eyewear elsewhere.”
  • “KFF Examines the 2027 Marketplace for Medicare Advantage and Part D Stand-Alone Drug Plans.”
    • “A companion analysis of the stand-alone Part D prescription drug plan (PDP) marketplace finds that the number of stand-alone plans available to the average beneficiary will fall for the fourth year in a row, from 11 in 2026 to 9 in 2027. It also finds that many PDP enrollees will see premium reductions or only modestly higher premiums in 2027 if they keep their current plan, while others will face substantially higher premiums unless they switch.
    • “Notably, there will be no zero premium PDPs available for Part D enrollees in 2027 (except low-income beneficiaries who receive extra financial help from the government.) That means that 4 million PDP enrollees who paid no monthly premium in 2026 will face higher premiums in 2027 if they keep PDP coverage.” 

From the U.S. Office of Personnel Management front,

  • Govexec reports today,
    • “Federal employees and retirees will pay an additional 10.9% on average toward their health insurance premiums in 2026, the third straight year of double-digit increases, according to the Office of Personnel Management.
    • “The government’s share of Federal Employee Health Benefits Program premiums will increase by an average of 8.6% in 2026, making the overall cost increase 9.3%. This year, the increase in employees’ share of insurance premiums was 12.3%, and in 2025 that increase apexed at 13.5%.”
    • “Unlike past years, OPM did not provide reporters with the average premium increases for the three plan types—self, self plus one and family—on a per paycheck basis. When asked for the information, the agency sent a copy of its “Open Season Highlights” document, and then a collection of spreadsheets listing every FEHB plan’s premium increase.” * * *
    • As in past years, OPM encouraged federal workers to shop around from among the more than 100 insurance plan offerings and to take advantage of using pre-tax money to pay for out-of-pocket costs via a flexible spending account. New for next year is the availability of a debit card via FSAFEDS, reducing some of the administrative burden of needing to submit paperwork and receipts for reimbursement.
    • Kevin Moss, a senior editor with Consumers’ Checkbook’s Guide to Health Plans for Federal Employees, said it is more important than ever to actually follow that advice. That’s because hidden behind the average premium increase figures are a number of wide swings on the individual plan level.

From the U.S. Food and Drug Administration front,

  • Fierce Pharma reports,
    • “The FDA has approved Bristol Myers Squibb’s application to expand the label of its cardiac myosin inhibitor, Camzyos, to include pediatric patients.  
    • “Camzyos is used to treat symptoms and improve functionality in patients with symptomatic obstructive hypertrophic cardiomyopathy (oHCM), a genetic condition that causes the heart muscle to thicken. Camzyos was first approved to treat adults in 2022, and the new approval makes it the first oHCM treatment available to pediatric patients.” 
  • Cardiovascular Business relates,
    • “The U.S. Food and Drug Administration (FDA) has accepted CeleCor Therapeutics‘ new drug application (NDA) for zalunfiban (Disaggpro). The investigational drug was developed to treat ST-elevation myocardial infarction (STEMI) heart attacks to dissolve clots and reopen the coronary artery as soon as possible to prevent death or irreversible heart damage.
    • “Zalunfiban is a new type of small-molecule inhibitor of the platelet GPIIb/IIIa receptor that is designed to quickly prevent clotting during a heart attack.
    • “The company presented positive Phase 3 clinical trials results from its CeleBrate study at the 2025 American Heart Association (AHA) Scientific Sessions, and those findings were later published in The New England Journal of Medicine Evidence.[1] The multinational CeleBrate study found that rapid zalunfiban treatment for STEMI at the first point of medical contact reduced the risk of cardiovascular events over 30 days following treatment.”

No Surprises Act news,

  • Per a Centers for Medicare and Medicaid Services news release,
    • “On Thursday, October 1, 2026, the Centers for Medicare & Medicaid Services (CMS) convened leaders from across the federal government and from certified independent dispute resolution (IDR) entities to discuss issues impacting the federal IDR process. CMS Administrator Dr. Mehmet Oz, Department of Labor Assistant Secretary Daniel Aronowitz, and officials from the Departments of Health and Human Services, Labor, and the Treasury (the Departments) met with representatives from all certified IDR entities to address the increasingly high IDR-associated costs affecting the United States healthcare system. The ideas discussed in the meeting build on the system reforms that were a part of the Federal IDR Operations final rule as well as the fundamental technological evolution of the Federal IDR Portal into the IDR Gateway, which will launch in late 2026.” * * *
    • “The No Surprises Act has succeeded in its primary objective: protecting American consumers from surprise medical bills. The Departments and certified IDR entities expressed their shared responsibility to improve the federal IDR process. The participants, representing all active certified IDR entities, are committed to enhancing their processes in collaboration with the Departments. 
    • “The Departments will consider the insights offered by the certified IDR entities as they continue to explore all available regulatory and operational solutions.”

From the judicial front,

  • The SCOTUSblog reports today,
    • “On Thursday, the Supreme Court added three new cases to its oral argument docket for the 2026-27 term, including a case on the Trump administration’s policy of detaining noncitizens apprehended within the United States (as opposed to at the border) without the opportunity for a bond hearing and a dispute over the enforcement of zoning ordinances against religious institutions.” * * *
    • “Unlike past years, OPM did not provide reporters with the average premium increases for the three plan types—self, self plus one and family—on a per paycheck basis. When asked for the information, the agency sent a copy of its “Open Season Highlights” document, and then a collection of spreadsheets listing every FEHB plan’s premium increase.” * * *

From the public health and medical /Rx research front,

  • The Centers for Disease Control and Prevention announced today,
    • “COVID-19, flu, and RSV are key indicators of overall respiratory illness activity
    • “The amount of acute respiratory illness causing people to seek health care is very low.
    • “RSV activity is very low in most areas of the country.
    • “COVID-19 activity remains elevated in some regions but is declining nationally.
    • “Seasonal flu activity is low but is increasing.
    • “Rhinovirus/Enterovirus (RV/EV) and group A strep are increasing nationally.”
  • The University of Minnesota’s CIDRAP calls to our attention
    • “With three months left of 2026, the United States is closing in on a number of measles cases that would have been unheard of just a couple years ago. With 228 new cases logged this week, the country reached 3,886 infections, just 114 shy of 4,000, according to the Centers for Disease Control and Prevention’s (CDC’s) weekly update today.
    • “It could top that milestone next week. And US cases could be more than double the 2025 total this month.
    • “The national wave comes as Pennsylvania, the nation’s hot spot, adds more than 100 new cases in the past week to its total for the year. More than two-thirds of the cases in the state involve adults. * * *
    • “Cases in other states are also climbing. The Wisconsin Department of Health Services today added 72 infections to its total, which has now grown to 243. Kentucky added 27 new cases and has 94 for the year. And Ohio’s health department lists 206 measles cases, which is 17 more than last week. Utah lists 527 cases, nine of which are new.”
  • and
    • “Measles infections make people miserable for up to two long weeks, commonly causing dangerously high fevers, a painful sensitivity to light and, of course, a tell-tale red rash.
    • “Sufferers who escape without developing pneumonia, brain swelling, or other serious complications may believe the worst is over. 
    • “Yet the measles virus has only gotten started.
    • “The virus also damages the immune system, leaving people vulnerable to other infections for up to five years.
    • “The rash and the fever, that’s the tip of the iceberg,” Michael J. Mina, MD, PhD, coauthor of two seminal studies in Science on the effect of measles on the immune system, told CIDRAP News. “The majority of the damage being done is under the surface.”
  • The Wall Street Journal reports,
    • “Grip strength is increasingly being viewed as an important biomarker of our overall strength and fitness.
    • “While not used as widely as body-mass index, or BMI, as a screening tool for health, doctors and researchers say awareness of its value is growing. That’s happening as research shows that grip strength is associated with future health risks and even longevity. 
    • “At the University of Michigan Medical School, many clinics test patients’ grip strength, says Mark Peterson, a professor of physical medicine and rehabilitation. 
    • “We do it with our older populations but I have also gotten it pulled into clinics in our neurological population,” he says.
    • “Some doctors think grip strength should be used more routinely in wellness appointments. “I have really tried to encourage geriatricians to think about incorporating grip strength, it seems to trump almost every single measure including cardiovascular fitness training,” Peterson says.
    • “Even in children, studies have found grip strength to be associated with cardiometabolic health.” 
  • Nature relates,
    • “Armed with new tools and fresh optimism, researchers seeking to subdue pancreatic cancer — one of the world’s deadliest — are chasing a radical strategy: cancer interception.
    • “In this approach, tissues that are growing abnormally are treated to keep them from turning cancerous and spreading. Interception is already being trialled for breast and skin cancers, among others. But now the success of a new drug that quashes pancreatic tumours is raising scientists’ hopes that interception could succeed even for this recalcitrant cancer.
    • “Cancer interception was one of the main themes at September’s American Association for Cancer Research Conference (AACR) on Pancreatic Cancer in San Diego, California — the first such meeting since the US Food and Drug Administration approved the landmark pancreatic-cancer drug daraxonrasib (Rasonque) in August. Its success has renewed optimism that researchers can combine it or other emerging therapies with early-detection methods to revolutionize how pancreatic tumours are treated.
    • “A combination of early-detection techniques and interception is “going to be the breakthrough strategy that really changes survival”, says Diane Simeone, director of the Moores Cancer Center at University of California San Diego Health. At the AACR meeting, Simeone argued that such an approach could more than triple the proportion of people who survive for five years after being diagnosed with pancreatic cancer, from 13.7% to 50%.
    • “It’s a lofty aspiration, but other researchers are also eyeing interception. “We’re so excited that we are at this juncture now to even be considering this,” says Anirban Maitra, director of the Perlmutter Cancer Center at New York University Langone Health in New York City. “This wasn’t possible even a few years ago.”
  • CNN adds,
    • “Sugary foods combined with antibiotic treatment can damage the gut microbiome in ways that could leave people vulnerable to dangerous infections, a new study shows.
    • “The new research, published Wednesday in the journal Nature, took advantage of a natural experiment: It looked at what happened to gut bacteria in cancer patients who were hospitalized and treated with sustained antibiotics before receiving stem cell transplants. Because the patients only ate food prepared by the hospital, researchers knew exactly what and how much food they ate – a rarity in nutrition studies, which typically rely on participants to recall what they ate hours or days earlier, something people are notoriously bad at.
  • Health Day tells us,
    • “Functional decline begins many years before clinically apparent cardiovascular disease (CVD) events, according to a study published online Sept. 23 in JAMA Cardiology.
    • “Aung Zaw Zaw Phyo, Ph.D., from Monash University in Melbourne, Australia, and colleagues examined how functional performance trajectories change in the years preceding a CVD event. The analysis included data from 12,015 participants (2,403 cases and 9,612 matched controls) in the Aspirin in Reducing Events in the Elderly cohort.”
    • “Results of this nested case-control study show that declines in functional aging markers were prominent before clinically apparent CVD, suggesting that they may represent the culmination of progressive multisystem aging and indicating a prolonged window of opportunity for closer clinical evaluation and early intervention,” the authors write.”
  • and
    • “Isometric exercises like wall sits may help lower your blood pressure.
    • “And just one session a week could help you maintain those healthier numbers.
    • “A team led by Harry Swift of King’s College London studied 100 adults with an average age of 37 who had normal to high-normal blood pressure. Eighty were assigned to do wall sits three times a week.
    • “After four weeks, their systolic blood pressure — the top number in a blood pressure reading — had dropped by an average of about 9.5 points compared with the control group.
    • “For the next month, participants either kept the same schedule, cut back or stopped.
    • “Cutting back to once a week still left systolic pressure about 6.6 points lower than at the start.
    • “But three sessions a week delivered a much bigger benefit — down nearly 14 points.
    • “When participants stopped exercising, the improvements reversed.”
  • The American Medical Association lets us know how to do a wall sit.
  • Per BioPharma Dive,
    • “An experimental eczema drug from Pfizer met its primary goal in a mid-stage clinical trial, achieving stronger skin clearance in significantly more people at multiple doses compared to a placebo after 16 weeks.
    • “According to detailed data from an ongoing Phase 2 trial shared at a European medical meeting Thursday, a substantially higher percentage of patients given Pfizer’s three-pronged antibody drug, tilrekimig, as opposed to a placebo experienced a 75% reduction in the scope and severity of their disease. The trial enrolled participants with moderate to severe atopic dermatitis, and the latest results build on data previously announced in March.
    • “Analysts described the findings as “very strong” and indicative that Pfizer’s drug could compete with already approved therapies like Eli Lilly’s Ebglyss and Sanofi and Regeneron Pharmaceuticals’ market-leading Dupixent. In a statement Thursday, Pfizer said it has pushed tilrekimig into advanced testing for asthma, chronic obstructive pulmonary disease and atopic dermatitis — including a head-to-head trial against Dupixent.”

From the U.S. healthcare business and artificial intelligence front,

  • The Wall Street Journal reports,
    • “Bayer BAYN  said it plans to spend $2.2 billion to build a new manufacturing site in Ohio for its pharmaceutical business, becoming the latest European drugmaker to invest in the U.S.
    • “The German agricultural and pharmaceutical group said Friday that its new site in New Albany will create around 600 jobs, with plans to open a first module dedicated to drug substance manufacturing in 2031, followed by a second module for finished products in 2034.
    • “Bayer’s pharma business has been looking to expand in the U.S., betting that an enlarged presence in the world’s largest drug market can help it revive sales growth after two key products went off patent.
    • “With the move, the company joins a growing list of European pharma companies committing to invest in the U.S. Under pressure from the Trump administration’s tariff threats, big drugmakers like AstraZeneca, Novartisand Roche, as well as smaller rivals, pledged to make multibillion-dollar investments in the country and have started to execute their plans.
    • “The U.S. is our largest and fastest-growing market,” Bayer’s U.S. president, Sebastian Guth, said in an interview.”
  • and
    • “Novartis NOVN struck a deal valued at up to $7.8 billion to license a messenger RNA drug candidate from Abogen Biosciences and gain options over future therapies, turning to China to fill its pipeline.
    • “Many of the world’s biggest drugmakers have set their sights on China to look for new drug ideas, seeking to bolster their portfolios in preparation for older medicines going off patent. Novartis has sealed several tie-ups with emerging Chinese biotech players in recent years.
    • “Novartis is paying $575 million upfront and could make additional payments of up to $7.2 billion if options on all programs are exercised and targets are met, Abogen said Friday.
    • “Under the deal, Novartis will acquire worldwide rights over Abogen’s lead drug candidate, called ABO2203, which uses mRNA to boost the production of so-called T-cell engagers within the body to fight malignant cells. Abogen said its lead drug has potential to transform the treatment landscape for patients with autoimmune diseases—those in which the body’s immune system attacks healthy cells instead of protecting them.”
  • Modern Healthcare relates,
    • “HCA Healthcare has completed a deal to sell 31 home health and hospice locations in eight states to Deaconess Associations.
    • “The former HCA sites and their employees are now part of Deaconess subsidiary Central Pyramid, the Cincinnati-based provider announced in a news release Thursday. Neither Deaconess nor Nashville, Tennessee-based HCA disclosed the financial terms of the transaction.
    • “The home health and hospice locations are spread across Colorado, Florida, Kansas, Kentucky, Missouri, Tennessee, Texas and Virginia. The companies agreed to the transaction in June.”
  • Beckers Payer Issues tells us,
    • “San Francisco-based Dignity Health, part of Chicago-based CommonSpirit, reached an agreement to transfer its share of co-owned Arizona managed care health plan, Mercy Care, to CVS Health subsidiary Aetna.
    • “CommonSpirit had a 49.75% ownership interest in Mercy Care as of June 30, 2026, and June 30, 2025, according to CommonSpirit’s fiscal year 2026 report. 
    • “Dignity Health co-owns the plan with Ascension, which said it had also reached an agreement with Aetna to transfer its portion of Mercy Care to the company. 
    • “The transaction is expected to close in fiscal year 2027, subject to required regulatory reviews and approvals, a spokesperson for Aetna said in an Oct. 2 statement shared with Becker’s.” 
  • and
    • “New Jersey Democratic Gov. Mikie Sherrill launched the State Health Benefits Program Reform Working Group on Oct. 1 to review and advise on health coverage for public employees.
    • “Ms. Sherrill announced the working group following a Sept. 2 agreement with 17 state employee unions. Along with unions, participants include public employer organizations, legislative offices and healthcare groups, such as the New Jersey Association of Health Plans and New Jersey Hospital Association. Aetna, Horizon Blue Cross Blue Shield of New Jersey, and UnitedHealth Group’s pharmacy benefit manager, Optum Rx, are all vendors serving the benefits program. All three are also members of the working group.
    • “The working group will form advisory recommendations for the governor, focusing on benefits administration, provider network structures and payment, plan pricing and premium contributions, plan design, employer and member participation, and whether the program has resources to manage costs. The working group will have subcommittees targeting these areas.”
  • Fierce Healthcare adds,
    • “Tacoma, Wash.-based MultiCare Health System is set to launch its own health plan next year, the organization announced Thursday.
    • “The creation of the plan—dubbed the MultiCare Health Plan—is part of the organization’s continuing advancement from a traditional provider to an integrated organization, executives say. It will be a wholly owned subsidiary of the health system, with support from MultiCare’s population health partner, PSW.”
  • Beckers Hospital Review informs us,
    • “Chicago-based CommonSpirit Health has launched CommonSpirit Ambulatory Ventures, a new division aimed at organizing and expanding the health system’s ambulatory surgery center portfolio.
    • “The move is part of CommonSpirit’s broader effort to diversify beyond acute care and “accelerate growth” in ambulatory services, according to financial documents published Oct. 1. The system said the new division will establish an ASC vertical “from which to organize and enhance our current and future capability in the ASC space.” 
    • “CommonSpirit currently has 239 ambulatory joint ventures spanning dialysis, imaging, oncology and other services. That portfolio includes 80 ASCs, either wholly owned or operated through partnerships, along with six specialty surgical hospital partnerships.” 
  • Beckers Physician Leadership points out,
    • “After years of steady gains, compensation for registered nurses and licensed practical nurses (LPNs) showed no measurable growth in 2026 for the first time in the past 5 years, according to a report from Medscape. 
    • “The “Medscape RN/LPN Compensation Report 2026: Where Did the Growth Go?,” published Oct. 2, surveyed 3,253 registered nurses and 1,337 licensed practical nurses on compensation and pay trends.” 
  • Per Radiology Business,
    • “Patients grappling with medical debt appear more likely to face later-stage cancer diagnoses, according to new research published Thursday. 
    • “Such financial obligations are a pervasive challenge among U.S. households and a key social determinant of health, experts write in JAMA Network Open. About 1 in 6 individuals here report having at least some medical debt, with millions facing collections—a situation disproportionately impacting low-income households, minorities and the uninsured. 
    • “Researchers aimed to better understand how these IOUs impact patient outcomes, analyzing data spanning nearly 3,000 U.S. counties. They found that higher burden of medical debt was associated with significantly increased incidence of late-stage lung, colorectal, cervical, skin, kidney, bladder, and head/neck cancer. 
    • “These findings suggest that medical debt may be an area-level marker of structural and financial barriers associated with cancer detection and cancer outcomes at the population level,” study co-author Xin Hu, PhD, with the Department of Radiation Oncology at Emory University, Atlanta, and colleagues wrote Oct. 1.” 
  • Per Fierce Pharma,
    • “Eli Lilly’s Foundayo is showing clearer signs of acceleration. Total prescriptions for the oral GLP-1 receptor agonist surged about 21% to 64,268 during last week, according to IQVIA data cited by Citi. That haul came off a 13% sequential increase the week before that.
    • “We’re seeing early signs of growth in Q3 for Foundayo,” Jefferies analysts wrote in an Oct. 2 note.
    • “Recent expansion of Foundayo could be attributed to a direct-to-consumer ad first aired in late August featuring Martha Stewart, as well as the Medicare GLP-1 Bridge program which, as of July, offers eligible seniors GLP-1 obesity drugs at a $50 monthly copay.”
  • Cardiovascular Business adds,
    • “More and more young children are starting to be prescribed GLP-1 drugs to manage their weight, according to new research published in Pediatrics.
    • “The study’s authors focused exclusively on obese children without diabetes between the ages of 8 and 11. In 2019, just 0.03% of those children were on GLP-1 medications. However, that number skyrocketed to 9.3% in 2026. The group estimated that approximately 20,000 children between the ages of 8 and 11 have been prescribed GLP-1 drugs during that time. 
    • “Our study offers the first national overview in young children of the use of GLP-1 drugs to fight the obesity epidemic in the United States and shows that while the absolute numbers of children under the age of 12 receiving GLP-1 treatment is still low, GLP-1 use is accelerating rapidly,” first author Babak J. Orandi, MD, PhD, MSc, a transplant surgeon and obesity specialist with NYU Langone Health’s NYU Grossman School of Medicine, said in a statement. “The careful use of GLP-1s remains a valuable tool in confronting the obesity epidemic among young Americans.”
  • Beckers Payer Issues lets us know,
    • “Booking an appointment with a provider often means confirming they’re in network, working through an automated phone menu and trading available times with a receptionist. But for some UnitedHealthcare and Aetna members, an AI agent is now handling that work.
    • “Senior executives at both insurers have described their scheduling tools publicly in recent months as part of broader AI investments aimed at cutting administrative costs and simplifying how members get care.
    • “If I would usually schedule an appointment, I’d make a phone call, sit on hold, figure out my calendar, juggle my children. All that is gone, because Avery will do it for me,” Prianka Advani, senior vice president of AI delivery and telephony at UnitedHealth Group, said during a media event in June.”  

OPM Releases 2027 Premiums

David Ermer–Agentic & Generative AI, CDC, CMS, Congress, FDA, Federal employment benefits, Medical / Rx research, Medicare, OPM, Rx coverage, U.S. Healthcare–

Simplicity is a virtue.

  • Per an OPM news release,
    • “Today, the U.S. Office of Personnel Management (OPM) announced that the 2026 Federal Benefits Open Season will run from November 9 through December 14, 2026. The rates and benefits for the 2027 Federal Employees Health Benefits (FEHB) Program, Postal Service Health Benefits (PSHB) Program, and Federal Employees Dental and Vision Insurance Program (FEDVIP) are now available for review on OPM.gov.
    • “During Open Season, eligible federal employees and annuitants can enroll in, change, or cancel FEHB, PSHB, and FEDVIP coverage. Eligible employees can also make elections for the Federal Flexible Spending Account Program (FSAFEDS).
    • “OPM encourages employees and annuitants to review their coverage and choose the options that best meet their needs and those of their families. FEHB, PSHB, and FEDVIP coverage will continue into 2027 if enrollees make no changes. FSAFEDS participants, however, must make a new election each year to continue that benefit. OPM also encourages eligible employees who do not currently participate in FSAFEDS to consider its pretax benefits and enroll.
    • “Open Season is the time to look beyond your current plan and make sure your coverage still works for you and your family,” OPM’s Associate Director for Healthcare and Insurance Matthew Kiley said. “We encourage employees and annuitants to compare their options, review their costs, and make any changes before the December 14 deadline.”
  • FedWeek adds
    • “Federal employees and retirees enrolled in FEHB will pay an average annual increase of 10.9 percent more for their share of premiums in 2027 (down from 12.3 percent for the current year), according to an OPM announcement. PSHB enrollees will see an average increase in their share by 8.2% (11.3 percent in 2026).
    • “Dental and vision premiums are rising just 1 percent and 1.6 percent on average.
    • “According to the announcement, increases are due largely to “rising prices and utilization across inpatient, physician, outpatient, and surgical services; Continued growth in behavioral and mental health care; and; Higher prescription drug spending—particularly on GLP-1s, specialty drugs, and other high-cost therapies.”
  • Federal News Network also has an article on the OPM announcement.

More News from Washington, DC,

  • The Hill reports,
    • “A group of lawmakers spanning both parties and chambers is introducing legislation that would require insurance plans to cover genetic testing for patients with hereditary risk factors and expand education and outreach about gynecologic cancer risk. 
    • “Sens. Elissa Slotkin (D-Mich.) and Katie Britt (R-Ala.) are leading the bill, the Ovarian Cancer IMPACT Act, which was shared exclusively with The Hill. Their House counterparts on the legislation are Reps. Rosa DeLauro (D-Conn.) and Don Bacon (R-Neb.).” * * *
    • “In addition to some provisions about insurance coverage of genetic screenings, the new bill includes reauthorization of a 20-year-old Centers for Disease Control and Prevention program, Johanna’s Law, that provides funding for a federal education campaign about gynecological cancers.” 
  • The Washington Post adds,
    • “President Donald Trump’s pick for surgeon general cleared a major hurdle Wednesday as the Senate health committee voted to advance her nomination to the floor.
    • “In a 12-11 party line vote, Nicole Saphier — a former Fox News contributor and radiologist at Memorial Sloan Kettering Cancer Center in New York — took a step closer to becoming the nation’s top doctor.” * * *
    • The [12-11] vote included advancing the nomination of Timothy Westlake, Trump’s pick to head the Substance Abuse and Mental Health Services Administration, which leads policy efforts on mental health and addiction. He is a board-certified emergency physician. It also included one more health nominee, Mary Lazare, to be assistant secretary for aging.
  • Bloomberg Law relates,
    • “The Trump administration finalized on Wednesday a new drug payment modeldesigned to help carry out its most-favored-nation policy, cementing a plan that pharmaceutical companies have signaled are ripe for legal challenges.
    • “The pricing demo, known as GLOBE, would test whether alternative methods for calculating rebates for Medicare Part B medicines administered in doctors’ offices, based on international pricing metrics, will reduce drug costs.
    • “Still, over two dozen drugmakers — including Eli Lilly & Co., Novo Nordisk A/S, and Pfizer Inc.— have indicated they’ve gotten exemptions after entering separate agreements with the administration to voluntarily offer discounts on certain medicines to state Medicaid programs known as GENEROUS. The rule text appears to confirm that carve-out.” * * *
    • “The model is set to start Jan. 1, 2027 with the collection of voluntary manufacturer-submitted international drug net pricing data. It will be tested over five performance years, running through March 31, 2032. 
    • “A separate model targeting Medicare Part D drugs, which are prescription medications dispensed at pharmacies, is still under review at the White House.” 
  • Per a Department of Health and Human Services news release,
    • “The U.S. Department of Health and Human Services (HHS), through the Advanced Research Projects Agency for Health (ARPA-H), today launched a major effort to transform how clinical trials are designed and conducted — using advanced computational models, real-time analysis, shared infrastructure, and automation to evaluate drugs and biologics faster, at lower cost, and with fewer participants. The new Simulation-augmented, Real-time Platform Adaptive Seamless Trials (SURPASS) program, together with three complementary projects announced today, aims to remove barriers that slow clinical development and help promising treatments reach patients sooner.
    • “America should lead the world in turning medical breakthroughs into treatments for patients,” said HHS Secretary Robert F. Kennedy, Jr. “HHS is taking on the delays, duplication, and unnecessary costs that slow clinical trials down. Through ARPA-H, we are building a modern clinical trial system that can generate rigorous evidence faster, reduce the burden on patients, and move effective treatments from discovery to the people who need them sooner.”
    • “Together, these efforts advance the Trump administration’s work to modernize clinical development, reduce unnecessary delays and costs, and strengthen U.S. competitiveness in biotechnology and drug development. By making clinical trials faster, more efficient, and less burdensome for patients, ARPA-H aims to help promising treatments reach patients sooner while reinforcing the United States as a global leader in medical innovation.”
  • The American Hospital Association News tells us,
    • “Two executive orders on artificial intelligence were released Sept. 29 by the White House. One announced a new website that will use AI to deliver federal government information and services. The website, America.gov, is intended to eliminate the need for navigating multiple agency websites, according to a fact sheet. The order directs the Administrator of General Services in coordination with the Director of the Office of Management and Budget to establish and operate America.gov as the lone entry point for accessing covered services online, such as public-facing federal services that serve more than 100,000 users in a 12-month period and can be accessed or applied for online.
    • “The second executive order announced a rebrand of AI as “super intelligence.” The order and correspondingfact sheet said that the administration will use “super intelligence” and “SI” in place of “artificial intelligence” and “AI” in official correspondence, public communications, websites, reports, policy documents and other non-statutory documents.” 
  • Beckers Hospital Review informs us,
    • “The Pharmaceutical Research and Manufacturers of America has named Eric Cantor its next president and CEO, effective Nov. 9.
    • “Mr. Cantor will succeed Stephen Ubl, who has led PhRMA since 2015, according to a Sept. 29 news release. Mr. Ubl will continue to serve as a strategic adviser.
    • “Mr. Cantor represented Virginia in the U.S. House of Representatives from 2001 to 2014 and served as House majority leader from 2011 to 2014. Since leaving Congress, Mr. Cantor has served as vice chairman and managing director at Moelis & Company and as a member of its board of directors. He will continue serving on the board while leading PhRMA.”

From the U.S. Food and Drug Administration front,

  • BioPharma Dive reports,
    • “The Food and Drug Administration has accepted an approval application for Roche’s experimental multiple sclerosis pill fenebrutinib, kickstarting a review of the treatment in two forms of the disease.
    • “The agency will begin evaluating fenebrutinib in both the “relapsed” and “primary progressive” types of MS, positioning the treatment to possibly become the first of its kind approved in both settings. Roche didn’t say when a decision might come, though the agency has initiated a “priority review” that has a six-month timeline.
    • “Roche’s application is based on a trio of late-stage studies that met their main objectives. However, an imbalance in the number of deaths observed among treatment recipients and regulators’ pre-existing concerns about the liver safety of drugs like fenebrutinib could complicate the company’s approval chances.”
  • Per an FDA news release,
    • “The U.S. Food and Drug Administration today announced a broad, nationwide recruitment effort to expand the range of qualified voices and perspectives on its advisory committees— the independent bodies that inform some of the most consequential decisions in American public health. As part of an effort to broaden and strengthen participation on its advisory committees, the FDA is publishing two Federal Register notices: one seeking qualified scientific, technical, and professional voting members across all committees with current or anticipated vacancies, and a companion notice seeking consumer representatives to ensure the public’s voice is at the table.  
    • “FDA advisory committees bring together leading scientific minds to engage with the most difficult questions in public health. We are actively inviting people from across the country who are on the forefront of their fields — clinicians, researchers, and community voices who can bring the latest science, real-world experience, and fresh perspectives to the FDA’s deliberations,” said Acting FDA Commissioner of Food and Drugs, Kyle Diamantas, J.D. “These panels provide independent expertise and rigorous scrutiny as the FDA navigates complex and rapidly evolving areas of science. The Trump Administration is deeply committed to strengthening the partnership between the FDA and the nation’s brightest minds.”  

From the Medicare Advantage front,

  • Beckers Payer Issues reports,
    • “There will be four new entrants to the Medicare Advantage market in 2027, according to CMS data.” * * *
      • The Muscogee (Creek) Nation will offer one HMO, called Native Advantage, in 11 Oklahoma counties.
      • Boise, Idaho-based St. Luke’s Health System will offer three HMOs with drug coverage through its health plan in seven counties across Idaho. St. Luke’s launched its health plan with individual and employer coverage in 2023.
      • Tacoma, Wash.-based MultiCare Health System will offer two HMOs with drug coverage in three Washington counties through its newly launched health plan. 
      • MedCare Partners Health Plan of Texas will offer three plans in Harris County, including one HMO and two C-SNPs.
  • Beckers Hospital Review adds,
    • Seven health system-affiliated insurers are among the 11 total health plans exiting the individual Medicare Advantage market for 2027, according to CMS data.
      • Irving, Texas-based Christus Health Plan offered plans in 36 Texas counties and eight New Mexico counties.
      • Wausau, Wis.-based Aspirus Health Plan offered plans in 21 Wisconsin counties.  In February, CMS suspended new MA enrollment into the health plan after its claims processor, UCare, was taken over by Minnesota regulators.
      • Renton, Wash.-based Providence Health Plan offered plans across six Oregon counties, six Washington counties and Orange County, Calif. The MA exit is part of the wider shutdown of the health plan.
      • WellSense Health Plan, part of Boston Medical Center, offered plans in all 10 New Hampshire counties.
      • Houston-based Memorial Hermann Health Plan offered plans in six Texas counties. In July, the plan confirmed it would also shut down its commercial business.
      • Mass Advantage, part of Worcester-based UMass Memorial Health, offered plans in Worcester County.
      • San Diego-based Sharp Health Plan offered plans in San Diego County.

From the public health and medical / Rx research front,

  • The Washington Post reports,
    • “Pennsylvania reported Wednesday that a fifth person who had measles has died as rising infections in the state continue to push up the country’s record-breaking count of cases.
    • “The Pennsylvania Department of Health said an unvaccinated Lancaster County resident who tested positive for measles had died. No additional information about the person was immediately released.”
  • Health Day relates,
    • “Type 2 diabetes dramatically increases a person’s short-term risk of death or life-threatening illness, a new study says.
    • Within five years of their diagnosis, patients with type 2 diabetes have a 33% increased risk of dying or developing kidney disease or heart failure, researchers are slated to report this week at a meeting of the European Association for the Study of Diabetes.
    • “That risk increases to 55% over 10 years, researchers added.
    • “Our findings clearly show how the serious complications associated with type 2 diabetes rise sharply over time as the often-common combination in patients of obesity, abnormal blood fats, high blood pressure and higher blood sugar damages blood vessels and vital organs,” lead researcher Naveed Sattar said in a news release. He is a professor of cardiometabolic medicine at the University of Glasgow in Scotland.”
  • Cardiovascular Business tells us,
    • “The American College of Cardiology (ACC) has published a new scientific statement focused on how eating well can help with the prevention and management of cardiovascular disease (CVD). The document, published in full in JACC, is the work of a committee of experts from the fields of cardiology and nutrition that first met in April.[1]
    • “Suboptimal diet is a key risk factor for CVD, and diet and lifestyle modification is widely considered essential for both primary and secondary prevention,” Frank B. Hu, MD, PhD, chair of the department of nutrition at Harvard T.H. Chan School of Public Health and chair of this document, said in a statement. “However, the concept of a ‘heart-healthy’ diet has evolved over time from nutrient-centric approaches to more holistic, food- and pattern-based strategies that better reflect advances in the understanding of the complex relationship between diet and cardiometabolic health.”
    • “The ACC scientific statement highlights the importance of following a heart-healthy diet, pointing to the Mediterranean diet and dietary approaches to stop hypertension (DASH) diet as two specific examples. Plant-based foods and healthy fats and proteins are recommended over foods high in refined starches, added sugars and unhealthy fats. The document also gets more specifics, emphasizing the benefits of vegetables, fruits, whole grains, nuts and legumes, while warning against the risks associated with eating too many ultra-processed foods.”
  • Health Day informs us,
    • “Insomnia is associated with an increased risk for stroke and with higher odds of hospital admission, according to an umbrella review funded by the European Academy of Neurology and published online Sept. 7 in Sleep Medicine Review.
    • “Luca Vignatelli, M.D., from the IRCCS Istituto delle Scienze Neurologiche di Bologna in Italy, and colleagues identified systematic reviews with meta-analyses (SRMAs) that examined insomnia as a predictive factor for dementia, stroke, depression, suicide, death, occupational injuries, and hospitalization. Sixteen SRMAs were included, and three additional original reviews were conducted for stroke, occupational injuries, and hospitalization.
    • “The researchers found that insomnia was consistently identified as a predictor of dementia, depression, and suicide, but not death, in SRMAs. Insomnia was a predictor of stroke (hazard ratio, 1.26) and of hospitalization for any reason (odds ratio, 1.28) based on two original SRMAs. A meta-analysis could not be performed on the two studies relating to occupational injuries. There was an association with unintentional fatal injuries and commuting injuries, but data were insufficient to draw a conclusion.”
  • and
    • “Chronic stress may hit women’s brain power harder than men’s as they age.
    • “A new study of nearly 3,900 healthy adults age 50 and older without dementia found women with higher levels of ongoing stress had steeper declines in attention and language than men.
    • “Researchers said it’s not yet clear why — or whether the difference is tied to biology, such as hormones, or social factors like gender roles.
    • “Hispanic participants with higher stress also had greater memory decline than non-Hispanic white participants.
    • “But there was an encouraging finding across all groups: Greater social support was linked to less decline in attention.”
  • Beckers Behavioral Health points out,
    • “The prevalence of benzodiazepine dispensing in the U.S. fell 26.7% from 2013 to 2024, with the largest relative decline among adults ages 18-29, according to a study published Sept. 30 in the American Journal of Psychiatry.
    • “Researchers from Rutgers University in New Brunswick, N.J., and Columbia University in New York City analyzed 1.1 billion benzodiazepine prescription fills among 252 million patients age 2 and older using the IQVIA Longitudinal Prescription dataset. The study examined changes in prescription prevalence, prescription counts and mean total dose dispensed by patient age and prescriber type.
    • “The declines may reflect greater caution in benzodiazepine prescribing, potentially tied to growing awareness of the drugs’ role in opioid-related overdoses and to FDA boxed warnings issued in 2016 and 2020, according to the researchers. The 2016 warning cautioned against prescribing benzodiazepines alongside opioids, and the 2020 warning addressed risks of misuse and addiction.” 
  • Health Day adds,
    • “A quick spritz to the nose could bring rapid pain relief to injured kids cared for in emergency rooms, new research shows.
    • “According to experts, too many pediatric ER patients are waiting too long for pain relief.
    • “Nearly a third of children with moderate to severe pain do not receive adequate pain relief within the 15 to 20 minutes recommended in international guidance,” noted study lead author Dr. Shammi Ramlakhan of Sheffield Children’s Hospital in England. 
    • “The new nasal spray combines two medications, sufentanil and ketamine. This combo eased pain within a half-hour for most injured kids in the study, Ramlakhan’s team said. 
    • “The results suggest it helps to reduce pain quickly and effectively, without the need for an injection,” said Dr. Maša Sorić, head of the emergency department at University Hospital Merkur, Zagreb, Croatia.
    • “Sorić, who wasn’t involved in the study, noted that “the treatment did not cause too much drowsiness, and the side effects were mild.”
  • BioPharma Dive notes,
    • “Bristol Myers Squibb has changed a late-stage study of its experimental pulmonary fibrosis drug admilparant to more closely monitor for liver-related side effects, following a “limited number” of instances of liver damage as well as the death of a participant from liver injury, a spokesperson said Wednesday.
    • “The change to the long-term safety extension to its Phase 3 “Aloft” trial raised investor worries about admilparant’s drug class, called LPA1R inhibitors, which are viewed as a new way to slow progression of the lung disease idiopathic pulmonary fibrosis. Shares in Bristol Myers as well as Contineum Therapeutics, the developer of a similar drug, fell sharply in late-day trading Tuesday before rebounding early Wednesday. 
    • ‘A spokesperson confirmed that it’s unclear whether the patient who died received admilparant. Wall Street analysts also called the brief share pullback “overdone,” pointing to multiple factors that could’ve contributed to the death and the relatively mild nature of the other side effects observed. Bristol Myers expects to report study results by the end of the year, an announcement that could shed more light on the safety of admilparant and other drugs in its class.”
  • STAT News lets us know,
    • “An investigational combination therapy from Eli Lilly led to significant weight loss in a mid-stage study, but high rates of people stopping the treatment may raise questions about its tolerability. 
    • “Lilly, which is racing to bring next-generation obesity drugs to the market, tested different combinations of its blockbuster GLP-1 drug Zepbound with eloralintide, a candidate that targets the amylin hormone, in people with obesity and type 2 diabetes.
    • “After 48 weeks, participants who stayed on the treatment at the highest dose of the combination therapy lost 23.3% of their weight, according to results presented Wednesday at the annual meeting of the European Association for the Study of Diabetes. That’s more than the weight loss seen with those taking only Zepbound and those taking only the highest dose of eloralintide — 14.8% and 11.1%, respectively.
    • “The results were also notable because patients with diabetes don’t tend to lose as much weight on medications as those who don’t have diabetes.
    • “However, there were high rates of participants stopping the combination therapy due to adverse events — ranging from 10.8% to 27.0% among the different dose groups. Those taking only eloralintide had discontinuation rates ranging up to 10.8% across dose groups, and those taking only Zepbound had a rate of 2.9%.
    • “The new combination therapy, called EloraTZP, is a potential competitor to Novo Nordisk’s CagriSema, an investigational combination of an amylin drug called cagrilintide and its own Wegovy that’s further along in development. Given the high discontinuation rates in the new trial, it’s difficult so far to compare EloraTZP with CagriSema.”

From the U.S. healthcare business and artificial intelligence front,

  • Modern Healthcare reports,
    • “Cigna Group is forecasting future growth and billions in cost savings, the company disclosed Wednesday.
    • “The healthcare behemoth reaffirmed its guidance for this year and projected at least $45 in adjusted earnings per shareby 2030 during the company’s investor day.
    • “Cigna Group will also save $3 billion over multiple years, partly from automating workflows and implementing artificial intelligence, said Ann Dennison, executive vice president and chief financial officer. Some of those savings will be invested back into the company, she said.”
    • “Cigna Healthcare is launching Health Sense early next year as part of its new partnership with OpenAI. Health Sense is a personalized clinical support model, which the company claims will reduce inefficient care by 10% by 2030.
    • “The company is also building a fifth “clean room,” a sterile facility where complex drugs are compounded and mixed. It will take up to three years to fully build and license, according to executives.
    • “This will create capacity for millions of new prescriptions to keep up with rising demand,” said Matt Perlberg, president of pharmacy and care delivery at Evernorth Health Services and executive vice president of customer innovation at Cigna Group. 
    • “Evernorth is also launching a wholesale distribution channel alongside its specialty distributor division CuraScript, which serves more than 12,000 healthcare providers, to gain access to new medications.”
  • Beckers Payer Issues relates,
    • “Tom Curtin was named executive vice president of Kaiser Permanente’s National Health Plan after serving as its interim leader since May.
    • “In the role, effective immediately, Mr. Curtin will lead health plan strategy and operations with a focus on growth, affordability and expanding access to the Oakland, Calif.-based system’s value-based care model, according to a Sept. 29 news release. He reports to Chair and CEO Greg Adams.
    • “During his time as interim leader, Kaiser Permanente added more than 223,000 members in 2026, positioning the organization for its strongest membership growth since 2018, the release said.”
  • Fierce Healthcare tells us,
    • “Performance-based contracting is becoming the norm for digital health solutions, with the majority of employers and health plans tying vendor payments to clinical and financial outcomes, according to a new survey from Peterson Health Technology Institute (PHTI).
    • “Specifically, 68% of employers and 55% of health plans are using such contracts. Eighty-five percent of contracts tie at least a quarter of fees to performance while 31% tie more than half, PHTI analysts wrote in the report (PDF).
    • “The report drew insights from 321 digital health professionals responsible for purchasing across health plans, employers and health systems. Four main areas were covered: purchasing approach, artificial intelligence adoption, contracting process and future plans.”
  • and
    • “Satisfaction with pharmacy benefit managers has stabilized in 2026, though the likelihood of contract renewal without a competitive request for proposal declined, a new report from Pharmaceutical Strategies Group (PSG) found. 
    • “The report drew insights from 250 benefits leaders representing employers, health plans, healthcare organizations and union plans. Respondents were asked to rate satisfaction with PBMs on a 10-point scale, with overall satisfaction receiving a 7.2 score, up from 7.1 in 2025. 
    • “On a similar scale, the likelihood to renew contracts without issuing competitive RFP fell to 6.4—which analysts note is the “lowest point in recent history.”
  • MedTech Dive informs us,
    • “Abbott said Wednesday it is launching Freenome’s SimpleScreen CRCblood-based test for colorectal cancer in the U.S. as an option for people who decline to complete medical guideline-recommended screening.
    • “SimpleScreen CRC is an addition to the Cologuard Plus stool-based test in Abbott’s colorectal cancer screening portfolio. Abbott acquired Cologuard in March in the $21 billion buyout of Exact Sciences.
    • “Freenome developed the SimpleScreen test and manufactures it. Abbott will distribute SimpleScreen in the U.S. under a commercial agreement with Freenome. The test, which won Food and Drug Administration approval this summer, will compete in the market with Guardant Health’s Shield blood test for colorectal cancer screening.”
  • Fierce Healthcare points out,
    • “Trinity Health System, a four-hospital system in eastern Ohio, will officially be handed over from CommonSpirit Health to University of Pittsburgh Medical Center (UPMC) on Oct. 1, the large nonprofit organizations shared Wednesday. 
    • “The deal is a geographic expansion for UPMC, which to date has limited its acute footprint to Pennsylvania. Financial terms of the deal still have not been disclosed. 
    • “By integrating Trinity Health System into UPMC, we are building upon a foundation of trusted collaboration to ensure that high-quality, patient-centered care remains accessible and sustainable for years to come,” Dwayne Richardson, interim market president, of Trinity Health System, said in the announcement. “We know that UPMC shares our dedication to clinical excellence.”
    • “Alongside the hospitals—Trinity West and Trinity East in Steubenville, Trinity Twin City Medical Center in Dennison and Trinity St. Clairsville Neighborhood Hospital in St. Clairsville—UPMC is acquiring associated clinics and sites delivering urgent care and behavioral health care.” 
  • Per Beckers Hospital Review,
    • “Dallas-based Baylor Scott & White Health reported operating income of $1.5 billion (8.3% margin) during the fiscal year ending June 30, 2026, down from a $1.7 billion operating gain (10% margin) in the previous fiscal year, according to financial statements published Sept. 30.”
  •  and
    • The number of first-year students at U.S. medical schools that grant MD degrees rose 36.8% from the 2005-06 academic year to 2025-26, but fewer are staying in their home state. 
    • Over the same period, the share of those students who come from the school’s home state declined, according to a study published Sept. 29 in JAMA.
    • The study’s authors, Barbara Barzansky, PhD, and Felicia Walker, work for the American Medical Association, which funded the research. They used data from the Liaison Committee on Medical Education’s 2025-26 Annual Medical School Questionnaire. Of the 160 medical schools the committee accredits, 158 responded.
  • Per MedCity News,
    • “AstraZeneca is making a $2 billion equity investment in Summit Therapeutics, a business deal that also kicks off a research collaboration that could pursue multiple drug combinations with an initial focus on gastrointestinal cancers.
    • “The deal announced after Monday’s market close is a vote of confidence in the Summit cancer drug ivonescimab, a bispecific antibody designed to bind to two targets, PD-1 on T cells and VEGF on cancer cells. Several oncology-focused pharmaceutical companies have already struck deals to add such drugs to their pipelines. Summit’s late-clinical drug gives AstraZeneca access to a contender in the class.
    • “Ivonescimab was developed by China-based Akeso Therapeutics. Phase 3 trial results in lung cancer raised hopes for the molecule as data showed it beat Merck’s blockbuster PD-1 inhibitor Keytruda in a head-to-head study. But those results were from a trial in China, where the drug has approvals in lung cancers and is marketed by Akeso. For Summit, ivonescimab’s prospects ride on the results of clinical trials the company is conducting in outside of China. Summit holds rights to the drug in North and South America, Europe, the Middle East, Africa, and Japan.”
  • Per Radiology Business,
    • “Solis Mammography has inked a new imaging joint venture with HCA Healthcare, the two announced on Monday. 
    • “The Addison, Texas-headquartered breast imaging provider is teaming with America’s largest health system to expand services in South Carolina. It will work with HCA Healthcare’s Trident Hospital, with its breast imaging services now branded under the Solis Mammography name. 
    • “This marks the private equity-backed imaging group’s first foray into South Carolina. Solis said the two have plans to further expand into additional HCA facilities across the greater Charleston area, boosting local access to breast imaging services. 
    • “Partnering with Solis Mammography reflects our deep commitment to the women and families who call the Lowcountry home,” Hugh Tappan, MBA, president of HCA Healthcare’s South Atlantic Division, said in a statement Sept. 28. “We want every woman to feel supported and confident in her breast health journey, with access to exceptional care close to home.”
  • Per Cardiology Business,
    • “Artificial intelligence (AI) is increasingly being incorporated into cardiovascular imaging, but at Mass General Brigham, some of the most practical applications are focused on streamlining the imaging workflow rather than replacing or double-checking what radiologists and cardiac imagers already do.
    • “Brian Ghoshhajra, MD, MBA, medical director of radiology and clinical operations for integrated imaging services at Mass General Brigham and an associate professor of radiology at Harvard Medical School, discussed the health system’s approach to AI and automation with Cardiovascular Business.
    • “Ghoshhajra said imaging can be viewed as a chain that begins with ordering and scheduling, moves through protocoling and quality assurance and ends with interpretation and reporting. While much of the attention surrounding AI has focused on interpretation, he said there may be significant opportunities to improve the earlier steps of the process.
    • “At Mass General Brigham, for example, automation has been used to reduce the amount of manual work required for protocoling cardiovascular CT examinations. Ghoshhajra said the system has grown from performing about five cardiac CT examinations per day when he was a fellow 18 years ago to approximately 85 to 100 studies per day across multiple hospitals using a hub-and-spoke model.”

Tuesday report

David Ermer–Agentic & Generative AI, CDC, CMS, FDA, Medical / Rx research, Mental health care, OPM, Rx coverage, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC

  • Beckers Payer Issues reports,
    • “CMS released initial insights on the 2027 Medicare Advantage landscape Sept. 28, along with data breaking down plans.
    • “One wrinkle gaining attention: enrollment capacity limits. In April, CMS said insurers could include enrollment caps for specific plans in their 2027 MA bids, relying on existing regulatory authority. With these caps, plans cannot disenroll current members. Once a plan hits its cap, it must stay closed to new enrollees until space opens up through natural attrition, according to the April memo. The agency baked enrollment caps into its August guidance for MA payers. 
    • ‘Ceci Connolly, president and CEO of the Alliance of Community Health Plans, recently told Becker’sthat her organization made progress with CMS on “tweaks with respect to the regulatory perspective,” including enrollment caps.” * * *
    • Becker’s reviewed the 65 MA plans — including MA plans with prescription drug coverage and special needs plans — with enrollment caps. [As disclosed in the article, t]hese plans are available in 11 states and span 15 parent organizations. The caps range from 410 to 56,345 members.
  • The New York Times relates,
    • “The Department of Veterans Affairs announced new measures on Monday that will require written informed consent by patients before they are prescribed certain psychiatric drugs.
    • “The shift reflects a growing disenchantment with psychotropic medications that has animated the Make America Healthy Again movement and its chief standard-bearer, Health Secretary Robert F. Kennedy Jr.
    • “The new policy will require veterans under age 30 to sign consent forms before receiving antidepressants, and it mandates documented discussions about the risks and benefits of the treatments, including how to safely discontinue them.
    • “The guidance also requires a signed consent form when patients are concurrently prescribed opioids and benzodiazepines. The measure will go into effect in 2027.”
  • STAT News adds,
    • “A growing number of congressional lawmakers are urging the Trump administration to rethink a federal rule going into effect next month over concerns it will prevent Americans from obtaining prescription medicines from licensed international pharmacies.
    • “The pending rule requires medicines mailed from abroad to go through a customs process that mandates a licensed customs broker and a financial guarantee in the form of an entry bond. This is an added burden — and cost — for Americans who, for years, have been able to receive prescriptions from Canada and other countries with relatively little difficulty as they sought to save money on expensive drugs.”
  • and
    • “In the last month, manufacturers have announced “breakthrough” status from the Food and Drug Administration for a menagerie of devices: triage algorithms for abdominal CT scans, diagnostic panels for urinary tract infections, and thrombectomy robots, to name a few.
    • “They’re coming in just under the wire: As of October, new breakthrough-designated devices will no longer be eligible for special treatment when it comes to qualifying for extra Medicare payments. These devices, and more than a dozen others, are included in the latest update of STAT’s Breakthrough Device Tracker, which since 2022 has captured nearly 800 devices reported to have FDA breakthrough status.” 
  • Beckers Hospital Review notes,
    • “Section 232 tariffs on patented pharmaceutical products and associated pharmaceutical ingredients take effect today, Sept. 29, for companies not covered by the earlier July 31 implementation date. The tariffs follow a Commerce Department investigation that found U.S. dependence on imported pharmaceuticals and pharmaceutical ingredients threatened to impair national security.” * * *
    • “Companies with qualifying most-favored-nation pricing and onshoring agreements with the administration receive a zero tariff rate through Jan. 20, 2029. As of an Aug. 31 White House announcement, all 17 Annex III companies, including AbbVie, Amgen, AstraZeneca, Bristol Myers Squibb, Eli Lilly, Johnson & Johnson, Merck, Novartis, Novo Nordisk, Pfizer and Sanofi, have signed MFN deals, meaning none currently pay the tariff.”

From the U.S. Office of Personnel Management front,

  • Per an OPM news release,
    • The White House Task Force to Eliminate Fraud and the US Office of Personnel Management (OPM) today announced more than $500 million in anti-fraud savings for calendar year 2025.
    • The results cover the Federal Employees Health Benefits (FEHB) and Postal Service Health Benefits (PSHB) Programs. $237.7 million was saved from claims stopped or reduced before payment, and an additional $271.9 million in losses were prevented due to changes in billing and policy.  An additional $21.9 million were recovered after payment. This work was done in coordination with the Special Investigation Units of the FEHB and PSHB Carrier organizations that administer the health plans.
    • “Fraud in federal health benefits programs drives up costs for employees, retirees, and taxpayers,” OPM Director Scott Kupor said. “These results demonstrate the importance of strong carrier oversight, better data sharing, and earlier detection. Working with Vice President Vance and the White House Task Force to Eliminate Fraud, OPM is strengthening accountability and protecting the premiums paid by enrollees and the federal government.”
  • Fox News adds,
    • “Kupor’s previous experience working with artificial intelligence has led to his name being floated to serve as the AI czar in the Trump administration – a role cast into the spotlight as data center development and artificial intelligence have become midterm election talking points.” * * *
    • “When asked about whether he has had any conversations with the White House about the role, Kupor said he had seen the reports he was being floated, and discussed President Donald Trump’s views on artificial intelligence broadly.
    • “I’ve read all the same reports you’ve read and don’t have anything to add there,” he said. “What the president has said is exactly 100% right, which is that AI is the most important piece of technology that will determine economic growth for us, national security, sovereignty for our country.
    • “One of the things that I know, again, having spent all my life in the venture world, is there is no limit to the intellect and inventiveness of entrepreneurs in this country. And we just need to make sure that the conditions around, you know, regulatory controls and others continue to allow the U.S. to flourish in the way that it’s always done.”
    • “Kupor did not rule out accepting the role if Trump should offer it to him, saying that while he is focused on his job as director of the agency, he serves “at the will of the president.”
    • “Reports had suggested that Treasury Secretary Scott Bessent was being considered for the AI czar position, but last week Trump said he would not be selecting him for the role.”

From the U.S. Food and Drug Administration front,

  • The Hill reports,
    • “If you are one of millions of Americans taking medication to lower blood pressure, you may want to check the label.
    • “Inventia Healthcare Limited, based in Mumbai, India, is voluntarily recalling 13,567 bottles of chlorthalidone tablets that may not dissolve properly, potentially lowering the dosage that gets absorbed by the body. The bottles of 25 mg tablets being recalled nationwide have the batch number RISA24002 and an expiration date of March 2027.”
  • Cardiovascular Business relates,
    • “Tempus AI has received U.S. Food and Drug Administration (FDA) clearance for a new artificial intelligence (AI) tool designed to evaluate standard 12-lead resting electrocardiograms (ECGs) for signs of undiagnosed mitral regurgitation (MR). 
    • “The newly cleared software, Tempus ECG-MR, identifies signs of moderate or severe MR and then flags clinicians to ensure the patient receives follow-up medical imaging as needed. It was built to assess diagnostic ECG recordings of any patients 65 years old or older who face a risk of developing cardiovascular disease.  
    • “A standard ECG contains far more information than we have traditionally been able to use,” Brandon Fornwalt, MD, PhD, senior vice president of cardiology at Tempus, said in a statement. “With the fourth FDA-cleared Tempus ECG-AI product, we’re building a growing portfolio that can identify signals across numerous types of heart and vascular disease from the same ECG, helping provide clinicians with more actionable information from a test already embedded in everyday care.”

From the public health and medical/Rx research front,

  • Beckers Clinical Leadership reports,
    • “The infant mortality gap between Black and white babies in the U.S. increased between 2020 and 2024, with sudden unexpected infant death identified as the largest single contributor to the disparity, according to a study published Sept. 22 in JAMA Network Open.
    • “Researchers analyzed federal birth and infant death records covering nearly 58 million live births and 366,384 infant deaths from 2003 to 2024 to determine the factors behind the Black-white infant mortality gap.” * * *
    • “This study provides evidence that there is an acute crisis right now in sudden unexplained infant death, a category of cause of death that we assumed we got under control a long time ago,” Leslie Root, PhD, study co-author and assistant research professor at the University of Colorado Boulder’s Institute of Behavioral Science, said in a Sept. 23 news release.” 
  • Health Day relates,
    • “A powerful new lab-made opioid is moving through the illegal U.S. drug supply, and federal officials warn it could keep spreading. 
    • “The drug, called cychlorphine, may be up to 10 times stronger than fentanyl, according to the White House Office of National Drug Control Policy (ONDCP).
    • “In an April 30 drug threat notice, the office said cychlorphine had turned up in every region of the country. It was most common in Ohio, Texas and Tennessee.
    • “As of that notice, at least 55 deaths nationwide had been linked to the drug in 2025 and 2026.”
  • and
    • “A diagnosis of type 2 diabetes at a young age is much more likely in people who have autism or attention deficit hyperactivity disorder (ADHD), new research says.
    • “More than 14% of people diagnosed with type 2 diabetes before the age of 20 had an ADHD diagnosis, compared to close to 7% of people of similar age without diabetes. That’s more than double the number, findings being presented at a conference in Italy this week show. 
    • “As for autism, 5.7% of people diagnosed with type 2 diabetes before the age of 20 also had the neurodivergent condition, the study found.”
  • MedPage Today tells us,
    • “Hearing loss is considered a key modifiable risk factor for dementia.
    • “Hearing aids did not reduce progression from mild cognitive impairment to dementia in the CHOICE trial, but cognitive improvement occurred more often with their use.
    • “Low dementia conversion rates in this study underpowered conclusions, making replication and confirmation essential.”
  • Cardiovascular Business adds,
    • “When adults with type 2 diabetes are already being treated 1-mg doses of semaglutide, moving to a 2-mg dose is associated with better cardiovascular outcomes than switching to tirzepatide. That was the primary takeaway from new data presented at the European Association for the Study of Diabetes Annual Meeting 2026 in Milan, Italy.
    • “Researchers explored real-world data from more than 600,000 adults with type 2 diabetes who were receiving once-weekly injections of semaglutide at 1 mg per dose. While 67.2% of patients stayed on that exact same dose, 29.2% made the move to a 2-mg dose of semaglutide. Another 3.6% of patients, meanwhile, switched to taking up to 15 mg of tirzepatide per dose. The number of patients moving to a stronger dose or switching to tirzepatide did increase over time. 
    • “Overall, the study’s authors found that the higher semaglutide dose was associated with a 6% lower risk of major adverse cardiovascular events—an outcome that includes heart attack, stroke and all-cause mortality—than tirzepatide.” 
  • Per Genetic Engineering and Biotechnology News,
    • “Researchers at Washington University School of Medicine in St. Louis have developed a potential antibody-based approach to reducing neurodegeneration in diseases known as tauopathies, including Alzheimer’s disease. Studying mice with Alzheimer’s-like tau protein accumulation in their brains, the team showed that injecting the animals with an antibody to a protein called CXCR3 over several months blocked the route used by T cells to get into the brain, reducing the number of those cells in the brain by about half.
    • “The treated mice kept roughly 40% more tissue in memory centers of the brain and did better on a memory test compared with untreated mice—even though the levels of tau in their brains didn’t change. “In tauopathies, including Alzheimer’s disease, there’s no treatment right now that actually decreases neurodegeneration,” said David M. Holtzman, MD, the Barbara Burton and Reuben M. Morriss III Distinguished Professor in WashU Medicine’s Department of Neurology. “If we can show that we’re really decreasing brain cell death, it’s certainly worth trying to pursue that pathway to prevent the most devastating consequences of these diseases.”
    • “Holtzman is senior author of the team’s published paper in Neuron, titled “Peripheral CXCR3 blockade mitigates T cell infiltration and neurodegeneration in a mouse model of tauopathy,” in which they concluded “Our study defines the CXCR3 axis as a critical target that, when blocked, mitigates CD4+ and CD8+ T cell infiltration and confers neuroprotection in a model of tau-mediated neurodegeneration in vivo without influencing levels of soluble or insoluble tau.”
  • Per STAT News,
    • “An experimental gene therapy for Huntington’s disease, developed by the biotech company UniQure, continued to slow the progression of the neurodegenerative disease four years after it was surgically implanted into the brains of patients, the company reported Tuesday. 
    • “However, the magnitude of the treatment’s benefit has waned compared to a similar analysis conducted one year ago, which may raise questions about its durability just as the Food and Drug Administration begins to review UniQure’s marketing application.” 
  • Per BioPharma Dive,
    • “A CAR-T treatment from Adicet Bio has shown in human testing the potential to drive lupus into remission, providing early but notable evidence that therapies like it could be useful in treating autoimmune conditions.
    • “After a year of follow-up in an early-stage trial, 50% of lupus nephritis patients treated with Adicet’s therapy and evaluable for efficacy had a “complete” kidney response to treatment and 54% met a widely used statistical criteria for remission. All of those patients, who had previously tried multiple other treatments, stopped using immunosuppressive drugs.
    • “Adicet also noted that there were no serious cases of cytokine release syndrome or instances of neurological side effects, both of which are concerns with cell therapy treatments. The company intends to start up a pivotal study in lupus in the fourth quarter.” 

From the U.S. healthcare business and artificial intelligence front,

  • Beckers Hospital Review reports,
    • “Bloomington, Minn.-based HealthPartners and Duluth, Minn.-based Essentia Health announced Sept. 29 that their boards approved an agreement to combine, forming a nonprofit system with 22 hospitals, more than 135 clinics, 6,000 clinicians and 45,000 colleagues.
    • “The combined organization will be called HealthPartners and led by HealthPartners President and CEO Andrea Walsh. David Herman, MD, CEO of Essentia since 2015, will serve as president of combined clinical care group operations, and Essentia facilities will keep the Essentia Health name while operations are integrated.
    • “No money is changing hands. The organizations will combine their assets under a single community-based board and expect the combination to be effective Jan. 1, pending a Minnesota public interest review and federal filings.” 
  • and
    • “Kansas City, Kan.-based The University of Kansas Health System has signed a definitive agreement to acquire full ownership of St. Francis Campus and its affiliated care sites in Topeka from Brentwood, Tenn.-based Ardent Health.”
  • and
    • Los Angeles-based Cedars-Sinai Health System recorded operating income of $261 million (2.8% margin) for fiscal year 2026, compared with operating income of $239 million (2.8% margin) in fiscal 2025, according to its Sept. 25 financial report. 
  • Per Healthcare Dive,
    • “Oura said Tuesday that it will delay its planned initial public offering due to market uncertainty.
    • “The smart ring maker said in May that it confidentially filed for an IPO, and recently revealed that it sought to raise up to $2.2 billion in the offering. The company has reached profitability, and its revenue has grown over the last three years, according to Oura’s prospectus. The company said it expects revenue to grow 90% year over year for its fiscal 2026; Oura reported $907.9 million in revenue in its 2025 fiscal year. The company has 5.7 million paid members.
    • “We aim to deliver an extraordinary IPO for our employees and investors and we have the luxury of choosing our moment,” CEO Tom Hale said in a statement. “In the meantime, we will execute against the opportunities ahead.”
  •   and
    • “Name: Robert Hunter
    • “Previous title: CEO of government programs, UnitedHealthcare
    • “New title: President, UnitedHealthcare
    • “Hunter, who has held a variety of roles at UnitedHealthcare over the past 15 years, will take on the role of president of Minnesota-based UnitedHealth’s payer arm, he announced in a LinkedIn post on Monday. 
    • “Hunter will focus on helping UnitedHealthcare, the largest insurer in the U.S., escalate its “modernization agenda,” toward “a future where healthcare is more connected, easier to navigate and simpler to understand,” he said in the LinkedIn post. The company is in the middle of an effort to streamline and modernize patients’ digital experience with the insurer.”
  • The Wall Street Journal relates,
    • “Novo Nordisk NOVO.B has signed a licensing deal for a weight-loss treatment being developed by Hengrui Pharma that could be worth up to $2.6 billion.
    • “The Danish drugmaker will pay China-based Hengrui $300 million upfront, with the rest of the potential deal value tied to milestones.
    • “Novo will obtain exclusive rights to develop, manufacture and commercialize HRS-1596 globally, excluding mainland China, Hong Kong, Macau and Taiwan. Hengrui is also eligible to receive royalties based on sales of the drug within the licensed territory.
    • “The move is in line with Novo’s efforts to continuously advance its pipeline across obesity, diabetes and other cardiometabolic diseases, said Martin Holst Lange, chief scientific officer at Novo.”
  • Fierce Healthcare tells us,
    • “Digital health company Waltz Health is teaming up with drugmaker Fresenius Kabi to support direct-to-employer efforts for key biosimilar medications.
    • “Through the partnership, commercial employers, health plans and pharmacy benefit managers can access transparent pricing information for three therapeutic categories: rheumatology, dermatology and gastroenterology. The agreement encompasses three FK biosimilars, which are interchangeable with popular branded drugs Humira, Stelara and Actemra.
    • “Teaming with Fresenius makes for Waltz’s first expansion to its direct-to-employer offering, which initially partnered with Novo Nordisk and Eli Lilly on GLP-1s and went live at the beginning of this year.
    • “Jeff Park, president of Waltz Health, told Fierce Healthcare that while direct-to-consumer platforms like the White House’s Trump Rx have grabbed the lion’s share of attention, there’s significant opportunity in the direct-to-employer space to address affordability and access.”
  • Beckers Hospital Review lets us know,
    • “Elevance Health plans to require hospitals to identify the physical location where care was provided on billing forms and adjust payments for off-campus services accordingly.
    • “The insurer said Sept. 29 the new policies will apply across its commercial, Medicare Advantage and Medicaid plans and are designed to address situations where care delivered at off-campus locations is billed at higher hospital outpatient rates. Elevance said it is the first commercial payer to go public with requiring physical location data on claims and tie reimbursement to that information. The company plans to roll the policies out through the end of 2027.
    • “Catherine Gaffigan, MD, president of health solutions at Elevance, announced the change during a Tuesday morning panel at the MAHA Summit in Washington, D.C., where she appeared alongside leadership from UnitedHealth, AHIP and CMS.
    • “Patients and employers should be able to trust that healthcare bills accurately reflect where care was provided,” Dr. Gaffigan said in a news release.”
  • and
    • “Hospital outpatient departments were paid an average of 102% more per unit than physician offices for the same physician-administered medications, a premium that adds up to about $12.7 billion a year in employer health spending, according to new research from the Washington, D.C.-based Employee Benefit Research Institute.
    • “If HOPDs were reimbursed at physician-office rates, employers and workers could save about $12.7 billion annually, or roughly $101 per covered member, according to a Sept. 28 news release. The analysis examined 2023-24 commercial claims for 106 of the highest-spending physician-administered outpatient drugs, which accounted for about 51% of claims and 77% of spending in the category, using the Merative MarketScan Commercial Database for adults ages 18 to 64 with employment-based coverage.
    • “HOPDs received higher reimbursement for 93 of the 106 medications, with a median per-unit difference of 64%. The median annual difference was $5,531 per patient, reaching $135,306 for one oncology drug. About 59% of administrations occurred in HOPDs, compared with 31% in physician offices. The median HOPD markup on drugs from EBRI’s earlier analysis fell from 98% in 2019 to 70% in 2024, largely because physician-office reimbursement rose rather than HOPD rates falling.”
       
  • Beckers Health IT points out,
    • “AI can perform care represented in 16% to 22% of U.S. outpatient claims, according to an analysis from McKinsey & Co. That work accounts for 13% to 19% of outpatient spending.
    • “The Sept. 28 analysis of 2024 commercial, Medicare and Medicaid claims found that roughly 2 billion to 3 billion outpatient claims involve services clinical AI could potentially perform. McKinsey calls this category “discursive care,” meaning reasoning- and dialogue-based work such as intake, triage, diagnosis, referrals and follow-up that doesn’t require a hands-on exam.
    • Evaluation and management visits involving no additional care, or only low-complexity care, made up 11% to 15% of outpatient claims and 8% to 12% of spending. Interpretation of diagnostic or imaging results accounted for 5% to 7% of both claims and spending.
    • “Physician offices, clinics, virtual settings and urgent care are likely to see the largest share of AI-driven change, the authors said.”

Monday report

David Ermer–Agentic & Generative AI, CDC, CMS, FDA, Medical / Rx research, Medicare, OPM, U.S. Healthcare–

Simplicity is a virtue.

From Washington, DC,

  • Per a Centers for Medicare and Medicaid news release,
    • “The Centers for Medicare & Medicaid Services (CMS) today announced significant premium savings for millions of Medicare beneficiaries in 2027, with weighted average MA premiums projected to fall more than 16% from 2026 to 2027, and average prescription drug premiums in Medicare Advantage projected to plummet 38%. 
    • “Additionally, average premium for stand-alone Part D prescription drug plans is projected to rise by less than $1 per month in 2027. Despite speculation and misleading reports related to the appropriate sunsetting of the Part D Stabilization Demonstration Project, there is broad pricing stability across the Part D market.
    • “The strong 2027 outlook means Medicare beneficiaries will continue to have access to affordable coverage and broad plan choice without relying on billions of dollars in temporary subsidies to insurance companies. More than 99% of Medicare beneficiaries will have access to at least one Medicare Advantage Plan, while 97% will have access to 10 or more options. 
    • “CMS is releasing this key information ahead of the upcoming Medicare Open Enrollment, which runs from October 15, 2026, through December 7, 2026.” * * *
    • “To view premiums and costs for 2027 MA and Part D plans, visit: www.cms.gov/medicare/coverage/prescription-drug-coverage, and select the 2027 landscape source file under “Downloads.”
    • “For state-by-state information, important dates, and enrollment resources for MA and Part D in 2027, visit: https://www.cms.gov/files/document/2027-medicare-advantage-part-d-landscape-state-state-fact-sheets.pdf.” 
  • Beckers Hospital Review reports,
    • “The Comprehensive Care for Joint Replacement (CJR) model saved Medicare $180 million in its final three performance years without changing care quality, according to the program’s final evaluationreleased Sept. 24.
    • “CMS launched CJR in 2016 as its first mandatory bundled payment program, requiring hospitals in randomly selected cities to take financial responsibility for hip and knee replacements and the 90 days after discharge. Hospitals could earn a payment from CMS or owe money back depending on whether episode spending came in under or over a target price. The model ended in December 2024. 
    • “The final report covered the three years after CMS extended and reworked the model (October 2021 through December 2024). During that stretch, 321 hospitals across 34 metro areas performed about 143,000 joint replacements that counted toward the model, which was about 9% of all hospital-based joint replacements in the U.S. CMS had narrowed the model to higher-spending markets, so CJR patients tended to be somewhat older and sicker than joint replacement patients nationwide.”
  • and
    • “The Trump administration is developing an initiative aimed at moving production of 86 essential medicines to the U.S. within 18 months, according to a Sept. 25 Bloomberg report.
    • “Under the initiative, the Office of Management and Budget would solicit proposals from the healthcare industry on opportunities to move production of drugs on the list to the U.S., according to the report. A committee would identify and act on industry proposals.
    • “The effort cites “national security” and aims to reduce or eliminate dependence on medicines produced by foreign entities of concern, including China, Russia, Iran and North Korea, according to an OMB document cited by Bloomberg.
    • “The initiative builds on broader federal efforts to strengthen domestic supplies of critical drugs. The Economic Development Administration put $15.97 million toward a Civica-led project to build a fully domestic supply chain for four sterile injectables. Nine drugmakers that signed most-favored-nation pricing agreements with the administration this month also committed to invest at least $19.6 billion collectively in U.S. manufacturing.”
  • Beckers Payer Issues relates,
    • “House Democrats have drafted an 84-page health policy agenda outlining what the party would pursue if it wins a House majority in November, according to a Sept. 25 report from Politico, which first obtained the document.
    • “The new agenda follows reports earlier this month that the caucus was privately discussing a broader expansion of the Medicare program, along with policies aimed at breaking up vertically integrated healthcare companies such as UnitedHealth Group and CVS Health.”
  • and
    • “Medicare Advantage plan choice will fall in more than half of states in 2027, even as CMS projects lower average premiums and a nearly unchanged number of available plans nationwide.
    • “The decline follows widespread disruption in 2026, when as many as 2.9 million MA enrollees had to find new coverage after their plans were discontinued or the insurer exited the market. Individual insurers have signaled a similar pullback for next year, with Humana saying in July that its 2027 plan exits are expected to affect about 600,000 members.”
  • Beckers Hospital Review adds,
    • “Researchers at Yale University have outlined 10 new policy proposals they say could save billions in healthcare spending, targeting Medicare Advantage payments, site-neutral payments, drug costs, nursing home care and other areas.
    • “Nine of the proposals carry annual savings estimates that together range from about $70 billion to $84 billion, while the remaining proposal is estimated to save households $44 to $58 a month. 
    • “The proposals are the latest additions to the Yale Health Care Affordability Lab’s 1% Steps project, which now includes 23 policies with estimated annual savings of about $450 billion, or roughly 8% of the $5.5 trillion the U.S. spends on healthcare annually, according to a Sept. 28 news release. The lab cautioned that the total is not a Congressional Budget Office-style estimate and does not account for potential interactions among the proposals.
    • “None of these ideas alone will fix the American health care system, but stacked together, these targeted reforms add up to substantial savings,” Zack Cooper, PhD, director of the lab, said in the release.”
  • HR Dive lets us know,
    • “The U.S. Department of Labor is trying to help workplaces prepare for opioid-related overdoses in the workplace, according to a news release issued Thursday. 
    • “DOL’s Occupational Safety and Health Administration released a fact sheet Thursday that “provides practical information that focuses on empowering workplaces to recognize the signs of an overdose and act immediately.” 
    • “The guidance comes as employers grapple with drug use among employees, with some reports showing nearly 20% of workers use some kind of substance.”

From the U.S. Office of Personnel Management front,

  • Federal News Network reports,
    • “As agencies walk back the Trump administration’s controversial essay question from federal job postings, the Office of Personnel Management is directing them to replace it with a new prompt.
    • ‘Agencies must now include a question stating, “In this role, you will be expected to professionally and efficiently implement executive direction. Provide an example where you implemented leadership direction on a strategy or policy decision that differed from your own recommendation.”
    • “A Sept. 18 memo from OPM told agencies to begin including the new question on all upcoming federal job announcements. It replaces a prompt from the Trump administration that previously asked applicants to name a few executive orders or policy initiatives “significant” to them and explain how they would help implement those orders if hired.
    • “Agencies are expected to include OPM’s replacement question on job announcements that close on or after Sept. 26. So far, about 2,400 job announcements contain the revised question, OPM said Friday in a court filing.”

From the U.S. Food and Drug Administration front,

  • STAT News reports,
    • “The FDA has approved AbbVie’s once-daily Parkinson’s pill, tavapadon, to be sold as Juvmo. The drug is part of its $8.7 billion acquisition of Cerevel Therapeutics. The dopamine receptor agonist was approved for adults with Parkinson’s based on a late-stage study that showed the drug helped improve symptoms, Reuters writes. 
    • “AbbVie has said it sees more than $5 billion in combined sales from its Parkinson’s portfolio, though Citi analysts have cautioned that Juvmo’s uptake could be gradual as Medicare coverage negotiations play out.”
  • Fierce Pharma relates,
    • “Roche’s Gazyva just increased its foothold in the autoimmune market with a fresh FDA approval, becoming the first new treatment option in 70 years for patients with idiopathic nephrotic syndrome (INS).
    • “The regulator cleared the anti-CD20 monoclonal antibody to reduce the risk of relapse in adults and children 2 and older with frequently relapsing or steroid-dependent, childhood-onset INS who are in complete remission.
    • “The FDA green light, Gazyva’s second autoimmune indication in less than 12 months, cementing the 2013 cancer drug’s second act in immune-mediated diseases.”
  • Per an FDA news release,
    • “The U.S. Food and Drug Administration today approved Emcitate (tiratricol) tablets for oral suspension to treat peripheral thyrotoxicosis (excess thyroid hormone levels in the blood that causes symptoms, such as rapid heart rate, increased blood pressure and adverse effects on metabolism) in patients with MCT8 deficiency, also known as Allan-Herndon-Dudley syndrome. Emcitate is the first therapy approved by the FDA to treat symptoms of this very rare, devastating genetic disease. This approval reflects the FDA’s dedication to patients with rare genetic diseases, many of whom have serious unmet medical needs.
    • “Until now, patients living with MCT8 deficiency and their families had no FDA-approved treatment option,” said Marina Zemskova, M.D., Deputy Director of the Division of General Endocrinology in the FDA’s Center for Drug Evaluation and Research. “Emcitate’s approval reflects the FDA’s deep commitment to patients with rare conditions who are in need of meaningful treatment options.”
  • MedTech Dive tells us,
    • “The Food and Drug Administration last week released a draft guidancedocument spelling out what the agency wants to see in premarket submissions for robotically assisted surgical devices.
    • “The 50-page document details criteria for system stability and latency, instrument motion and position control, visualization, software, wireless technology, cybersecurity, sterilization, clinical data, labeling, training and more.
    • “The agency also said it will hold a two-day public workshop on Dec. 2-3 focused on evaluating the benefits and risks of robotic medical devices with autonomous or remote teleoperation capabilities.”

From the judicial front,

  • Beckers Behavioral Health reports,
    • “A federal jury in Fort Worth, Texas, convicted Kevin Curry, 64, of nearby Frisco on Sept. 24 in a $26 million healthcare fraud, kickbacks and money laundering scheme.
    • “Mr. Curry billed TRICARE, the military’s health program, for transcranial magnetic stimulation therapy that was medically unnecessary or not provided, according to a Sept. 25 news release from the Department of Justice.”

From the public health and medical / Rx research front,

  • Beckers Behavioral Health reports,
    • “Breast and prostate cancer incidence is rising among people of every race and ethnicity in the U.S., while lung cancer incidence and death rates are dropping sharply, according to the CDC’s “Annual Report to the Nation on the Status of Cancer,” published Sept. 22 in Cancer.
    • “Researchers analyzed data from population-based cancer registries and the National Center for Health Statistics’ National Vital Statistics System to track cancer incidence through 2022 and death rates through 2023 by cancer type, sex, race and ethnicity and age.
    • “The CDC report follows the American Association for Cancer Research’s 16th annual “Cancer Progress Report,” which found the U.S. cancer death rate declined 35% between 2015 and 2024.
    • “The decline in cancer deaths was driven largely by “accelerated progress against lung cancer,” the CDC said in a Sept. 22 news release.”
  • The New York Times relates,
    • “More than 50 new cases of measles have been reported in Pennsylvania since Wednesday, state health officials said, as efforts continue to combat an outbreak that has spread across the state.
    • “The 55 new cases, reported by the Pennsylvania Department of Health in a statement on Friday, bring the total number of cases to 890 across 39 counties so far this year.
    • “The outbreak has led to 173 hospitalizations and four measles-associated deaths, according to the department.
    • “While daily numbers fluctuate,” the department said, “tracking these trends provides Pennsylvanians and health care providers with visibility into community transmission across the Commonwealth and helps inform the department’s ongoing response.”
  • STAT News tells us,
    • “Metal mixtures found in the leftover smoke, ash and debris from the deadly 2023 Maui wildfires were harmful to the lung health of people living nearby long after the burning ended, a new study says.
    • “The work shows that major wildfires, which are worsening with the planet’s warming, could have lasting effects beyond immediate exposure.
    • “New research published in the journal Proceedings of the National Academy of Sciences on Monday found higher metal levels, associated with respiratory harm, in nearby residents up to a year and a half after the fires.”
    • “As part of the Maui Wildfire Exposure Study, one of the largest postfire investigations in the country, University of Hawai‘i researchers studied the urine of 1,400 adults. They found substantially elevated concentrations of metals such as arsenic, cadmium, copper and antimony.”
  • MedPage Today asks “One Shot or Two? What to Know About HPV Vaccination Recommendations.”
    • — Guidance is evolving
  • Per Health Day,
    • “Cutting back on ultra-processed food could provide a boost to your mental health, a new pilot study says.
    • “People had less depression and anxiety after cutting their ultra-processed food intake by more than 85%, researchers reported Sept. 23 in JAMA Psychiatry.
    • “The results indicate that junk food “may harm your gut in ways that ripple up to your brain,” lead researcher Dr. Nyasha Chagwedera, an assistant professor of psychiatry and behavioral sciences at the University of California, San Francisco, said in a news release.”
  • Per Healio,
    • “Approximately one in four adults with hepatitis C virus infection who initiated treatment with direct-acting antivirals did not undergo follow-up RNA testing, according to a research letter published in JAMA Network Open.
    • “However, 90% of that unmonitored population had been prescribed at least 56 days of DAA therapy, potentially leaving cured individuals unaccounted for and highlighting a notable gap in HCV surveillance efforts.
    • “Measuring care outcomes is essential to monitoring progress toward hepatitis C elimination,” Hasan Symum, PhD, of the CDC’s division of viral hepatitis, and colleagues wrote.”
  • BioPharma Dive informs us,
    • “Shares in eye-drug developer Kodiak Sciences more than doubled Monday after the company said its two drugs for macular degenerationsucceeded in a Phase 3 clinical trial that compared them with Regeneron Pharmaceuticals’ Eylea.
    • “Kodiak’s Zenkuda was able to match Eylea’s eyesight improvement using an individualized dosing strategy that allowed more than half of trial participants to receive injections only once every six months compared with once every eight weeks for Eylea, Kodiak said. The biotech’s second drug, called tabirafusp alfa tedromer, also matched Eylea using an individualized dosing strategy.
    • :The company expects to ask the Food and Drug Administration for approval of Zenkuda in wet age-related macular degeneration, the condition treated in the trial reported Monday, along with two other eye disorders in the fourth quarter of 2026. The news marks a turnaround for Kodiak and Zenkuda, which failed to match Eylea in a trial that read out more than four years ago. Kodiak’s market value climbed by more than $3 billion
  • The Wall Street Journal notes,
    • Roche Holding ROP  said it stopped work on one of its obesity-drug candidates, after clinical-trial data suggested the medicine wouldn’t hit internal targets.
    • The Swiss drugmaker said it returned rights to the medicine, emugrobart, to its majority-owned business Chugai Pharmaceutical, which originally discovered the drug and licensed it to Roche.
    • “We have made the decision to discontinue development,” Roche’s pharmaceuticals chief executive, Teresa Graham, said at an event with investors in London on Monday. “We are returning that molecule to Chugai, and Chugai is looking to further development in [spinal muscular atrophy] as well as considering potential outlicensing opportunities.
    • “Roche had previously estimated the drug had potential to reach annual peak sales of between 1 billion and 2 billion Swiss francs ($1.21 billion-$2.41 billion). The company is also developing two obesity injections and a pill, and sees potential for each of them to exceed 3 billion francs in peak sales.”

From the U.S. healthcare business and artificial intelligence front,

  • Modern Healthcare reports,
    • “UConn Health’s proposed acquisitions of Bristol and Day Kimball hospitals have been delayed. “Farmington, Connecticut-based UConn said Friday it is committed to the deal but needs more time for due diligence and planning to ensure the facilities’ long-term financial sustainability.
  • STAT News relates,
    • “Blockbuster GLP-1 drugs have transformed the lives of millions of people. Lately, they’re undergoing a makeover of their own.
    • “Once promoted as tools to address obesity as a medical issue, GLP-1 drugs are increasingly being seen — and marketed — as a way to look and feel better generally. And, as the pioneer in the field, Novo Nordisk, in particular, has leaned into the shift.
    • “In advertisements around the world, the company has trotted out slogans like “Live lighter” and “Summer Glow Up.” On its website, Novo no longer labels its treatment, Wegovy, as a “weight management” drug or “anti-obesity” medicine, but instead as a “weight loss” drug. And the company now often refers to the people who take its drugs less as “patients” and more as “customers.”
    • “It’s a long way from the pitch Novo and its rival GLP-1 maker, Eli Lilly, once made — that obesity is a chronic biological disease, just like diabetes and heart disease, and the drugs don’t merely help people lose weight, but also improve health outcomes.
    • “The shift, observers note, is no accident.” 
  • Physicians Practice tells us,
    • “About a third of medical groups have used AI to build their own software, and many of those homegrown tools sit in the parts of the practice that handle patient data: scheduling, prior authorization, denials and patient-facing workflows.
    • “A Sept. 22 MGMA Stat poll of 228 medical group leaders found 34 percent have built an app or workflow tool in-house using AI, according to MGMA’s write-up of the results. Another 8 percent tried but never launched a project, 54 percent haven’t tried and 10 percent weren’t sure.
    • “The approach, often called “vibe coding,” lets someone describe what they want in plain language and have a generative AI tool write the code. It puts working software within reach of physicians and administrators who have never written a line of it.
    • “Respondents described building tools for scheduling, prior authorization and denial work, internal dashboards, inventory management, call handling, recalls and staff tracking. Some projects moved closer to protected health information, including charting support, biologic-ordering workflows, coding and audit guidance, and patient-facing tools.”
  • Healthcare IT News adds,
    • “Artificial intelligence capabilities are creating a new operational reality in healthcare right now and are needed to alleviate immense systemic pressures, said Seema Verma, general manager of Oracle Health and Life Sciences, on Wednesday as she opened the 2026 Oracle Health and Life Sciences Summit in Orlando, Florida.
    • “Verma announced a series of specifically engineered AI agents for clinical workflows, revenue cycle management and life sciences in her opening keynote address.
    • “These are not isolated product announcements,” she explained. “They are pieces of a much larger transformation across payers, providers, pharma and for all patients.”

Cybersecurity Saturday

David Ermer–Agentic & Generative AI, Cybersecurity–

From the AI frontier front,

  • CNBC reports,
    • “Anthropic and OpenAI on Tuesday each announced new, less costly artificial intelligence models as both frontier labs continue to face stiff competition from cheaper, open-weight competitors.
    • “OpenAI introduced additional tiers to its GPT-6 family, with GPT-6 Sol and GPT-6 Luna, slashing the API prices by 50% compared with GPT-5.6 promotional pricing. 
    • Sol, which is a tier below Astra, is meant for more complex workloads like coding, while the company’s Luna offering is geared toward “high-volume tasks” such as extracting information or summarizing documents, the company wrote. 
    • “Anthropic unveiled Claude Opus 5.5 on Tuesday, its latest release in the new Claude 5.5 model family. The company described the latest release as a more token-efficient version that will cost around 40% less to run than the company’s Opus 5.
    • “One of the things we’re continuing to innovate on is how to make that thinking, how to make the answering more efficient, so it uses less tokens depending on your effort setting,” Dianne Penn, head of product management, research and labs at Anthropic, told CNBC in an interview. 
    • “The separate releases are the first to roll out since Anthropic CEO Dario Amodei called for an industrywide slowdown on developing advanced AI as the debate about model safety reached a fever pitch in recent weeks.’
  • The Wall Street Journal relates,
    • “A swarm of OpenAI agents accessed U.S. government websites as part of a monthslong incident during which tests conducted by the artificial-intelligence company went awry, leading to unexpected internet activity.
    • “The AI agents accessed the websites belonging to the Commerce Department and the Securities and Exchange Commission and engaged in activity that OpenAI described as “misaligned.” That is the word AI companies use to describe bad behavior by their agents. In this case the misalignment appears to have been aggressive web browsing.
    • “In the case of the SEC, OpenAI’s agents copied and posted public data—something they were not supposed to do. In the case of the Commerce Department, an agent accessed a U.S. Census data website using a programming interface that wasn’t intended for this purpose, OpenAI said.
    • “OpenAI’s revelation came after the AI research nonprofit Transluce alleged that OpenAI agents “used an array of gray-area tactics to probe U.S. Government websites,” and attempted a “rudimentary,” but unsuccessful hack of an Education Department website. This was reported earlier by the New York Times.”
  • Bleeping Computer adds,
    • “OpenAI has confirmed it’s aware of a new security incident in which its AI agents uploaded user-provided images to third-party image-hosting services.
    • “OpenAI says most users were not affected, as it could only identify 53 incidents where agents accidentally uploaded images to the internet.
    • “The disclosure comes from OpenAI’s broader investigation into misaligned agent behavior following the Hugging Face security incident.”
  • The Wall Street Journal notes,
    • “President Trump said on Saturday [August 19] he was launching a new unit focused on artificial intelligence after leading figures in the industry publicly sounded the alarm over the growing technology.
    • “I am forming the AI Force, much like I did Space Force, which has been a tremendous SUCCESS, in my First Term,” Trump said on Truth Social. He added he is also recruiting an AI “czar.” The president had appointed investor David Sacks as his AI and crypto czar before the businessman stepped down from that role to become co-chair of the president’s Council of Advisors on Science and Technology, a role in which he is still one of Trump’s top advisers on AI policy.
    • “Saturday marks the first time the president has suggested there could be a new federal government entity solely dedicated to AI, but it isn’t clear what role it would play. Several other units of the government work on tech policy including the White House Office of Science and Technology Policy, the Commerce Department and the Defense Department.

From the cybersecurity policy and law enforcement front,

  • Cyberscoop reports,
    • “The Cybersecurity and Infrastructure Security Agency published a paper Wednesday that lays out its plan for improving the Common Vulnerabilities and Exposures (CVE) program, a contract for which nearly ended last year before a last-minute reprieve.
    • “The white paper outlines the components of a “Quality Era” for the program, widely used as the definitive clearinghouse for data on vulnerabilities in software and other products, even as the number of CVEs surges. 
    • “CISA remains committed to leading, growing and sustaining the CVE Program into the foreseeable future, just as we’ve done for more than 25 years without fail,” said Chris Butera, acting executive assistant director for cybersecurity. “Informed by CVE community feedback, this whitepaper communicates CISA’s effort to support and enable stronger participation and governance, a program-wide maturation effort.” * * *
    • “The plan calls for advancing data quality across four key dimensions: transparent and effective program governance, broad and active participation across the global software community, data infrastructure that supports CVE operational functions and reliable CVE record content. * * *
    • “Butera invited further feedback from the CVE community on the white paper, which stems from an earlier strategy document on the future of the program.
    • “Some CVE experts that CyberScoop spoke to were supportive of what CISA wants to achieve, but skeptical about elements of the white paper.”
  • and
    • “Nearly early nine out of 10 federal civilian executive branch agencies failed to meet last summer’s deadline to implement cloud security directives from the Cybersecurity and Infrastructure Security Agency, a watchdog report published Wednesday found.
    • “The conclusions from those results, according to the inspector general for the Department of Homeland Security: agencies “may encounter elevated security exposures that undermine the national cloud security posture and increase the likelihood of preventable cyberattacks and related threat,” and “CISA lacks the authority necessary to require full and timely implementation of Binding Operational Directives,” or BODs.
    • “The latter is a question that has surfaced before about CISA directives, which the agency uses to pressure agencies into improving their cyber defenses.” 
  • SC World tells us,
    • “The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced the launch of Vulnerability Information and Coordination Environment – New Technology (VINCE-NT) on Thursday [September 17], an upgraded, fully CISA-hosted system that will replace the original VINCE for coordinated vulnerability disclosure (CVD).
    • “VINCE has been used by researchers, suppliers and stakeholders since 2020 to coordinate the disclosure of cybersecurity vulnerabilities, and was originally sponsored by CISA and hosted by Carnegie Mellon University’s CERT Coordination Center (CERT/CC) under its Software Engineering Institute.
    • “The new VINCE-NT system, officially live as of Sept. 17, 2026, is now fully sponsored, hosted and managed by CISA and includes several improvements to streamline CVD, the agency said in an FAQ.”
  • Per a National Institutes of Standards and Technology news release,
    • “NIST has released the initial public draft of Special Publication (SP) 800-82r4 (Revision 4),  Guide to Operational Technology (OT) Security, which provides guidelines for improving the security of OT systems while addressing their unique performance, reliability, and safety requirements.” * * *
    • “Updates in this revision include:
      • “Expanded introduction to OT sectors to include Building Automation and Control Systems (BACS), Water and Wastewater Systems (WWS), food and agriculture, freight rail, maritime vessels, and Industrial Internet of Things (IIoT) and cloud convergence
      • “Restructured around the NIST Cybersecurity Framework (CSF) 2.0, including a reorganization of the previous risk management section to focus on the CSF Govern Function
      • “Expanded discussion of how OT risk management aligns with broader enterprise risk management, as described in NIST IR 8286r1
      • “Discussion of the adoption of the NIST Risk Management Framework (RMF) in Appendix F
      • “Expanded guidelines for implementing OT security controls, including asset management and network monitoring and detection
      • Security architecture guidelines focused on protecting system management functions and applying zero trust principles
    • “The comment period on this initial public draft is open now through November 30, 2026. See the publication details for a copy of the draft and instructions for submitting comments.”
  • Per a Justice Department news release,
    • “Ardit Kutleshi, 28, a Kosovar national, pleaded guilty [on September 24] to charges related to his creation and operation of Rydox, an illicit website and marketplace for cybercriminals to buy, sell and trade stolen personal information, and to access devices and other tools for carrying out cybercrime and fraud.” 
  • Cyberscoop points out,
    • “A 35-year-old Armenian national was sentenced to two years in prison for his involvement in a series of Ryuk ransomware attacks while living in Ukraine and Russia in 2019 and 2020, the Justice Department said Tuesday.
    • “Karen Vardanyan was extradited from Ukraine to the United States last year and pleaded guilty to computer fraud and conspiracy to commit fraud and extortion in July. Vardanyan’s sentencing, which also calls for about $1.2 million in restitution to victims, matches terms of a plea agreement he reached with prosecutors.
    • “Vardanyan and his co-conspirators’ victims include a Michigan-based company that paid a ransom of nearly $1.2 million in January 2020, a Watsonville, Oregon-based technology company that was attacked in December 2019 and a Texas-based school breached in February 2020, according to court records.”

From the cybersecurity breaches and vulnerabilities front,

  • Cybersecurity Dive reports,
    • “The FBI is investigating a cyberattack on its jobs portal after the cybercrime group ShinyHunters said it hacked the system and stole a vast trove of sensitive data from the bureau.
    • “The FBI is aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information (PII),” the bureau said in a statement on Wednesday [September 23]. “While the point of breach is still undetermined—whether a third-party or the FBI’s enterprise—we are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk.” * * *
    • “ShinyHunters told 404 Media that it hacked into the jobs portal using a zero-day vulnerability in Oracle’s PeopleSoft human-resources platform, a tactic it has used before. The potentially wide-ranging breach highlights the supply chain risks facing organizations of all sizes and levels of sophistication. ShinyHunters specializes in supply chain attacks, and its intrusions have illuminated weaknesses in the security protocols at widely used software and infrastructure providers.”
  • and
    • “The healthcare and pharmaceutical sectors are facing a heightened risk of social-engineering attacks, according to cybersecurity researchers and threat intelligence experts.
    • “The Health Information Sharing and Analysis Center recently warned that the group ShinyHunters was using voice-phishing attacks to target the healthcare sector. The hackers used medical-themed impersonation domains to trick healthcare employees into exposing their credentials. 
    • “More than a dozen member organizations have been hit by social-engineering attacks over the past couple of months, Errol Weiss, chief security officer at Health-ISAC, told Cybersecurity Dive. The actors involved are using aggressive tactics to try to compromise targeted companies. 
    • “They’re pretty belligerent when it comes to getting somebody on the phone and convincing them they need to click on a password reset or an MFA reset,” Weiss said.”
  • Beckers Health IT adds,
    • “Home medical equipment provider AdaptHealth disclosed that a June cyberattack exposed personal and health information belonging to more than 4.1 million patients, according to a filing with the HHS Office for Civil Rights.
    • “The company said the breach stemmed from a social engineering attack that compromised a third-party contractor’s user session, giving a threat actor access to AdaptHealth’s cloud-based patient management and document storage systems. AdaptHealth first disclosed the intrusion in a July 2 SEC filing after the attacker contacted the company June 15 claiming to have stolen data.”
    • “In an Aug. 14 notice, AdaptHealth said the threat actor exfiltrated names, contact information, demographic data, health insurance information and health information, along with a password file tied to insurance billing. Social Security numbers, financial account information and payment card data were not affected, the company said.”
  • and
    • “Eskenazi Health is notifying patients of a data breach after an employee’s cloud-based work account was compromised through a phishing email that appeared to come from a trusted business contact.
    • “The Indianapolis-based health system discovered the unauthorized access July 27, according to a Sept. 25 notice. A forensic investigation determined the unauthorized access began June 3 and continued until Eskenazi Health terminated it July 27.
    • “The incident began after the email account of one of Eskenazi Health’s business contacts was compromised and used to send thousands of unauthorized emails to individuals in the contact’s address book. An Eskenazi Health employee received one of the messages, which appeared to contain a secure document notification.
    • “After the employee interacted with the link and completed the requested authentication process, an unauthorized individual gained access to the employee’s work account, according to the notice.”
  • CISA added ten known exploited vulnerabilities (KVE) to its catalog this week.
    • September 21, 2026
      • CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
        • Aviatrix discusses this KVE here.
    • September 22, 2026
      • CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability
      • CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability
      • CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
      • CVE-2026-94127 F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
        • Cybersecurity News discusses the Check Point KVEs here.
        • Bleeping Computer discusses the Arista KVE here.
        • SOC Prime discusses the F5 KVE here.
    • September 24, 2026
      • CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability
      • CVE-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability
        • Cybersecurity News discusses the WS02 vulnerabilities here.
        • Recent Breaches discusses the Abode and Magento KVE here.
    • September 25, 2026
      • CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability
      • CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
        • The Hacker News discusses the Microsoft KVE here.
        • Recent Breaches discusses the Mikrotik KVE here.
    • September 25, 2026
      • CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability
        • Recent Breaches discusses the WordPress KVE here.

From the ransomware front,

  • HIPAA Journal reports,
    • “A new analysis of ransomware activity reveals broad, consistent targeting pressure across the United States. Ransomware activity is not limited to any specific industry, with all sectors attacked to varying degrees. The analysis was conducted by the AI-driven cybersecurity and threat intelligence platform provider Anomali, with the findings published in its US Ransomware Industry Targeting Report.
    • “Anomali observed ransomware targeting across 8 industry sectors by 200 distinct ransomware entities, with its analysis showing that technology was the most targeted sector, followed by manufacturing and healthcare.
    • “Anomali looked at ransomware targeting across eight industry sectors – technology, manufacturing, healthcare, financial services, government public services, construction, education, and energy. There was in excess of 50% observed targeting presence in all eight sectors, with technology companies targeted by 172 of the 200 ransomware entities (86%), followed by manufacturing with 166 (83%), and healthcare in third place with 154 (77%).”
  • Infosecurity Magazine relates,
    • “A newly formed ransomware group has claimed that if its victims don’t give into their extortion demands and pay a ransom, that they will destroy their backup infrastructure, in a move which could prevent a targeted organization from operating entirely.
    • “Named n0n, the emergence of the ransomware crew has been detailed by cybersecurity researchers at CyberXTron. In a blog post published on September 23, researchers said activity by n0n was first spotted on September 18 and by September 22 the group’s Tor-hosted leak site had published information about over a dozen victims.
    • “The group operates on a double extortion model which has become highly popular and highly effective among ransomware threat groups.”
  • Kaspersky adds,
    • “Kaspersky’s Global Emergency Response Team (GERT) has published a new report analyzing a sophisticated new tactic in the Payload ransomware family. Discovered during an incident response at a manufacturing company in the Middle East, this attack demonstrates a major shift in cybercrime: the attackers took complete control of the company’s network and forced its computers to lock up, display ransom notes, and change desktop wallpapers – all without deploying a conventional ransomware encryptor.
    • “This incident illustrates one of the trends mentioned in Kaspersky’s State of Ransomware 2026 reportreleased earlier this year: attackers are increasingly moving away from traditional file encryption. Instead, they are adopting “encryptionless extortion” – focusing on immediate operational disruption and leaking sensitive, stolen data on the dark web rather than relying on cryptographic keys to squeeze payments out of victims.”
  • Bleeping Computer notes,
    • “The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability.
    • “The Clop leak site was breached earlier this month by the ShinyHunters extortion gang, which first uploaded a small text file and later replaced the site with a full-page defacement displaying its Umbreon Pokémon logo and a link to its own data leak site.”

From the cybersecurity business and defenses front,

  • The American Hospital Association News reports,
    • “The FBI and the Cybersecurity and Infrastructure Security Agency have released a fact sheet for critical infrastructure organizations on ways to reduce risk and minimize vulnerabilities when working with third-party hardware and software networks designed to monitor and automate physical processes for control systems and devices, such as pumps, sensors and industrial computers for operating essential equipment. In healthcare, such applications are common throughout facilities and include climate control, building automation, access control and other systems. Such operational technology systems are essential for maintaining clinical operations. The agencies said that organizations should maintain caution when granting third-party networks high levels of access or control over such operations, allowing only the minimum access necessary to perform their assigned tasks. Granting additional access could expose owners and operators to malicious cyber actors attempting to exploit and compromise equipment and critical functions. The fact sheet includes recommendations for organizations to assess and reduce risk of attacks.”
  • Cybersecurity Dive relates,
    • “Google-owned cloud security firm Wiz said on Thursday that it is using AI tools to identify vulnerabilities in internet-facing critical infrastructure, from operational technology maintained by under-resourced utilities to software packages that are foundational to online activity.
    • “Where authorized, we will use the Wiz Red Agent and additional internal AI research capabilities to examine publicly facing websites, APIs, and applications,” Wiz’s Ami Luttwak and Gal Nagli wrote in a blog post about the company’s Scan for Good initiative. “This work will help organizations find and fix critical exposures before attackers do, allowing them to stay ahead of adversaries as AI capabilities advance.”
  • and
    • “Nearly nine out of 10 industrial security leaders said they believe their companies could contain a cyber incident, and nearly half of those same companies experienced a breach or attack over the past 12 months, according to a report released Tuesday by Rockwell Automation. 
    • “More than one-third of industrial firms described cyber risk as the top obstacle to growth. 
    • The report highlights a continued resilience gap in industrial environments, where maintaining operational technology is critical. More than 60% of industrial firms have invested in various security technologies, including asset inventory, intruder detection and secure remote access.” * * *
    • “A separate benchmark report out Tuesday from Honeywell Technologies also showed a significant gap in OT security readiness. The report, based on responses from more than 600 IT security leaders globally, showed only one in five organizations had complete visibility into their OT assets.” 
  • and
    • “As the cyber insurance industry has worked to regain momentum against a rising wave of cyber risk, the rapid emergence of AI has put increased pressure on determining whether the sector could afford to cover potentially billions in losses from a catastrophic event. 
    • “After months of uncertainty, Beazley, a leading specialist in the cyber sector, on Thursday confirmed it would provide “AI-afffirmative cover,” meaning it would cover losses stemming from an incident, even if the attacker utilized artificial intelligence.” 
  • Help Net Security notes,
    • “To help security practitioners catch malware that leans on AI, researchers from Cisco Talos shared an open-source framework that they hope will be used to classify and analyze the threat. The tool, called CAIRN, works entirely from metadata pulled off files. No downloading the malware, no running it.”
  • Dark Reading explains that “Stopping IT Worker Scams Requires Revamped HR Process.”
    • “Training human-resource managers in the latest tactics and warning signs goes a long way toward blunting the threat, but automated analysis can help even more.”
  • Here is a link to Dark Reading’s CISO Corner.

Cybersecurity Saturday

David Ermer–Agentic & Generative AI, Congress, Cybersecurity, Uncategorized–

From the frontier AI front,

  • The Wall Street Journal reports,
    • “Google’s Gemini model accessed the internet and hacked other companies during a test of its cybersecurity capabilities, the first known example of the company’s artificial-intelligence systems autonomously committing such an act. 
    • “The hacks, which the company confirmed on Friday [September 18], occurred in May as part of a test run by the company Irregular, which was also involved in similar incidents disclosed by OpenAI, Anthropic and Meta. 
    • “In one of the cases, the model guessed passwords until it gained access to a protected system. In the other two cases, the model found credentials in a public repository that allowed it to then access protected systems. In each case, the model ended the intrusion after determining it had accessed a real company’s systems, Google said.
    • “Irregular notified Google about the hacks at the end of July, Google and Irregular said, in the wake of the discovery that OpenAI’s agents had hacked the AI software company Hugging Face. Google didn’t disclose the hacks until The Wall Street Journal reached out with inquiries this week.” * * *
    • “Worries about the cybersecurity capabilities of new models have increased since the July discovery of the Hugging Face hack. In that case, up to 1,200 agents coordinated on a secret message board inside OpenAI to try to cheat on an evaluation, a report by the third-party testing company METR revealed in August. 
    • “Last week, those concerns spilled into the mainstream after the dramatic quitting of Jacob Coxon, a former OpenAI researcher who had gone to Anthropic earlier this year. Over the weekend, leaders from Anthropic, OpenAI, Google and SpaceX all agreed on the need to slow down the rate of AI progress, although none of the companies have outlined exactly how that would happen.”
  • and
    • “The WSJ Technology Council Summit kicked off Monday afternoon [September 14] in New York City with an informal poll of the audience during a town hall conversation. In a show of hands, only a few people said they feared that AI could kill us all in the next decade, while about half of attendees indicated that they were in support of slowing down AI development at the frontier and prioritizing safety guardrails.
    • “But that slowdown didn’t apply to the deployment of AI within their organizations, where not all models are at the cutting edge and even the most advanced of them tend to be relatively well understood and tested by experience.
      “It’s in our hands and it’s up to us to apply [AI] for good, and I think it can do a lot of good for society,” said Vishal Talwar, president, FedEx Dataworks, and chief digital and information officer, FedEx.
      “Much of ensuing town hall discussion focused on the myriad ways in which companies were operationalizing AI.”
  • Cyberscoop adds,
    • “The AI hacking apocalypse is not inevitable.
      • “While large language models present real risks to society, experts say they can be tested and largely controlled using well-worn cybersecurity and policy choices.”
      • “Juan Andres Guerrero-Saade, a fellow for AI and security research at SentinelOne and an adjunct professor at Johns Hopkins University, said the hacks are worth taking seriously, but at a time when businesses and open-source maintainers should be focused on further hardening their systems and policymakers should be discussing new solutions, “what we see is cybersecurity being used essentially as an excuse for these AI doomer arguments.” * * *
      • “Guerrero-Saade is among a growing chorus of cybersecurity professionals who say that while AI systems pose real, unique threats to our systems, the apocalypse is far from inevitable. Most of the public concerns around the incidents, let alone worries about killer AIs attacking critical infrastructure, assuming control of the internet and wiping out humanity, are either technically impossible or can largely be controlled through established cybersecurity principles.
      • “There is this “narrative or magical thinking of ‘Well, AI is going to be able to hack everything, and therefore it can control everything, and therefore it’s going to kill us all,’” he told CyberScoop. “And you [think] these just don’t add up. They’re not very well-reasoned arguments.”
      • “This fatalistic narrative tied to AI’s eventual dominance doesn’t hold up under scrutiny, according to experts CyberScoop spoke with. In recent conversations, cybersecurity and national security professionals raised questions about both the technical solutions OpenAI and Anthropic use to contain their models, as well as the glaring absence of federal oversight from federal regulators or truly independent third-party review.”

From the cybersecurity policy and law enforcement front.

  • Per a Senate Finance Committee news release,
    • “U.S. Sens. Mark R. Warner (D-VA) and Ron Wyden (D-OR) today reintroduced the Health Infrastructure Security and Accountability Act, legislation to improve cybersecurity in our health care system amid a growing wave of cyberattacks that are compromising Americans’ sensitive information and disrupting access to critical care across the country.” * * *
    • “Specifically, the Health Infrastructure Security and Accountability Act would require the Department of Health and Human Services (HHS) to establish, enforce, and regularly update strong minimum cybersecurity standards for health care providers, health plans, clearinghouses, and business associates, with heightened standards for systemically important entities and entities critical to national security.
    • “The legislation would also require covered entities to develop continuity plans describing how it would resolve a tech failure or intrusion, conduct annual cybersecurity tests, and undergo independent security audits, while increasing fines for failure to meet security requirements and strengthening HHS oversight through annual cybersecurity audits. Additionally, this legislation would provide $1.3 billion to help hospitals strengthen their cybersecurity, including $800 million for hospitals in rural and underserved urban communities.
    • “Full text of the bill can be found here. A summary of the bill can be found here.”
  • Cybersecurity Dive reports,
    • “The Cybersecurity and Infrastructure Security Agency (CISA) will stop publishing weekly roundups of newly disclosed software vulnerabilities at the end of September, the agency announced on Thursday.
    • “CISA is ending its Vulnerability Bulletin “as part of its shift from severity‑based vulnerability management to a modern, risk‑based approach,” the agency said in a statement.
    • “The weekly bulletins, published since early 2004, listed vulnerabilities published during the reporting period along with their CVEs, severity scores and brief descriptions.” * * *
    • “CISA said in its Thursday statement that sunsetting the bulletin aligns with the prioritization directive it issued in July, “which directs federal agencies to prioritize vulnerabilities based on real‑world risk factors, including evidence of exploitation and exposure, rather than severity scores alone.”
    • “As it discourages organizations from relying solely on Common Vulnerability Scoring System (CVSS) scores to decide which vulnerabilities to fix, CISA has also been highlighting the Stakeholder-Specific Vulnerability Categorization (SSVC) system as a more nuanced approach to vulnerability analysis.
    • “Chris Butera, CISA’s acting executive assistant director for cybersecurity, said on Wednesday at Google’s Cyber Defense Summit that the agency has been discussing SSVC with companies that sell vulnerability management software. “They’re building some of this prioritization into their vulnerability tooling,” Butera said.”
  • and
    • “The Cybersecurity and Infrastructure Security Agency (CISA) wants to hire critical infrastructure experts with broad, rather than specialized, knowledge as it tries to help defend the infrastructure community with limited resources.
    • “I need to be able to hire people that are highly adaptive, because I think the threat is continuing to evolve so much, and the exposure that we have within these critical infrastructure sectors is evolving so much,” acting CISA Director Nick Andersen told reporters after speaking at Google’s Cyber Defense Summit here on Wednesday [September 16]. “I need people that can pivot from day to day to be able to help meet all of these stakeholders where they are.”
    • “Andersen’s comments come as CISA prepares to onboard roughly 250 new employees as part of a hiring sprint meant to fill critical vacanciescreated by the Trump administration’s sweeping downsizing of the agency over the past two years. As ransomware gangs and nation-state hacker groups increasingly menace infrastructure operators, in some cases aided by destabilizing advances in AI, CISA’s supporters say its mission — and its partnerships — have become more important than ever.”
  • Per a Department of Health and Human Services news release,
    • “The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) today [September announced a settlement with Ambry Genetics Corporation (Ambry) concerning potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule. Ambry, headquartered in Aliso Viejo, California, is a covered entity that provides genetic testing and clinical genomics services.
    • “In January of 2020, Ambry discovered that an employee’s email account was compromised by a phishing attack. The protected health information (PHI) of 225,370 individuals was potentially exfiltrated by the threat actor. Affected PHI included names, addresses, dates of birth, some Social Security numbers or driver’s license numbers, financial information, diagnoses and conditions, lab results, medications, and treatment information.” * * *
    • “The settlement resolves an investigation that OCR initiated after Ambry filed a breach report in March 2020 about the phishing incident that occurred in January 2020.  OCR found that Ambry had potentially violated provisions of the Security Rule, including:
      • “Failing to conduct an accurate and thorough risk analysis of the potential risks and vulnerabilities to the electronic protected health information (ePHI) held by Ambry;
      • “Failing to implement procedures for terminating access to ePHI when the employment of or other arrangement with a workforce member ends or access is no longer appropriate; and
      • “Failing to assign a unique name and/or number for identifying and tracking user identity in electronic systems containing ePHI.” * * *
  • “The resolution agreement and corrective action plan may be found at https://www.hhs.gov/sites/default/files/ocr-ra-cap-ambry-genetics-corporation.pdf [PDF, 51.88 MB].”
  • Cyberscoop adds,
    • “Another core member of the hacker subset of The Com involved in a spree of extortion attacks from at least 2021 to 2023 pleaded guilty to federal charges, according to court records released Tuesday.
    • “Ahmed Hossam Eldin Elbadawy, a 24-year-old from Texas, pleaded guilty exactly one year ago to wire fraud conspiracy and aggravated identity theft. His guilty plea wasn’t shared publicly until prosecutors filed an order of forfeiture this week seeking proceeds from Elbadawy’s criminal activities. 
    • “Elbadawy and his co-conspirators — Noah Michael Urban, a Florida man sentenced to 10 years in prison last year, and Tyler Robert Buchanan, a Scottish man who pleaded guilty to multiple cybercrimes in April and awaits sentencing — were part of an aggressive subset of The Com coined Scattered Spider.”
  • and
    • “Authorities seized the primary domain and other websites linked to NightmareStresser, one of the longest-running and most popular distributed denial-of-service operations used by cybercriminals globally, the Justice Department said Tuesday. 
    • “Cybercriminals of various motivations used the DDoS-for-hire service to launch hundreds of thousands of DDoS attacks or attempted attacks since at least 2022, officials said. 
    • “The takedown, part of an ongoing globally coordinated effort dubbed “Operation PowerOFF,” marks law enforcement’s continued targeting of IP stressers or DDoS booters that inundate websites, servers and networks with junk traffic, rendering legitimate sites inaccessible. The seizures were executed by the FBI Anchorage field office and the Royal Canadian Mounted Police.”

From the cybersecurity vulnerabilities and breaches front

  • HIPAA Journal notes,
    • “A hacking group has claimed responsibility for an August 2026 cyberattack on Cedar County Memorial Hospital in Missouri. Hacking-related data breaches have been reported by Next Level Medical in Texas and Grafton City Hospital in West Virginia.”
  • MSSP Alert adds,
    • “Artificial intelligence is fundamentally altering the economics of cybercrime, making attacks faster and less expensive to execute, as first reported by Channel Insider. Ransomware victims saw a 45% increase in the first half of 2026, while the average underground price for initial access dropped by 69%, from $1,427 to $439. This shift indicates that AI is enabling threat actors to target more organizations with greater speed and scale, even if individual attacks are not necessarily more successful.”
  • Cyberscoop reports,
    • “Researchers said they used Anthropic’s Claude and OpenAI’s Codex to identify a damaging flaw embedded in a popular software decoding tool that could leave major internet platforms, enterprise services, and web frameworks vulnerable to data theft and remote access.
    • “The vulnerability, nicknamed HEIF Heist, refers to the malware’s ability to trigger memory corruption errors in affected software, allowing the attacker to pilfer sensitive data from its victims. In a report published Thursday, the researchers laid out the potential damage an attacker could cause, including gaining access to internal OpenAI repositories, leaking user files, access tokens, and other sensitive data for online services like Amazon Web Services, and gaining remote code execution privileges across a range of online services, including Meta’s core product suite, GitHub Enterprise servers and open-source internet forum Discourse.”
  • and
    • “North Korean hackers are infiltrating tens of thousands of job seekers’ computer networks by posing as prospective employers, such as artificial intelligence firms, to steal sensitive information and millions of dollars worth of cryptocurrency, U.S. and allied governments warned Friday.
    • The security agencies behind the alert, attributed the group, known as WaterPlum or Contagious Interview, as operating under the 313 General Bureau of the Munitions Industry Department subordinate to the Central Committee of the Workers Party of Korea. The efforts dovetail with those of North Korean IT workers.
    • “WaterPlum actors pose as prospective employers to target software developers and IT professionals worldwide under the pretext of attractive job opportunities,” the agencies wrote. “They often impersonate legitimate Artificial Intelligence (AI), cryptocurrency, or Non-Fungible Token (NFT) companies and have also used recruiting services.”
    • Additionally, “Some WaterPlum actors also operate as North Korean IT workers performing web system design and development tasks on corporate web systems for clients,” read the alert from agencies in Japan, Australia and Germany, alongside the FBI and the Department of Defense’s Cyber Crime Center.”
  • Help Net Security tells us,
    • “A fake ChatGPT billing email is steering users to a copy of the OpenAI login page that keeps whatever username and password they type. Josh Varden of Cofense’s Phishing Defense Center traced the email’s payment button through a Google redirect to the attacker’s page.
    • “The lure targets ChatGPT users on work and personal accounts alike, and it copies the kind of bill a subscriber already expects. Credentials entered on the fake page go to the attacker, and the victim is sent on to an error page.” * * *
    • “Cofense listed three indicators: the Google redirect link and two paths on the same nxcli[.]io host, login.php and key.php. Mail teams can search their logs for all three. If you use ChatGPT, the check that matters takes two seconds: read the address bar and confirm it says auth.openai.com before you type a password.”

From the ransomware front,

  • Industrial Cyber informs us,
    • “New data from Comparitech disclosed a record 997 ransomware attacks worldwide in August 2026, averaging 32 attacks per day and representing a 23% increase from 809 attacks in July. The total surpassed the previous monthly record of 988 attacks recorded in February 2025. Businesses accounted for 861 attacks, up 24% from July, while ransomware incidents targeting healthcare providers rose 30% to 69. Utility companies recorded the sharpest sector increase, with attacks doubling from five in July to 10 in August. 
    • “Ransomware surge was led by Qilin and The Gentlemen, which together accounted for more than 26% of August’s attacks, with Qilin claiming 157 incidents and The Gentlemen 107. Qilin’s attack claims increased 22% during the month, while The Gentlemen’s declined 21%; Qilin also had 12 confirmed attacks, compared with eight for The Gentlemen.” * * *
    • “Attacks on healthcare providers increased by 30% from July 2026 to August 2026, rising from 53 to 69. Eight attacks were confirmed in August. Three of the confirmed attacks took place in the U.S. Nutex Health Inc. noted unauthorized activity on its systems in a SEC filing on Aug. 24, 2026, and The Gentlemen claimed the attack. Cedar County Memorial Hospital experienced disruption to its IT networks on the afternoon of Aug. 14, 2026, with operations returning to normal on the morning of Aug. 28. Wallstreet claimed the attack. At Windrose Health Network, hackers exploited a vulnerability in the network’s remote-management tool in early August, resulting in a data breach. Storm claimed the attack.” 
  • Beckers Health IT reports,
    • “Jackson-based University of Mississippi Medical Center did not pay a ransom in connection with the cyberattack that disrupted its systems in February, according to officials.
    • “UMMC Vice Chancellor of Health Affairs LouAnn Woodward, MD, told SuperTalk Mississippi the state did not compensate hackers following the Feb. 19 attack. State Sen. Nicole Akins Boyd, who chairs the Universities and Colleges Committee, corroborated Dr. Woodward’s account.
    • “The statements come after State Auditor Shad White said his office would investigate the incident and notify the public if the government had paid a ransom.
    • “The cyberattack knocked out UMMC’s phones, website, records database and IT systems, forcing partner clinics to close for nine days and staff to record patient information by hand. The medical center returned to full operations Feb. 27.”
  • Cybersecurity Dive relates,
    • “Security researchers warn that a newly discovered ransomware variant called Settra has targeted virtual private network environments or compromised credentials for initial access before deploying remote monitoring and management tools to gain persistent access in targeted environments. 
    • “Researchers from Huntress observed two specific attacks in recent months, including a July incident at a consumer services and retail organization and a September incident at a manufacturing firm, according to a blog post published Thursday [September 17].
    • “The attackers could be described as capable rather than sophisticated,” said Lindsey O’Donnell-Welch, principal technical community engagement writer at Huntress. “They used effective, established ransomware tradecraft: MeshAgent for persistence, a vulnerable driver to potentially impair defenses, log clearing and recovery tampering.”
    • “Researchers from MoxFive said Settra used compromised VPN credentials to gain initial access and posted numerous victim organizations on its shaming site. The group claims to target organizations with exploitable weaknesses, such as unpatched systems or weak access management, according to a blog post from MoxFive.”
  • Bleeping Computer lets us know,
    • “The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service.
    • “The attack began Friday night [September 18] when ShinyHunters exploited what they claim is an unauthenticated file upload vulnerability in Grav CMS, which they used to upload a small text file to Clop’s site.
    • “The small text file contained a message from the threat actors to the Clop ransomware gang, warning not to threaten them and including a link to ShinyHunter’s own data leak site.”
  • InfoSecurity Mag tells us,
    • “It is a scenario that every CISO hopes they never face: the network encrypted by ransomware attack and cybercriminals who claim to have stolen sensitive data which they will leak if they don’t receive a ransom payment.
    • “Unfortunately for Zach Lewis, CISO at the University of Health Science and Pharmacy (UHSP) in St. Louis, this was the reality he faced when the organization was hit by a LockBit ransomware attack in summer 2023. The University recovered without paying the ransom, but it was a challenging time for all involved.
    • “In a conversation with Infosecurity, Lewis opened up about how it felt to be the victim of a ransomware attack and the toll it took on his team, as well as how the organization recovered from the incident and the lessons other cybersecurity leaders can learn from this experience.”

From the cybersecurity business and defenses front

  • The Wall Street Journal reports,
    • “Companies are facing a new era in cyberattacks driven by AI. But according to one cybersecurity CEO, having the right technology for defense isn’t necessarily the problem. It’s the humans who need to step up—particularly CEOs.
    • “What we’ve seen practically from working with some of the largest organizations in the world is that the technology is already there,” Galina Antova, CEO of the AI-driven security platform Kai, said at the Leadership Institute’s WSJ Technology Council Summit this week. “We could implement so many improvements,” using autonomous AI, she added.
    • “But what it really comes down to is having “the right incentive for the leaders to pursue that,” and “are they enabling their security organization to really move at machine speed?” 
    • “Companies need courage and leadership, she told enterprise tech bureau chief Steve Rosenbush, in a discussion that included Oege de Moor, founder and CEO of cybersecurity firm XBOW. 
    • Some additional insights from their conversation:
      • “Companies may need to redesign their security workflows. Attackers are “already moving at machine speed,” and they’re encountering a patchwork of protections, Antova reported. She has found that many Fortune 500 companies use some 80 to 120 security tools “that are organized in a very fragmented way,” she said. That means that when a company has an exposure, it can take time—days, weeks, or months—to find and close it. By contrast, she said, an end-to-end autonomous defense system that’s supervised by humans can reduce that time to minutes.” * * *
      • “[B]oth CEOs noted that the gap between frontier and open models was shrinking—and Antova added that with the right cybersecurity expertise and a surgical approach to deployment, the cost of AI-enabled security no longer needs to be prohibitive.”
  • Cybersecurity Dive adds,
    • “Artificial intelligence is now the leading driver behind new investment into cybersecurity budgets, according to a report released Tuesday from IANS and Artico Search.  
    • “About seven of every 10 chief information security officers surveyed said AI was their top priority for new cybersecurity spending. Two specific areas for AI-related spending shown in the report include automating security operations and enhancing identity and access management. 
    • “Overall security spending rose 5% in the current survey, which is barely ahead of the 4% spending increase in the year-ago report. AI spending priorities come at a time of relatively modest growth in overall security spending.”
  • Per CISA news releases,
    • “The Cybersecurity and Infrastructure Security Agency (CISA) hosted Cyber Storm X this week, a four-day national cybersecurity exercise designed to test and ultimately strengthen the nation’s resilience. This year’s exercise included 2,000 participants from across the public and private sectors and marks the tenth exercise in the 20-year history of Cyber Storm. The biennial exercise brings together the people who manage the services our nation relies on, including water, energy, and other vital sectors. During the exercise, participants practice how they would respond to a major cyber incident affecting critical infrastructure.
    • “Cyber Storm helps critical infrastructure owners and operators understand how we would manage a large-scale cyber incident,” said Acting CISA Director Nick Andersen.  “Exercises strengthen our national resilience by making sure our plans, policies, and partnerships are ready when we need them.  As a nation, we need the ability to respond swiftly and effectively to critical threats. That’s exactly what Cyber Storm does and why it’s a vital exercise for our nation’s security.”
    • “This year’s exercise focused on a scenario involving a nation-state adversary targeting the transportation systems sector, including rail and ports, along with the water and wastewater systems sector. The exercise allowed participants to test response plans, practice coordination, and strengthen information sharing in a safe environment. Cyber Storm X included over two hundred organizations across all levels of government and the private sector.
    • “CISA will now collaborate with participating organizations to identify lessons learned from the exercise. We will use these findings in a public after-action report that captures observations, analyses, and recommendations. CISA is committed to providing access to a wide range of cybersecurity tools and training opportunities, with exercises being a critical part of that toolkit to enhance our nation’s cyber preparedness.
    • “For more information, please visit Cyber Storm X: National Cyber Exercise.”
  • and
    • “Today [September 16], the Cybersecurity and Infrastructure Security Agency (CISA) released guidance that helps critical infrastructure owners and operators implement realistic decoy systems and information assets to quickly detect and disrupt malicious activity occurring in their networks, which will ultimately improve their cyber defenses. Using Cyber Decoys to Strengthen Detection and Response is the first guide from CISA that offers a detailed explanation of the defensive cyber decoy process.
    • “Many organizations struggle to detect adversaries who use legitimate credentials, native tools, and living off the land techniques to conduct discovery, move laterally, and access data. In this guide, CISA encourages critical infrastructure organizations to incorporate cyber decoy capabilities alongside existing Zero Trust models. Cyber decoy strategies operate on the expectation that malicious actors may eventually gain some level of access. By placing decoys within internal networks and systems, especially in high-value areas, organizations can enable defenders to:
      • “Detect adversaries operating within the environment early in the intrusion lifecycle;
      • “Gather and analyze information taken from intrusions and attempted intrusions;
      • “Allocate defensive resources more effectively based on observed adversary behaviors;
      • “Reduce mean time to detection (MTTD) by generating high-fidelity alerts.” * * *
    • “To effectively use this guide, cyber defenders should have a basic understanding of the MITRE ATT&CK ® Matrix and common enterprise security controls and tools. The guide provides a practical approach to designing and implementing decoy strategies by leveraging the MITRE ATT&CK® knowledge base and the MITRE Engage™ framework.
    • “For more information, please visit Cybersecurity Best Practices.”
  • and
    • “The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) today [September 15] released Interagency Report (IR) 8587, Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers (CSPs). The report guides federal agencies and CSPs in defending the identity tokens and assertions that underpin modern single sign-on (SSO), federation, and application programming interface (API)-based access, systems adversaries increasingly target to move laterally through enterprise networks and reach sensitive data.
    • “The final report incorporates key feedback from nearly 250 public comments on token validation, secrets management, and detection at scale. The report also reflects input from CISA’s long-term, strategic collaboration with industry CSPs and interagency partners through the Joint Cyber Defense Collaborative. CISA and NIST engagements with this group included a technical exchange in June 2025 with over 50 industry experts to identify approaches to harden identity infrastructure and a webinar in January 2026 to review the draft report. Dozens of individual meetings with CSPs were also held to discuss feedback that included Google, HashiCorp, an IBM Company, IBM, Microsoft Corporation, Okta Inc., the OpenID Foundation, Oracle America, Inc., Amazon Web Services, and Wiz.” * * *
    • “The recommendations in the final report apply across commercial and government-operated cloud services and support implementation of Executive Order 14306 on secure software development practices.
    • “CISA urges federal agencies, CSPs and cloud consumers to review and implement IR 8587 to improve the security of their cloud systems. 
    • “For more information on this effort, read NIST’s News Release.“
  • Tech Target offers a tip about “how to verify the value of AI-powered business analytics.”
    • Executives can separate AI analytics capabilities from marketing hype by taking steps to confirm the platform improves decision-making and gives results that hold up.
  • Here is a link to Dark Reading’s CISO Corner.

Thursday report

David Ermer–Agentic & Generative AI, CDC, CMS, Congress, FDA, Federal employment benefits, Medical / Rx research, Mental health care, No Surprises Act, OPM, Rx coverage, U.S. Healthcare–

Happy Constitution Day!

From Washington, D.C.,

  • The American Hospital Association News reports,
    • “A Capitol Hill briefing Sept. 17 in Washington, D.C., hosted by 11 national healthcare organizations, including the AHA, highlighted the growing epidemic of workplace violence and its effects on staff well-being and patient safety. At the briefing, titled Protecting Those Who Care: Addressing Violence Against Healthcare Workers, Hill staff heard panelists’ personal experiences with physical and verbal attacks on the job and how hospitals are working to reduce the incidence of violence. The panelists were: Elizabeth Wells, M.D., executive vice president, chief clinical officer, and physician-in-chief, Children’s National Hospital; Jonathan Ripp, M.D., chief wellness officer and dean for well-being, Icahn School of Medicine at Mount Sinai; Tiffany Covarrubias-Lyttle, RN, associate professor of nursing, University of Lynchburg; and, Sheila Roth, Ph.D., professor emeritus, Carlow University. Reps. John Joyce, R-Pa., and Joe Courtney, D-Conn., also made brief remarks during the event.
    • “In a joint statement, the AHA and other participating organizations said, “Workplace violence, including physical assaults, threats, intimidation, and harassment, erodes the safety and dignity of healthcare workers, directly contributes to staff burnout and turnover, and staffing shortages, and compromises the quality of care and patient safety. This violence undermines providers’ ability to ensure safe, healing environments for all.”
    • “The AHA’s Hospitals Against Violence initiative includes resources and best practices for hospitals to use and share to address workplace and community violence.” 
  • Beckers Clinical Leadership relates,
    • “HHS Secretary Robert F. Kennedy Jr. appointed eight new members to the U.S. Preventive Services Task Force, bringing the influential preventive care panel to 16 members.
    • “Mr. Kennedy made the appointments Sept. 17 through the Agency for Healthcare Research and Quality. The eight join eight members currently serving on the volunteer panel of prevention and evidence-based medicine experts.
    • “The task force carries outsized weight for health system and payer leaders: preventive services that the panel grades “A” or “B” must be covered by most private insurers without cost-sharing under the ACA. Its composition effectively shapes which screenings and preventive services patients can get at no cost.” * * *
    • “Seth Corey, MD, a pediatric hematologist-oncologist at Cleveland Clinic, will chair the task force. The other seven appointees are:
      • “Patrick Hunter, MD, a pediatrician at Pensacola (Fla.) Pediatrics and member of the Florida State Board of Medicine
      • “Ronald Karlsberg, MD, a clinical professor of medicine at Los Angeles-based Cedars-Sinai Medical Center’s Smidt Heart Institute
      • “Venkatesh Murthy, MD, PhD, professor of preventive cardiology at the University of Michigan in Ann Arbor
      • “Stephen Parente, PhD, a health finance professor at the University of Minnesota’s Carlson School of Management in Minneapolis
      • “Goldie Stands-Over-Bull, MD, lead family medicine physician at Texas Native Health in Dallas
      • “Louis Wilson, MD, a gastroenterologist and managing partner at Wichita Falls (Texas) Gastroenterology Associates
      • “Dennis Wulfeck, MD, a diagnostic radiologist and president of the practice board at Radiology Partners’ MBB Radiology in Jacksonville, Fla.” 
  • U.S. News and World Report tells us,
    • “The U.S. Senate ⁠health ⁠committee will hold a confirmation ⁠hearing next week for Dr. Heidi Overton, President Donald Trump’s pick to ​lead the embattled Food and Drug Administration, the panel said on Thursday.
    • “The hearing will take place ‌on September 24, the Senate Health, ‌Education, Labor, and Pensions Committee said in a statement. Trump nominated Overton, a White ⁠House policy aide, ⁠in August, turning to an “America First” ally to steady an agency ​shaken by staff losses, low morale and fights over vaccines, the abortion pill and drug approvals.
  • Per Department of Health and Human Services news releases,
    • “The Advanced Research Projects Agency for Health (ARPA-H), an agency within the U.S. Department of Health and Human Services (HHS), today launched the new Systems for Phenotypic Evaluation, Clinical Trajectories, Response, and Agency (SPECTRA) program, a major research effort to transform how autism is understood, diagnosed, and supported across the lifespan. SPECTRA will bring together biological, clinical, behavioral, and real-world data with advanced computational tools to enable earlier and more accurate diagnosis, identify factors that shape individual health and developmental trajectories, and develop more precise approaches to care tailored to each person’s needs.
    • “Autism is not one-size-fits-all, and our science and care cannot be either,” said HHS Secretary Robert F. Kennedy, Jr. “Millions of American families are impacted by autism, and they need better answers about why it presents so differently from one person to another and which approaches can best meet each person’s needs. SPECTRA will harness the best of American science and innovation to deliver those answers — and turn them into better outcomes for people with autism and their families.” * * *
    • “Learn more about SPECTRA on its program page, including information about the solicitation.”
  • and
    • “The U.S. Department of Health and Human Services (HHS) today issued a Request for Information (RFI) calling on Americans, scientists, physicians, industry, and public health experts to submit evidence and information on the potential health effects of electromagnetic fields (EMFs), radiofrequency (RF) radiation, and wireless radiation exposure.
    • “The RFI will help HHS evaluate the state of the science, compare U.S. and international safety standards and regulatory approaches, identify critical research gaps, and develop practical, evidence-based recommendations for policymakers, families, schools, communities, and public health professionals.
    • “Wireless technologies are part of daily life, and our science must keep pace,” said HHS Secretary Robert F. Kennedy, Jr. “The MAHA Strategy directed HHS to examine electromagnetic radiation and health research, and we are acting on that directive. I encourage scientists, physicians, industry, public health experts, workers, parents, and citizens to bring us the best available evidence so we can identify the gaps and focus federal research where it is needed most.” * * *
    • “More information about the RFI can be found at the Federal Register [PDF].”
  • The International Foundation of Employee Benefit Plans helpfully shares information about “Red Flags for Mental Health Parity Compliance Problems.”

From the U.S. Office of Personnel Management front,

  • FedSmith reports,
    • “Federal retirees and Social Security recipients are only one inflation report away from knowing their 2027 cost-of-living adjustment (COLA). The Bureau of Labor Statistics (BLS) will release the September inflation report on October 14. That report will provide all three CPI-W figures needed to calculate the 2027 COLA.”
    • “The latest estimate from The Senior Citizens League (TSCL) puts the 2027 Social Security COLA at 3.5%. The organization lowered its estimate from 3.6% after the latest inflation report.
    • “Because Social Security and Civil Service Retirement System (CSRS) benefits use the same underlying inflation measure, that estimate also indicates the COLA CSRS retirees may receive. For most Federal Employees Retirement System (FERS) retirees eligible for a COLA, however, a 3.5% increase in the CPI-W would result in a 2.5% FERS COLA because FERS uses a different formula.”
  • Serving those We Serve tells us what federal and Postal employees should know about the redesigned Social Security Statement.
  • Tammy Flanagan, writing in Govexec, lets us know how to navigate the Pay.gov maxe for federal retirement deposits.
    • “Don’t let missing service credits or opaque OPM billing notices shrink your monthly annuity. Here is what you need to know before clicking submit.”
  • MeritTalk informs us,
    • “The Office of Personnel Management (OPM) used governmentwide OneGov deals to give every employee access to six artificial intelligence (AI) platforms, and more than 70% of its workforce actively uses at least one, according to OPM CIO Adam Starr.
    • “Speaking Tuesday at the GovExec Government & AI Summit in Washington, D.C., Starr said OPM has leaned heavily on the General Services Administration’s (GSA) OneGov agreements to rapidly expand employee access to AI.
    • “The OneGov deals were key to our ability to innovate at OPM with AI,” Starr said. “We basically bought all of the AI offerings at $1, and so we gave every employee six AI tools, and we encourage them to use it.”
    • “Those tools include Google’s Gemini, Microsoft Copilot, xAI’s Grok, OpenAI’s ChatGPT, Anthropic’s Claude, and Perplexity AI, Starr said.
    • “The strategy is intentionally multi-model. Starr said he wants employees to have access to several platforms because AI models are evolving quickly and vendors are regularly “leapfrogging each other.”

From the Food and Drug Administration front,

  • Per an FDA news release,
    • “The U.S. Food and Drug Administration today approved Fayuvi (rebisufligene etisparvovec-hopf), the first treatment for pediatric patients with mucopolysaccharidosis type IIIA (MPS IIIA), also known as Sanfilippo syndrome type A., MPS IIIA is a rare inherited disease that progressively damages the brain and nervous system, causing children to lose cognitive, language and other developmental abilities over time. Until today, treatment was limited to managing symptoms; there was no FDA-approved therapy designed to change the underlying course of the disease.
    • “The Trump Administration is committed to bringing safe and effective treatments to patients with the most urgent and unmet needs. The approval of Fayuvi marks a historic moment for children and families living with MPS IIIA, which is a disease that has, until now, offered no approved treatment to alter its devastating course,” said Acting FDA Commissioner Kyle Diamantas, J.D. “Gene therapy holds tremendous promise for rare diseases like Sanfilippo syndrome type A, and this milestone reflects the FDA’s commitment to action.”  
    • “Fayuvi is a one-time, intravenous (given directly into a vein) gene therapy that uses a modified, non-infectious virus called an adeno-associated virus serotype 9 (AAV9) to deliver a working copy of the SGSH gene into the patient’s cells. This enables the body’s cells to produce sulfamidase — the enzyme that is missing or deficient in MPS IIIA — allowing heparan sulfate to be properly broken down in lysosomes and reducing its harmful buildup throughout the body and brain.”
  • Targeted Oncology reports,
    • “FDA 510(k) clearance covers robotic colonoscopy for screening, surveillance, diagnostic evaluation, and advanced therapy including EMR and ESD across the full colon. 
    • “Triton 1 targets limitations of manual scope manipulation by adding robotic control intended to enhance stability, maneuverability, and procedural efficiency during flexible endoscopy. 
    • “CARE I (NCT06935734) reported 100% cecal intubation and no adverse events, meeting primary safety/efficacy end points in a first-in-human cohort. 
    • “Detection performance in CARE I included ADR 54.2% and polyp detection rate 67.5%, exceeding a cited 35% ADR industry threshold. 
    • “Endoscopist ergonomics improved, with a 67% lower perceived procedural workload versus manual colonoscopy on NASA-TLX, suggesting reduced physical and cognitive operator burden.”
  • MedTech Dive adds,
    • “Medtronic has received Food and Drug Administration clearance for a vessel-sealing technology used with its Hugo soft tissue robotic surgery system.
    • “The clearance, which Medtronic disclosed Wednesday, brings LigaSure technology, used in more than 45 million procedures worldwide, to the company’s robotic-assisted surgery platform.
    • “Targeting markets dominated by Intuitive, Medtronic has identified an opportunity to win share by pairing its platform with energy instruments that physicians use in non-robotic surgeries.”
  • MedPage Today informs us,
    • “Unapproved use of deoxycholic acid injection (Kybella) outside of the submental fat region may carry a risk of neuromuscular and other potentially serious adverse events, according to an FDA labeling update.
    • “A review of the FDA Adverse Event Reporting System (FAERS) revealed 129 cases of adverse events associated with use of deoxycholic acid in unapproved areas since the product was approved in 2015, the agency stated in a safety communication. The reports included some serious adverse events, such as blurred or reduced vision with periorbital use of deoxycholic acid injection and muscle or nerve injury, including facial paresis and paresthesia.
    • In announcing deoxycholic acid injection’s approval, the FDA emphasized, “It is important to remember that Kybella is only approved for the treatment of fat occurring below the chin, and it is not known if Kybella is safe or effective for treatment outside of this area.”

From the judicial front,

  • Bloomberg Law reports,
    • “An out-of-network healthcare provider can’t sue Cigna Health and Life Insurance Co. to recover more than $3 million it won against the plan through the No Surprises Act’s independent dispute resolution process, a federal appeals court said Thursday.
    • “The text and structure of the federal law, which created a process for resolving disputes between health plans and out-of-network providers, make clear that it doesn’t provide a private right of action to enforce arbitration awards obtained through that process, Judge Michael H. Park said. The US Court of Appeals for the Second Circuit thus affirmed the dismissal of East Coast Advanced Plastic Surgery LLC’s suit against Cigna.
    • “Although the NSA gives providers a right to payment from health plans for certain services, it delegates enforcement authority to multiple federal agencies and to states,” Park said for the unanimous panel. “This statutory scheme reflects Congress’s intent that the NSA, including payment of IDR awards, be enforced through administrative action rather than private litigation.”
  • Beckers ASC Review relates,
    • “San Tan Valley, Ariz.-based Rita Ntusa Anagho has been sentenced to 14 years in federal prison for orchestrating a $69 million Medicaid fraud scheme through her addiction treatment clinic, according to a Sept. 17 news release from the Department of Justice.
    • “Ms. Anagho, 54, a licensed nurse practitioner, owned and operated Tusa Integrated Clinic, which fraudulently billed Arizona’s Medicaid agency more than $69 million between about May 2022 and March 2023; the agency paid roughly $54.9 million on the false claims, according to court documents. 
    • “Ms. Anagho and her co-conspirators allegedly targeted patients covered under Arizona Medicaid’s American Indian Health Care Program, which reimburses at higher rates than other Medicaid plans, paid illegal kickbacks to sober home owners for patient referrals, and falsified treatment records to conceal the scheme.”

From the public health and medical / Rx research front,

  • Beckers Clinical Leadership reports,
    • “The U.S. cancer death rate declined 35% between 2015 and 2024, averting more than 4.8 million deaths, according to the American Association for Cancer Research’s 16th annual Cancer Progress Report, published Sept. 16.
    • Here are [three] things [the article has eight] healthcare leaders need to know from the report:
    • Death rates fell an average of 4.2% per year for lung cancer, 1.3% for colorectal cancer and 1.2% for female breast cancer between 2015 and 2024.
    • An estimated 2.1 million new cancer cases will be diagnosed in 2026.
    • By 2050, the number of annual cancer diagnoses is projected to rise to 2.5 million.
    • More than 18.6 million people with a history of cancer were living in the U.S. as of Jan. 1, 2025.
    • AACR researchers expect 22 million people to be living with cancer or a history of cancer by 2035.
    • “Read the full report here.”
  • Healio points out,
    • “Around 2.71 billion people worldwide were exposed to secondhand smoke in 2023.
    • “An expert encouraged clinicians to screen women, children and patients with cardiac issues for exposure.” * * *
    • “Despite the findings, Flor and colleagues highlighted progress from tobacco-reducing policies in the Americas, as “of the 79 countries attaining the highest level of achievement in smoke-free protections globally, 24 are in the Americas, approximately 70% of the countries in that region.”
  • STAT News adds,
    • “For years, researchers have known that, among people diagnosed with lung cancer, the prevalence of nonsmokers has been increasing. But they have been trying to determine what factors — whether genetic, environmental, or something else — might put these “never-smokers” at heightened risk. 
    • “Now, researchers have identified a very rare genetic variant that is associated with 25-fold higher odds of lung cancer, they reported in the journal Science on Thursday. In the U.S., the variant is far more common among people in Southern Appalachia than in other regions. 
    • Experts said that the variant likely only plays a role in a small portion of never-smoker lung cancer cases. But the research provides further evidence that these types of tumors can be tied to distinct risk factors, which may in turn require thinking differently about screening programs and treatment strategies. More broadly, the new study highlights the types of narrow but crucial discoveries that can be made by turning to large datasets replete with health information from millions of people. In this case, the investigators relied on genetic data from 23andMe.” * * *
    • “The variant in question — known as T790M — is a version of a gene called EGFR, which typically helps regulate how cells grow and divide. Select EGFR mutations can crop up over a person’s life and are among the most important drivers of lung cancer, and in turn are targeted by some cancer drugs.”
  • The Washington Post calls attention to “5 movements physical therapists say every adult over 50 should do daily.”
    • These simple moves can help you maintain mobility and independence as you age.”
  • Beckers Behavioral Health informs us,
    • “A 13-item Mental Wellness Tool detected common or severe mental disorders, substance use disorders and suicide risk among patients receiving psychiatric emergency department care at a New York City hospital, according to a Sept. 17 Medscape report.
    • “Existing mental health screening tools typically assess for one disorder, and screening for a range of psychiatric conditions can take well over 45 minutes and require several assessment tools. The mwTool-13 is designed to screen for multiple conditions in a single assessment.
    • “The mwTool-13 can be administered in 2 to 10 minutes, according to a Sept. 3 study published in Psychiatric Services.”
  • The Wall Street Journal shares readers views on patient portals.
  • Health Day tells us,
    • “Nearly two-thirds of suspected poisonings in young children probably do not need the emergency department and can be handled by a call to the local poison control center, according to a study published in the August issue of Clinical Toxicology.
    • “Liam P. McLoughlin, M.D., from Rutgers New Jersey Medical School in Newark, and colleagues investigated the medical necessity of pediatric emergency department presentations for poison cases where a poison control center was not contacted prior to presenting at the emergency department. The analysis included toxicologist reviews of summaries from 348 poison control center cases, originating from a health care facility, involving patients aged younger than 6 years.” * * *
    • “A big takeaway from the paper is that more needs to be done to make sure parents, schools, and communities know the poison center is a resource they can turn to when a poisoning is suspected,” McLoughlin said in a statement. “The poison center is available 24/7, 365, and is staffed by amazing people who can provide life-saving information by phone at no cost.”
  • and
    • “Exercise is already recommended to help people with cancer manage fatigue and improve quality of life. Now, there is evidence the benefits may go further.
    • “A new study finds structured exercise may help people with cancer live longer and have more time free of disease.
    • “Chih-Chen Tzang of the National Taiwan University and colleagues analyzed 21 clinical trials involving more than 8,400 cancer patients.
    • “Some followed supervised exercise programs that included aerobic exercise, strength training or both. Others did not.
    • “Over an average follow-up of about five years, those who exercised were 23% less likely to die and 17% less likely to have their cancer return before death.
    • “The benefits were strongest among people with early-stage cancer, those who did aerobic exercise — alone or with strength training — and those who completed at least 70% of their exercise program.”
  • Per Genetic Engineering and Biotechnology News,
    • “The genome editing toolbox provides unprecedented opportunities to engineer the human genome. However, genome editing for therapeutic benefit continues to have its limitations. Most current methods rely on untargeted gene delivery or short DNA edits that need to be individualized to each patient.
    • “Now, a new paper describes a novel genome engineering method, prime assembly, that allows long DNA fragments to be integrated into precise and programmable target positions within living cells. This approach, which leverages CRISPR-targeted dual flap synthesis, may allow for the development of universal gene therapies.
    • “This work is published in Nature in the paper, “Targeted genomic integration and rearrangement using prime assembly.”
  • Per Fierce Pharma,
    • “Roche’s T-cell engager portfolio has notched another milestone, as a phase 3 trial of the company’s Lunsumio met its primary endpoint in earlier-line follicular lymphoma.
    • “Without sharing any specific data, Roche and its subsidiary Genentech said Lunsumio’s combination with lenalidomide (Revlimid) demonstrated a statistically and clinically meaningful improvement in progression-free survival against rituximab (Rituxan) plus lenalidomide, known as R2, in the phase 3 Celestimo study. 
    • “The trial enrolled follicular lymphoma (FL) patients who have received at least one prior line of treatment, and it serves as the confirmatory study required to convert Lunsumio’s existing accelerated approval as a monotherapy in third-line FL into a full approval, while also potentially moving the drug earlier into the second-line setting.”

From the U.S. healthcare business and artificial intelligence front,

  • Beckers Payer Issues reports,
    • “The National Committee for Quality Assurance has named the highest quality and most effective health plans of 2026 based on clinical quality, patient experience and health plan accreditation status.
    • “The ratings were released Sept. 16 and are based on 2025 data from commercial, Medicare, Medicaid and ACA plans that reported HEDIS and CAHPS results to the NCQA, which cover approximately 236 million people. Some MA plan data is from 2024 because of reporting schedules, and NCQA Accreditation status was also factored in. Plans were rated on a zero- to five-star scale, with five being the highest rating. In total, 956 plans received a rating.
    • “Commercial plans that received a five-star rating:
      • BCBS Massachusetts
      • Capital District Physicians’ Health Plan (New York)
      • Capital District Physicians’ Healthcare Network (New York)
      • Harvard Pilgrim Health Care (Massachusetts, Maine)
      • Independent Health (New York)
      • Kaiser Mid-Atlantic (Washington, D.C.; Maryland; Virginia)
      • Kaiser Northern California
      • UPMC Benefit Management Services
      • UPMC Health Plan
  • and
    • “When Providence announced it was shutting down its health plan earlier this year after a $102 million loss in 2025, it joined a growing list of health systems stepping back from the insurance business. Carle Health’s Health Alliance, Michigan Medicine’s U-M Health Plan and others have wound down or are exiting, citing volatility in Medicare Advantage and government payer markets that have made provider-sponsored plans increasingly difficult to sustain.
    • “Terry Gilliland, MD, president and CEO of Danville, Pa.-based Geisinger, is watching the same environment unfold and coming to the opposite conclusion.
    • “Rather than say, this is hard and dump the plan, we’ve made the necessary changes including leadership top to bottom to grow profitably,” Dr. Gilliland said.”
  • and
    • “CVS Health’s Aetna is expanding prior authorization bundles for cancer, available to some Medicaid members as of Sept. 1.
    • “The update impacts Medicaid members with providers in Oklahoma, Illinois, Maryland, New Jersey, Virginia, Florida, Kentucky and West Virginia who use the Eviti portal for prior authorizations. Aetna anticipates broadening eligibility to Medicare and commercial members in the first half of 2027.
    • “According to a Sept. 17 news release, Aetna observed providers submitting four different prior authorizations, on average, for its members needing cancer treatments. These bundles allow a single prior authorization request that could encapsulate medical oncology and radiation oncology services with high-tech imaging needs. The expansion builds upon an early rollout of the bundles. 
    • “By approving a broader set of treatments and related services upfront, we’re removing barriers that can delay care,” Aetna COO and Medicaid President Katerina Guerraz said.”
  • Beckers Hospital Review relates,
    • “St. Louis-based Ascension has reached an agreement to transfer full ownership of its co-owned Arizona managed care health plan, Mercy Care, to CVS Health subsidiary Aetna, a spokesperson for Ascension confirmed with Becker’s. 
    • “Ascension co-owns the plan with San Francisco-based CommonSpirit’s Dignity Health, the spokesperson confirmed. The agreement is subject to regulatory reviews and approvals.
    • “Mercy Care has long served vulnerable populations, families and individuals across Arizona through Arizona Health Care Cost Containment System Medicaid programs and Medicare Duals Special Needs Plans,” the spokesperson said. “Aetna has successfully managed Mercy Care’s day-to-day operations and administrative services for over 20 years.”
  • and
    • “HCA Healthcare CFO Mike Marks said payers have outpaced hospitals on AI-driven claims processing, adding another layer to the friction hospitals face on denials, underpayments and prior authorization.
    • “I know there’s a lot of talk about AI in the hospital revenue cycle, we’re behind the payers, in my view,” Mr. Marks said Sept. 15 at the Jefferies Healthcare Services and Technology Conference in Nashville, Tenn., where the 190-hospital system is also headquartered.
    • “Payers, he said, have real incentives driving their AI investments, including medical loss ratios and patient populations to manage.
    • “They’ve been working really hard on their version of AI in their claims shop,” he said.”
  • and
    • “Nashville, Tenn.-based HCA Healthcare is seeing softer elective surgery volumes as patients lose coverage through the health insurance exchanges, with broader affordability pressures potentially contributing to the slowdown, CFO Mike Marks said Sept. 15 at the Jefferies Healthcare Services and Technology Conference.
    • “The 189-hospital, for-profit system continues to see strong overall demand for healthcare services, but the movement of patients from exchange coverage to uninsured status is weighing on elective procedures.
    • “On the inpatient side of elective, and frankly, on the outpatient surgery side as well, the biggest issue is HICS,” Mr. Marks said, referring to health insurance exchange coverage. “This movement out of HICS to uninsured — as people in our communities have lost coverage on the exchange [and] become uninsured — they generally lose access to elective care. That is the primary driver of the slowdown in our elective surgery volumes is exchanges.”
  • Beckers ASC Review tells us,
    • “Brentwood, Tenn.-based Surgery Partners has completed the sale of its ownership interests in its Idaho Falls, Idaho, facilities to Intermountain Health for $797 million in gross proceeds, according to a Sept. 17 news release.
    • “The deal includes Mountain View Hospital and Idaho Falls Community Hospital, values the combined facilities at about $1.15 billion, and delivered Surgery Partners $587 million in net cash proceeds at closing, subject to customary post-closing adjustments. Physician ownership of Mountain View Hospital will remain unchanged under Intermountain’s leadership, and the proceeds will primarily go toward paying down debt, which is expected to improve the company’s balance sheet leverage by about 30 basis points from 4.4x at the end of the second quarter.
    • “Excluding the Idaho Falls facilities, Surgery Partners expects a 50% reduction in its Medicaid payor mix, to under 2% of revenue, along with the elimination of its neonatology, obstetrics, inpatient pediatrics and retail and compounding pharmacy service lines.”
  • Fierce Healthcare informs us,
    • “Big box retailer Walmart is launching a six-month pilot program that places pharmacists in a new “Health Ambassador” role at five rural stores to help customers navigate health and wellness resources.
    • “Walmart’s Health Ambassador Associate will be able to aid patients in understanding their health goals and help connect them to relevant services and resources.
    • “The Health Ambassador role will be piloted at locations serving rural and underserved communities across the U.S., including in Lexington, Tenn.; Caro, Mich.; Franklin, Va.; Fort Scott, Kan.; and Searcy, Ark.
    • “The pilot will initially focus on three healthcare areas: diabetes, weight management and maternal health. Health Ambassadors can also aid customers in nutrition, movement, sleep and stress management through the program’s in-person conversations and tailored coaching.”
  • and
    • “Humana researchers found that cancer patients who received specialty pharmacy care coordination services had fewer hospitalizations and emergency department visits, along with lower medical costs.
    • “The study, conducted by Humana Pharmacy Analytics and Consulting, analyzed health outcomes for people with cancer who are Humana Medicare Advantage members with Part D prescription plan coverage and who received medication adherence care coordination guidance, as compared to those who opted out of coordination. 
    • “Humana’s CenterWell Specialty Pharmacy Oncology Center of Excellence (COE) provided the care coordination services over the course of one year. That COE program provides specialized, personalized clinical care and mail-order delivery for patients managing complex cancer diagnoses and therapies. Within CenterWell, Humana’s health care services organization, CenterWell Pharmacy serves many Humana members as a mail-order pharmacy and also serves patients who are not enrolled in a Humana plan.”
  • and
    • “Blue Shield of California announced Thursday that it plans to expand its Virtual Blue program, doubling program enrollment for members.
    • “Beginning in January 2027, the benefit will be included in fully insured preferred provider organization (PPO) plans for employers with 101 to 3,000 employees, as well as for certain individual and family plans, the insurer said.
    • “The expansion will allow an additional 200,000 mid-size employer PPO members and 60,000 individual and family plan members to utilize the program, increasing its total enrollment to more than 410,000 participants, executives say.
    • The virtual-first program, first launched in 2023 in collaboration with Accolade and TeleMed2U, has more than 150,000 members as of April. The program gives members access to a range of virtual health services at no additional cost, along with care from providers in Blue Shield’s PPO network.
  • Per BioPharma Dive,
    • “Novo is investing in oral biologics, signing a deal with fellow Danish company Orbis Medicines to discover multiple “macrocycles” that have the “potential to replace injectable medicines,” Orbis said Thursday.
    • “Orbis could receive as much as $1.4 billion in up front and downstream payouts, as well as sales royalties, in the deal. The companies didn’t specify the number of drugs on which they would collaborate, nor specific diseases, only mentioning that they’ll pursue unnamed cardiometabolic targets.
    • “The use of macrocycles is one way Novo could overcome some of the limitations of standard oral peptide medicines, such as poor digestive absorption. The highest dose of Novo’s Wegovy pill contains 20 times the highest injectable dose because most of the drug’s active ingredient is chewed up before reaching the bloodstream.”
  • and
    • “North Immunology, in the early stages of developing a potential competitor for the widely popular inflammatory disease drug Dupixent, plans to go public next year via a reverse merger with Aethlon Medical.
    • “After the merger, the companies expect North Immunology investors to own 95.25% of the new entity, with the rest going to Aethlon shareholders. Those who own Aethlon stock immediately prior to the merger will also get a contingent value right entitling them to potential proceeds from Aethlon’s legacy Hemopurifier business. 
    • “The new company will operate as North Immunology and trade on the Nasdaq under the ticker symbol “NRTX,” Aethlon said Thursday. North Immunology’s executives will lead the combined entity, and its directors will populate the board, along with some new independent directors. The companies expect the transaction to close in the first quarter of 2027.”
  • Healthcare Dive points out,
    • “Healthcare organizations are rapidly adopting agentic artificial intelligence, but governance frameworks for managing the technology are not evolving at the same pace, according to a new survey from digital identity security firm Imprivata.
    • “More than 85% of leaders responsible for AI strategy at healthcare organizations say they’re confident they have visibility into AI agent activity and are able to fully control and govern an autonomous agent’s actions.
    • “However, 72% of respondents admit AI tools are deployed without IT approval at least occasionally within their organizations, highlighting a disconnect between confidence and reality.”

Midweek report

David Ermer–Agentic & Generative AI, CDC, CMS, Congress, FDA, Medical / Rx research, Mental health care, No Surprises Act, OPM, Rx coverage, U.S. Healthcare–

Simplicity is a virtue.

From Washington, D.C.,

  • STAT News reports,
    • “Normally, discussions about how congressional advisers study Medicare spending are quite dry. Not so at the House Ways and Means Committee on Wednesday.
    • “In a party line vote, committee Republicans pushed forward a bill that seeks to change how the Medicare Payment Advisory Commission studies Medicare Advantage spending. In particular, this bill would direct the nonpartisan agency to study the topic of overpayments to Medicare Advantage plans in a manner that’s more favorable to insurers.” * * *
    • “It’s a bit of a change in tune for some Republicans, especially those who are doctors, who had become frustrated with Medicare Advantage insurers that deny care to patients. 
    • “However, Rep. Greg Murphy (R-N.C.), who is among those doctors who have criticized certain industry practices, said he had no problem supporting the bill. 
    • “Asking for more information so that we can make real choices and reform the Medicare Advantage system, I am absolutely for,” he said.”
  • and
    • “Democrats are vowing to aggressively pursue oversight if they win control of either the House or Senate in November’s midterm elections. Health care issues, including President Trump’s drug pricing deals, are potential targets. 
    • “It’s common for parties to turn to oversight when they take control of a congressional chamber. Lawmakers can use oversight to tell a story about the other side. It also avoids intraparty divisions by focusing attention on what the other party has done. And if Democrats want to keep the focus on Trump, even though he can’t run again, oversight is a good way to do that.”
  • MedPage Today adds,
    • “Nicole Saphier, MD, President Donald Trump’s third surgeon general nominee, was grilled at her confirmation hearing Wednesday about her stance on childhood vaccines, voicing support for immunization as she seeks to serve in an administration that has moved to make sweeping changes to vaccine guidance.
    • Saphier, a radiologist and former Fox News Channel contributor, faced tough questioning about her views on the safety of childhood vaccines by Sen. Bill Cassidy, MD (R-La.), who pressed her to declare whether she believed there was a link between vaccines and autism — which widespread scientific consensus has concluded doesn’t exist, yet which the Trump administration has repeatedly pushed to revisit.
    • “I do not believe childhood vaccines cause autism,” Saphier said. She also said “the MMR [measles, mumps, and rubella] vaccine is our greatest tool for combating measles,” in response to a question by Cassidy over whether parents should give children that shot, and which the president recently ordered be spaced out.
  • Healthcare Dive relates,
    • “Health plans are generally performing better on quality and performance ratings, though nonprofit insurers continue to surge past their for-profit peers.
    • “The National Committee for Quality Assurance released its 2026 ratings on Tuesday, which score commercial, Medicare and Medicaid plans across a range of measures of clinical quality, patient experience and health outcomes. Eighteen plans nabbed the standards organization’s highest 5-star rating, up from 11 last year. All of them are nonprofits.
    • “Of the major publicly traded carriers, CVS had the highest scores, averaging at about 4 stars, according to a Healthcare Dive analysis of the data. Meanwhile, plans’ average rating ticked up slightly, from 3.483 last year to 3.493 in 2026 thanks to improvements in commercial and Medicaid plans, though Medicare insurers’ average rating slipped.”
  • Healthcare Finance News tells us
    • “The American Hospital Association and American Medical Association are urging the Centers for Medicare & Medicaid Services to reconsider proposed reductions to Medicare physician payments for 2027, warning that the cuts could threaten patient access and the financial stability of physician practices.
    • “Comments on the proposed rule, which was released in July, were due Monday.
    • “The AMA voiced its concerns earlier this month about a CMS plan to cut physician pay when doctors provide a separately identifiable office or outpatient evaluation and management (E/M) visit on the same day as most procedures are performed. 
    • “The agency scrapped this same plan eight years ago, the AMA said, after physicians and other stakeholders raised serious concerns. 
    • “But CMS is pitching a similar idea in its 2027 Medicare physician payment schedule proposed rule,” the AMA said. “If finalized, most changes, including this one, would be scheduled to take effect Jan. 1.”
    • “The AMA called for annual physician payment updates tied to medical inflation, arguing that the lack of consistent inflationary adjustments has contributed to the erosion of physician practice sustainability.”
  • The American Hospital Association News tells us,
    • “The Workgroup for Electronic Data Interchange has launched its fall 2026 survey to assess industry readiness for the Centers for Medicare & Medicaid Services’ interoperability and prior authorization final rule. Survey responses are anonymous, and all results are aggregated. The survey will close on Oct. 9. WEDI plans to use the results to make recommendations to CMS, inform stakeholders and assist WEDI in its development of industry guidance and education.” 

From the U.S. Office of Personnel Management front,

  • Govexec reports,
    • “Senate Democrats again urged the Trump administration Wednesday to abandon its plans to collect detailed health information from federal workers, retirees and their families, saying recent tweaks to “de-identify” records are insufficient to protect employees’ privacy.
    • “Last December, the Office of Personnel Management published an information collection request in the Federal Register that would require insurers who participate in the Federal Employees Health Benefits and Postal Service Health Benefits programs to provide monthly reports with identifiable health data on their enrollees.
    • “Following pushback from federal employee groups and medical ethicists, OPM in June revised its proposal, purporting to take steps to mask employees and retirees’ identities in the data collection. But organizations that represent federal workers and retirees warned that the agency still hadn’t done enough to protect patients’ privacy.
    • “In a letter to OPM Director Scott Kupor, a group of six Senate Democrats, led by Sens. Adam Schiff, D-Calif., and Mark Warner, D-Va., who previously requested the proposal’s withdrawal, wrote that the proposed pseudonymization of records does not their “fundamental” concerns with the plan, particularly the agency’s insistence that it may re-identify insurance claimants in the future.”
  • FedWeek relates,
    • “OPM has provided some additional information on agency responsibilities to conduct the annual survey of federal employees—which it plans to shift to them from itself under a pending rules proposal—although still not setting a schedule for conducting this year’s version.
    • “A September 17 Federal Register notice states that the survey traditionally called the Federal Employee Viewpoint Survey will be renamed as the Annual Employee Survey, and reaffirms the intention in the earlier rules proposal to reduce the number of core questions from 16 to 10.
    • “That is to include dropping longstanding questions asking employees about their overall level of satisfaction with their job; with the recognition they receive for doing good work; with their organization overall; with the information they receive about what is going on in it; with their level of involvement with decisions that affect their work; and whether they would recommend their organization as a good place to work.
    • “OPM traditionally used those satisfaction-related questions in creating an index that was widely—although not officially—seen as a proxy for morale.”

From the U.S. Food and Drug Administration front,

  • Good Housekeeping reports,
    • “FDA issued a Class II recall on September 11 for six hand soap products from Intercon Chemical Co. distributed across 15 states. The original recall happened on June 29 due to potential bacterial contamination.
    • “Two soap variants contained harmful bacteria including Pseudomonas aeruginosa and Serratia marcescens, which can cause serious infections like pneumonia, UTIs, and blood infections, especially in immunocompromised individuals.
    • “Consumers should identify recalled products by UPC codes and lot numbers listed for Intercon, Clearly Better, Summit, Vestis, and Laura Lynn brands, then stop use immediately and seek medical attention if symptoms develop.”
  • Radiology Business relates,
    • “The U.S. Food and Drug Administration has approved a new generic radiopharmaceutical alternative from drugmaker Curium, aimed at competing with another treatment on the market. 
    • “Bexlutry (lutetium Lu 177 dotatate) is a radioligand therapy designed to deliver targeted radiation for treating a group of rare cancers originating in the digestive track and pancreas. Boston-based Curium scored the approval through the FDA’s 505(b)(2) pathway, supported by published evidence and targeted bridging data. 
    • “This demonstrated that Bexlutry achieved a similar biological and chemical profile to the previously approved Lutathera, manufactured by rival firm Novartis. 
    • “Today’s FDA approval brings us a step closer to advancing our ambition of aiming to improve the lives of up to 80% of patients with cancer,” Mike Patterson, Curium’s CEO of North America, said in a statement Sept. 14. “Our priority now is a high-quality launch supported by our end-to-end nuclear medicine infrastructure, designed to help ensure consistent delivery, predictable scheduling support for sites of care, and a dependable experience for patients receiving radioligand therapy.”

No Surprises Act News

  • Politico reports,
    • “A Senate committee held stakeholder roundtables on Tuesday to discuss reforms to the 2020 No Surprises Act, which set up how doctors and insurers are paid for unexpected medical bills, Simon reports.
    • “The act, originally co-sponsored by Health, Education, Labor and Pensions Chair Bill Cassidy, shielded patients from unexpected out-of-network emergency care bills. But it has come under fire for creating a case backlog in a system that critics argue can pay disproportionately in favor of doctors.
    • “Employers, physicians, insurers and unions — groups typically at odds — held a cordial, constructive talk about possible solutions, according to four people familiar with the meetings who were granted anonymity to speak candidly. Committee staff also met separately with the arbitrators responsible for overseeing and resolving payment disputes.
    • “Over three hours, the stakeholder group didn’t settle on any policy changes, but they agreed on the need to eliminate the dispute backlog by filtering out ineligible claims and encouraging faster payouts. The group emphasized the importance of benchmark rates for medical services, known as qualified payment amounts, when determining payouts and that only emergency care bills should be eligible for arbitration.
    • “It is early, and the devil will be in the details, so to speak, as conversations continue, but overall a positive vibe,” said one of the four people familiar with the discussion. Another of the four, who was a provider attendee, said, “It was pointed but respectful.” * * *
    • “What’s next: The Senate HELP Committee will hold a roundtable with members next week to talk through legislative solutions.”

From the judicial front,

  • Healthcare Dive reports,
    • “A group of independent pharmacies in Arkansas are suing Express Scripts, one of the largest pharmaceutical middlemen in the U.S., for allegedly underpaying for tens of thousands of prescriptions.
    • “The lawsuit filed Tuesday, which seeks hundreds of millions of dollars in damages, is the first filed under a state law passed last year giving Arkansas pharmacies the ability to go after PBMs for reimbursing them below the acquisition cost of drugs, according to lawyers for the plaintiffs.
    • “We’re committed to reimbursing pharmacies at competitive rates and will defend ourselves against these allegations,” an Express Scripts spokesperson said.

From the public health and medical / Rx research front,

  • The New York Times offers advice on whether you are eating enough fiber in your diet.
    • “With so much attention on protein lately, you’d be forgiven for forgetting about fiber.
    • “But if you’re like most adults in the United States, you’re probably falling short of the recommended minimum of 21 to 38 grams per day, depending on your age and sex. The average U.S. woman consumes about 15 grams of fiber daily, and men consume about 18 grams per day.
    • “Closing that gap may be one of the best strategies for improving your health. Fiber nourishes gut microbes, lowers blood pressure and cholesterol, improves digestion and reduces the risks of heart disease, Type 2 diabetes and certain cancers.
    • “It can seem like a big challenge to eat enough fiber, but nutrition experts say it doesn’t have to be. You just have to know where to look.”
  • Cardiovascular Business adds,
    • “Eating four to six servings of whole-grain foods per day is associated with multiple cardiovascular benefits, according to a new meta-analysis published in European Heart Journal. 
    • “The authors focused on data from more than 6,500 adults from the United States, Europe, Asia, Canada, Australia or Brazil who participated in one of 87 different clinical trials. Overall, eating 48 grams of whole-grain food—oats, brown rice or quinoa, for example—each day was associated with improvements in body weight, waist circumference, total cholesterol, blood pressure, LDL cholesterol, glucose and interleukin-6 levels. These are all known risk factors of cardiovascular disease.
    • “This is the largest and most comprehensive meta-analysis of randomized controlled trials on whole grain intake and cardiovascular risk factors,” senior author Helda Tutunchi, PhD, a nutrition specialist with Tabriz University of Medical Sciences in Iran, explained in a statement. “Unlike previous reviews, we looked specifically at how much whole grain people need to eat to get the greatest benefits. We also evaluated the certainty of the evidence and found high-certainty evidence for improvements in several outcomes, including body weight, waist circumference and total cholesterol.”
    • “Tutunchi added the impact of eating more whole-grain foods appears to be through “several modest improvements acting together” as opposed to “one large effect on a single risk factor.”
  • Health Day relates,
    • “Women’s risk of having a harmless tumor caught and treated as a result of breast cancer screening is much lower than once thought, a new evidence review has concluded.
    • “Overdiagnosis — the detection of breast cancers that never would have harmed a woman’s health during her life — occurs in fewer than 5% of cancer screenings, researchers reported Sept. 14 in the Journal of the National Cancer Institute.
    • “That’s far lower than previous estimates, which held that as many as 30% to 50% of breast cancer detected through screening might represent overdiagnosis, researchers said.
    • “These earlier studies were inaccurate because they tracked breast cancer screenings for a limited period of time, the research team argued.”
  • and
    • “ADHD is linked to a nearly 50% increase in GI problems, a new evidence review says.
    • The association was even stronger for specific GI problems, including an almost doubled risk of constipation, a 58% increase in irritable bowel syndrome and more than four times higher odds of losing bowel control, researchers reported Sept. 10 in the Journal of Attention Disorders.
    • “Almost every gut symptom we looked at: constipation, IBS, even indigestion, appeared to be associated with ADHD,” said lead researcher Sarah Blake, a medical student at the University of Warwick Medical School in the U.K.
    • “These symptoms can have a real impact on daily life, but they could easily be overlooked if the focus is on ADHD itself,” she added in a news release.
    • “There are several potential explanations for these links, including ADHD-related eating patterns, side effects from medication and even ties between ADHD and gut bacteria, researchers said.”
  • Genetic Engineering and Biotechnology News tells us,
    • “Scientists studying Alzheimer’s disease have long focused on genes, proteins, and cells, but one class of molecules has remained largely outside the playbook: microproteins. These small proteins, produced from small open reading frames (ORFs) and typically measuring 150 amino acids or fewer, have been difficult to detect and study. Yet growing evidence suggests they may have important roles in health and disease.
    • “Now, researchers at the Salk Institute have created what they describe as the first microprotein atlas of the human frontal cortex with and without Alzheimer’s disease. The study, “A microprotein atlas of the human frontal cortex in Alzheimer’s disease,” was published in Nature Aging. The resource integrates transcriptomics, mass spectrometry, and deep-learning-predicted spectra across postmortem brain samples to identify microproteins that have been overlooked in standard protein catalogs.
    • “We still do not fully understand the molecular mechanisms of healthy aging, and that is especially true for microproteins, which have been inadvertently overlooked for decades,” said senior and co-corresponding author Alan Saghatelian, PhD, professor and the Dr. Frederik Paulsen Chair at Salk, in a press release. “Our atlas allows scientists to systemically investigate microproteins in aging and neurodegeneration, which should bring us closer to understanding and tackling diseases like Alzheimer’s or Parkinson’s.”
  • Per an Institute for Clinical and Economic Review (ICER) news release,
    • “The Institute for Clinical and Economic Review (ICER) today posted its revised Evidence Report assessing the comparative clinical effectiveness and value of tavapadon (AbbVie Inc.) for Parkinson’s Disease.
    • “Downloads: Evidence Report | Voting Questions | Public Comments | Response to Public Comments
    • “Parkinson’s disease is a chronic and progressive neurological condition largely characterized by the loss of motor skills and physical function,” said ICER’s Chief Scientific Officer and Director of Health Technology Assessment Methods and Engagement, Dan Ollendorf, PhD, MPH. “There are currently no disease-modifying treatments, so symptom management is paramount. While tavapadon provides some relief from key symptoms, benefits were similar to those of older, generic drugs, and discontinuation from tavapadon due to adverse events was relatively high. The combination of modest benefit and uncertainties around discontinuation raise important questions about tavapadon’s long-term value.”
    • Register here to watch the live webcast of the October 1st ICER public meeting.

From the U.S. healthcare business and artificial intelligence front,

  • Beckers Hospital Review reports,
    • St. Louis-based Ascension narrowed its operating loss by $371 million in fiscal 2026, as stronger revenue, higher patient volumes and operational improvements moved the health system closer to breakeven, according to financial documents published Sept. 16.
  • and
    • “Fitch revised Chicago-based CommonSpirit Health’s rating outlook to negative from stable on Sept. 16, while affirming the health system’s “A-” rating. 
    • “The revision follows CommonSpirit’s financial results through the quarter ended March 31, which fell short of management’s internal margin targets, Fitch said in a Sept. 16 report. Fitch pointed to an uneven path to sustained profitability as the system executes several overlapping initiatives at once, including an Epic EHR rollout, insourcing revenue cycle operations and its multiphase Project Impact plan, which targets an 8% EBITDA margin by fiscal 2029.” 
  • Beckers Behavioral Health relates,
    • “U.S. News & World Report named 50 hospitals to its 2026-2027 Best Children’s Hospitals Pediatric & Adolescent Behavioral Health list.
    • “U.S. News evaluated 91 hospitals for their care of children and teens with mental and behavioral health conditions, including autism, anxiety, depression, eating disorders, ADHD, bipolar disorder, schizophrenia, language and learning disorders, and substance abuse and addiction.
    • “Programs and care in areas such as medication screening and safety, speed and efficiency of the emergency department, and management of side effects were among the factors used to rank hospitals.”
  • Beckers Payer Issues tells us,
    • “SCAN Health Plan has emerged as a major Medicare Advantage partner for retailers, with Walmart now partaking in a co-branded plan.
    • “The health insurer and retailer are launching the plan in two states, according to a Sept. 16 SCAN news release. More than 2 million enrollees are expected to have access.
    • “The MA offering could tie in pharmacy and vision services, food, and over-the-counter benefits, pending regulatory approval. The news release also said Walmart will leverage Everyday Health Signals, its AI-driven platform for tailored nutrition and wellness, in the collaboration.
    • “What makes this collaboration unique is Walmart’s role in customers’ everyday lives. Because customers regularly turn to Walmart for groceries and other everyday essentials, we have an opportunity for those who choose to participate, to use insights from their shopping experiences to make nutrition guidance more relevant and actionable,” said Pravene Nath, MD, group director for consumer health and data solutions at Walmart U.S.” * * *
    • “In August, SCAN announced plans to roll out insurance products with Costco, as well.” 
  • Beckers Physician Leadership shares the new math of physician independence.
    • “Independent physicians have spent more than a decade watching the share of their peers who own their own practices shrink. 
    • “New data exists that tells the story of what it now costs to stay independent, how much deal-making and closure activity is still working against that choice, and where regulators and a new wave of physician-owned infrastructure are starting to push back.
    • “Taken together, the figures describe less a single trend than a recalculated equation — one where the cost of going it alone, the cost of selling and a growing set of options in between are all moving at once.”
  • MedCity News informs us,
    • “Thatch, a health benefits platform, announced on Tuesday that it raised $108 million in funding, reaching a $1 billion valuation.
    • “Thatch helps employers offer Individual Coverage Health Reimbursement Arrangements (ICHRAs) — which recently rebranded as CHOICE Arrangements — in which employers can provide their employees tax-free money so they can purchase their own individual health insurance plans. Employees can also use the funds for certain healthcare expenses, including GLP-1s and therapy. More than 5,000 employers use the company, including Jersey Mike’s and Smoothie King. 
    • “The Series C funding round was from The General Partnership, Index Ventures, General Catalyst and Andreessen Horowitz. ADP Ventures, Paychex, Eli Lilly and Company, Scale Venture Partners, QuantumLight, SemperVirens, Quiet Capital and Avid Ventures also participated. In total, Thatch has raised $192.5 million in equity funding.”
  • Fierce Healthcare adds,
    • “Ayble Health secured a $16 million oversubscribed series A funding round to accelerate its expansion into artificial intelligence-driven precision digestive and autoimmune healthcare.
    • “Neon led the funding round, with participation from Unum Ventures, Upfront Ventures, M13, Cleveland Clinic Ventures, DigiTx, Accomplice and several individual investors. 
    • “I’ve been tracking the GI space closely for years, and what Ayble has built is different,” said Kimmy Scotti, Neon founding and managing partner, in a statement. “Having invested early in top digital health companies, I’ve seen what it takes to build a category-defining company in healthcare. Ayble has spent years building the clinical evidence before they scaled the business. That earns trust from the full ecosystem: health systems, payers, and most importantly, patients, and it’s what makes a durable market leader.”
  • BioPharma Dive points out,
    • “Novartis will pay $125 million up front for rights to a delivery platform designed to get drugs into the brain.
    • “Sironax, a Boston-area biotechnology company, said Tuesday that Novartis has exercised an option to acquire full ownership of that startup’s brain delivery platform. Sironax’s technology is meant to overcome a major challenge in neurological drug development: delivering therapeutics across the “blood-brain barrier.”
    • “Sironax will receive the nine-figure payout following the close of the transaction and will continue to retain rights to develop, manufacture, and commercialize certain assets with the platform. The company currently has three programs in early-stage trials that it plans to move forward using the purchase proceeds.”
  • Cardiovascular Business notes,
    • “Jaguar LAA, a new California-based medtech startup, has purchased key assets related to performing left atrial appendage (LAA) closure procedures from Johnson & Johnson. 
    • “Johnson & Johnson has owned these assets since it acquired the medtech company Laminar for $400 million back in 2023. Now, some original Laminar employees have partnered with investment firm Santé Ventures to buy back the assets and push forward as Jaguar LAA, a brand new company.
    • “The financial terms of this acquisition have not yet been made public.” 
  • The Wall Street Journal lets us know,
    • “Novo Nordisk NOVO.B, the Danish drugmaker behind blockbuster diabetes and weight-loss drugs Ozempic and Wegovy, is partnering with Anthropic to use artificial intelligence for drug research.
    • “Novo said Wednesday it would use Anthropic’s science-specific platform, known as Claude Science, to help speed up the discovery and development of new medicines and strengthen the pharmaceutical company’s software development.
    • “The partnership is the latest by a slate of major drugmakers, including Eli Lilly, Merck and Roche, that are placing big bets that AI can help them discover and produce medicines more quickly. 
    • “AI can help us increase productivity in R&D and compress the path from research to marketed product. But beyond this, AI tools can also offer completely new scientific opportunities and aid reasoning and understanding of human biology and drug mechanics,” Novo Chief Executive Mike Doustdar said.”