Tuesday report

Tuesday report

From Washington, DC,

  • Punchbowl News reports,
    • “The Senate’s ability to clear its pile-up of legislation and nominations before a five-week summer recess may come down to two GOP decisions: whether to attempt to pass a budget resolution and whether to force a crypto vote that could fail.
    • “A short-term government funding bill cleared its first procedural hurdle Monday night, with 89 votes — a major boost for the bipartisan push to fast-track it. That followed 86 votes for a landmark Russia sanctions bill last week.
    • “Neither bill can pass before the scheduled August recess without consent from all 100 senators. That gives Democrats leverage, and they’re using it against two Republican priorities.”
  • Beckers Behavioral Health relates,
    • “The Centers for Medicare & Medicaid Services released a toolkit to help state Medicaid and Children’s Health Insurance Program agencies strengthen oversight of applied behavior analysis (ABA) services for children with autism, according to an Aug. 4 news release from the federal agency. 
    • :This toolkit comes as Medicaid spending on autism therapy has surged in several states in recent years. In Colorado, Medicaid spent more on autism therapy for children last year than on emergency room care for all patients, according to a recent investigation by The New York Times. The investigation also found some clinics prescribe 25 or even 40 hours of therapy each week for young children. Average daily appointments also have increased over time, according to Medicaid data analyzed by Trilliant Health.” * * *
    • “CMS said the resource is designed to help states ensure ABA services are medically necessary, individualized and evidence-based while identifying fraud, waste and abuse. The agency said it does not establish new federal requirements, reduce Early and Periodic Screening, Diagnostic, and Treatment obligations, endorse a single ABA treatment approach or limit access to medically necessary care.”
  • The ABA toolkit is available at: https://www.medicaid.gov/medicaid/downloads/autism-services-aba-toolkit.pdf 
  • Beckers Clinical Leadership notes,
    • “CMS will require hospitals to report performance on a patient malnutrition measure starting in 2028 under the Hospital Inpatient Quality Reporting Program.
    • The agency finalized the measure as part of its fiscal year 2027 Inpatient Prospective Payment System final rule released July 31.
  • Beckers Payer Issues points out,
    • “ACA insurers are pitching a median rate increase of 15% for 2027, the second year in a row of double-digit premium hikes, according to a July 8 Peterson-KFF Health System Tracker analysis that was updated Aug. 3.
    • “The tracker reviewed 276 insurers in marketplaces across the country with publicly filed rates. The tracker’s analysis considered an insurer’s premium increase as the enrollment-weighted average rate change across its offerings in a state. While rates will be finalized in late summer, these filings provide a glimpse of the year ahead.” * * *
    • “For 2026, the median nationwide proposed rate change was 18%. The median finalized rate change was 20%.”

From the U.S. Office of Personnel Management front,

  • Govexec reports,
    • “Most funds offered as part of the federal government’s 401(k)-style retirement savings program finished July in the red, continuing the downward trend that began the prior month.
    • “Only the Thrift Savings Plan’s G Fund, which is made up of government securities, grew last month, increasing by its statutorily mandated rate of 0.39%. So far this year, the G Fund has gained 2.57% in value.
    • “The common stocks of the C Fund were virtually flat in July, falling 0.07% and bringing its 2026 performance down to 10.13%. And the international (I) fund lost 1.01% last month; since January, the I Fund is up 15.35%.
    • “The small- and mid-size businesses of the S Fund finished July 4.12% in the red. So far this year, the S Fund has gained 13.52%. And the fixed income (F) Fund lost 1.29% last month, bringing its 2026 losses to 0.56%.
    • “Each of the TSP’s lifecycle (L) funds, which shift toward more conservative investments as participants approach retirement age, likewise lost ground in July.”
  • Per an OPM news release,
    • “The US Office of Personnel Management (OPM) today announced the launch of the electronic Official Personnel Folder (eOPF) Document Request Service (DRS), a secure online portal that enables eligible former federal employees to request and receive copies of their official personnel records electronically — eliminating a manual process that previously often required paper forms, agency requests, or a request to the National Personnel Records Center.”
    • * * * “Users access the Document Request Service through Login.gov, complete a one-time identity verification, and submit a brief online request. Once processed, they receive a secure email containing a time-limited download link to a password-protected ZIP file with their complete eOPF Employment Folder.
    • “The DRS is available to separated federal employees whose records are maintained in eOPF, as well as current federal employees whose agencies do not provide government-furnished equipment to access their own personnel records. Current employees with access to the eOPF application should continue to retrieve their records directly through that system.
    • “The launch of the Document Request Service is part of OPM’s broader effort to modernize federal human resources systems, improve customer service, and reduce reliance on manual, paper-based processes across the federal government. Additional information, including a user guide, is available at Documents Request Service – eOPF Resource Center.”
  • FEHBlog Observation — OPM continually is improving IT services for which the agency deserves credit. The efforts make it more puzzling why OPM has not yet implemented the HIPAA 820 Standard Enrollment Roster Transaction in the FEHB, PSHB, and FEDVIP programs.
  • Noah Peters, an OPM Senior Adviser has added a post to the Secrets of OPM blog titled (OPM.gov link) “Restoring Merit With the Right Civil Service Exam.”

From the Food and Drug Administration front,

  • QualityAssuranceMag reports,
    • “A multistate outbreak of E. coli O145:H28 infections has been linked to organic frozen blueberries from Frutas y Hortalizas del Sur S.A., of San Carlos, Chile, sold under the GreenWise brand at Publix.
    • “The U.S. Food and Drug Administration (FDA) and Centers for Disease Control and Prevention (CDC), along with state and local partners, are investigating the outbreak, which has sickened 12 and hospitalized four in two states, Florida and Georgia.
    • “Publix recalled all lots of GreenWise Organic Frozen Whole Blueberries and Whole Mixed Berries due to potential E. coli contamination. Recalled product was shipped to Publix retail stores in eight states: Alabama, Florida, Georgia, Kentucky, North Carolina, South Carolina, Tennessee and Virginia.” 
  • MedTech Dive relates,
    • “Caristo Diagnostics has received de novo authorization for an AI tool that quantifies coronary inflammation from routine imaging scans, the company said last week.
    • “The Food and Drug Administration authorization covers a device, CaRi-Heart, that uses coronary computed tomography angiography to estimate a patient’s risk of cardiovascular mortality over 10 years.
    • “Research suggests the tool could help physicians stratify risk among patients who present with chest pain but are free from obstructive coronary artery disease.”
  • and
    • “DeepHealth last week received the Food and Drug Administration’s 510(k) clearance for an artificial intelligence tool that reads breast ultrasound images and generates reports.
    • “The feature can help clinicians localize suspicious soft tissue lesions; characterize details about the lesion such as its shape, orientation, and margin; and generate a report with key findings and impressions. Radiologists still have control of the final assessment. 
    • “DeepHealth’s parent company, RadNet, plans to offer the tool across its network of imaging centers by the end of the year.”
  • Targeted Oncology tells us,
    • “FDA authorized a new rituximab biosimilar based on comprehensive comparability data demonstrating high similarity to reference rituximab and no clinically meaningful clinical differences. 
    • “Market expansion of CD20 biosimilars may increase competitive pressure, shaping formulary positioning, contracting, and purchasing decisions that weigh price against continuity of supply. 
    • “Rituximab remains foundational across B-cell malignancies and autoimmune indications, reflecting its CD20-binding mechanism and B-cell depletion via multiple immune effector pathways. 
    • “Class safety considerations persist, including boxed warnings for fatal infusion reactions, severe mucocutaneous reactions, HBV reactivation, and PML, alongside risks of serious infections.”
  • Cardiovascular Business informs us,
    • “The U.S. Food and Drug Administration (FDA) has announced that Ascend Laboratories is recalling specific lots of dabigatran etexilate, a blood thinner taken to reduce the risk of stroke or blood clots in patients with nonvalvular atrial fibrillation. This is a generic version of a popular direct oral anticoagulant (DOAC) most commonly sold by Boehringer Ingelheim under the brand name Pradaxa. 
    • “The recall was put in place due to a failed impurity/degradation test. After 12 months, the drug produced an out-of-specification (OOS) test result.“
    • “The FDA is still investigating this issue. Click here for additional details from the agency.”
  • The American Hospital Association News points out.
    • “The Food and Drug Administration Aug. 3 identified Class I recalls of two convenience kit products. Certain kits by Medline Industries have been recalled due to the containment of recalled Huons Bupivacaine Hydrochloride Dextrose Injections. The injections pose a risk of infection, inflammatory response and/or reduced anesthetic effectiveness. Certain convenience kits by Medical Action Industries have also been recalled due to the containment of Medline’s Namic Angiographic Star Off Handle Manifolds, which have been found to contain particulate within the fluid path of the manifolds.
    • “In addition, the FDA issued an early alert for certain Intraosseous Vascular Access System Needle Sets by Becton Dickinson due to some lots being manufactured with out-of-tolerance dimensions. BD said it has resulted in some lots being manufactured with out-of-tolerance dimensions, with some users reporting difficulty removing the obturator following placement of the needle sets.” 

From the public health and medical/Rx research front,

  • The Washington Post reports,
    • “The Centers for Disease Control and Prevention is expanding the largest known cyclosporiasis outbreak to 15 states, adding six states where illnesses have been traced to shredded iceberg lettuce sourced from central Mexico, according to three individuals familiar with the investigation.
    • “Missouri, which is reporting 1,095 cases, is one of the states being added, according to a state health department spokesperson. The number of state cases jumped dramatically in the past week. Patients who were interviewed at length by state and local investigators said they consumed Taco Bell before getting sick, spokesperson Lisa Cox said.
    • “The other states are Arkansas, Iowa, Nebraska, New Hampshire and North Carolina, according to a fourth person familiar with the investigation.”
  • The New York Times considers,
    • “Is It OK to Eat the Same Things Every Day?
    • “Some people do it to lose weight, others to avoid the hassle of planning meals. We asked experts how “food monotony” affects your health.”
  • Beckers Hospital Review relates,
    • “In 2025, New Mexico confirmed 100 measles cases across nine of its 33 counties, and each case cost an average $53,522, according to research published Aug. 4 in Annals of Internal Medicine. 
    • “Researchers with the CDC and New Mexico Department of Health analyzed the societal economic burden of these 100 cases through public health response costs, direct medical costs and productivity losses. The public health response costs totaled about $3.2 million, including $2.1 million for vaccination-related activities. About 130 public health responders worked on contact tracing across 205 contacts, which each cost $1,817, according to the study. 
    • “The $53,522 per measles case, equal to $5.35 million in total, ranged from February through September 2025.”
  • MedPage Today tells us,
    • “A peptide vaccine targeting KRAS mutations in patients at high risk for pancreatic cancer induced durable T-cell responses.
    • “In 16 patients with evaluable pancreatic cysts, three had complete resolution of the cysts, three had partial regression, and the rest had stable cyst status.
    • “No patient developed severe vaccine-related adverse events.”
  • and
    • “In a randomized trial, a novel system for autonomous control of supplemental oxygen for inpatients who needed it improved the proportion of time spent with adequate oxygen levels.
    • “The study showed safety of the approach and lower oxygen use overall compared with usual care.
    • “The trial could not assess clinical outcome effects like reduced respiratory decompensation, shorter hospital stays, or improved survival.”
  • Health Day points out,
    • “Women who enter menopause at an earlier age have an increased risk of high blood pressure, a new study says.
    • “Researchers found that nearly 23% of women with premature menopause and 19% of women with early menopause had high blood pressure, compared to under 17% of women with normal menopause, researchers found.
    • “Overall, premature menopause brought a 12% higher risk of high blood pressure compared to women who reached menopause after age 45, researchers reported recently in the journal Menopause.”
  • Genetic Engineering and Biotechnology News informs us,
    • “Recurrent urinary tract infections (rUTIs) are among the most common bacterial infections worldwide. The difficult-to-treat condition, which affects primarily women, is defined as two urinary tract infections (UTIs) within six months or three UTIs within the past year. They are a leading cause of outpatient antibiotic use, accounting for more than 15% of all prescriptions.
    • “While antibiotics remain the standard treatment, frequent recurrences and rising antibiotic resistance highlight the need for alternative therapeutic approaches. Now, researchers have, for the first time, administered a combined phage therapy (PT) with fecal microbiota transplantation (FMT), to decolonize urinary and intestinal reservoirs of rUTI patients.
    • “The novel treatment approach, combining PT and elective FMT, was administered to three female patients, between May and July 2023, with rUTI that did not respond to antibiotics and commonly used non-antibiotic strategies. All had microbiologically confirmed E. coli in multiple infections.
    • “All three women received PT orally and intravesically (locally applied to the bladder via catheter) for eight days outside of acute episodes. Two of these three patients were elected to receive subsequent FMT. Since the bacteria causing the recurring infections often reside in the gut as well as the urinary tract, the FMT treatment targeted the intestinal reservoirs of E. coli that survive antibiotic treatment of acute infections and can become increasingly resistant.
    • “While phage therapy acts to remove the pathogen, FMT aims to restore a healthy microbiome, combining both immediate and long-term effects,” Lena Biehl, MD, PhD, group leader at Fraunhofer ITMP, deputy lead of Cologne Microbiota Bank, University Hospital Cologne.
    • “This work is published in Nature Microbiology in the paper, “Combined Phage therapy and fecal microbiota transplantation to treat recurrent urinary tract infection: a case series.”
  • Per Fierce Pharma,
    • “In a milestone for IgA nephropathy, Otsuka’s Voyxact has shown for the first time in a phase 3 trial that a drug can stabilize patients’ kidney function decline to the normal rate seen in healthy adults. 
    • “Results from the phase 3 Visionary trial showed that Voyxact (sibeprenlimab) achieved an annualized estimated glomerular filtration rate (eGFR) slope of a 0.3 mL/min/1.73m² gain over two years, suggesting an improvement in kidney function. The rate matches the normal age-related decline of less than 1 mL/min/1.73m² per year, as laid out in the KDIGO 2025 Clinical Practice Guideline for IgAN.
    • “To be presented at the GlomCon Hawaii 2026 conference, the latest Voyxact result is better than an annualized eGFR slope of negative 4.2 mL/min/1.73m² for placebo. It’s also better than Voyxact’s own performance over 12 months, when it recorded an annualized loss of 3 mL/min/1.73m² at an interim analysis of the Visionary trial.”
  • and
    • After a yearslong struggle, Jazz Pharmaceuticals has called time on Zepzelca as a second-line treatment for small cell lung cancer.
    • In alignment with the FDA, Jazz plans to ask the agency to remove the second-line SCLC indication from Zepzelca’s label, the company said Monday alongside its second-quarter earnings report.
    • The decision comes after the confirmatory phase 3 Lagoon trial recently failed on its primary endpoint of overall survival. In the study, Zepzelca (lurbinectedin) monotherapy performed even worse than other chemotherapy regimens, while a combination of Zepzelca and irinotecan showed a numerical advantage that didn’t meet statistical significance.

From the U.S. healthcare business and artificial intelligence front.

  • Beckers Payer Issues tells us,
    • “Louisiana workers pay the largest share of their income toward their portion of health insurance premiums, while workers in Hawaii pay the smallest, according to an AHIP analysis of Commonwealth Fund data published in July.”
    • The article lists all of the States’ percentages. 
  • and
    • “UnitedHealthcare is rolling out new reimbursement limits on five categories of lab tests across its commercial, ACA, Medicare Advantage and Medicaid plans.
    • “The five policies cover allergen testing, liver fibrosis testing, in vitro chemotherapy sensitivity assays, testosterone blood tests and vitamin B12 testing. 
    • “The policies generally take effect Sept. 1 for commercial, exchange and MA plans, though several states have an effective date of Oct. 1 in the commercial and exchange markets. The Medicaid rollout is staggered by state, with effective dates ranging from August through November.
    • “Broadly, the policies set frequency caps or exclude specific test types from reimbursement.”
  • Fierce Healthcare informs us
    • “AI health tech company Daffodil Health is rolling out a new platform aimed at supporting payers in managing the No Surprises Act dispute process.
    • “The number of cases reaching the NSA’s independent dispute resolution process continues to grow. For example, when the process was established by regulators, they projected about 17,000 cases would make it to IDR each year—however, 1.2 million were filed in just the first half of 2025.
    • “Daffodil’s tool is built to support insurers and third-party administrators in handling that volume of disputes, starting with intake and through negotiation, arbitration and reporting, the company said in an announcement.”
  • Beckers ACS Review lets us know,
    • “Austin, Texas-based Ouma Health has acquired a multisite maternal-fetal medicine practice led by Tamara Takoudes, MD, expanding the telemedicine company’s footprint across Connecticut, Massachusetts, Maine and New Hampshire, according to an Aug. 4 news release.
    • “The acquisition adds established in-person clinical locations to Ouma’s national teleMFM network and strengthens the company’s relationships with hospitals, imaging centers, birth centers and community obstetric practices across New England. 
    • “Ouma, which describes itself as the nation’s largest independent maternity telemedicine company, said the deal is part of a broader effort to build clinical infrastructure for high-risk pregnancy care as MFM workforce shortages and hospital labor and delivery unit closures continue to limit access in many communities. Financial terms were not disclosed.”
  • Beckers Behavioral Health adds,
    • “San Francisco-based Amae Health, a provider of mental healthcare, is collaborating with Google Health Enterprise to bring wearable-derived data into its precision psychiatry care model.
    • “The collaboration will allow Amae Health’s care teams to incorporate data from wearable devices — including sleep patterns, physical activity, heart rate variability and changes in daily routines — alongside existing clinical information, according to an Aug. 4 news release. The company said the additional data is intended to help clinicians detect changes in patients’ conditions earlier and better identify potential relapses among people with schizophrenia, bipolar disorder and major depressive disorder.”
  • Per a Lown Institute news release,
    • “U.S. hospitals can excel at both clinical care and making critical investments in the people and communities they serve. That is the key takeaway of the 2026 Lown Hospitals Index ‘Honor Roll’, which recognizes 123 institutions that achieved top ratings on health equity, value of care, and patient outcomes.
    • “With financial pressures forcing painful choices on many hospitals, those on the Lown Honor Roll have found ways to put their patients and communities first,” said Vikas Saini, MD, president of the Lown Institute. “These hospitals are staying true to their mission when it matters most, and in healthcare, that’s everything.”
  • Per Beckers Hospital Review,
    • U.S. News & World Report released its 2026-27 Best Hospitals rankings and ratings Aug. 4, which included a list of 505 Best Regional Hospitals across 49 states and the District of Columbia.
    • The latest edition of Best Hospitals, now in its 37th year, evaluated hospitals on measures such as risk-adjusted mortality rates, preventable complications and patient experience. This year’s rankings placed significantly greater weight on risk-adjusted patient outcome measures in determining results. For the first time, Maternity Care recognition was also incorporated into Best Regional Hospitals point calculations. More information about the methodology is available here and here.
  • Healthcare Dive adds,
    • “New Jersey health system Hackensack Meridian Health has become the first organization to earn the Joint Commission’s seal of approval for the responsible use of artificial intelligence in healthcare.
    • “The Joint Commission, an independent accreditation organization, launched the certification in June with the goal of endorsing U.S. healthcare organizations able to demonstrate they have the proper governance, resources, policies and training programs for the safe and effective use of AI.
    • “HMH has been refining its AI systems for years, according to Dr. Lauren Koniaris, the organization’s chief medical informatics officer. “As we expand our clinical AI initiatives, we operate under the utmost governance to ensure patient quality and safety are always the priority,” she said”
  • Per the Wall Street Journal,
    • “Pfizer reported second-quarter revenue of $15.03 billion, up 3% and beating analyst expectations as non-Covid drug sales grew.
    • “Pfizer recorded a second-quarter loss of $248 million, driven by a $3.8 billion write-down on an experimental lung-cancer drug.
    • “Pfizer raised the low end of its full-year sales guidance to a range of $60.5 billion to $62.5 billion.”
  • and
    • “Amgen AMGN  lifted its outlook for the year after strong drug sales bolstered the company’s bottom line in the second quarter, but added that it would end development of an early-stage obesity treatment.
    • “The biotechnology company on Tuesday said it was halting the development of AMG 513, a potential obesity treatment currently in a phase 1 study. That study will be carried to completion to follow enrolled participants, Amgen said. The company didn’t provide a reason for the discontinuation.
    • “With development of AMG 513 ending, Amgen’s only candidate in the space is MariTide, which is currently in phase 3 studies for a range of indications such as obesity, Type 2 diabetes and chronic weight management.
    • “Amgen also lifted its guidance, saying it now expects full-year revenue between $38.2 billion and $39.4 billion, up from a previous view of $37.1 billion to $38.5 billion. Adjusted per-share earnings are expected between $22.30 and $23.50, up from a range of $21.70 to $23.10.”
  • and
    • “Gilead Sciences reported second-quarter revenue rose to $7.8 billion, but swung to a $10.5 billion loss due to acquired research expenses.
    • “Gilead Sciences’ revenue growth was driven by a 12% rise in HIV product sales to $5.69 billion, while sales of Covid-19 drug Veklury fell 81%.
    • “Gilead Sciences narrowed its full-year product-sales guidance to a range of $30.1 billion to $30.4 billion.”
  • and
    • “Novo Nordisk said annual sales and operating profit should fall less than previously expected following a boost in the second quarter.
    • “Novo Nordisk expects adjusted sales and operating profit to decline up to 6% at constant exchange rates this year, compared with its prior forecast of a 4% to 12% decline.
    • “Adjusted sales for Novo Nordisk grew 7% to 78.49 billion Danish kroner in the second quarter, while adjusted operating profit rose 11%.”
  • STAT News adds,
    • “BioNTech on Monday named Guido Oelkers, formerly the leader of the Swedish biopharma company Sobi, as its new CEO, as the Covid-19 vaccine developer continues its shift to oncology.
    • “Oelkers will replace Ugur Sahin as CEO. In March, BioNTech announced that Sahin and his cofounder and wife Özlem Türeci, the company’s chief medical officer, would depart the company to lead a new biotech focused on developing mRNA medicines.
    • “Oelkers, who has worked in biopharma for more than 30 years, will start by Feb. 1, 2027, the company said. He said that he would continue BioNTech’s work to be a global company with multiple approved medicines by 2030.”
  • BioPharma Dive helps us track the patent expiration dates of name brand prescription drugs.

Monday report

Simplicity is a virtue.

From Washington, DC,

  • STAT News reports,
    • “Senate leadership on Sunday released the text of a bipartisan government funding stopgap measure that would block the White House’s proposal to give political appointees control over federal research grants. 
    • “The continuing resolution would fund the government until Dec. 11. It would only block the Trump administration’s new grants proposal until that time, but it will be more difficult for Republicans to allow the White House’s plan to take effect now that they’ve agreed to blocking it, even if temporarily.” 
  • Roll Call adds,
    • “Just as Senate GOP leaders plan to begin moving several big-ticket items ahead of a planned August recess, President Donald Trump will head out west for a Los Angeles-area fundraiser and an economic speech in Las Vegas.
    • “Trump is set to return to Washington, D.C., Wednesday night — when the chamber could be a few votes away from a monthlong recess in a midterm election year. And the president’s recent statements, threats and willingness to shift on policy shows he’s capable of slowing things down.” * * *
    • “[Senate Majority Leader John] Thune has teed up an ambitious week as he tries to move several big-ticket measures while also freeing vulnerable GOP senators to get back home to campaign until mid-September. He wants to pass a continuing resolution to fund the government until Dec. 11, including a number of White House-requested priorities the House did not have when it passed its own continuing resolution before leaving for the summer last month.
    • “Also on Thune’s list: a cryptocurrency bill, over 70 executive branch nominations and a Russia sanctions bill largely crafted by the late Sen. Lindsey Graham, a South Carolina Republican and close Trump ally.”
  • and
    • “The Senate is back on track to consider acting Attorney General Todd Blanche’s nomination to lead the Justice Department permanently after two key GOP holdouts said they were “pleased” with a deal they struck. 
    • “The DOJ said in a statement posted Sunday night that it has “rescinded” a $1.8 billion “anti-weaponization” fund meant to compensate people targeted by the federal government. The fund was part of a settlement brokered by Blanche that resolved President Donald Trump’s $10 billion suit against the Internal Revenue Service tied to the release of his tax returns during his first term in office.
    • “It was enough to satisfy Sens. John Cornyn, R-Texas, and Thom Tillis, R-N.C., who expressed “gratitude” in a Monday statement and wrote, “We look forward to voting to advance his nomination out of the Senate Judiciary Committee soon.”
    • “The Judiciary panel is now scheduled to vote on Blanche’s nomination Tuesday morning, after canceling a meeting last week.”
  • Govexec relates,
    • “Federal employees and contractors whose sensitive personal data was stolen in the massive Office of Personnel Management breaches disclosed a decade ago would receive identity protection for the rest of their lives under new bicameral legislation.
    • “Senate Intelligence Committee Vice Chair Mark Warner, D-Va., and Del. Eleanor Holmes Norton, D-D.C., plan to introduce the RECOVER PII Act on Monday, aiming to prevent the federal government’s identity-protection program for victims from expiring Sept. 30, according to bill text first seen by Nextgov/FCW.” * * *
    • “Congress responded to the breach in a 2017 appropriations law by requiring OPM to provide victims with at least 10 years of complimentary identity protection and no less than $5 million in identity-theft insurance. The new bill would replace that limit with coverage lasting for the remainder of each affected person’s life while retaining the insurance requirement.
    • “We have a responsibility to stand by the federal workers who were put at risk through no fault of their own,” Warner said. “This legislation will ensure those affected continue to receive the identity protection they need, while helping better safeguard personal information from future exploitation.”
    • “The bill would also allow agencies to reimburse federal employees and contractors for privacy tools and services, such as those that remove or limit their personal information online. Agencies would decide whether to offer the reimbursements, which would not be limited to OPM breach victims and would come from their salary-and-expense budgets.”
  • Per Health and Human Services news releases,
    • U.S. Department of Health and Human Services (HHS) Secretary Robert F. Kennedy, Jr. today traveled to southwest Virginia as part of his “Take Back Your Health” tour to highlight Trump Administration’s efforts to expand addiction recovery, strengthen American agricultural and food supply chains, and recognize President Trump’s historic $50 billion Rural Health Transformation Fund.
    • “On Monday, Secretary Kennedy joined Congressman John McGuire for visits to Tranquility Grove Rehabilitation Center and the Virginia Tech Controlled Environment Agriculture Innovation Center. Under President Trump’s leadership, combating addiction and mental illness remains a national priority. The Administration is also advancing innovative agricultural technologies that strengthen domestic food production, improve supply chain resilience, and help deliver healthier food to the American people.”
  • and
    • “The U.S. Department of Health and Human Services (HHS) today marked National Health Center Week by announcing that Health Resources and Services Administration (HRSA)-funded health centers served more than 32.7 million patients in 2025 — an increase of more than 350,000 patients from 2024 and the highest number of patients served in the Health Center Program’s 61-year history.”
  • Per a Centers for Medicare and Medicaid Service news release,
    • “The Centers for Medicare & Medicaid Services (CMS) recently hosted the one-year celebration of the Health Technology Ecosystem, bringing together leaders from the government, healthcare, and technology sectors to feature the significant progress made over the past year in advancing interoperability, improving health data sharing, and expanding patient access to digital health tools.
    • “The event featured remarks from U.S. Department of Health and Human Services (HHS) leadership, with speakers reflecting on Health Technology Ecosystem accomplishments during its first year, highlighted industry collaboration, and outlined priorities for the initiative’s next phase.” * * *
    • “The event concluded with a discussion of the next phase of the Health Technology Ecosystem and opportunities to expand industry participation. Leaders also introduced new areas for future collaboration, including real-time benefits, price transparency, advanced appointment scheduling, clinical trial matching, bulk HL7® Fast Healthcare Interoperability Resources (FHIR®) capabilities, and provider add-on services. CMS encouraged additional organizations to join the initiative as the Health Technology Ecosystem continues to evolve through collaboration across government and the private sector.”
    • “A recording of opening session highlights is available at: https://youtu.be/ATVSdE4cnVQ?si=03QLFmQ2tuRx7w-O
    • “The recording of the full event is available at: https://www.youtube.com/playlist?list=PLaV7m2-zFKpgncdcV8Wnzv42DQo2ZqkUD“
  • Per an NCQA blog post,
    • “The Healthcare Effectiveness Data and Information Set (HEDIS®) is continuously evolving to reflect clinical best practices and to support the needs of organizations that deliver and coordinate care.
    • “For HEDIS Measurement Year (MY) 2027, NCQA introduced several updates:
      • “Added 6 new measures.
      • “Updated 3 existing measures.
      • “Transitioned 1 measure to Electronic Clinical Data Systems (ECDS) reporting.
      • “Restructured ECDS-reported measures reorganized by clinical domain.
      • “Made minor adjustments made across multiple measures.”
    • “NCQA seeks feedback about the proposed retirement of select HEDIS measures for Measurement Year (MY) 2027. The ad hoc public comment period is open from August 3 to August 17. Read on to learn more about the measures proposed for retirement and visit our public comment webpage to submit your comments.
    • “The newest additions to HEDIS address follow-up after a positive colorectal cancer screening, prenatal syphilis screenings, person-centered outcome goals and the use of continuous glucose monitoring.”

From the U.S. Office of Personnel Management front,

  • Federal News Network reports,
    • “The Trump administration is giving agencies the green light to implement a new performance management system for federal employees — while also saying significant portions of those changes are “non-negotiable” with federal unions.
    • “In recent guidance issued to agencies, OPM detailed which aspects of the government’s new performance review system override collective bargaining obligations — and what is still subject to negotiation.
    • “Generally, the guidance narrows federal unions’ ability to bargain over performance appraisals. Any collective bargaining provisions that allow for grievances over performance ratings, or that would prevent agencies from using a forced distribution system, are now non-negotiable with unions, according to OPM’s memo.
    • “But some aspects of performance management are still negotiable, according to OPM, as long as they remain consistent with both the final rule and any applicable laws. Those include employees’ informal requests for a reconsideration of their rating; rules on awards and recognition programs; and feedback procedures between supervisors and employees.”
  • The AI Journal relates,
    • “ACI International Inc (NYSE: CACI) announced today that it will serve as one of Oracle’s technology partners for the U.S. Office of Personnel Management’s (OPM) Federal Human Resources Information Technology (HRIT) Modernization contract. Working alongside Oracle, Baker Tilly, and Deloitte on this 10-year contract worth nearly $400 million, CACI will modernize and consolidate disparate federal human resource systems into a single, secure, cloud-based platform for federal civilian employees, including HR professionals and leaders. The consolidation of federal HR systems into a single shared platform is expected to reduce taxpayer costs by more than 90 percent while improving efficiency, security, and service delivery across the government.”

From the Food and Drug Administration front,

  • Fierce Pharma reports,
    • “Novartis’ blockbuster radioligand therapy Pluvicto has cleared a key milestone on its quest to hit $5 billion in peak sales, securing a U.S. nod in an earlier form of prostate cancer that nearly doubles the number of patients that could benefit from the drug. 
    • “Late Friday, the FDA signed off on Pluvicto in tandem with an androgen receptor pathway inhibitor (ARPI) in patients with prostate-specific membrane antigen (PSMA)-positive metastatic hormone-sensitive prostate cancer (mHSPC).”
  • Alzheimers’ News Today relates,
    • “The U.S. Food and Drug Administration (FDA) has granted fast track designation to remlifanserin, an experimental treatment that Acadia Pharmaceuticals is developing for hallucinations and delusions associated with Alzheimer’s disease psychosis.
    • “The FDA grants this designation to investigational medicines intended to treat serious conditions and fill an unmet medical need. Fast track status provides benefits such as more frequent communication with the FDA, with the goal of speeding a therapy’s development and review.
    • “FDA Fast Track designation for remlifanserin underscores the significant unmet need for new treatment options for people living with Alzheimer’s disease psychosis, a serious condition for which there are currently no FDA-approved therapies. This is an important milestone for the remlifanserin program,” Catherine Owen Adams, CEO of Acadia, said in a company press release.”
  • Parkinson’s News Today tells us,
    • “The U.S. Food and Drug Administration (FDA) has granted regenerative medicine advanced therapy (RMAT) designation to sasineprocel (ANPD001), an experimental cell therapy to treat Parkinson’s disease.
    • “The designation, given to promising regenerative therapies (treatments that aim to replace or restore disease-damaged tissue) that could substantially improve care for serious diseases, provides developer Aspen Neuroscience with perks such as more intensive FDA guidance.
    • “This significant milestone highlights the transformative nature of sasineprocel as a potentially disease-modifying therapy for patients facing a serious disease with substantial unmet medical need,” Damien McDevitt, PhD, president and CEO of Aspen, said in a company press release.” 

From the judicial front,

  • Beckers Payer Issues reports,
    • “Five federal employees are suing U.S. Office of Personnel Management Director Scott Kupor over alleged sex discrimination due to the rollback of coverage for gender-affirming care.
    • “Plaintiffs, backed by the Human Rights Campaign Foundation, filed the lawsuit Aug. 3 in the U.S. District Court for the District of Columbia. The potential class action focuses on OPM’s coverage policy following a January 2025 executive order from President Donald Trump. The order said “sexes are not changeable,” and the country recognizes only male and female sexes.” * * *
    • “The lawsuit calls for two classes, one seeking injunctive relief and the other seeking damages. The complaint also requests retroactive coverage.”
  • STAT News relates,
    • “Sandoz agreed to pay $478.5 million to settle allegations by dozens of states and resellers of medicines that the company engaged in a widespread conspiracy to artificially inflate and manipulate prices of generic drugs and harmed consumers by reducing competition.
    • “Under one settlement, the company agreed to pay $400 million over seven years starting in 2027 to resolve all remaining claims by U.S. states in three pending cases and make an additional payment of about $50 million to states that settled earlier. Another $28.5 million will be paid to resolve all remaining class-action litigation brought by indirect resellers. Sandoz did not admit to any wrongdoing.”

From the public health and medical / Rx research front,

  • The Wall Street Journal reports,
    • “Two people have died in connection with the cyclosporiasis outbreak that has spread across the U.S. this summer, according to public-health officials in Michigan, marking the first deaths tied to the unusually large flare up of the food-borne illness.
    • “Both of the people had “significant underlying health conditions” that may have been exacerbated by cyclosporiasis and dehydration, Michigan’s Department of Health and Human Services said. It didn’t provide any additional information about the people who died but said cyclosporiasis deaths are uncommon in the United States.” * * *
    • “The Centers for Disease Control and Prevention said it has received reports of more than 6,700 laboratory-confirmed cases of cyclosporiasis, with another 11,500 suspected. Typically, the U.S. sees about 250 reported cases by this time of year.
    • “The exact source of the parasite remains unclear. Authorities have been probing various cyclospora outbreaks as if they are distinct, but it is possible they are related and investigators so far haven’t been able to connect them. Food-safety experts say the vast majority of fresh fruits and vegetables are still safe to eat.
    • “The largest outbreak has been linked to Taylor Farms’ shredded iceberg lettuce, which was sold at retailers including Taco Bell. On July 17, Taylor Farms said it was removing all iceberg lettuce sourced from central Mexico from the U.S. market. Taco Bell finished pulling potentially affected product from its supply chain on the same day. 
    • “Yum Brands, the parent company of Taco Bell, was in communication with Michigan public-health authorities weeks before the recall, according to emails the health department shared with The Wall Street Journal on Monday. 
    • “In an email to a Yum Brands employee on July 2, a state epidemiologist said the department had “a strong signal from our epidemiologic interviews that we need to continue to work with Taco Bell.” 
  • Fox Business relates,
    • “Marijuana is officially leading the pack for the most-used daily drug among Americans.
    • “New data from the 2025 National Survey on Drug Use and Health, from the Substance Abuse and Mental Health Services Administration (SAMHSA), reveals that there are 21.4 million daily or near-daily marijuana users in the U.S.
    • “This surpasses the 19.9 million people who smoke cigarettes and the 17.2 million who consume alcohol.” * * *
    • Although marijuana is now the most commonly used substance on a daily or near-daily basis, alcohol remains the most widely used substance overall. During the previous month, about 129 million people drank alcohol while 43.8 million used marijuana.
  • Cardiovascular Business tells us,
    • “Twenty years after its launch, the Get With The Guidelines-Heart Failure (GWTG-HF) registry from the American Heart Association (AHA) has grown into one of the nation’s most influential cardiovascular databases, helping accelerate the adoption of guideline-directed medical therapy (GDMT) while generating evidence that has reshaped heart failure care.
    • “Since its inception in 2005, the registry has collected more than 1.6 million patient records from more than 800 hospitals, representing about 60% of U.S. hospitals. The database has produced more than 150 peer-reviewed publications and is increasingly being used to support implementation science, registry-based clinical trials and long-term outcomes research.
    • “What started as a quality improvement initiative has led to substantially better processes of care and, most likely, improved survival, fewer symptoms and a tremendous learning platform,” Clyde W. Yancy, MD, MSc, chief of cardiology and professor of medicine at Northwestern University, said in a video interview with Cardiovascular Business.
    • “He added that the registry was created to solve a longstanding challenge in medicine: the fact that it often takes years for clinical evidence to truly influence changes in daily practice.” 
  • Drug Topics informs us,
    • “A survey study published in JAMA Network Open found that pregnant women and parents of young children generally prefer maternal respiratory syncytial virus (RSV) vaccination over infant RSV antibody shot administration as a means of protecting infants against RSV-associated hospitalization. The 2 concurrent national cross-sectional surveys, fielded in April 2024 among 174 pregnant women and 1765 parents of children aged 0 to 5 years, found that only about half of participants reported positive intentions toward either immunization option, underscoring a persistent gap between product availability and uptake.”
  • Fierce Healthcare lets us know,
    • “A new study evaluating the impact of virtual lactation support found it boosted maternal health and breastfeeding success outcomes. 
    • “The study evaluated SimpliFed, a virtual baby-feeding platform led by UMass Chan Medical School. Participants who completed three or more telelactation visits breastfed for nearly 16 weeks longer than those who did not engage with any visits. The impact was even more drastic for moms with mental health conditions, where average feeding duration increased by 24 weeks. The study, presented as a poster, is not yet published online.
    • “The researchers recruited a group of 200 participants from prenatal through postpartum. All were offered unlimited access to the SimpliFed platform for 12 months. Utilization was evenly split: a third did not complete any visits; a third completed one to two; and a third completed three or more.
    • “Dropping breastfeeding rates over time were common, mirroring national trends. Most participants, regardless of whether they engaged with SimpliFed, breastfed at one week postpartum; three-quarters did by six months; and about half did at 12 months. However, completing three or more SimpliFed visits led to longer duration of breastfeeding compared to others in the cohort.”
  • MedPage Today adds,
    • “A study of U.S. children found no evidence linking neonatal male circumcision with autism spectrum disorder, prospective data from the ECHO cohort showed.
    • “Among nearly 2,800 boys in 14 ECHO sites, 6% of those who were circumcised had autism compared with 9% of uncircumcised males, according to Monica McGrath, ScD, MHS, of the Johns Hopkins Bloomberg School of Public Health in Baltimore, and co-authors.
    • “After adjusting for confounders, circumcision was not associated with an autism diagnosis (OR 0.83, 95% CI 0.59-1.17), McGrath and colleagues reported in JAMA Pediatrics.
    • “Stratifying data by region, preterm birth, and neonatal intensive care unit (NICU) admission yielded either an inverse or no association. Circumcision also was not associated with autism-related traits or behaviors.”
  • Beckers Hospital Review points out,
    • “Active U.S. drug shortages increased to 227 in the second quarter of 2026, marking the third consecutive quarterly increase, according to the American Society of Health-System Pharmacists. Nearly half of all new shortages this year involve medications made by a single manufacturer, a concentration that increases supply chain vulnerability, and the FDA’s database continues to reflect new discontinuations weekly.”
    • The article identifies the nine drugs most recently placed in shortage status.

From the U.S. healthcare business and artificial intelligence front,

  • The Wall Street Journal reports,
    • “AstraZeneca AZN shares fell sharply and Bristol Myers Squibb’sBMY  climbed, after media reports that the two drugmakers held merger talks.
    • “London-listed shares in AstraZeneca were down 6.4% in European morning trading. Meanwhile, Bristol’s shares were up 5.5% in U.S. premarket trading.
    • “The stock moves came after the Financial Times reported, citing unnamed sources, that AstraZeneca held discussions with Bristol about a tie-up in recent months, which could lead to a deal in the near future or fall apart.
    • “An AstraZeneca spokesman declined to comment, while Bristol didn’t respond to a request for comment.
    • “A potential deal between AstraZeneca and Bristol Myers Squibb would create a pharma giant with a combined market value of roughly $400 billion and more than $100 billion in annual sales.”
  • Beckers Hospital Review relates,
    • :Gaithersburg, Md.-based Adventist HealthCare recorded operating income of $18.2 million (3% operating margin) through the first six months of fiscal 2026, up from an operating loss of $205,000 (-0.1% margin) during the same period last year, according to its July 29 financial report.” * * *
    • “Among the system’s hospitals, Silver Spring, Md.-based White Oak Medical Center posted $11.9 million in operating income through Q2, up from a $2.8 million operating loss during the same period last year. Rockville, Md.-based Shady Grove Medical Center posted $16.5 million in operating income, up from $10.2 million. Fort Washington (Md.) Medical Center Medical Center posted a $1.2 million operating loss, widened from a $960,000 loss during the same period last year.”  
  • Beckers Behavioral Health tells us,
    • “Ochsner Behavioral Health Acadiana welcomed its first patients July 8, marking the official launch of a regional behavioral health network built jointly by Ochsner Lafayette (La.) General and Plano, Texas-based Oceans Healthcare. 
    • “The network pairs a newly built hospital in Lafayette with the former Oceans Behavioral Hospital Broussard, now renamed Ochsner Behavioral Health Acadiana-Broussard, giving the partners 100 inpatient beds across the two campuses under a single license — more than double the 38 beds they previously operated in the region.
    • “The logic behind the partnership, Oceans Healthcare COO Jeff Pritchard said, comes down to completing the continuum.
    • “Many patients come through the doors of a health system; they have ERs, they have hospitals, they have various clinics,” he said. “By forging a connection with them, we can create a path to those patients who need behavioral health support, so there’s no loss of care in the transition.”
  • Cardiovascular Business informs us,
    • “Cleerly, a Denver-based artificial intelligence (AI) company, has partnered with New York-based Allelica to launch the new Cleerly Polygenic Cardiovascular Risk Score Test. 
    • “Allelica specializes in polygenic risk scores (PRS) that predict a patient’s genetic risk of developing different diseases. Cleerly, meanwhile, its known for its AI-powered coronary CT angiography (CCTA) evaluations. Together, these two companies have collaborated on a new test designed to help physicians diagnose and manage heart patients with suspected coronary artery disease.
    • “Genetic risk and imaging answer two different questions for a physician,” James K. Min, MD, FACC, FESC, MSCCT, founder and CEO of Cleerly, said in a statement. “Inherited risk points to who is biologically predisposed to coronary disease, and our imaging analysis shows what is actually present inside the arteries. Bringing those two views together gives physicians a clearer, more individualized picture of each patient’s coronary risk.”
  • Per BioPharma Dive,
    • “Brain drug developers Supernus and Individor on Monday announced plans to merge, bringing together two companies specializing in drugs for central nervous system disorders that had combined revenues of $2 billion in 2025.
    • “Per deal terms, Supernus shareholders will receive 1.54 shares of Individor for every Supernus share they own, and Individor shareholders will receive a one-time $1 billion cash dividend before the deal’s close, financed by a $650 million loan and the combined companies’ cash on hand. After the close, the former Individor shareholders will own around 57% of the combined company and Supernus’ will own around 43%.
    • “Following the close, the company will be called Supernus, headquartered at Supernus’ Rockville, Maryland offices, and will be headed by its current CEO, Jack Khattar. Individor board member Tony Kingsley will become the combined company’s board chair. The board is expected to consist of eight members evenly split between Individor and Supernus.”
  • Per MedTech Dive,
    • “Global investment firm KKR said Monday it has agreed to buy device manufacturer Integer Holdings for about $5.7 billion.
    • “The companies expect to close the deal before the end of the year, at which point Integer would become a private company. Shares of Integer rose by nearly 20% to $121.21 Friday afternoon following a Wall Street Journal report that the two companies were nearing a deal.
    • “Integer, which bills itself as one of the largest global medical device contract development and manufacturing organizations, expects the acquisition would provide flexibility and long-term capital to invest in its capacity, technology and innovation.”

Cybersecurity Saturday

“”We are in the Singularity.” Elon Musk

From the Project Glasswing front,

  • Cybersecurity Dive reports,
    • “Versions of Anthropic’s Claude AI model broke out of their testing environments and hacked into other organizations on three separate occasions, Anthropic said on Thursday [July 30].
    • “The frontier AI lab’s announcement came roughly one week after OpenAI disclosed a similar incident involving its models, a revelation that has set off a new round of consternation about whether AI developers are adequately overseeing their sophisticated AI products.
    • “In the three incidents that Anthropic disclosed, Claude conducted the intrusions while believing that it was participating in a capture-the-flag exercise in which it did not have access to the internet and all available systems were part of the test. “Due to a misunderstanding between us and our evaluation partner,” Anthropic explained in a blog post, “this was not the case, and internet access was available.”
    • “As a result, when Claude encountered the three victim organizations, it believed that they were simulated targets and broke into them using basic attack techniques such as exploiting weak passwords.
  • The article describes the incursions which is worth a click.
  • Cyberscoop adds,
    • “We almost never get both sides of an intrusion. This time we did.
    • “Last month, Hugging Face disclosed a breach into part of its production infrastructure, saying an autonomous AI agent system ran the attack from start to finish. Five days later, OpenAI revealed that its own models, including GPT-5.6 Sol along with an unreleased one, were responsible for the breach. OpenAI called it an unprecedented cyber incident.
    • “Most of the commentary since has been about AI capability. That is the least useful part of the story, because the capability was doing what it was destined to do. Security teams should look at a simpler truth: in both systems, the key defenses sat behind untrusted code that was already running.”
  • Cybersecurity Dive notes,
    • “Businesses are more concerned about AI-fueled threats than traditional cybersecurity dangers, potentially undermining their ability to prepare for the attacks they are most likely to face, researchers at the security firm Arctic Wolf said on Tuesday.
    • “Roughly a third of organizations said AI topped their list of cybersecurity concerns, while concerns about malware, credential theft and cloud misconfigurations dropped from their 2025 numbers, according to Arctic Wolf’s annual AI and cybersecurity trends report.
    • “The report also delved into organizations’ use of AI for their security programs, their reasons for reporting cybersecurity incidents and regional trends in cybersecurity challenges.”
  • and
    • “AI agents remain a major cybersecurity risk for businesses, with 81% of CISOs worrying that their AI systems aren’t properly governed, according to a report Okta published on Wednesday.
    • “Only 47% of companies Okta surveyed said they knew all the AI agents on their networks, and only 46% reported controlling those agents’ access to corporate data.
    • “Okta’s findings highlight a complicated and dangerous environment in which companies aren’t properly balancing the risks and benefits of agentic AI.”
  • Security Week points out,
    • “Anthropic on Friday [July 24] rolled out Claude Opus 5, pitching it as a cheaper alternative to its top-tier Fable 5 model. In terms of cybersecurity, the new model is nearly as good as the AI giant’s most capable system, Mythos 5, at spotting software vulnerabilities, but remains well behind it in turning those findings into working exploits.”
    • “The difference comes from Anthropic’s own OSS-Fuzz-based evaluation, which measures how well a model can locate and then exploit vulnerabilities with minimal human steering. According to the company, Opus 5 identifies vulnerabilities at a rate close to Mythos 5, but its exploit-development score trails considerably. 
    • “Anthropic frames this as a deliberate outcome, noting that it has avoided training Opus 5 directly on offensive cyber tasks. The gains it does show, the company says, are a byproduct of broader capability improvements.”
  • Per a July 28, 2026, SonicWall news release,
    • SonicWall today confirmed it is a participant in Anthropic’s Project Glasswing and is testing Claude Mythos 5 for defensive cybersecurity work. Through the initiative, SonicWall is applying the model to vulnerability discovery and code review across its own software to find and remediate security issues before they can be exploited. 
    • Project Glasswing is an Anthropic-led industry effort that gives participating security teams access to Claude Mythos 5, a frontier model not available to the general public, for defensive security research. Anthropic launched the program to help close the gap between attackers using AI to accelerate vulnerability discovery and defenders’ ability to find and fix those same issues first. 
    • “Security vendors are not exempt from the pressure every software maker is under right now,” said Chandro Prasad, SonicWall Chief Product Officer. “Vulnerabilities move from disclosure to exploitation faster than most patch cycles can keep up with. Participating in Project Glasswing gives our security team another way to find and close gaps in our own code before an attacker does. That is the standard we hold ourselves to, and this program is a meaningful way to raise it further.” 

From the cybersecurity policy and law enforcement front,

  • Bleeping Computer reports,
    • “The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disruptions.
    • “The guidance, titled “CI Fortify – Advice for isolating vital systems,” was developed by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Australian Signals Directorate’s Australian Cyber Security Centre (ACSC), the FBI, and international partners.
    • “It provides recommendations for disconnecting critical operational technology (OT) and associated systems from corporate, Internet-facing, and other less-trusted networks while continuing to provide essential services for an extended period.”
  • Cyberscoop relates
    • “The Cybersecurity and Infrastructure Security Agency published a guidebook for federal agencies Thursday to aid them on managing security risks with open-source software, touching on topics like patching and open-source AI models.
    • “An executive order President Joe Biden signed and that President Donald Trump amended ordered CISA and other agencies to issue open-source security recommendations to federal agencies. But the guidance is also timely, given a recent slew of attacks on open-source software (OSS).
    • “As part of our statutory mission, CISA remains laser-focused on enhancing the nation’s cybersecurity by collaborating with government, industry and the open-source community to understand and securely use OSS,” said Chris Butera, acting executive assistant director for cybersecurity. “CISA encourages federal civilian agencies to review this guide and implement the principles and practices to improve risk management, better execute their mission, and better serve the public.” 
    • “The document, “Open Source Software: Security Principles and Practices,” touts the advantages of open-source software — which anyone can use, modify and share — as offering benefits in efficiency, cost, security transparency and more, but notes that it also has unique tradeoffs.”
    • “All software carries risk, and OSS is no more or less risky than other software. The key distinction is that, with OSS, agencies can directly assess code quality and security, rather than relying solely on vendor assurances,” the guidance reads. “OSS is increasingly intertwined with emerging technologies such as artificial intelligence. Agencies that adapt to OSS’s unique characteristics will position themselves to meet future challenges and leverage new innovations.”
  • Dark Reading tells us,
    • “A gaggle of government partners from around the world has released new guidelines for the minimum elements that organizations should include in a software bill of materials (SBOM).
    • “The document, published this week, was authored by the US Cybersecurity and Infrastructure Security Agency (CISA) and 16 other government entities spread across four continents. It supersedes the National Telecommunications and Information Administration’s (NTIA) 2021 guidelines, which laid out what an SBOM had to contain as far as the US government was concerned. This updated version was first drafted in 2025, and was then informed by suggestions from 90 commenters, including major organizations like Google, Microsoft, and Amazon Web Services (AWS) to create the resulting document.
    • An SBOM is essentially an “ingredients list,” detailing the building blocks and supply chains that make up a given piece of software. This could include proprietary or open source software components, APIs, utilities, and more. As a risk management tool, it aims to provide visibility into where vulnerabilities exist in a software stack and how to prioritize patching, among other things.
    • “There’s nothing revolutionary in this latest spruced-up framework, which follows SBOM policy revisions earlier this year, but it introduces 10 new data fields, and a dozen or so updates to existing elements, which range from major to minor significance. Though the changes might be directionally positive, Jeff Williams, founder of OWASP and founder and CTO of Contrast Security, argues that these minor procedural changes miss the bigger picture.”
  • Per a Health and Human Services Department news release,
    • “The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) today announced a settlement with OSF Healthcare System and its Affiliated Covered Entities (OSF), concerning potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy, Security, and Breach Notification Rules. OSF is headquartered in Illinois and has providers located in Illinois and Michigan.
    • “An accurate and thorough HIPAA risk analysis is not only required by law, but it is also necessary to protect health information and prevent or mitigate ransomware attacks,” said OCR Director Paula M. Stannard. “If a HIPAA regulated entity doesn’t know what threats and vulnerabilities exist to its electronic protected health information (ePHI), they will often learn the hard way when their systems are hacked.” * * *
    • “The settlement resolves an investigation that OCR initiated after OSF filed a breach report in October 2021. In April of 2021, OSF discovered that its files had been infected with the “Nephilim” variant of ransomware. The PHI of 53,907 individuals was exfiltrated by the threat actor. Affected PHI included driver’s license numbers, diagnosis and treatment information, prescription information, medical record numbers, provider names, dates of services, financial account information, and health insurance information.” * * *
    • “Under the terms of the resolution agreement, OSF agreed to implement a corrective action plan that OCR will monitor for two years and paid $552,250 to OCR. Under the corrective action plan, OSF has committed to taking steps to ensure compliance with the HIPAA Rules and protect the security of ePHI, including:
      • “Conduct an accurate and thorough risk analysis to determine the potential risks and vulnerabilities to the confidentiality, integrity, and availability of its ePHI; and
      • “Develop and implement a risk management plan to address and mitigate security risks and vulnerabilities identified in its risk analysis.
    • “Read the resolution agreement and corrective action plan.”

From the cybersecurity breaches and vulnerabilities front,

  • Dark Reading reports,
    • “A coordinated cyberattack targeting more than 30 community water systems in Minnesota this week underscored the growing threat to often poorly protected operational technology (OT) from adversaries seeking to disrupt critical infrastructure services across the US.
    • “The attacks, which US government officials have reportedly attributed to Iran, disrupted automated systems in some Minnesota communities, forcing them to switch to manual operations for brief periods. However, the attacks don’t appear to have affected water supply, water safety, or wastewater services in a major way, based on public statements by community officials and Minnesota’s IT Services (MNIT) unit.” * * *
    • In an advisory Thursday [July 30], the FBI described the attacks as broader and impacting water and wastewater systems in at least seven states with some of the attacks degrading water operations. The FBI advisory said attackers were targeting OT devices including Rockwell Automation/Allen-Bradley PLCs, specifically MicroLogix 1100 and 1400 series devices. “After remotely accessing internet-facing devices, the actors changed the IP addresses and passwords, resulting in a loss of monitoring and control functionality,” the FBI said. It recommended that affected organizations remove PLCs “from direct Internet exposure via secure gateway and firewalls, setting up strong, unique passwords, and utilizing access control list (ACL) to allow only authorized communication between expected control system devices.”
  • Bleeping Computer adds,
    • “Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers.
    • “Amgen is a California-based biotechnology company that develops and manufactures medicines for serious illnesses, including cancer, cardiovascular disease, inflammation, and rare diseases.
    • “The company said it detected the unauthorized activity in July 2026 and responded by activating its cybersecurity response plan, implementing containment measures, and hiring independent forensic experts to investigate the incident.
    • “The investigation found that the attackers stole sensitive data from the cloud environments.
    • “The Company has since learned that some of its data, including proprietary data, patient protected health information, and other information, has been exfiltrated from these cloud environments,” Amgen said in a Form 8-K filing with the SEC.”
  • Cyberscoop tells us,
    • “Huntress researchers spotted an active and ongoing series of attacks targeting SonicWall VPN and firewall accounts, which compromised 30 organizations in less than two days, the company said in a threat advisory Tuesday [July 28].
    • The credential stuffing campaign started Saturday and grew rapidly, ultimately compromising 92 unique user accounts during the next 41 hours, according to Huntress. Researchers said the attacks were broad and opportunistic, hitting various SonicWall devices, rather than targeting specific types of organizations.
    • SonicWall hasn’t released a security advisory about the malicious activity as of press time. A spokesperson told CyberScoop the company is still investigating and hopes to have more information soon.
    • The attacks ended — at least for now — as abruptly as they began. The last compromise occurred Monday, according to Michael Tigges, principal tactical response analyst at Huntress.
  • Bleeping Computer informs us,
    • “Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges.
    • “The security issue affects FastJson versions 1.2.68 through 1.2.83 and is leveraged in attacks targeting various organizations in the U.S.
    • “The malicious activity was observed last week by the agentic security company ThreatBook, and researchers at the business protection company Imperva confirmed that it was “targeting a wide range of organizations, across Financial Services, Healthcare, Computing, Retail, Business, and other industries.” * * *
    • “FastJson is an open-source Java library developed by Alibaba, used for serializing Java objects to JSON, and vice versa.” * * *
    • “In its security bulletin, Alibaba confirmed the critical severity of the vulnerability and warned that it is exploitable on “the most common Spring Boot deployment model.”
  • CISA added three known exploited vulnerabilities to its catalog this week.
    • July 27, 2026
      • CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
      • CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
        • Cybersecurity News discusses the Fortinet KVE here.
        • Arista discusses its KVE here.
    • July 29, 2026
      • 2026-20316. Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
        • Cybersecurity News discusses this KVE here.
  • Bleeping Computer notes,
    • “Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host.
    • “The vulnerabilities also affect products containing vCenter or ESX, including VMware Cloud Foundation, VMware vSphere Foundation, VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure.
    • “Broadcom says organizations running versions released before those listed as fixed in its advisory should assume they are vulnerable and take immediate action.”
  • Dark Reading adds,
    • “A maximum-severity vulnerability in the open source AI agent platform Ruflo puts enterprise AI deployments at risk by letting attackers conduct various malicious activities from inside the orchestration framework. The flaw also can leave agents behaviorally compromised even after it’s been patched.
    • “Researchers at Noma Security’s Noma Labs discovered the flaw, tracked as CVE-2026-59726, in Ruflo, formerly called Claude Flow and which hosts AI agent swarms for Codex and Claude Code, they revealed today. The vulnerability, which received the highest CVSS severity score of 10, allowed them to access the platform without logging in at all, according to Noma Labs.”
    • “The weakness is a lack of authentication coupled with command execution capabilities, enabling complete control over the container and exposure of sensitive credentials,” according to details about the flaw posted on OpenCVE.”
  • ZDNet notes,
    • “Forty-three percent of organizations have experienced AI-enhanced or AI-generated phishing attacks, and 37% have encountered AI-augmented malware, according to a new survey. 
    • “CDW’s 2026 Security Research Report is based on a survey of 951 IT decision-makers across a variety of industries. Published Monday, the research reveals what appears to be an AI arms race between cyberattackers and defenders. Many organizations are considering investing in AI threat detection, training, and controls to combat the new face of modern cyber threats: AI techniques, tactics, and technologies.” 

From the ransomware front,

  • Inc.com reports,
    • “The hackers behind the Fairlife ransomware attack have identified themselves, and experts are sounding the alarm. 
    • “A hacking group known as Anubis has claimed responsibility for the ransomware attack that hit Fairlife, Coca-Cola’s dairy products unit, saying it locked the company’s servers and stole about one terabyte of confidential data.
    • “Coca-Cola first confirmed the attack on July 17, noting that the incident had affected Fairlife’s production systems and forced a temporary suspension of its U.S. operations. At the time, the company said it expected the disruption to continue for the foreseeable future. It said that there was no impact on the safety or quality of its products.
    • “Upon revealing its identity, Anubis threatened to leak the stolen data unless Fairlife paid a ransom. Despite that, Coca-Cola announced this week that much of production had resumed. The company did not disclose how it managed to restore operations or share any details about how the hackers initially gained access to Fairlife’s systems. Coca-Cola has not disclosed whether it paid the ransom.
    • Zach Lewis, chief information officer and chief information security officer at a private higher education institution, told Inc. that this was a case of double extortion: Attackers encrypt a company’s systems and demand payment for a decryption key, and then come back with a second demand, threatening to leak stolen data unless they’re paid again.
    • He described the process as an oddly formal one, with negotiations often playing out through dedicated portals set up by the hackers themselves. “It’s really bizarre working with these criminals who are running a really good support site to navigate through this negotiation,” he said. “They want the transaction to be successful, because if they don’t hold up their end of the bargain, they don’t get that good reputation, and when they go to hit someone else, they won’t get paid either.”
  • Health Exec relates,
    • “A 2025 data breach on a medical billing company, first revealed in late June, exposed sensitive protected health data on 1.3 million people to hackers.
    • “In an announcement, Medical Computer Business Services (MCBS) said the September 2025 incident stemmed from an unauthorized third party gaining access to its network, though it revealed few details about the nature of the attack, saying online that personal information on individuals stored on its network may have been “accessed or removed.”
    • “Soon after, an updated filing with the U.S. Department of Health and Human Services’ Office of Civil Rights Healthcare Data Breach Tracker showed the official number of victims, meaning that hackers at the very least accessed files on 1,261,464 patients.
    • “The company did not confirm that files were moved offsite. However, BleepingComputer reports—complete with a screenshot from the dark web—that a data trove from the incident is available online, with a ransomware group called PEAR (Pure Extraction and Ransom) taking credit. 
    • “The data is available for download, which typically means a ransom wasn’t paid. 
    • “The trove was discovered by researchers at the outlet sometime this week.” 
  • Bleeping Computer tells us,
    • “Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical technology organizations of an observed increase in successful attacks by ShinyHunters.
    • “ShinyHunters is an extortion gang that primarily conducts supply chain and identity attacks to breach cloud SaaS and storage platforms in data theft attacks,
    • “Over the past two years, the threat actors have become notorious for conducting numerous supply chain attacks on third-party integration partners. These breaches give them access to OAuth tokens that are used to integrate with SaaS providers like Salesforce and Snowflake.
    • “The threat actors are known for identity attacks, where they target employees through social engineering, including vishing and phishing, to compromise corporate single-sign-on accounts. Once they gain access to an account, they log in to an organization’s Okta, Microsoft Entra, or Google SSO dashboard, which acts as a centralized hub listing all SaaS applications the user has permission to access.” * * *
    • “Health-ISAC says the most important defensive step is breaking the attack chain between the initial vishing call and the takeover of an SSO account.
    • “Organizations are advised to require out-of-band identity verification for password resets, MFA resets, and device re-enrollment requests.
    • “This can include calling users back using a previously verified phone number and requiring manager approval for privileged accounts.”
  • Cybersecurity Dive adds,
    • “Dozens of North American companies have been targeted in a social engineering campaign that abuses Microsoft Teams to deploy ransomware, according to a report by cybersecurity firm Sophos.
    • “A threat group, tracked as STAC4749, has initiated chats or calls through Microsoft Teams under the guise of providing help desk or IT support to companies in the U.S. and Canada. 
    • “After initiating a remote session through Microsoft Quick Assist or the cloud-based RemSupp tool, hackers deploy PowerShell in order to establish persistence and execute malicious payloads.” * * *
    • “In at least three cases, the hackers deployed Chaos ransomware on a compromised system. Researchers said in one of the cases, the time between initial access to deployment of ransomware was 17 hours, which is consistent with prior Chaos cases. 
    • “The observed attacks ran between February and June, targeting organizations in the services, manufacturing, energy, construction and engineering sectors.” 
  • Cybersecurity News informs us,
    • “The Gentlemen ransomware operation is drawing attention for its aggressive effort to disable security software before locking files. Instead of relying only on fast encryption, the attackers attempt to remove the tools that could detect, block, or contain the attack.
    • “This approach raises the risk for businesses because antivirus and endpoint monitoring tools may be silenced when they are needed most. 
    • “The campaign’s exact initial access method was not detailed, but the activity shows attackers preparing systems for encryption after obtaining a foothold.
    • “Catalyst analysts identified the malware component as anticheatG13.sys, a kernel-level driver with broad capabilities for manipulating processes, networking, files, and system memory.”
  • Per Dark Trace,
    • “Darktrace detected a multi-stage ransomware intrusion from its earliest stages, identifying reconnaissance, privilege escalation, lateral movement, command-and-control communications, and data exfiltration before encryption occurred. This analysis highlights how behavioral detection exposed attacker activity using legitimate tools and infrastructure, providing multiple opportunities for early intervention and containment. “

From the cybersecurity business and defenses front,

  • Security Week reports,
    • “Nvidia and a large group of technology, cybersecurity, and enterprise software companies announced on Monday the launch of the Open Secure AI Alliance, a new initiative aimed at developing and sharing open source tools, models, and techniques for securing AI systems and agents. 
    • “The effort builds on existing work from the Linux Foundation’s recently launched Akrites initiative and the OpenSSF community.
    • “Inaugural partners of the Open Secure AI Alliance also include Adobe, Cadence, Capital One, Cisco, Cloudera, Cloudflare, Cognition, CrowdStrike, Databricks, Dell, DoorDash, Elastic, HPE, Hugging Face, IBM, LangChain, Microsoft, Naver, NetApp, Nous Research, OpenClaw, Palantir, Palo Alto Networks, Red Hat, Reflection AI, Salesforce, SAP, SK Telecom, ServiceNow, Siemens, Snowflake, SpaceXAI, Synopsys, Thinking Machines Lab, and TrendAI.”
  • Cybersecurity Dive adds,
    • “Microsoft on Monday announced the launch of Project Perception, an agentic security system designed to help defenders combat a rapidly evolving threat of AI-based attacks by malicious actors. 
    • “The company also introduced MAI-Cyber-1-Flash, an AI model that helps users identify and remediate vulnerabilities through an integration with the company’s MDASH code-scanning harness. 
    • “The launch is part of a major industry push to implement AI-based security that can protect corporate IT and critical infrastructure systems from sophisticated attacks. In the past year, threat actors have demonstrated the ability to speed and scale attacks in a way that traditional security technologies cannot match.” 
  • Forresters offers its take on how Project Perception should be implemented.
  • The Wall Street Journal reports,’
    • “Data-security company Cyera has agreed to acquire startup Oasis Security for $1 billion, the latest large deal in a wave of consolidation across the cybersecurity industry fueled by artificial intelligence.
    • “The cash-and-stock acquisition would help Cyera bridge its data-protection platform with Oasis’s technology for managing nonhuman identities, such as AI agents and automated software, as companies grapple with the risks of deploying autonomous tools across their businesses. The companies expect the deal to close later this year.
    • “The biggest catalyst for this acquisition is the customers,” said Yotam Segev, Cyera’s chief executive, who co-founded the company in 2021. “Our customers, and especially our shared customers, have been telling us that these capabilities belong together.”
    • “The transaction between the two New York-based companies is among the largest cybersecurity acquisitions of the year, underscoring how AI is reshaping the industry.”
  • Cyberscoop adds,
    • “Okta announced Thursday it has signed a deal to buy Permiso Security, a cloud-based firm that tracks threats tied to human, machine, and AI-driven digital identities. 
    • “Permiso specializes in spotting risks after a user or system has already logged in, an area the industry refers to as identity threat detection and response. The company draws on more than 2,500 signals gathered from over 70 identity-related partners to flag issues such as excessive access permissions, unused credentials, unusual behavior from AI agents, and violations of internal security policies.
    • “Ely Kahn, Okta’s chief product officer, told CyberScoop that Permiso will allow Okta to merge two functions that have operated separately: real-time threat detection and identity security posture management. “Today those are two separate products that don’t really talk to each other,” he said.” 
  • The American Hospital Association offers “Lessons Learned from Conversations with the FBI: Healthcare Cyberthreats and Best-practice Defense.”
  • The Health Sector Coordinating Council provides a summary recap of the Operation Vital Signs National Cybersecurity Exercise which took place on July 21 an 22, 2026.
  • The HIPAA Journal shares its HIPAA Audit Checklist.
  • Tech Target gives us a CISO’s guide to privileged identity management.
  • SC Media explains why “effective incident response plans elusive for most cybersecurity teams.”
  • Here is a link to Dark Reading’s CISO Corner.

Friday report

Simplicity is a virtue.

From Washington, DC,

  • Roll Call reports,
    • “The timeline is slipping for senators to strike a bipartisan deal on a short-term funding patch before their August recess as leadership struggles to work out the finer details.
    • “Senior appropriators had been hopeful of unveiling text before the weekend for a stopgap measure expected to keep the government funded into early December. But sources say leaders are now more likely to release text later this weekend or early next week amid snags over a federal grant rule and other add-ons.
    • “The Trump administration’s proposed rule would give senior political appointees greater influence over the grant approval process and has drawn pushback from appropriators on both sides of the aisle.
    • “Senate Appropriations Chair Susan Collins, R-Maine, noted Thursday that the rule has drawn considerable criticism from “a wide range of groups.”
    • “So, I hope we’ll take advantage of this opportunity to delay it,” she said. “But that’s up to the leadership. It’s obviously not a funding issue.”
    • “The grants dispute is among the last-minute hitches and “anomalies” that negotiators have said leadership is sorting through as senators aim for floor consideration next week.
    • “The Senate is currently scheduled to take a procedural vote Monday on the legislative vehicle for the continuing resolution that is needed to stave off a partial government shutdown on Oct. 1, when the new fiscal year begins.
    • “The House has already passed a Republican-crafted stopgap bill to extend current funding through Dec. 4. But senators say further “anomalies,” or deviations from current spending, are needed, noting the gap between add-ons requested by the White House and the House GOP’s bare-bones funding patch.”
  • Bloomberg Law relates,
    • “The Trump administration will increase Medicare payments for hospital services by 2.3%, or $2.1 billion in fiscal year 2027, according to a final rule released Friday.
    • “The final rule (RIN 0938-AV79) from the Centers for Medicare & Medicaid Services also includes a 2.2% reimbursement bump of $54 million for long-term care hospitals, along with several new hospital quality reporting measures.
    • “These include the adoption of quality measures for diabetes, deep vein thrombosis/pulmonary embolisms, quality care planning, and mortality rates. 
    • “The final rule also expands the agency’s Comprehensive Care for Joint Replacement (CJR) Model, which holds hospitals financially accountable for the quality and cost of hip, knee, and ankle replacements, through incentive payments
    • “The agency says the program has produced strong evidence of cost savings while maintaining quality of care. 
    • “The mandatory model will now be expanded nationwide beginning Jan. 1, 2028.”
  • Beckers Hospital Review points out nine things to know about today’s rule.
  • Here’s a link to CMS’s Fact Sheet on today’s rule.
  • The American Hospital Association News adds.
    • “The Centers for Medicare & Medicaid Services today finalized a 2.3% payment update for long-term care hospitals for fiscal year 2027 relative to FY 2026. This includes a 3.2% market basket update, reduced by a 0.9 percentage point productivity adjustment. In addition, CMS finalized its decision to freeze the outlier threshold at $78,936, the same level as FY 2026. For the LTCH Quality Reporting Program, CMS finalized the removal of two measures related to COVID-19 vaccination and a shortened data reporting timeline.
    • :In a statement shared with media today, Joanna Hiatt Kim, AHA’s vice president of payment policy, said, “[W]e remain concerned about continued inadequacies in the LTCH payment system that have contributed to declining patient volumes and the closure of facilities across the country, threatening access to care for medically complex patients. Although the AHA appreciates that CMS did not further raise the outlier threshold in this final rule, broader reforms are needed to support the LTCH field. We remain committed to working with the Administration and Congress to advance the AHA’s LTCH reform principles and promote a more sustainable payment framework that preserves patient access to LTCH services.”
  • The American Hospital Association News further informs us,
    • “The Department of Health and Human Services today issued a notice announcing a revised 340B Rebate Model Pilot Program, allowing qualifying drug manufacturers to use rebates rather than upfront discounts to effectuate the 340B ceiling price for certain drugs purchased by 340B covered entities. 
    • “In a statement shared with the media, AHA President and CEO Rick Pollack said, “The AHA is deeply concerned that HHS has chosen to move forward with a 340B Rebate Model Program despite the overwhelming evidence that it will impose massive new administrative and financial burdens on hospitals that serve America’s most vulnerable patients. The agency’s analysis dramatically understates the true costs of this program, ignoring the hundreds of millions of dollars in compliance expenses, cash-flow disruptions, and operational burdens that will inevitably divert scarce resources away from patient care. At a time when many hospitals are already under severe financial strain, this policy will force hospitals in rural and other underserved communities to spend more on bureaucracy and less on the services and care that patients depend on every day. As we continue to review today’s notice, the AHA is considering all available options to prevent this flawed program from going into effect.” 
    • “HHS’ Health Resources and Services Administration said the pilot is designed to test a rebate-based approach for a set of drugs while gathering information on program integrity, operational impacts and the interaction between the 340B program and Medicare’s Drug Price Negotiation Program. The pilot is limited to drugs included on the Centers for Medicare & Medicaid Services Medicare Drug Price Negotiation Selected Drug Lists for initial price applicability years 2026 and 2027. 
    • “Under the notice, manufacturers that wish to participate must submit plans to HRSA by Aug. 24. HRSA said it will make approval decisions by Sept. 24, and approved rebate models will take effect Jan. 1, 2027. Participating manufacturers must commit to the pilot for at least one year. “
  • Per an HHS news release,
    • ‘The Substance Abuse and Mental Health Services Administration (SAMHSA), a division within the U.S. Department of Health and Human Services (HHS), announced today that it has awarded $73.2 million in grants to strengthen children’s mental health services, suicide prevention programs, and to expand assisted outpatient treatment (AOT) to those with serious mental illness.”
  • OPM posted in the Federal Register today direct final rules (previously known as interim final rules with opportunity for public comment)
    • FLSA Claims and Compliance
      • to update the provisions concerning Fair Labor Standards Act (FLSA) claims submissions to OPM.
      • DATES: This direct final rule (DFR) is effective September 29, 2026 unless significant adverse comment is submitted by August 31, 2026. If OPM receives significant adverse comment, OPM will publish a timely withdrawal in the Federal Register.
  • and
    • Procedures for settling claims
      • to update the provisions concerning administrative claims submissions to OPM.
      • DATES: This direct final rule (DFR) is effective September 29, 2026 unless significant adverse comment is submitted by August 31, 2026. If OPM receives significant adverse comment, OPM will publish a timely withdrawal in the Federal Register.
  • Per an OPM news release,
    • “The US Office of Personnel Management (OPM) today issued governmentwide guidance to departments and agencies on preparing Fiscal Year 2027 Annual Staffing Plans, advancing the Trump Administration’s efforts to modernize federal workforce planning, strengthen merit-based hiring, and ensure agencies are strategically positioned to deliver efficient, high-quality services to the American people.
    • “The guidance implements Executive Order 14356, Ensuring Continued Accountability in Federal Hiring, and provides agencies with a framework for conducting rigorous, bottom-up workforce planning that prioritizes mission-critical positions, modern technology talent, and early career hiring while improving governmentwide visibility into staffing needs.
    • “Annual Staffing Plans will require agencies to identify workforce needs based on mission requirements—not historical staffing levels—and reserve budget and positions for critical hiring priorities, including artificial intelligence, cybersecurity, software engineering, and other technology roles. The guidance also directs agencies to leverage governmentwide hiring initiatives such as US Tech Force and the Early Career Talent Network to improve hiring quality, reduce duplication, and accelerate recruitment across the federal government.”
  • Kevin Moss, writing in Federal News Network, explains “How a household with two federal employees can save on their FEHB premiums by enrolling self-only.”

From the Food and Drug Administration front,

  • Cure reports,
    • “The Food and Drug Administration (FDA) has approved Pluvicto (lutetium Lu 177 vipivotide tetraxetan) in combination with androgen receptor pathway inhibitor (ARPI) therapy for adults with PSMA-positive metastatic androgen pathway modulation-naïve or -sensitive prostate cancer, a disease previously known as metastatic hormone-sensitive prostate cancer.
    • “The July 31 approval expands the use of Pluvicto to patients whose prostate cancer has spread but has not yet become resistant to hormone therapy. The treatment is intended for patients whose tumors express prostate-specific membrane antigen (PSMA), a protein found on many prostate cancer cells.”
  • MedTech Dive relates,
    • “Surgical robotics company MMI has received the Food and Drug Administration’s approval to expand an early feasibility study of microsurgery for Alzheimer’s disease.
    • “The REMIND study is evaluating the safety and feasibility of using MMI’s Symani robotic system in microsurgery procedures to re-establish drainage pathways in the deep cervical lymph nodes of patients with neurodegenerative disease. Patients in the trial also have confirmed lymphatic abnormalities.
    • “The FDA gave MMI the go-ahead to expand the number of people who can enroll in the study to 15, from up to five in the initial group, the company said Thursday.”
  • The American Journal of Managed Care lets us know,
    • “Late last week] six peptides received narrow advisory support for potential 503A Bulks List inclusion, an atypical outcome given FDA staff recommendations against all seven under review. 
    • “Legal compounding remains prohibited absent FDA acceptance and completion of proposed and final rulemaking; none of the substances is FDA-approved. 
    • “FDA reviewers cited short, underpowered studies insufficient for safety/efficacy across proposed indications, including limited BPC-157 trial data. 
    • “Committee reconstitution drew conflict-of-interest scrutiny, with increased representation from clinicians and businesses involved in prescribing, producing, or promoting peptides. 
    • “Payers should expect persistent cash-pay utilization and unregulated online procurement, necessitating rigorous medication reconciliation and adverse-event monitoring given sparse human safety data.”

From the judicial front,

  • Per a Justice Department news release,
    • “New York ophthalmology practices Mark D. Fromer, P.C. doing business as Fromer Eye Centers and Floral Park Ophthalmology P.C. have agreed to pay a total of $2.3 million to resolve alleged violations of the False Claims Act arising from their billing for trans-cranial doppler ultrasounds (TCDs) through a kickback arrangement with a third-party testing company. The Estate of Mark Fromer, the former owner of Fromer Eye Centers, also joined in the settlement with the practice. Both practices have agreed to cooperate with the Justice Department’s ongoing investigations of other participants in the alleged scheme.” * * *
    • “The claims resolved by the settlements are allegations only and there has been no determination of liability.“

From the public health and medical / Rx research front,

  • The Centers for Disease Control and Prevention announced today,
    • “As of July 31, 2026, the amount of acute respiratory illness causing people to seek health care is very low.
    • “Considering multiple data sources, COVID-19 activity is low and stable nationally but is beginning to show early signs of an increase in the West and South.
    • “RSV activity is very low in most areas of the country. Emergency department visits and hospitalizations for RSV are low but remain highest among infants and children younger than 4 years old.
    • “Seasonal influenza activity is low.
    • “Parainfluenza (PIV) and respiratory adenovirus are elevated nationally. Whooping cough (pertussis) continues to circulate at lower levels compared to post-pandemic peaks.”
  • The University of Minnesota CIDRAP reports,
    • “The Centers for Disease Control and Prevention (CDC) confirmed 53 new US measles cases this week, bringing the total for the year to 2,371 cases.
    • “All but 16 of the cases were locally acquired in 45 US jurisdictions, with the rest tied to international travel, the CDC said in its weekly update. There have been 37 new measles outbreaks reported this year, with 94% of cases associated with outbreaks (defined as three or more cases).” * * *
    • “Among the current measles hotspots is Pennsylvania, which has reported 31 new cases over the past seven days and now has 167 cases for the year, according to the Pennsylvania Department of Health. Officials in neighboring Ohio yesterday confirmed four new cases in unvaccinated individuals in Ashtabula and Tuscarawas counties. It’s Ohio’s third measles outbreak this year.”
  • The American Journal of Managed Care gives us “FAQs: Cyclospora Recovery, Treatment, and Outbreak Prevention Strategies.”
    • “Epidemiologic and traceback evidence implicates shredded iceberg lettuce from Taylor Farms de Mexico as the exposure source, despite a disclosed false-positive border test not changing investigation conclusions. 
    • “Symptom onset typically occurs about one week post-exposure and includes profuse watery diarrhea, anorexia, nausea, bloating, weight loss, and fatigue, while some infections remain asymptomatic. 
    • “Higher-risk groups include immunocompromised patients, older adults, and those with limited care access, who may need longer antibiotic courses and closer monitoring for dehydration and prolonged illness. 
    • “TMP-SMX is the treatment of choice but requires individualized risk–benefit assessment given adverse reactions and a clinically meaningful, though comparatively lower, association with C difficile. 
    • “Public health control relies on clinician/lab case reporting, standardized exposure questionnaires, and FDA traceback; absent whole-genome sequencing for Cyclospora, marker-based genotyping supports source identification.”
  • The Wall Street Journal adds,
    • “In the verdant fields of California’s Salinas Valley, Larry Cox is watching his lettuce wilt.
    • “Cox and his two sons run Coastline Family Farms, which supplies leafy greens to some of the country’s biggest restaurant chains and grocery stores. But this week, in the region known as America’s Salad Bowl, around 300,000 pounds of his romaine hearts were chopped and plowed back into the soil.
    • “There is no evidence that his, or any of the nation’s homegrown lettuce, was infected with the parasite behind an illness outbreak that has sickened thousands of people so far. Even so, that hasn’t stopped Cox’s dependable restaurant and grocery customers from cutting back on orders.
    • “Many growers are destroying the crops they can’t find buyers for. Since lettuce has about a 30-day growing cycle, farmers that are plowing their crops back into the ground are weighing whether to replant or dial back. 
    • “It is incredibly demoralizing,” Cox said. “I would’ve been better off taking a vacation in the South of France than planting the crop.”
  • USA Today relates,
    • “As electric bikes and scooters become an increasingly common way for young people to get around, injuries tied to the devices are climbing at an alarming rate.
    • “New research from Truveta, a health data and analytics firm supported by a coalition of 30 U.S. health systems, analyzed over 12,000 emergency room visits nationwide. The findings revealed that injury rates associated with e-bikes and e-scooters among children and adolescents surged 7.5-fold between January 2023 and May 2026, an increase compared to the rates seen in adults.
    • “ER visits related to e-bikes and e-scooters have increased by 671% for children and adolescents, said Karen Gilbert Farrar, PhD, lead researcher at Truveta. “Just to put that in context, that’s if one patient is was being seen in 2023, that’s now nearly eight patients in 2026.”
    • “The findings also highlight the severity of many crashes: more than one-third of injured patients suffered head or neck injuries. And nearly 7% of child and adolescent visits that were related to e-bike and e-scooter use involved traumatic brain injury, Farrar said.”
  • Health Day lets us know,
    • “E-cigarettes could be reshaping the future of cancer in the United States, by offering people a less-toxic option than smoking, a new study argues.
    • :Smokers are increasingly switching to vaping and other forms of nicotine use, researchers reported July 27 in the journal JNCI Cancer Spectrum.
    • :They’re also sticking with their vapes, rather than swapping back and forth with tobacco cigarettes, researchers found.
    • “Our results show that exclusive cigarette use is being replaced by exclusive use of other combustible products, mainly e-cigarettes, especially among young adults,” said lead researcher Kenneth Michael Cummings, in a news release.”
  • and
    • “Work stress could be eating away at the sleep of most middle-aged working folks, undermining their health, a new study says.
    • “Nearly 70% of a small group of people ages 50 to 66 experienced persistent sleepproblems, even though they had no history of sleep disorders, researchers reported July 28 in the journal Scientific Reports.
    • “Even more concerning, more than 9 out of 10 (92%) of the participants met the clinical threshold for a sleep disorder at least once during the yearlong study, researchers said.
    • “I was genuinely surprised by the sheer scale of sleep problems we uncovered in this otherwise undiagnosed group,” lead researcher Athanasios Tsanas said in a news release. He is a professor of digital health and data science at the University of Edinburgh in the U.K.”
  • BioPharma Dive tells us,
    • “A Novo Nordisk heart drug missed the main goal of a Phase 3 trial, failing to show it prevented heart attacks, strokes or cardiovascular death in people with hardened arteries or chronic kidney disease, the company said Friday.
    • “Called ziltivekimab, the drug is part of a sprawling clinical program involving three late-stage trials that have collectively enrolled more than 20,000 people. Two others, in people with heart failure or who’ve had an acute heart attack, are ongoing. Results are expected next year. They all aim to show lowering levels of an inflammatory protein called IL-6 can can reduce the risk of heart-related complications and death.
    • “Novo gained control of ziltivekimab through a 2020 acquisition of Corvidia Therapeutics, for which it paid $725 million up front and promised up to $2.1 billion in total payouts. Novo said it will take a “non-cash impairment charge” in the third quarter but will not need to change its operating profit forecasts.” 

From the U.S. healthcare business and artificial intelligence front,

  • Fierce Healthcare reports,
    • “Cigna executives offered investors a look at the progress the company has made in the rollout of its new Signature pharmacy benefits model, which moves away from traditional drug rebates.
    • “CEO Brian Evanko said during the company’s earnings call that the team is “making strong progress in the build-out” of the model. It will roll out to Cigna Healthcare’s fully insured plans in 2027, before a wider launch in 2028.
    • ‘In particular, the model is designed around the affordability of brand-name drug products, and the company projects that it could save members 30% per month on branded medications. Through Signature, tech platforms will surface the lowest price to the member at the pharmacy counter, even if that’s a cash-pay option or provided by a manufacturer’s direct-to-consumer programs.
    • “We see significant early interest from health plans and employers as we prepare for our broader market launch in 2028,” Evanko said. “At the same time, we’re adding value and winning business today, with 2027 representing one of our strongest selling seasons in recent years.”
  • and
    • “Alignment Healthcare delivered a strong second quarter, in what CEO John Kao said was supported by the deployment of its new artificial intelligence-powered stratification model.
    • “This advancement improved our ability to predict which members are going to be hospitalized,” Kao said. “Our model now accurately and dynamically predicts the 10% of members who will account for nearly 70% of hospital admissions over the next 30 days.” 
    • “Kao said the on the company’s Thursday earnings call it plans to “reinvest a portion” of savings to areas that produce “tangible, measurable returns,” including market expansions, branding and “deepening AI capabilities.
    • “Beyond its potential to unlock efficiencies in our cost structure, AI represents a meaningful opportunity to further enhance our care model and support providers,” Kao said. “Most importantly, our approach to AI is grounded in decades of clinical expertise and reinforces our commitment to high-quality care. This is further supported by a governance framework to ensure responsible use, human accountability, and equitable treatment of our members.” 
  • Healthcare Dive relates,
    • “Siemens Healthineers has struck a 10-year deal to support diagnostic imaging, cardiology and radiation oncology at Cleveland Clinic, the company said Thursday.
    • “Building on its 35-year relationship with the academic medical center, Siemens Healthineers will provide diagnostic imaging and therapeutic technologies, including magnetic resonance imaging, computed tomography, radiation oncology, interventional radiology and X-ray.
    • “Siemens Healthineers is expanding an existing team dedicated to Cleveland Clinic, adding on-site technicians and training personnel to its current group of more than 30 people.”
  • Beckers Hospital Review points out,
    • “A total of 438 urban hospitals closed across the U.S. between 2000 and June 2026, according to data shared with Becker’s from New Haven, Conn.-based Yale University’s Health Care Affordability Lab.
    • “Between 2001 and 2023, the period for which both openings and closures are fully tracked, urban hospitals posted a net gain of 11 nationally, with 396 openings and 385 closures. However, there were significant losses in individual states. New York lost a net 33 urban hospitals over that period, California lost 29 and Pennsylvania lost 24.
    • “The data covers general, short-term acute-care hospitals and excludes specialty facilities such as psychiatric, rehabilitation, children’s and VA hospitals. Urban and rural classifications follow the census-tract-level definition from the Health Resources & Services Administration’s Federal Office of Rural Health Policy.
    • “The tables [found in the article] show urban hospital net change by state from 2001 to 2023 and total urban closures by state from 2000 through June 2026. States with no urban hospital activity in the Yale dataset are not listed.
  • Fierce Pharma informs us,
    • “The small inflection point we noticed two weeks ago regarding Eli Lilly’s Foundayo does not appear to be a flash in the pan. Weekly total prescriptions for the small molecule reached 29,388, a new high for the oral GLP-1 receptor agonist after three weeks of consecutive growth, according to IQVIA data cited by Citi. 
    • “As IQVIA may be missing some scripts from telehealth channels, we will get a clearer picture of Foundayo’s launch progress when Lilly reports its second-quarter earnings on Wednesday, Aug. 5. Analysts at Jefferies have been modeling $71 million in U.S. sales for the quarter based on IQVIA data.
    • “Meanwhile, Novo Nordisk’s Wegovy pill remains far ahead in the oral GLP-1 race with total scripts also hitting a new record of about 171,700, according to Citi. The number represents 1.1% growth from its previous best recorded during the prior week.
    • “Coincidentally, the entire GLP-1 class also saw its total scripts grow 1.1% sequentially across diabetes and obesity uses. Lilly’s Zepbound regained some lost ground with total scripts up 1.9% week over week. That’s compared to Wegovy, which now makes up 40.6% of the obesity market after a 0.2% sequential decline in total scripts.” 
  • Per Fierce Healthcare,
    • “WellSpan Health inked an expanded multi-year partnership with artificial intelligence company Hippocratic AI, which expands AI-powered capacity across the network.
    • “Through the update, Hippocratic AI’s generative AI agent—Ana—will expand from handling inbound calls and primary care appointment scheduling to post-discharge follow-up and chronic disease check-ins.
    • “Initial workflows will focus on closing care gaps through outreach to patients with missed imaging appointments, executives say. Every new use of the AI agent will follow governance, safety and implementation structures in coordination with WellSpan teams.
    • “WellSpan Health CEO Roxanna Gapstur, Ph.D, said in a statement the future of the industry will “be shaped by the organizations that build the culture, governance and clinical capabilities” to utilize AI responsibly at scale.
    • “At WellSpan, we’ve been intentional about creating this foundation, so innovation advances safely, strengthens clinical excellence and earns trust,” Gapstur said. “Our expanded partnership with Hippocratic AI is an investment in the future of care — one that expands access, supports our care teams and creates a more personalized experience for every patient we serve.”

Thursday report

Simplicity is a virtue.

From Washington, DC,

  • The New York Times reports,
    • “The Senate health ​committee on Thursday advanced the nomination of Dr. Erica Schwartz, President Trump’s pick for director of the Centers for Disease Control and Prevention, for a full Senate vote.
    • “The committee’s Republican members and Senator Tim Kaine, Democrat of Virginia, all voted in favor of her candidacy, with the remaining Democrats opposed.” * * *
    • “The committee on Thursday also voted to ​advance ⁠the nomination of Sean Kaufman for assistant secretary for preparedness and response, a role that includes oversight of emergency measures during public health crises.”
  • The American Hospital Association News relates,
    • “The Centers for Medicare & Medicaid Services [(CMS)] July 30 released the fiscal year 2027 final rule for inpatient rehabilitation facilities. The rule will increase payments by 2.3% overall, which includes a 3.2% market basket update reduced by a 0.9 percentage point productivity adjustment. In addition, CMS updated the outlier threshold, which it says will increase overall payments by 0.4% in FY 2027.
    • “CMS also finalized two changes to the IRF coverage requirements. This includes a requirement that therapies be initiated within 36 hours of admission to the IRF and an initial interdisciplinary team meeting be held within four days of admission to the IRF. CMS did not finalize a third proposal that would have required the patient’s current functional status be documented on the preadmission screening. For the IRF Quality Reporting Program, CMS finalized a shortened timeframe for submitting program data.
    • “Changes are generally effective Oct. 1, 2026.”
  • Per a CMS fact sheet,
    • “On July 30, 2026, the Centers for Medicare & Medicaid Services (CMS) issued a final rule (CMS-1851-F) that would update Medicare hospice payments and the aggregate cap amount for fiscal year (FY) 2027 under existing statutory and regulatory requirements.” * * *
    • “For FY 2027, CMS updated the hospice payment rate by 2.3% (an estimated increase of $755 million in payments from FY 2026). This figure results from the finalized 3.2% inpatient hospital market basket percentage increase reduced, as required by law, by a finalized 0.9 percentage point productivity adjustment. The finalized FY 2027 rates for hospices that do not submit required quality data information include the finalized FY 2027 hospice payment update percentage of 2.3% minus four percentage points as required by law, which would result in a 1.7% reduction over the previous year’s payment rate. These finalized payment rates reflect the most accurate, updated data available on the cost of goods, services, and labor.
    • “Hospice payments are subject to a statutory aggregate cap limiting the overall payments made to a hospice annually. The finalized hospice cap amount for FY 2027 is $36,174.75 (FY 2026 cap amount of $35,361.44 increased by the FY 2027 hospice payment update percentage of 2.3%).” 
  • Beckers Hospital Review shares 11 things to know about these new CMS rules.
  • U.S. Office of Personnel Management, writing in Substack, added another post to this Secrets of OPM blog titled “Plans are good, Execution is better.”
    • “Last year, I wrote about how the federal government needed to adopt a more disciplined approach to workforce planning. Every successful organization develops a thoughtful plan for the talent it needs to accomplish its mission. The federal government should be no different.
    • “Today, we’re taking the next step.
    • “The guidance OPM has issued to agencies on Annual Staffing Plans is about much more than compliance with a new planning process. It is about changing how the federal government thinks about hiring. Rather than defaulting to last year’s staffing levels or treating hiring as a series of isolated decisions, agencies will build comprehensive staffing strategies that begin with a simple question: “What workforce do we need to best serve the American people?””
  • Per an OPM news release,
    • “The US Office of Personnel Management (OPM) today issued an interim final rule removing references to the Uniform Guidelines on Employee Selection Procedures (UGESP) from OPM’s federal personnel regulations, bringing the agency’s regulations into conformity with the Department of Justice Office of Legal Counsel’s June 9, 2026, legal opinion concluding the Uniform Guidelines are unlawful and unconstitutional by encouraging race-conscious decision-making via “disparate impact” liability.
    • “The rule removes UGESP regulatory provisions while preserving longstanding federal requirements that employment practices be job-related, professionally developed, based on sound job analysis, and administered without prohibited discrimination.” * * *
    • “Federal hiring should be based on merit, qualifications, and the ability to perform the job,” OPM Director Scott Kupor said. “This rule ensures OPM’s regulations reflect legal guidance while preserving the rigorous, job-related standards that help agencies recruit and hire the most qualified workforce in service to the American people.”
    • “The interim final rule is effective upon publication in the Federal Register. OPM will accept public comments for 60 days before determining whether to revise, withdraw, or finalize the rule.”
  • NextGov adds,
    • “The General Services Administration on Wednesday celebrated the graduation of 71 U.S. Digital Corps fellows, marking the largest graduating class since the program’s inception. Those graduates updated the FedRAMP website, helped streamline Agriculture Department environmental reviews and supported other technology projects during their stints in the federal government.
    • “This government has starved for talent, for people who understand how to do all the things that we want to do to deliver better,” OPM Director Scott Kupor said during graduation remarks.
    • “Some of the graduates of the two-year fellowship program are continuing civil service while others are headed to the private sector.”
  • Tammy Flanagan, writing in Govexec, explains “Why time, not timing, is the biggest retirement advantage for federal employees.”
    • “A look at decades of market shifts and TSP data shows the biggest driver of retirement wealth isn’t picking the right stock. It’s starting early, contributing consistently and letting compounding do its work.”

From the Food and Drug Administration front,

  • The Wall Street Journal reports,
    • “A Food and Drug Administration advisory panel voted 10-3 Thursday for Replimune Group’s experimental melanoma therapy, after a contentious meeting in which experts raised doubts about whether the company’s data and trial design could be trusted to show the skin-cancer drug works.
    • “Thursday’s recommendation is the latest turn in a regulatory saga that has stretched nearly two years.” * * * 
    • “Thursday’s meeting came a day after another closely watched advisory session, in which FDA advisers voted against Capricor Therapeutics’ cell therapy for Duchenne muscular dystrophy—a rejection that, like Replimune’s, followed a prior FDA denial.” 
  • MedTech Dive relates,
    • “Artificial intelligence is here to stay at the FDA, but its integration and evolution may not be a straight line now that one of its biggest proponents, former commissioner Marty Makary, has stepped down.” * * *
    • “Acting commissioner Kyle Diamantas said AI remains a top priority for the FDA. Still, recent high-level departures, including Makary, Jeremy Walsh, chief artificial intelligence officer, and Sridhar Mantha, acting chief information officer, have raised questions about the future of AI implementation.
    • “It’s unclear now what the leadership and governance structure are around FDA-wide efforts,” said Tala Fakhouri, chief artificial intelligence and regulatory strategy officer at Parexel, and a former FDA AI policy official.”

No Surprises Act news,

  • Beckers Payer Issues reports,
    • “Another health insurance CEO is taking aim at the No Surprises Act’s arbitration system.
    • “We do support the overall strategic intent of consumer protection from surprise billing. However, we’re seeing some clear abuses of the IDR vehicle in practice,” Cigna Group President and CEO Brian Evanko said on the company’s second-quarter earnings call July 30, adding that the system is seeing “unsustainable volume levels, much of which is concentrated amongst a small number of providers.” 
    • “On July 22, a Wall Street Journal analysis of CMS data put 2025 arbitration payouts at nearly $15 billion, up from $4.08 billion in 2024, with arbitration firms collecting about $1.3 billion in fees. On the earnings call, Mr. Evanko referenced last year’s payout figure but said the impact “has been manageable” within Cigna’s insurance business.”

From the judicial front,

  • Fierce Healthcare reports,
    • “A federal judge has rejected a request from 26 states for a preliminary injunction in the Trump administration’s rollout of work requirements in Medicaid.
    • “The Centers for Medicare & Medicaid Services finalized implementation guidelines for states in June, with the eligibility requirements set to take effect on Jan. 1. States have until Aug. 31 to communicate with enrollees about the impacts of the changes.
    • “In an order issued Wednesday, Massachusetts District Judge Richard Stearns wrote that the states did not prove that establishing the systems necessary to make the eligibility determinations would cause them irreparable harm, as CMS said it would reimburse them for 90% of the costs for setting up those mechanisms.
    • :However, he said that the order does not reflect the court’s opinion on the merits of the broader litigation, which challenge provisions of the rule under the Administrative Procedure Act. Making a determination on that, as it questions whether officials hewed closely to Congressional intent in regulating the rollout of the requirements, requires a more complete picture.”
  • Healthcare Dive relates,
    • “The Federal Trade Commission is suing Hims & Hers [in a California federal court], alleging the telehealth company illegally shared sensitive health information with advertisers and misled customers about its billing practices. 
    • “The agency says California-based Hims & Hers made it difficult for users to cancel subscriptions, charged patients for medications before they consulted with a provider and shared their health data with third-party advertising platforms like Meta and Snap. 
    • “Hims & Hers called the FTC’s claims “baseless,” saying in a Wednesday statement that the agency “contorts the law to try to manufacture claims.”
  • Per a Justice Department news release,
    • “Access DX Laboratory, located in Houston, Texas, its former CEO Michael Stewart, and Florida businessman Harold Shatz, have each entered into settlements and will pay a combined total of $36.4 million to the United States to resolve allegations that they violated the False Claims Act (FCA) by paying kickbacks and billing Medicare and Medicaid for medically unnecessary genetic testing.
    • “The United States alleged that, from January 2018 through January 2020, Access DX, Stewart, and Shatz paid kickbacks to marketers in return for referrals of patients for genetic testing, unbundled billing codes for genetic testing, paid telemedicine providers for false and fraudulent doctors’ orders, and submitted and caused the submission of false claims for genetic testing.” * * *
    • “Except to the extent admitted by Stewart and Shatz in their plea agreements, the claims resolved by the settlement are allegations only and there has been no determination of liability.” 

From the public health and medical/Rx research front,

  • The AP reports,
    • “A first-of-its-kind U.S. study suggests invasive mold infections may be an underappreciated — and potentially deadly — threat.
    • “The researchers detected about 450 cases in Atlanta-area hospitals over five years. About a third of the patients died in the hospital.
    • “The findings, published this week by the U.S. Centers for Disease Control and Prevention, come from an attempt to better gauge how common these kinds of illnesses are. The government does not require doctors to report the illnesses.
    • “It’s kind of the first time we’ve had an estimate like this,” said the CDC’s Dr. Jeremy Gold, the study’s senior author.”
  • Per a Department of Health and Human Services news release,
    • “U.S. Department of Health and Human Services (HHS) Secretary Robert F. Kennedy Jr. today announced the launch of The Real Food Show, a new cooking series designed to help Americans prepare healthy, affordable meals using real, everyday ingredients.
    • “More than a cooking show, The Real Food Show is a national initiative that empowers families to make healthy eating practical, approachable, and affordable. Each episode combines simple recipes with the science behind them, translating the new Dietary Guidelines for Americans into meals that Americans can prepare in their own kitchens.”
    • “Visit The Real Food Show webpage for more details.”
  • Radiology Business tells us,
    • “Adult CT radiation doses have decreased substantially over the last decade in the U.S., according to new research published Tuesday. 
    • “About 10 years have passed since data underlying the most recent national benchmarks for radiation dosing were collected. This underscores the need for updated reference values, as these guidelines may not reflect new advances in scanner technology, reconstruction methods and protocol changes, experts write in RSNA’s Radiology. 
    • “Researchers recently aimed to address this information gap, analyzing adult CT acquisitions performed across U.S. facilities in 2025. They discovered clear progress, with CT diagnostic reference levels declining an average of nearly 22% since 2014.
    • “The magnitude and consistency of these reductions across examination categories suggest that such advances have translated into measurable, population-level dose reductions in routine clinical imaging in the United States,” Kalpana M. Kanal, PhD, with the Department of Radiology at the University of Washington, Seattle, and colleagues wrote July 28.”
  • The July 30 issue of NIH Research Matters covers the following topics:
    • Tracking diets via wastewater
      • “Measuring DNA from food in wastewater could provide snapshots of dietary patterns.
      • “Monitoring these patterns could be a powerful tool for informing nutrition policy.” 
    • Lung tumor signals may tamp down food intake
      • “Researchers found that a high-fat diet in mice amplifies nerve signals between certain lung cancers and the brain, leading to reduced appetite and weight loss.
      • “If confirmed in further studies, the results could inform strategies to improve nutrition and survival in certain patients with cancer.”
    • Bacteria share proteins to survive antibiotics
      • “Researchers found that some bacteria share proteins that help others survive antibiotics.
      • “The study suggests a novel approach that may help treat persistent bacterial infections.”
  • MedPage Today informs us,
    • “Consuming less sugar before birth and during the first 1 to 2 years of life was tied to a lower risk of dementia decades later, U.K. Biobank data showed.
    • “The study used the abrupt end of World War II rationing as a natural experiment to test whether early-life sugar exposure was associated with late-life dementia.
    • “Previous research has linked early-life sugar rationing to less risk of diabetes and hypertension in adults and better cardiovascular outcomes.”
  • Health Day adds,
    • “Want to give your tot a brain boost when it comes to learning language?
    • “Maintain eye contact as much as possible when you’re talking to them, a new study suggests.
    • “Eye contact helps a baby decide what is important, acting as a switch that triggers synchronization of their brain waves with those of the speaker, researchers reported recently in the journal Nature Communications.”
  • Genetic Engineering and Biotechnology News lets us know,
    • “An international team of researchers has identified multiple new genetic risk factors associated with fibromyalgia, a syndrome characterized by widespread pain and tenderness, fatigue, and problems with sleep, memory and mood.
    • :The team analyzed genetic data from more than 2.5 million adults, of which 55,000 were fibromyalgia patients. They identified DNA sequence variants in 26 regions of the genome that affect the risk of developing fibromyalgia. Many of the genes implicated in these regions are involved in brain and nerve function.
    • “The results provide the strongest evidence yet that fibromyalgia is primarily a nervous system disorder rather than an autoimmune disease, as has long been debated. “This work changes how we think about fibromyalgia at a fundamental level,” said Michael Wainberg, PhD, an investigator at the Lunenfeld-Tanenbaum Research Institute, part of Sinai Health, and the University of Toronto. “For decades, patients have been dismissed or told their pain is simply psychological. Our findings confirm the condition has a clear biological basis.”
    • “Weinberg is co-senior author of the researchers’ published paper in Nature Medicine, titled “The genetic architecture of fibromyalgia across 2.5 million individuals,” in which they concluded, “This study provides robust genetic evidence defining fibromyalgia as a central nervous system disorder, thereby establishing a biological framework for its complex pathophysiology and extensive clinical comorbidities.”
  • Fierce Pharma points out,
    • “Investors anxiously waiting for Bristol Myers Squibb’s key Alzheimer’s disease psychosis readout for Cabenfy will have to wait a little longer. The company has once again delayed the expected phase 3 data from its Adept trial program, even as it delivered a group-wide quarterly beat that’s driving a significant forecast raise. 
    • “Rather than readouts in 2026, BMS now expects data from the three Adept trials to arrive beginning in early 2027 and be “spread across the year,” CEO Chris Boerner, Ph.D., said on the company’s earnings call Thursday.
    • “The delay was attributed to slower enrollment in the Adept-2 and Adept-4 studies and slower relapse event accrual in Adept-1, Boerner explained. Adept-1 could undergo an interim analysis as early as later this year, and BMS also plans to share safety and efficacy data this year from the trial’s open-label lead-in portion, he added.”

From the U.S. healthcare business front,

  • Healthcare Dive reports,
    • “Cigna’s employer-sponsored plans reaped higher profits than expected in the second quarter after hiking premiums, spurring the company to raise its earnings outlook for 2026.
    • “Cigna results released Thursday are a relief for investors worried about broader pressures in the employer-sponsored market, which covers the majority of U.S. adults and has been a buoy for insurers slammed with higher spending in government programs in recent years.” * * *
    • “Cigna’s health services division Evernorth — which includes Express Scripts, one of the largest pharmacy benefit managers in the U.S. — brought in $1.7 billion in operating income in the quarter, down 2% year over year despite revenue growth.”
  • Modern Healthcare adds,
    • “The weight-loss drug boom is beginning to show signs of a slowdown as employers and insurers pull back on coverage, signaling the market could be entering a more restrained phase after years of breakneck expansion.
    • “In the past few months, growth in prescriptions for GLP-1 drugs for weight loss like Novo Nordisk A/S’ Wegovy and Eli Lilly & Co.’s Zepbound have moderated, according to Cigna Group Chief Executive Officer Brian Evanko. The insurer’s unit that manages drug benefits has noted coverage declines and slower utilization growth compared to prior periods, executives said during an earnings call with Wall Street analysts Thursday.”
  • Optum Rx, writing in LinkedIn, discusses “how plan sponsors can stay ahead of the latest drug cost trends.”
  • Fierce Healthcare relates,
    • “Teladoc Health trimmed its 2026 revenue outlook as its virtual behavioral health unit, BetterHelp, faces revenue pressure with consumer demand for insurance-covered services outpacing clinical capacity.
    • “Teladoc shares fell more than 27% on Thursday following the company’s release of its second-quarter financial performance report on Wednesday.
    • “The company is shifting from subscription to visit-based revenue models, while also transitioning its virtual mental health business to accept insurance, moving from a cash-pay model to an in-network, insurance-covered model. The company is making “considerable progress” in building the insurance offering, including establishing a baseline national footprint a year after launching its first state, Teladoc Health CEO Chuck Divita told analysts and investors on a call Wednesday. 
    • “We have contracted for over $150 million in-network lives and credentialed more than 8,000 mental health professionals for the network at this point,” he said.”
  • and
    • “Nearly three-quarters of patients with gambling disorder achieved clinically meaningful symptom improvement through Birches Health, a new study finds.
    • “The peer-reviewed outcomes study was recently published in the Journal of Medical Internet Research. It was a retrospective analysis of 1,305 adults treated by Birches between mid-2024 and mid-2026. 
    • “Birches, a virtual provider for digital addictions, says the study is the largest real-world dataset on virtual gambling disorder treatment in the U.S.” ‘
  • Beckers Hospital Review tells us,
    • “Forbes rated the country’s hospitals state by state for 2026, with 259 earning the top mark of five stars.
    • “The Forbes Top Hospitals by State list, published July 14, draws on the national Forbes Top Hospitals 2026 ratings, which score general acute-care hospitals on measures pulled from the CMS Provider Data Catalog across four areas: patient outcomes (weighted at 55%), hospital best practices (20%), value (15%) and patient experience (10%). Each hospital lands on a single Forbes Overall Hospital Quality Rating of one to five stars.
    • “The article includes] the top of that scale: every hospital awarded five stars for overall quality, grouped by state. The five-star tier spans 42 states, ranging from a single hospital in states such as Alabama, Delaware and Wyoming to 19 in Wisconsin. Eight states — Alaska, Connecticut, Hawaii, Mississippi, Nevada, New Hampshire, Rhode Island and Vermont — along with the District of Columbia had no hospital reach five stars.”
  • Radiolology Business informs us,
    • “A new analysis from Definitive Healthcare pinpoints [and the article lists] the 10 largest imaging center corporations in the U.S., based on location count. 
    • “RadNet tops the list with approximately 383 outposts at the time of the analysis, followed by the US Oncology Network (141), a chain of independent cancer docs backed by McKesson. Definitive Healthcare, a publicly traded commercial-intelligence firm, based the findings off data from its ImagingView product, which includes info from more than 22,000 centers. 
    • “As demand for outpatient imaging continues to rise, larger imaging companies are expanding through acquisitions, new site development, and care models focused on improving access and convenience for patients,” Definitive Healthcare said in an update posted July 23. “Several factors are contributing to this growth, including advances in imaging technology, increased demand for preventive diagnostic screenings, and an aging U.S. population.”
  • Fierce Healthcare notes,
    • “Health tech company Stellarus announced Thursday the launch of an artificial intelligence-driven copilot geared towards helping health plan customer service representatives.
    • ‘The solution—dubbed Customer Service Representative (CSR) Chat—provides representatives with real-time guidance and contextual support during live interactions, surfacing relevant information, policy and recommended responses directly in workflows. 
    • ‘Stellarus president and CEO Vanessa Colella told Fierce Healthcare in an interview that “unsustainable healthcare costs” have been dominating conversations about the American healthcare system.
    • “It’s not about talking about someday it might not be working,” Colella said. “It is not working today. One of the places that it’s not working is cost. And another place it’s not working is member experience.”
    • “The solution hopes to address both core issues through administrative burden reduction and allowing representatives and members “to have the conversation that matters,” according to Colella.”

Midweek report

Simplicity is a virtue.

From Washington, DC

  • Per Centers for Medicare and Medicaid Services fact sheets
    • “On July 29, 2026, the Centers for Medicare & Medicaid Services (CMS) issued a final rule to update Medicare payment policies and rates for Inpatient Psychiatric Facilities (IPFs) under the IPF Prospective Payment System (PPS) (CMS-1847-F) for fiscal year (FY) 2027. CMS is publishing this final rule consistent with its statutory authority to update Medicare payment policies for IPFs annually. 
    • “This fact sheet discusses the provisions of the final rule, including annual updates to the prospective payment rates, the outlier threshold, the wage index, and associated impact analysis. In addition, the rule finalizes a policy effective for FY 2028 (October 1, 2027) to limit outlier payments at the facility level to no more than 20% of an IPF’s total IPF PPS payments in a year, for IPFs with at least 50 stays per year. For the IPF Quality Reporting Program, CMS is removing two measures from the program, as well as implementing a standardized IPF patient assessment instrument.
    • “For FY 2027, CMS is updating the IPF PPS payment rates by 2.3%, based on the 2021-based IPF market basket increase of 3.2% less a 0.9 percentage point productivity adjustment. Additionally, CMS is updating the outlier threshold so that estimated outlier payments remain at 2% of total IPF PPS payments. Total estimated payments to IPFs would increase by 2.3%, or $60 million, in FY 2027, relative to IPF payments in FY 2026.”
  • and 
    • “On July 29, 2026, the Centers for Medicare & Medicaid Services (CMS) issued a final rule for updates to Medicare payment policies and rates for skilled nursing facilities under the Skilled Nursing Facility (SNF) Prospective Payment System (PPS) for fiscal year (FY) 2027. CMS is publishing this final rule consistent with the legal requirements to update Medicare payment policies for SNFs annually. This fact sheet discusses the final rule’s provisions.
    • “For FY 2027, CMS finalized updating SNF PPS rates by 2.4% based on the final SNF market basket of 3.3%, reduced by a 0.9% productivity adjustment, for an estimated increase of $882.74 million in aggregate payments to SNFs.”
  • Beckers Hospital Review points out twelve things to know about these rules.
  • The American Hospital Association News relates,
    • “The Health and Human Services Secretary today announced that dozens of insurers, medical societies, healthcare providers and behavioral health experts have pledged to strengthen the nation’s behavioral health system by advancing best practices aimed at improving mental health and addiction treatment. The pledge commits participants to promoting timely access, improving quality measurement and accountability, supporting patient-centered recovery services and expanding whole-person treatment that addresses behavioral and physical health needs. HHS said the initiative aligns with the administration’s broader efforts to address addiction and mental illness and improve long-term patient outcomes.” 
  • Federal News Network clears up common misconceptions about federal retirement benefits.
    • “Misconception: Federal Employee Health Benefits (FEHB) go away at retirement, or become more expensive.
    • “Fact: Under certain eligibility requirements, federal employees can continue their FEHB coverage into retirement. These requirements include enrollment in FEHB for at least five consecutive years leading up to, and having coverage on, the retirement date. It is important to note that qualified spouses, dependent children, and children with disabilities can be covered without meeting this five-year rule. Employees become classified as annuitants upon retiring, at which point the government will continue to cover about 72% of the FEHB premium.
    • In addition, retirees can also enroll in Medicare parts A and B, offering nearly comprehensive coverage, with Medicare as the primary payer and FEHB as secondary. To reduce costs, some retirees opt for a basic FEHB plan.”
    • “Misconception: Spouses will automatically continue to be covered by FEHB into retirement
    • “Fact: This is the biggest caveat about survivor’s benefits: If survivors were on the federal retiree’s health insurance plan, that health insurance will cease if there is no survivor’s benefit. Any amount of survivor’s benefit will continue the health insurance plan, so prospective retirees and their spouses should speak with a federal retirement consultant, and consider the holistic picture of their assets, the spouse’s income, their needs and budget, life insurance, and whether they have any additional financial obligations, like debt or a child in college.”
    • “Misconception: Survivor’s benefits are automatic and free
    • “Fact: Federal employees will need to make some decisions about survivor’s benefits on their retirement application. The pension is the main place where retirees need to consider their options along with their potential beneficiaries — these will primarily be spouses, except in a few special circumstances. Each of these options comes with a cost, in the form of a monthly percentage deducted from the overall pension. The options and percentages vary between the Federal Employees Retirement System and the Civil Service Retirement System.”
  • Beckers Hospital Review tells us,
    • “Federal policy changes could reshape pharmacy reimbursement, drug pricing and hospital operations in 2027, according to a new Vizient outlook. The report, published July 27, highlights four pharmacy developments health systems should monitor as they plan for the year ahead.
    • “The four policy developments:
      • “340B outpatient drug reimbursement: CMS has proposed reducing reimbursement for 340B-acquired drugs from average sales price plus 6% to ASP-33.4%. 
      • “340B remedy offset: CMS has proposed increasing the offset from -0.5% to -3%, a change the agency estimates would reduce payments by $2.3 billion in 2027.
      • “Section 232 tariffs: New pharmaceutical tariffs and ongoing investigations into medical devices could affect supply chains and costs.
      • “Medicare Drug Price Negotiation Program: CMS has issued draft guidance for implementing negotiated prices in 2028, including drugs covered under Medicare Parts B and D.

From the Food and Drug Administration front,

  • Per a FDA news release,
    • “The U.S. Food and Drug Administration today licensed Ezplaz Freeze Dried Plasma (FDP), making it the first freeze-dried plasma product licensed for use in the United States. Ezplaz is intended for transfusion in adult patients who need plasma and for whom other plasma products are not available.
    • “Patients experiencing life-threatening bleeding in combat zones, disasters, rural settings, or other austere environments may now have faster access to plasma when conventional frozen plasma is unavailable,” said Karim Mikhail, B. Pharm., M.S., Acting Director of the Center for Biologics Evaluation and Research (CBER). “This milestone action addresses an important unmet medical need — particularly for our military personnel and others who may be far from traditional hospital infrastructure.”
    • “Ezplaz is a freeze-dried (lyophilized) plasma product derived from a single unit of fresh frozen plasma collected from FDA-licensed blood establishments. It is available in Group AB and Group A with low-titer anti-B blood types, chosen to mitigate risk of giving to patients in emergencies before their blood type is determined.”
  • Contemporary OB/GYN relates,
    • “On July 29, 2026, the FDA approved norelgestromin and ethinyl estradiol transdermal system (Gwyn Lo; Viatris Inc.) as a once-weekly combined hormonal contraceptive (CHC) patch with a low dose of estrogen for women of childbearing potential with a body mass index (BMI) below 30 kg/m², the company announced in a news release.1
    • “The approval was granted under the FDA’s 505(b)(2) regulatory pathway and was supported by results from the phase 3 Luminous Study (NCT05139121).2 Norelgestromin and ethinyl estradiol delivers norelgestromin 220 mcg/day and ethinyl estradiol 20 mcg/day over each 7-day wear interval. The patch, which is reversible and non-invasive, is applied once weekly for 3 consecutive weeks, followed by 1 patch-free week.” * * *
    • “Viatris expects norelgestromin and ethinyl estradiol to be commercially available later in 2026.”
  • and
    • “Natural Cycles has received its sixth FDA clearance, this time for an updated version of the algorithm underlying its FDA-cleared birth control app. The company described the update as combining statistical modeling with machine learning trained on real-world fertility data to generate more individualized fertility predictions for users, according to a news release published July 27, 2026.”
  • Cancer Network tells us,
    • “The FDA has granted fast track designation to ISM6331, an AI-designed pan-TEAD inhibitor, for the treatment of adult patients with unresectable malignant pleural mesothelioma whose disease has progressed on or after prior anti–PD-1 antibody therapy, with or without anti–CTLA-4 antibody therapy, and platinum-based chemotherapy, according to a news release from the developer, Insilico Medicine.”
  • Cardiovascular Business points out,
    • “The U.S. Food and Drug Administration (FDA) has granted de novo market clearance for the first and only biomarker technology to directly see and quantity coronary inflammation from routine coronary CT angiography (CCTA). 
    • “The CaRi-Heart technology from Caristo Diagnostics has been heralded by numerous cardiac CT experts as a potential paradigm shift in cardiology. It is the first technology that can visualize and clearly quantify coronary inflammation using fat attenuation index (FAI) scores. This helps care teams estimate the residual risk of heart attacks in patients who otherwise appear to be managed well on optimal medical therapy.
    • “We’ve spent decades building the scientific case that coronary inflammation is an important contributor to the development and progression of coronary plaque,” Ron Blankstein, MD, director of cardiac CT at Brigham and Women’s and a former Society of Cardiovascular Computed Tomography (SCCT) president, said in a statement. “And now for the first time, clinicians can specifically measure coronary inflammation, obtaining a more complete picture of cardiovascular risk compared to standard CCTA, or calcium scoring alone. It is exciting to see Caristo’s long-awaited, pioneering solution available in the U.S.”
  • STAT News informs us.
    • “A group of outside experts convened Wednesday by the Food and Drug Administration concluded clinical data for a treatment for Duchenne muscular dystrophy from Capricor Therapeutics did not provide “substantial evidence” of efficacy.  
    • “The vote was 9-3, sending to the FDA a recommendation that the Capricor treatment, called deramiocel, should not be approved. 
    • “The FDA is not required to adhere to the expert panel’s stance, but it typically does. The agency review is still underway with a decision expected by Aug. 22. 
    • “The negative vote came at the end of an all-day meeting during which disputed results from a Phase 3 clinical trial were discussed and debated. Capricor’s presentation highlighted an analysis showing deramiocel preserved upper-arm function and staved off the heart failure most patients with Duchenne eventually experience.
    • “The FDA countered with a critique of the data that reached opposite conclusions — deramiocel was unable to separate from placebo at all. The agency also spent a good deal of time during Wednesday’s meeting calling out Capricor, saying it made major changes to the study’s statistical analysis plan that degraded the robustness of the data and made even seemingly positive outcomes hard to interpret.” 
  • Beckers Hospital Review notes,
    • “The FDA has published 17 revised draft product-specific guidances for peptide products, updating its recommendations for the development and assessment of certain generic peptide drugs.” * * *
    • “The FDA said the updates provide recommendations in five areas: submission of recombinantly, synthetically or semi-synthetically produced peptides as abbreviated new drug applications, innate immune response testing, impurity thresholds, higher order structure assessment and biological activity assessment.
    • “The FDA also said it is withdrawing its May 2021 guidance, ANDAs for Certain Highly Purified Synthetic Peptide Drug Products That Refer to Listed Drugs of rDNA Origin, because it no longer reflects the agency’s current scientific thinking. The Center for Drug Evaluation and Research plans to revise that guidance this year.”

From the public health and medical / Rx research front

  • The Washington Post reports,
    • “About 12,000 pounds of smoked bacon imported from Canada were recalled because of lack of proper reinspection before entering the country, the Agriculture Department’s Food Safety and Inspection Service said.
    • “The bacon from Maple Leaf Foods was shipped to grocery distributors and retailers in Idaho, Oregon and Washington state. FSIS inspects imported products for packaging, documentation, condition and contamination.” * * *
    • “There are currently no confirmed cases of illness or injuries due to the products, FSIS said.”
  • The American Hospital Association News tells us,
    • “The Centers for Disease Control and Prevention yesterday reported 18,207 confirmed or suspected cases of cyclosporiasis across the U.S. from the current outbreak. The agency said it is investigating multiple case clusters, including an outbreak impacting nine states that is linked to iceberg lettuce. A July 17 Food and Drug Administration notice said that Taylor Farms recalled iceberg lettuce sourced from central Mexico that was distributed to 27 states, due to the potential of being contaminated with cyclospora.” 
  • The New York Times lets us know about “Nine Things Experts Wish You’d Do in Midlife to Increase Longevity.”
    • “How you treat your body and brain in your midlife years, loosely defined as 40 to 60, can hugely influence how you age in the decades to come.
    • “The seeds for many age-related diseases, including cardiovascular disease, diabetes, cancer and dementia, are sown in middle age, so it’s important to start thinking about prevention early. And it takes a lifetime of healthy habits, not just a few weeks, to move the needle on your longevity.
    • “Midlife is the ideal time to make changes, not only to benefit you in the present, but also in the future,” said Margie Lachman, a psychology professor at Brandeis University and the author of “Primetime: A New Vision for Midlife.”
    • “After all, she added, “What happens in midlife doesn’t stay in midlife.”
    • “We spoke with experts about some small habits that can make a big difference.”
  • Health Day tells us,
    • “Childhood obesity can be effectively treated through a family-based program provided through their local pediatrician, a new clinical trial says.
    • “About 42% of kids in the program lost enough weight to improve their heart health and lower their diabetes risk within a year and a half, researchers reported July 27 in JAMA Pediatrics.
    • “The program teaches families how to establish healthy eating and exercise habits, including positive reinforcement and supportive routines, researchers said.
    • “Our results show that an established, effective obesity treatment for children and adolescents can be successfully delivered in their pediatrician’s office,” lead researcher Amanda Staiano said in a news release. She is director of the Pediatric Obesity and Health Behavior Laboratory at Pennington Biomedical Research Center at Louisiana State University.”
  • Drug Topics informs us,
    • “Alcohol use, binge drinking, and heavy drinking have all increased significantly among pregnant women in the US from 2011 to 2024, according to a JAMA study. Likewise, with no end in sight for the trends in their findings, study authors consider them “concerning,” highlighting the need to address the growing trends among expecting mothers and their alcohol consumption.
    • “It is well established that alcohol is a teratogen, and numerous existing guidelines advise women to abstain from alcohol during pregnancy and while breastfeeding,” wrote the authors of a study in Drug and Alcohol Review. “However, many women consume alcohol in pregnancy even after learning they are pregnant. Worldwide, approximately 10% of women in the general population consume alcohol in pregnancy, although the European region has the highest rate of consumption (25%).
    • “The JAMA analysis revealed that from 2011 to 2024, the relative increase in current alcohol use among pregnant individuals reached 59%, and binge drinking rose by 77% and heavy drinking surged by a startling 166%. These absolute increases, 5.4%, 2%, and 1.2%, respectively, represent a significant shift in behavior that researchers indicate has no clear sign of reversal.”
  • Genetic Engineering and BioTechnology New lets us know,
    • “Engineers and neuroscientists at the University of California (UC) San Diego have developed a soft, wearable fingertip patch that continuously tracks a Parkinson’s disease (PD) patient’s levodopa medication levels by measuring chemicals in their sweat, with no batteries required. Tests in healthy volunteers and in Parkinson’s disease patients showed that measurements generated using the device were comparable to those obtained by standard laboratory blood tests.
    • “The wearable device offers a way to continuously track real-time concentrations of levodopa in the body and could enable doctors to precisely customize daily medication schedules for patients at home.
    • “The research was led by Tamoghna Saha, PhD, a postdoctoral researcher in the lab of Joseph Wang, DSc, professor in the Aiiso Yufeng Li Family Department of Chemical and Nano Engineering at the UC San Diego Jacobs School of Engineering. Saha is co-first author of the team’s published paper in PNAS titled “A wearable patch for continuous levodopa monitoring in sweat: Towards exertion and power-free pharmacodynamic assessment in Parkinson’s disease.” In their paper the authors wrote in summary, “Overall, our easy-to-use, energy-efficient wearable supports real-time, stimulation-free monitoring, potentially enabling at-home dosage adjustments and paving the way for future autonomous closed-loop L-dopa therapeutic system development.”
  • Per an Institute for Clinical and Economic Review news release,
    • “The Institute for Clinical and Economic Review (ICER) today released a Draft Evidence Report assessing the comparative clinical effectiveness and value of tavapadon (AbbVie Inc.) for Parkinson’s Disease.
    • “This preliminary draft marks the midpoint of ICER’s eight-month process of assessing this treatment, and the findings within this document should not be interpreted to be ICER’s final conclusions.
    • “On August 5, as part of ICER’s Early Insights Webinar Series, ICER’s Chief Scientific Officer and Director of Health Technology Assessment Methods and Engagement, Dan Ollendorf, PhD, MPH, will present the initial findings of this draft report. This webinar is exclusively available to all users of the ICER Analytics platform; registration for the webinar is now open.”
  • Per STAT News,
    • “For decades, efforts to develop non-opioid pain drugs were marked by failure. But what was once a graveyard of drug discovery is quickly turning into a race for a multibillion-dollar market, with Latigo Biotherapeutics publishing positive data on Wednesday for a therapy meant to rival a Vertex medicine already on the market.
    • “The startup’s Phase 2 trial enrolled 343 patients who’d gotten tummy tuck surgery; they were randomized to receive a high or low dose of Latigo’s experimental pill, a placebo, or a combination of acetaminophen and the opioid hydrocodone. Those given either dose of Latigo’s oral drug, LTG-001, showed statistically significant pain relief compared to placebo after 48 hours. And while participants in all groups had the option to use the opioid oxycodone if they needed additional pain management, those on a high dose of Latigo’s therapy were significantly less likely to do so than participants on placebo.” * * *
    • “The biotech plans to start a Phase 3 study later this year of patients who’ve had bunion removal surgery, with results expected in the second half of 2027.”

From the U.S. healthcare business and articifical intelligence fronts,

  • Beckers Payer Issues reports,
    • “Humana reported a $694 million profit for the second quarter, up more than 27% year over year, according to its July 29 earnings report.
    • “Revenue reached $40.8 billion, a 26% increase from the same period in 2025, driven by Medicare membership growth, higher per-member Medicare Advantage and standalone prescription drug plan premiums from increases in benchmark funding and the Part D direct subsidy, and a payer-agnostic CenterWell client base. Star ratings headwinds persisted.
    • “Total Medicare membership reached 11.1 million, up from 8.2 million in the comparable quarter. Total medical membership was 17.9 million, an increase from 14.8 million.
    • “The company’s benefit ratio was 91.1%, up from 89.7% in the second quarter of 2025, spurred by the star ratings revenue issue, new individual MA members with higher benefit ratios and an expectation of lower favorable prior period development. However, MA recontracting, pricing and clinical excellence efforts offset that growth.”
  • Beckers Hospital Review notes,
    • “Jaewon Ryu, MD, the founding CEO of Risant Health, will step down, and Dale Maxwell has been named interim CEO.
    • “According to a July 29 news release, Dr. Ryu made the decision to leave the role to focus on his family. Mr. Maxwell, former president and CEO of Albuquerque, N.M.-based Presbyterian Healthcare Services, will serve as interim CEO while the Risant Health board conducts a national search for a permanent successor.
    • “Washington, D.C.-based Risant Health is a nonprofit created by Oakland, Calif.-based Kaiser Permanente to expand value-based care by partnering with community health systems. As the organization’s inaugural CEO, Dr. Ryu built its leadership team and operating model and oversaw the additions of Danville, Pa.-based Geisinger, which operates 10 hospital campuses, and Greensboro, N.C.-based Cone Health, which has five hospitals and more than 150 locations.
    • “Jaewon has been instrumental in turning the vision for Risant Health into reality,” Greg Adams, chair and CEO of Kaiser Permanente and chair of the Risant Health board, said in the release. Mr. Adams said Dr. Ryu built an exceptional leadership team and positioned the organization to expand value-based care.”
  • Fierce Healthcare relates,
    • “AI doctor startup Doctronic aims to broaden its reach beyond adult primary care by acquiring text-based pediatric care platform Summer Health.
    • “The companies did not disclose the financial terms of the deal.
    • “Fast-growing Doctronic is an AI-native primary care provider that has supported 30 million health encounters in just two years. It offers a proprietary AI doctor and nationwide network of licensed clinicians delivering personalized medical guidance and video visits for $39, according to the company.
    • “The startup offers a free personal AI doctor via chatbot to help navigate symptoms and answer medical questions and can connect users with a licensed physician through a virtual visit. Doctronic, available in all 50 states, is being tested by the state of Utah to refill prescriptions as part of a pilot program.”
  • and
    • “Hospitals should plan for their supply chain expenses to climb in 2027, with the prices for indirect spending categories like IT, construction and even food projected to grow at an even faster rate than those for drugs, Vizient warned in its most recent forecast report. 
    • “Vizient’s latest twice-yearly report mapped out overall supply chain price inflation of 3.39% for 2027, an increase of 0.61 percentage points compared to the forecast it released in February for the 12-month period beginning in H2 2026. 
    • “The primary culprits, Vizient research and intelligence director Jeff King told Fierce Healthcare, are AI demand and elevated costs of logistics and energy that are being felt across the world.”
  • and
    • “Alongside an update to its 2026 ratings, national nonprofit Leapfrog Group announced Monday the launch of an expanded ambulatory service center (ASC) reporting program. The expanded Leapfrog ASC Public Reporting Program, first unveiled in April, reports safety and quality information for facilities nationwide. More than 3,900 ASCs are now included in the 2026 ratings, along with more than 2,400 hospitals—which the nonprofit says is the highest level of participation in its 26-year history.”
  • Fierce Pharma points out,
    • “With increased sales of its newer drugs compensating for declining revenues from its multiple sclerosis (MS) portfolio, Biogen is once again positioned for a “growth story,” CEO Chris Viehbacher said Wednesday during the company’s second-quarter earnings call.
    • “To that end, Biogen reported revenue of $2.74 billion for the period, marking its highest quarterly haul since Q3 of 2021. With the result, the company flipped its 2026 revenue guidance from an expected mid-single digit decline in 2026 to a mid-single digit increase.  
    • “This quarter is a reflection of the significant progress Biogen has made repositioning the company for long-term growth,” Viehbacher added.
  • Beckers Hospital Review tells us what 17 pharmacy leaders think about “the biggest shifts they’re seeing in patient expectations.”
  • MedCity News informs us,
    • “For many people, managing a disease means chronic therapy. Scribe Therapeutics has a different vision: genetic medicines that offer durable effects for the masses. With its lead program on a path to report its first human data next year, Scribe has joined the public markets, raising $128.7 million. 
    • “While current genetic medicines are largely limited to rare disorders, we are engineering our technologies for use in common diseases affecting millions,” Scribe said in its IPO filing. “By targeting prevalent diseases with significant unmet need and high clinical burden, we aim to usher in a new era of broadly scalable, transformative, and preventative genetic medicines.”
    • * * * “Alameda, California-based Scribe has selected cardiometabolic disorders as its first focus. Lead therapeutic candidate STX-1150 is intended to lower the “bad” form of cholesterol, which is a risk factor for atherosclerotic cardiovascular disease (ASCVD). This therapy is designed to lower LDL-cholesterol by repressing expression of PCSK9, a protein that in high amounts, reduces the ability of the liver to clear cholesterol from the blood. Injectable PCSK9 inhibitors are already available from Amgen, Regeneron Pharmaceuticals, and Novartis. Last week, Merck received FDA approval for Lipfendra, an oral PCSK9 inhibitor. While dosing frequency for these therapies varies, all of them are taken chronically.”
  • STAT News reports,
    • “Hundreds of thousands of U.S. doctors use clinical large language models, pitched by companies like OpenEvidence, Doximity, and UpToDate as an antidote to the dangers of hallucination-prone generalist models from Big Tech. Yet few studies have pitted them against each other — and this summer brought a high-profile head-to-head. 
    • “Researchers from NYU Langone Health had tested general and clinical models, including OpenEvidence and UpToDate Expert AI, on three sets of clinical questions. The findings, published in Nature Medicine in June: The clinical AI performed worse than the general models. 
    • “The results rang out like a gunshot. “I’ve never seen a single paper trigger the kind of reactions this one has in the health AI community,” wrote Kaiser Permanente’s vice president of AI and emerging technologies on LinkedIn. The paper’s findings, like all science, are subject to interpretation and debate — but many online reactions treated them more like a clear victory for general frontier models.” * * *
    • “Scientists acknowledge that no one test will ever tell the whole story about clinical AI performance. And day-to-day, the choice of when and how to use large language models in care — by individual doctors, and increasingly health system leaders — is shaped by more than research.
    • “I don’t see the benchmarks really playing a role among doctors,” said OpenEvidence’s Nadler. “Academics like talking about them.” 
    • “The more important question, companies, doctors, and researchers agree, is how these tools impact patients. 
    • “Anytime a new technology is introduced into medicine, its impact on those outcomes depends on how it’s used by physicians. Are they using the tool safely and correctly, on the right patients, in the right situations?
    • “In the case of AI, that often comes down to trust. An accurate model inspires confidence, but it can still occasionally be wrong — potentially leading a physician astray, if they rely on it outright. Conversely, a good model can leave gains on the table if a physician doesn’t trust its output.” 


Tuesday report

Simplicity is a virtue.

From Washington, DC

  • Per a Centers for Medicare and Medicaid Service news release,
    • “On July 28, 2026, the Centers for Medicare & Medicaid Services (CMS) released preliminary technical Medicare Part D bid information for contract year (CY) 2027 to help Part D plan sponsors finalize their Part D and Medicare Advantage (MA) offerings and prepare for Medicare Open Enrollment. 
    • “Additionally, CMS is announcing the conclusion of the Part D Premium Stabilization Demonstration, a voluntary demonstration for standalone prescription drug plans implemented in CY 2025 to address volatility and variation in standalone premiums following benefit changes mandated by the Inflation Reduction Act (IRA). For CY 2027, CMS bid analysis indicates that Part D plan sponsors had sufficient experience under the redesigned Part D benefit to support their assumptions in developing the prescription drug plan bids. Therefore, CMS will discontinue the demonstration at the end of CY 2026 to return the program to operating under traditional market conditions in CY 2027. 
    • “As in past years, CMS will release the 2027 MA and Part D landscape in mid-to-late September, once all offerings are finalized. In addition, CMS will release final average MA and Part D premiums, along with other key information, in September with the MA and Part D landscape.” 
  • The Wall Street Journal adds,
    • “The average premium for a Part D plan was around $36 a month this year, according to KFF, a health-policy nonprofit. 
    • “The administration official said around 25% of Medicare Part D plan enrollees would see premiums for their plans stay flat or go down next year. Around 30% will have an increase of less than $10 to their monthly bill. 
    • “For the remaining 45%, he said, the increases are largely in the $11 to $20 range a month. 
    • “Seniors should be able to find lower premiums if they switch plans, he said, adding affordable options are still available.
    • “Medicare drug coverage premiums are rising because the plans have been hit by growing expenses for GLP-1 medications and other specialty drugs. Changes implemented under 2022’s Inflation Reduction Act also have pushed up premiums. The law reduced many Medicare enrollees’ out-of-pocket expenses but required insurers to shoulder more of the costs. 
    • “Those pressures are expected to continue in 2027, said Juliette Cubanski, a vice president at KFF.” 
  • The American Hospital Association News relates,
    • “The Centers for Medicare & Medicaid Services July 27 released its Contract Year 2025 Part C and Part D Program Audit and Enforcement Report, outlining key compliance issues identified through Medicare Advantage and Part D audits and enforcement activities. CMS emphasized recurring problems involving prior authorization and appeals processing, beneficiary access to medications and services, care coordination, enrollment and eligibility errors, and oversight of delegated entities. The report also highlights enforcement actions totaling approximately $1.54 million in civil money penalties, most of which stemmed from beneficiary cost-sharing and payment integrity failures. CMS signaled increased scrutiny of plans’ compliance with new prior authorization requirements, including the requirement beginning this year to process expedited requests within 72 hours and standard requests within seven calendar days.” 
  • A CMS news release adds,
    • “The Centers for Medicare & Medicaid Services (CMS) announced that enforcement efforts from its Medicaid Fraud War Room (MFWR) stopped more than $203 million in potentially improper Medicaid payments in just under 90 days, highlighting significant progress in protecting taxpayer dollars and strengthening Medicaid program integrity. Since its launch on April 23, the MFWR has coordinated actions against 50 unique, high-risk Medicaid providers identified through advanced data analytics and representing more than $203 million in Medicaid payments subject to federal exclusions and state enforcement efforts.
    • “Every dollar lost to Medicaid fraud is a dollar taken away from vulnerable Americans who rely on it,” said CMS Administrator Dr. Mehmet Oz. “In just under 90 days, the Medicaid Fraud War Room has proved that these losses aren’t inevitable and has shown Americans what we can accomplish with robust federal-state partnerships, advanced data analytics, and a real sense of urgency. We’ve made significant progress toward crushing waste, fraud, and abuse, but we’re not done yet. If you steal from Medicaid, we will track you down, cut you off, and work to ensure that every taxpayer dollar we spend funds quality care for eligible beneficiaries.”
  • The American Hospital Association News further tells us,
    • “An AHA blog published July 28 highlights new electronic prior authorization requirements that begin Jan. 1, 2027, as a result of the Centers for Medicare & Medicaid Services’ 2024 Interoperability and Prior Authorization final rule. The blog explains why transitioning to the new process will be a significant operational change that will include coordination with health plans, electronic health record vendors and other technology partners. READ MORE“
  • Per a CMS notice to be published tomorrow in the Federal Register,
    • In accordance with the Privacy Act of 1974, as amended, the Department of Health and Human Services (HHS), Centers for Medicare & Medicaid Services (CMS) is providing notice of the re-establishment of a matching program between CMS and the Office of Personnel Management, “ Verification of Eligibility for Minimum Essential Coverage Under the
    • Patient Protection and Affordable Care Act through an Office of Personnel Management Health Benefit Plan”. The matching program provides CMS and State Administering Entities with the Office of Personnel Management (OPM) data to use in determining individuals’ eligibility to enroll in a qualified health plan through an exchange established under the ACA; for insurance affordability programs, certifications of exemption, and to make eligibility redeterminations and renewals, including appeal determinations.

From the Food and Drug Administration front,

  • The New York Times reports,
    • “Even as the number of cyclospora cases in the United States hit record levels, top health regulators insisted that consumers could still trust what they were eating.
    • “The U.S. food supply is safe,” Donald Prater, the acting deputy commissioner for food at the U.S. Food and Drug Administration, told attendees Monday at the annual meeting of the International Association for Food Protection.
    • “However, there’s a couple of challenges,” he said, referring to the cyclosporiasis outbreaks that have sickened more than 11,000 people across the country. “It will take a little time. But we do believe we’re taking action and we’re protecting public health.”
  • The Hill adds,
    • “A poll released Sunday shows that 40 percent of U.S. adults are buying or eating less produce after the cyclospora outbreak. 
    • “Comparatively, according to survey results from CBS/YouGov, 4 percent of people said they are eating more produce. 
    • “Among respondents, 56 percent said there has been no change in their diet.” 
  • Fierce Pharma relates,
    • “The FDA has signed off on MannKind’s Furoscix ReadyFlow (furosemide) autoinjector for the treatment of edema in adults with heart failure (HF) or chronic kidney disease (CKD).
    • “Furoscix ReadyFlow becomes the first at-home treatment option to reduce the fluid buildup from HF or CKD. The drug-device combo has been designed to help patients address edema earlier, before symptoms worsen and lead to potential emergency department visits or hospitalization. It has been shown to work as effectively as an intravenous diuretic, which is usually administered in a clinic or hospital.
    • “Furoscix ReadyFlow is taken under the skin in less than 10 seconds, significantly reducing the administration time from five hours with MannKind’s currently available on-body infusor. The company expects to make Furoscix available in the U.S. by the end of August.”
  • The ASCO Post informs us,
    • “The FDA’s Oncology Center of Excellence announced three final guidance documents intended to broaden eligibility criteria for participation in clinical trials of oncology drugs.  
    • “Fewer than 5% of patients with cancer currently receiving treatment are enrolled in clinical trials—even though more than 70% say they are willing to participate. The guidance documents address one reason for low participation: stringent and complex clinical trial eligibility criteria. 
    • “Unnecessarily restrictive eligibility criteria may slow subject accrual, limit patients’ access to clinical trials, and lead to trial results that do not fully represent treatment effects in the patient population that will ultimately use the drug,” the three guidances say in their preambles.”  
  • The American Hospital Association News points out,
    • “Baxter is voluntarily recalling a specific lot of intravenous solution due to a report of particulate matter in the solution identified as cardboard, according to a Food and Drug Administration notice. The company is recalling lot LD175708 of its Cefazolin in Dextrose Injection with an expiration date of Feb. 14, 2027. Baxter said use of the product can potentially cause pulmonary embolism, among other harmful impacts. The company said that customers should immediately discontinue use of the solution and return all affected products. Baxter has not received any reports of adverse events related to the issue.” 
  • Cardiovascular Business adds,
    • “Medtronic is recalling specific lots of six different medical devices used as arterial cannulae during cardiopulmonary bypass procedures. This includes multiple models of the company’s 22FR EOPA 3D Arterial Cannulae and its 22FR EOPA Elongated One-Piece Arterial Cannulae.  
    • “Medtronic initiated the new recall after receiving more than 30 reports of small pinhole leaks in the wire-wound body of the devices. These leaks can be difficult to identify during routine inspection; they are primarily visible when the cannula is in a flexed position. 
    • “Potential risks associated with this condition may include hypovolemia, vessel laceration or perforation, hypotension, ischemia and organ dysfunction,” according to an alert shared with customers.” 

No Surprises Act News,

  • Elevance Health, writing in STAT News, reports
    • The [Elevance Health] analysis [of No Surprises Act arbitrations] examined more than 7,300 disputed claim lines involving spine surgery, plastic surgery, colonoscopies, hysteroscopies, and other planned procedures resolved between 2024 and early 2026. Across the procedures studied, providers prevailed in nearly 90% of disputes, and the average award approached $40,000 per disputed claim line.
    • The arbitration awards were also found to be drastically higher than commonly used payment benchmarks. Across the planned procedures analyzed, the median award was more than 50 times the qualifying payment amount, which is the benchmark based on an insurer’s median in-network contracted rate. Worse still, the median arbitration award was 29 times higher than median in-network commercial claims, and 67 times higher than Medicare rates for the same procedures in the same locations. Awards for assistant surgeons were even more extreme, with the median award more than 145 times the qualifying payment amount.
    • Researchers also found that awards for these planned procedures increased over time. Between 2024 and 2025, arbitration awards for the procedures analyzed rose by 43%.
    • Although these disputes represented a relatively small share of overall IDR volume, they accounted for a disproportionate share of arbitration costs because of the size of the awards. Planned surgical procedures and associated neuromonitoring represented roughly 16% of disputes but approximately 60% of No Surprises Act arbitration costs.” * * *
    • “The findings do not describe all No Surprises Act disputes. They focus on a defined subset of planned procedures and associated services. But they point to a broader implementation question: whether some categories of scheduled services are entering IDR in ways that could increase costs.
    • “The study identifies several policy considerations for policymakers to evaluate, including strengthening eligibility standards for planned procedures entering IDR, increasing transparency around arbitration decisions, reinforcing the use of market-based payment benchmarks, and providing additional guidance for arbitrators evaluating payment disputes.”
  • FEHBlog observation: Amen to that. Those changes would lower healthcare costs.

From the public health and medical / Rx research front

  • The New York Times reports,
    • “Kira Wynn will do almost anything to avoid ovarian cancer, which killed her mother.”
    • * * * “So Ms. Wynn, 37, had a consultation with Dr. Rebecca Stone, a gynecological oncologist at Johns Hopkins Medicine. What she heard was not what she expected.
    • “Ovarian cancer,” Dr. Stone told her, is a misnomer. Nearly all ovarian cancers — and nearly all fatal ovarian cancers — are actually cancers of the fallopian tubes. The 20 percent or so that start in the ovaries are different, Dr. Stone said, and usually can be cured.
    • “Women who have their tubes — the gummy worm-shaped ducts that carry eggs from the ovaries to the uterus — removed reduce their chances of getting ovarian cancer by nearly 80 percent. It’s a five-minute operation that can be done as part of nearly any abdominal surgery, including a hysterectomy, tubal ligation, gallbladder surgery and hernia repair.
    • “Yet no doctor, Ms. Wynn said, had ever mentioned fallopian tube removal to her.
    • “That’s not surprising, Dr. Stone said, because most doctors (and the public) do not know about this new approach, even though professional groups like the American Cancer Society, the American College of Surgeons and the European Society of Gynaecological Oncology have recently issued statements encouraging doctors to offer tube removal at the time of other abdominal surgeries.”
  • The American Hospital Association relates,
    • “The American Red Cross July 27 declared a national blood supply crisis, as the organization said that blood donations have fallen to a four-year summer low. The organization said that it has less than a one-day national supply of type O positive blood and is limiting distribution of type O blood to hospitals. This year is the second time in its history that the Red Cross declared a national blood crisis, the first since January 2022.” 
  • The Washington Post adds,
    • “The American Red Cross has less than a one-day national supply of O-positive blood, the most commonly transfused blood type, and has begun limiting distributions of the blood to hospitals, it said.
    • “The only previous national blood crisis declared by the group came in 2022 as a surge of covid-19 cases lowered blood donor turnout.
    • “The American Red Cross urged all eligible donors to make appointments to give blood.”
  • Health Day tells us,
    • “Middle-aged folks have a higher risk of muscle loss if their weight “yo-yos” due to inconsistent dieting, a new study says.
    • “People who repeatedly dropped and regained weight wound up losing nearly four times as much thigh muscle during a four-year period compared to others whose weight remained relatively steady, researchers recently reported in the journal Radiology.
    • “When people’s weight cycled, they lost tremendous amounts of muscle along with the fat, and they didn’t gain the muscle back,” said lead researcher Dr. Thomas Link, a professor of radiology at the University of California-San Francisco.
    • “This tells us that understanding how to protect muscle while people are losing weight is important for overall health,” he said in a news release.”
  • The Washington Post adds,
    • “Savings to the overall health care economy from GLP-1 drugs have yet to be proven, but researchers have found evidence that health benefits could spill into the labor market.
    • “A study of workers in Denmark showed a 17.3 percent decline in long-term sick leave among those who were treated with Ozempic, the diabetes drug, according to results published this month in a National Bureau of Economic Research working paper. The researchers were from the University of Copenhagen, the University of Chicago, Duke University and the Rockwool Foundation — an independent organization that conducts research on social and economic issues.
    • “Before treatment, the study noted, an average of 5.5 percent of the workers accessed long-term sick leave (defined as longer than 30 days). That dropped nearly a full percentage point after treatment with the drug, the research found. About 84 percent of the patients in the study, which was conducted through analysis of health records and has not been peer-reviewed, had diabetes.”
  • MedPage Today points out,
    • “Nongated chest CT scans are usually performed for reasons other than to assess cardiovascular risk.
    • “Incidental coronary artery calcium (CAC) scores extracted from nongated chest CT scans accurately predicted cardiovascular risks in a community-based cohort.
    • “Patients with moderate or severe nongated CAC had significantly higher risks of cardiovascular disease and coronary heart disease versus those with zero CAC.”
  • STAT News notes,
    • “An interim look at an Alzheimer’s disease clinical trial evaluating an amyloid-targeting treatment from ProMIS Neurosciences showed low rates of brain bleeding and no incidences of brain swelling — results reported Tuesday that suggest the drug could be safer than approved treatments. 
    • “In a blinded analysis that pooled safety data from patients receiving the ProMIS drug and a placebo, the total rate of ARIA was 4.4%, with all cases mild and asymptomatic, the company said.” * * *
    • “ProMIS expects all the participants in the Phase 1 study to complete twelve months of treatment late this year, allowing the company to unblind the data and report full results, including measures of cognition and function, early in 2027.” 
  • Genetic Engineering and Biotechnology News adds,
    • “Neurodegenerative diseases are typically defined by the presence of characteristic clinical phenotypes. However, it is increasingly recognized that early intervention could give people the best chance for meaningful positive effects. As a result, early detection and prevention are becoming major priorities.
    • “Months to several years before amyotrophic lateral sclerosis (ALS) symptoms arise, levels of certain blood proteins may dramatically shift. By anticipating the arrival of symptoms, investigators could intervene with preventative therapies before the irreversible motor neuron damage that is characteristic of ALS sets in.
    • “In this study, researchers analyzed data from the long-running, National Institutes of Health (NIH)-funded Pre-symptomatic Familial ALS (Pre-fALS) study, to identify a lineup of key proteins that may predict the emergence of clinically manifest ALS.
    • “This work is published in Nature Medicine in the paper, “Longitudinal plasma proteomics predict phenoconversion to clinically manifest ALS.”
  • Per an Institute for Clinical and Economic Research news release,
    • “The Institute for Clinical and Economic Review (ICER) today released a Final Evidence Report assessing the comparative clinical effectiveness and value of vaccines for protection against Covid-19, including: Comirnaty® (Pfizer, BioNTech), Spikevax® (Moderna), mNexspike® (Moderna), and Nuvaxovid® (Sanofi).
    • “ICER examined the impact of Covid-19 vaccines and found that pregnant women, infants, and adults aged 65+ benefit most from vaccination. ICER’s report on this therapy was the subject of the June 2026 public meeting of the New England CEPAC, one of ICER’s three independent evidence appraisal committees. The New England CEPAC was aligned with ICER’s report findings.
    • “Downloads: Final Evidence Report | Report-at-a-Glance | Policy Recommendations 
    • “The current confusion in the US around vaccine policy is challenging for both health care professionals and the American public,” said ICER’s President and CEO Sarah K. Emond, MPP. “Policymakers, especially public health leaders, need reliable and unbiased assessments of how well therapies work for patients. For 20 years, ICER has delivered that through our evidence-based analyses and public meetings. This public meeting highlighted what we know about the current evidence on Covid-19 vaccines, and where there are opportunities to gain an even better understanding of how these vaccinations impact different subpopulations. Ultimately, ICER’s transparent and public process sheds light on the broader context that policymakers should consider when making recommendations about Covid-19 vaccines.”

From the U.S. healthcare business and artificial intelligence fronts,

  • MedCity News reports,
    • “It’s often said that the healthcare system is broken, from the outdated use of fax machines to perverse incentives.
    • “But who broke the healthcare system? At MedCity News’ Bullseye event in Chicago, Editor-in-Chief Arundhati Parmar posed this question to two health insurance CEOs.
    • “The response? “We did,” replied Sachin Jain, CEO of SCAN Health Plan, referring to all of those who work inside of healthcare. He added that healthcare stakeholders have normalized the abnormal.” * * *
    • “The CEO of Ascendiun, Paul Markovich, echoed this. Ascendiun is a nonprofit and parent company of Blue Shield of California, Blue Shield Promise Health Plan, Altais and Stellarus.
    • “It’s our own damn fault collectively, and I think that’s why we’re trying to focus a lot of our energy on the system. … One of the reasons I work at a health plan and a nonprofit health plan is because I think what the health plans can do is create a better system,” he said. “We tend to control the rules of how people get paid, what are the administrative burdens? Are we using a fax machine, or are we figuring out another way to connect digitally? We have the biggest influence, I think, in trying to shift the system to getting much better results from people day to day than what we’re seeing now.”
  • Healthcare Dive relates,
    • “Centene handily beat Wall Street’s expectations in the second quarter, as higher revenue from premiums and rate hikes for the managed care company’s plans shielded its bottom line from elevated medical costs.
    • “Centene posted $53.6 billion in revenue, up 10% year over year, and $1.1 billion in profit in the quarter. That’s compared to a loss of $253 million the same time last year when Centene was caught off guard by higher spending — the insurer’s first quarterly loss in more than two years.
    • “Centene raised its 2026 financial outlook on Tuesday following the outperformance, which TD Cowen analyst Ryan Langston called “huge.”
    • “Any way you slice it, this was a fantastic quarter,” CFO Drew Asher said during a morning call with investors.”
    • “It’s the second beat-and-raise this year for the St. Louis-based insurer, following a buoyant first quarter when Centene bumped its 2026 guidance on the back of better controlled medical costs.” 
  • BioPharma Dive tells us,
    • “GSK is turning to a multibillion-dollar cost-cutting program to help the company grow profits while absorbing the impact of a sizable patent cliff.
    • “In its latest quarterly earnings report on Tuesday, the British pharmaceutical company revealed a three-year restructuring plandesigned to save a total of about £1.9 billion, or $2.5 billion, per year. GSK didn’t disclose specific details about the plan, but said that it should “simplify the organization” and help “reallocate capital and resources” towards specialty medicines.
  • MedTech Dive adds,
    • “Boston Scientific announced a global restructuring that will involve changes to its supply chain and organizational structure.
    • “The heart device company said in a Monday securities filing that it expects “some headcount reductions,” though it will still post new jobs in areas of growth. Boston Scientific did not say how many positions it expects to cut. The company did not respond to MedTech Dive’s request for comment by publishing time.
    • “In total, the company expects about $700 million to $800 million in pre-tax charges, according to the filing. The restructuring, approved by the company’s board, is expected to start this year and be complete by the end of 2029.”
  • Beckers Payer Issues informs us,
    • “Deferred elective surgery was a through-line of second-quarter earnings calls at four of the country’s largest for-profit hospital operators. But their executives do not agree on what is driving the slowdown, or whether it represents lost demand at all.
    • “Nashville, Tenn.-based HCA Healthcare, Franklin, Tenn.-based Community Health Systems and Dallas-based Tenet Healthcare all reported softness in elective volumes, particularly in high-acuity areas such as orthopedic and cardiac care that generate some of hospitals’ strongest margins. 
    • “King of Prussia, Pa.-based Universal Health Services reported milder surgical softness alongside a broader volume rebound and pinned the weakness on a different cause.
    • “The distinction matters because the competing explanations point to very different futures. If patients are postponing care they cannot afford, the volume loss reflects a demand problem that additional capital and capacity will not solve. If cases are shifting to lower-cost settings, the revenue has not disappeared; it has just moved somewhere else.”
  • Beckers Hospital Review points out,
    • “New Hampshire is the best state for healthcare while Alaska is the worst, according to an analysis published July 27 by WalletHub.
    • “The personal finance company compared the states and the District of Columbia across three dimensions: cost, access and outcomes. Analysts then evaluated the dimensions across 44 metrics, including average monthly insurance premiums, hospital beds per capita, emergency room wait times, infant mortality rates and the share of patients readmitted to hospitals. Each metric was graded on a 100-point scale, with 100 representing the best healthcare at the most reasonable cost. WalletHub then calculated each state’s weighted average across all metrics to produce an overall score and used the resulting scores to rank the states. 
    • “Iowa ranked first for cost, North Dakota ranked first for access and New Hampshire ranked first for outcomes.”
  • Beckers Clinical Leadership notes,
    • “Of the 679 U.S. hospitals designated as “Magnet” hospitals for nursing excellence, about 5% have earned the recognition more than six times. 
    • “The American Nurses Credentialing Center awards Magnet recognition to hospitals based on their quality of patient care and nursing excellence. As of July 28, 36 hospitals have received six or more Magnet designations — representing just 0.6% of the nation’s 6,100 hospitals. 
    • “Since Dec. 31, 2025, four hospitals have earned their sixth Magnet designation: Englewood (N.J.) Hospital, Hospital for Special Surgery in New York City, Penn Medicine Lancaster (Pa.) General Hospital and Houston Methodist Hospital.
    • [The article lists} the 36 hospitals that have received this honor six or more times.
  • Per Fierce Healthcare,
    • “LifeBridge Health’s Sinai Hospital of Baltimore is putting an artificial intelligence-powered diagnostic for sepsis into clinical use, bringing a research-backed tool to the patients’ bedside.
    • “Chicago-based Prenosis, a biology-based technology company, developed Sepsis ImmunoScore, an AI-powered tool that can spot the early signs of sepsis. The tool analyzes 22 parameters to identify patterns in a patient’s biological immune response, enabling clinicians to detect sepsis or its progression within 24 hours.
    • “Sepsis ImmunoScore received the U.S. Food and Drug Administration’s first authorization for software to diagnose sepsis in 2024. Prenosis’ solution was approved through the FDA’s De Novo pathway.”
  • and
    • “Virtual care and health navigation company Included Health inked a deal to acquire Firefly Health to scale health plan alternatives for employers.
    • “In January, Included Health launched an alternative health plan design for employers, broadening its existing all-in-one virtual care platform. Firefly Health, founded in 2017, is a primary care and health plan provider serving more than 20,000 individuals nationally. 
    • “The deal is expected to close in the third quarter of 2026. The companies did not disclose financial details of the acquisition.”

Cybersecurity Saturday

“”We are in the Singularity.” Elon Musk

From the War with Iran front.

  • The American Hospital Association News tells us
    • “The Cybersecurity and Infrastructure Security Agency and other U.S. and international partners July 22 released an updated advisory on Iranian-affiliated cyber actors targeting internet-connected programmable logic controllers, which are computers used to manage and monitor equipment. PLCs can be found in climate control systems, access control systems and many other applications in healthcare. Agencies first warned of malicious activity targeting Rockwell Automation PLCs in April. The updated advisory expands the scope of incidents to include observed targeting of Schneider Electric, Siemens and potentially other manufacturers of PLCs. It also includes new guidance on detecting malicious changes in reusable code modules exploited within Rockwell Automation PLC programs.”

From the Project Glasswing / the Singularity front,

  • Cybersecurity Dive reports on July 22,
    • “Two OpenAI large language models, including one not yet released to the public, broke free of their constraints last week and autonomously hacked into the AI application library Hugging Face.
    • “The first-of-its-kind event, in which the LLMs tried to steal information that would help them excel on an important test, has highlighted the dangers of the AI industry’s increasingly powerful tools.
    • “We consider this incident to be an unprecedented cyber incident, involving state-of-the-art cyber capabilities, and are responding accordingly,” OpenAI said in a blog post on Tuesday that confirmed its models’ responsibility for the attack, which Hugging Face announced on July 16.”
  • AI Strategist David Borish, writing in LinkedIn, lets us know,
    • “On July 21, Elon Musk quote a message from OpenAI researcher Will Depue that laid out a timeline: a security incident at Hugging Face on July 21, a counterexample to the Jacobian conjecture on July 20, the disproof of Erdős’s unit distance conjecture on May 20, the solution to Erdős problem 1196 on April 14, and Anthropic’s Project Glasswing finding thousands of zero day vulnerabilities on April 7. Depue’s post noted that in “normal” times, these milestones would have been spread across months or years. Compressed into a single week of news cycles, they read differently. Musk’s reply ran five words: “We are in the Singularity.”
    • “The claim landed hard because, unlike most Singularity talk, this timeline is not speculative. Each item is a documented event with a paper trail, and the details matter more than the framing.” * * *
    • “The skeptical case. Grocery prices, commute times, and most people’s jobs look the same this week as they did a month ago. Every event on Depue’s timeline required a human to set up the evaluation, pose the conjecture, or prompt the model, and in most cases required teams of human experts to verify, formalize, or clean up afterward. Deep learning researcher Yann LeCun has argued current architectures will not reach general intelligence without a different approach entirely. Writer Freddie deBoer has made the broader point that a self-improving AI escaping human oversight remains a speculative scenario without a demonstrated mechanism, distinct from AI systems getting better at specific tasks people assign them.
    • “Both things can be true at once. The rate of capability progress across math, security research, and coding is genuinely compressing what used to take years into weeks, and the humans setting the objectives, verifying the outputs, and deciding what gets deployed have not gone anywhere. The more telling test ahead is quieter than another isolated proof or another leaderboard topper: whether formal verification, in Lean or otherwise, keeps pace with the rate of claims, and whether the containment failures at Hugging Face turn out to be a one time embarrassment or the first entry in a longer list.”
  • TechTimes adds,
    • “Microsoft is preparing to launch Project Perception, an AI-powered security platform that scans enterprise codebases for exploitable vulnerabilities — and is built around a deliberate cost-and-access argument against Anthropic’s Claude Mythos Preview, the most capable vulnerability-hunting AI available and one that most organizations on Earth cannot currently use.
    • “The platform is expected to debut before the end of July. It routes security analysis tasks across AI models from Microsoft, OpenAI, and Anthropic, using a model-selection layer that reserves expensive frontier model calls for the steps where they create real value and assigns cheaper, distilled models to high-volume scan passes. That architecture, according to reporting first published by The Information, is designed to bring the cost of running continuous, enterprise-grade vulnerability discovery well below what Anthropic charges for direct Mythos access.”

From the cybersecurity policy front,

  • Federal News Network reports,
    • “The unprecedented breach of a technology vendor by autonomous artificial intelligence agents is serving to underscore governmentwide efforts to streamline federal cloud security and prioritize faster patching of critical software vulnerabilities.
    • “OpenAI confirmed this week that its advanced AI training models broke out of their test environment and then hacked into the networks of start-up vendor Hugging Face. The incident is the latest AI cybersecurity development driving policy conversations across Washington.
    • “Pete Waterman, director of the Federal Risk and Authorization Management Program (FedRAMP) at the General Services Administration, pointed to the Hugging Face incident as a landmark moment for cybersecurity during Carahsoft’s FedRAMP Summit on Thursday.
    • “Waterman said the incident underscores his program’s shift to the FedRAMP 20x model.”
  • Cyberscoop relates,
    • “Industry groups who spoke at town halls hosted by the Cybersecurity and Infrastructure Security Agency [(CISA)] about a pending cyber incident notification regulation had a few consistent messages:
    • “We want this to apply to fewer of us. We don’t want to report to you on as many incidents. We want to give you less information when we do. 
    • “CISA last week published transcripts from the town halls, where the agency sought feedback on the delayed rule for the 2022 Cyber Incident Reporting for Critical Infrastructure Act — perhaps the most significant cyber legislation Congress has ever passed. That law required critical infrastructure owners to report major cyberattacks to the federal government within 72 hours, and ransomware payments within 24 hours.” * * *
    • “Where the rule specifies what kind of data organizations should report in a major incident, CISA should “seek to collect the least amount of information possible in the easiest to report fashion to facilitate information accuracy and reporting speed,” said Samantha Burch, vice president of technology public policy at government affairs at AHIP, a health insurance industry trade association.” * * *
    • “One industry representative told CyberScoop that CISA’s willingness to hold town halls, combined with the Trump administration strategy emphasizing “common sense regulation,” was a good sign about where the rule might be heading.
    • ‘They are not picking up on the Biden administration’s approach and tweaking it. They’re thinking, ‘What are the specific pieces of information we need during a cyber incident to help critical infrastructure companies respond?’” said Henry Young, senior director of policy for the Business Software Alliance. “In general, industry is optimistic that what we’ll end up with are a few of the most important pieces of information, so that in the emergency, companies can act quickly and actually respond to an incident rather than completing lots of paperwork.”
  • and
    • “Seven out of 10 federal cyber regulations requiring written reports to federal agencies are duplicated elsewhere, a report from a government watchdog found in a report to Congress Wednesday.
    • “And so far, efforts to de-conflict haven’t had much success, the report from the Government Accountability Office concluded.
    • “At the request of two top lawmakers, the GAO examined federal cyber regulations at 37 agencies. It counted 80 out of 117 rules that “either contain the same kind of reporting requirement applicable to a sector or the same reporting requirement as at least one other regulation.”
    • “The desire to harmonize those conflicting rules gathered steam under the Biden administration, as it undertook a more aggressive push to regulate cybersecurity than prior administrations. It has continued into the second Trump administration.”

From the cybersecurity breaches and vulnerabilities front,

  • HIPAA Journal reports,
    • “There has been a general trend of increasing data breaches over the past decade, with this year on track to set a new record. According to the H1 2026 Data Breach Report from the Identity Theft Resource Center (ITRC), there have been at least 1,803 data compromises in H1 2026, which will give an annual total of more than 3,600 data compromises if they continue to occur at a similar rate as the first half of the year.
    • “Across those data compromises, there have been 1,394 confirmed data breaches (excluding leaks, exposures, and unknown incidents), accounting for 77% of total events. More than 471 million victim notices have been issued, which already exceeds the total number of victim notices for all of 2025, and there are still six months of the year to go. While at the current rate, this year is unlikely to beat the total for 2024, even with only 6 months of data, 2026 already ranks as one of the worst years to date.
    • “As ITRC explains in the report, part of the reason is the return of mega data breaches, the biggest of which involved the Instructure Holdings’ Canvas platform, which accounted for an estimated 275 million notices. A mega data breach at Under Armour involved more than 72.7 million notices, while the SoundCloud data breach saw 29.8 million victim notices issued.
    • “There were no healthcare data breaches in the top 10 data compromise list, in contrast to H1, 2025, when three healthcare data breaches made it into the top 5. In fact, based on breach reporting to the HHS’ Office for Civil Rights, there have been relatively few mega data breaches in healthcare. In H1 2026, only 7 healthcare data breaches required more than 1 million notices.”
  • Dark Reading relates,
    • “Russian state-backed threat actors are compromising networks of Western governments and enterprises through the Zimbra Collaboration Suite (ZCS), according to intelligence and cybersecurity agencies in more than a dozen countries.
    • “In a joint advisory Thursday, the US government and several allied nations warned that an advanced persistent threat (APT) dubbed “Laundry Bear” has been targeting ZCS customers since July 2025. Laundry Bear actors used a zero-day vulnerability in ZCS, tracked as CVE-2025-66376, in a phishing campaign that featured what experts describe as a “half-click exploit” to breach Zimbra webmail servers.
    • “Unlike traditional phishing campaigns that persuade a user into taking an action, such as clicking a link or opening a file, Laundry Bear’s latest campaign leverages a view-based exploit that only requires a user to view a malicious email within a vulnerable version of the webmail service,” the agencies said in the advisory.
    • The campaign is designed “almost certainly to gather sensitive information for the Russian Federation,” according the advisory. The Laundry Bear attacks mark yet another threat from Russian APTs against US organizations.
  • Cybersecurity Dive tells us,
    • “A critical vulnerability in Check Point Software’s SmartConsole login process is being exploited, with a small number of customers already impacted, according to a security advisory released Wednesday from the company. 
    • “The authentication bypass flaw, tracked as CVE-2026-16232, allows an attacker to gain full administrative privileges after they access an application login token. An attacker can then make changes to security policy and configurations. The vulnerability has a severity score of 9.1 out of 10. 
    • Check Point on Wednesday released a jumbo hotfix to address several security issues in its firewall and management products, according to the advisory.
    • A vulnerability of this type is particularly concerning, giving an attacker the ability to make a number of changes, according to a blog post released Thursday by Rapid7. A remote hacker can “alter administrator permissions, manipulate VPN configurations, and potentially disable or tamper with logging and monitoring,” Rapid7 said. 
  • and
    • “A critical-severity deserialization vulnerability in Microsoft SharePoint is now under exploitation, according to security researchers at watchTowr and Defused. 
    • “The flaw, tracked as CVE-2026-50522, has a severity rating of 9.8 out of 10 and could enable an attacker to execute remote code over a network. 
    • “Hackers are targeting on-premises SharePoint server environments following the release of new exploit code, watchTowr researchers said in a LinkedIn post. Researchers warned that attackers are stealing machine keys to maintain long-term access.”
  • CISA added six known exploited vulnerabilities to its catalog this week.
    • July 21, 2026
      • CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability
      • CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability  
      • CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability  
      • CVE-2026-60137 WordPress Core SQL Injection Vulnerability
        • Security Affairs discusses these KVEs here.
    • July 22, 2026
      • “CVE-2026-16232 Check Point SmartConsole Improper Authentication Vulnerability
        • The Hacker News discusses this KVE here.
      • “CVE-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
        • Cybersecurity Dive discusses this KVE here.
  • Cyberscoop adds,
    • “Malware targeting AI coding assistants and software developers’ automated workflows is spreading into more environments with more capabilities, placing defenders at a growing disadvantage.
    • “A malware strain dubbed Sandworm_Mode, first discovered by Socket in February, represents a growing threat to software development. According to a CrowdStrike report, the self-propagating worm can spread through code repositories with minimal detection, raising alarms about software supply chains.
    • “The malware’s capabilities are extensive, but not especially unique compared to the series of supply-chain worms known as Shai-Hulud, and more recently Mini Shai-Hulud.
    • “This is the new trend,” Adam Meyers, senior vice president of counter adversary operations at CrowdStrike, told CyberScoop. “This is something we’re seeing more and more. It’s the new hotness right now.”

From the ransomware front,

  • Cybersecurity Dive reports,
    • “A threat group called Anubis claimed credit for the ransomware attack against Fairlife, the dairy products unit of Coca-Cola. 
    • “The group says it locked the servers at Fairlife and obtained 1TB of data from the attack, according to researchers at Arctic Wolf. Anubis is threatening to leak information if its demands are not met within a week. Researchers provided screenshots posted on the group’s data leak site
    • “Coca-Cola was forced to suspend U.S. production at Fairlife while it launched an investigation into the attack. Coca-Cola officials noted there was no impact on the safety or quality of its dairy products.” “
  • Dark Reading relates,
    • “Ransomware is not just growing, it is actually accelerating, with activity surging between October 2025 and March 2026, as more than 60 new groups entered an increasingly crowded criminal ecosystem.
    • “For enterprises, the surge means not only more attacks but also a larger and constantly changing pool of adversaries to track and defend against.
    • “Black Kite analyzed ransomware incidents between April 1, 2025, and March 31, 2026, and identified 7,551 known victims worldwide. That represented a 25% increase over the previous 12-month period, with much of the growth concentrated in the second half of the year. Black Kite counted 2,904 victims between April and September 2025 and 4,647 between October 2025 and March 2026, marking a 60% increase in reported ransomware victims. March 2026 was the busiest month with as many as 861 organizations — or nearly 28 per day — falling victim to a ransomware attack.
    • “This isn’t a problem we’ve contained,” says Ferhat Dikbiyik, chief research and intelligence officer at Black Kite. “It’s still a lucrative business, and the barrier to running one keeps getting lower.”
  • The Hacker News tells us,
    • “Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments.
    • Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation of CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw affecting the portal and gateway components of PAN-OS software.
    • Successful exploitation of the flaw allows unauthenticated remote attackers to sidestep authentication and establish VPN sessions without valid credentials when authentication override cookies are enabled with specific certificate configurations.
    • “Post-exploitation tradecraft varied across intrusions, from rapid encryption-only operations to full double-extortion, possibly suggesting multiple affiliates operating under the Qilin ransomware-as-a-service (RaaS) umbrella,” the cybersecurity company said.
  • Bleeping Computer points out,
    • “The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign.
    • “Clop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances.
    • “As cybersecurity company ReliaQuest reported on Thursday, Clop operators have been deploying JSP webshells that allow them to exfiltrate sensitive data from targeted companies’ compromised PLM platforms.
    • “ReliaQuest has observed threat actors actively exploiting CVE-2026-12569, a critical unsafe deserialization vulnerability (CVSS 9.3) affecting PTC Windchill and FlexPLM. Exploitation enables unauthenticated remote code execution and JSP web shell deployment for remote command execution and sensitive product data exfiltration,” the company said.”
  • Per Cisco Talos,
    • “Cisco Talos has discovered a new Rust-based remote access trojan (RAT) we call “msaRAT” attributed to the Chaos ransomware group. The name is derived from the binding names found in the binary: “msaOpen,” “msaClose,” “msaError,” and “msaMessage”.
    • “msaRAT is implemented using the Tokio asynchronous runtime, with primary capabilities of browser-leveraged remote code execution and covert tunneling to establish command-and-control (C2) communications.
    • “This RAT never touches the network directly — it controls its C2 communication channel exclusively through Chrome DevTools Protocol (CDP), a browser debugging API. The binary contains a Cloudflare Workers endpoint, but it never makes HTTP connections to that domain itself; it offloads that work entirely to the browser.
    • “msaRAT manipulates the browser via CDP, performs signaling (SDP Offer/Answer exchange) with Cloudflare Workers, and establishes a WebRTC DataChannel between the browser and the C2 server using Twilio TURN (Traversal Using Relays around NAT) as a relay.”

From the cybersecurity business and defenses front,

  • The Wall Street Journal reports,
    • “The Defense Department signed an up to 10-year, near $7 billion contract with Oracle intended to streamline fragmented licensing and intra-agency efficiency.
    • “The Austin-based cloud computing and software company separately maintained different contracts across the agency. The government said the deal will optimize services and deliver hundreds of millions of dollars in taxpayer savings.”
  • TechCrunch relates,
    • “Glow, a cybersecurity startup founded by former Meta and Snowflake executives, emerged from stealth as a unicorn, betting that artificial intelligence is reshaping how enterprises secure employee devices.
    • “The Palo Alto-headquartered startup on Wednesday said it raised $180 million in an all-equity Series A funding round that valued it at $1.2 billion, with backing from Sequoia Capital, Cyberstarts, Greenoaks, and Redpoint Ventures, alongside participation from Index Ventures, Swish Ventures, Lux Capital, Operator Collective, and Holly Ventures. The investment made Glow one of the latest cybersecurity startups to achieve unicorn status before publicly disclosing revenue metrics.”
  • Cybersecurity Dive relates,
    • “Many ransomware victims remain vulnerable to follow-up cyberattacks, even after they complete their incident response processes, highlighting gaps in mitigation activities that increase their odds of becoming repeat targets, the security firm Black Kite said on Tuesday in its annual ransomware report.
    • “The report described how victims fail to patch critical vulnerabilities and properly configure email security tools, underscoring the importance of thorough digital cleanup operations as part of the ransomware recovery period.” * * *
    • “Black Kite also shared fresh data on the ransomware ecosystem and its top targets.”
    • Because ransomware is a profit-motivated business, cybercriminals prioritize the easiest and most lucrative targets, and if an organization fails to fix the problems that opened the door for hackers in the first place, they are likely to return. That fact makes it imperative for hacked businesses to fix digital liabilities as soon as possible after an incident, lest hackers revictimize them seeking another payout.
  • MSN adds, “The next cyber arms race isn’t about finding bugs. It’s about fixing them first.”
  • Here is a link to Dark Reading’s CISO Corner.

Friday report

Simplicity is a virtue.

From Washington, DC,

  • Roll Call reports,
    • “Speaker Mike Johnson, R-La., defied expectations and kept his fractured conference together to pass several priority items before House members jetted home on Thursday to kick off a five-week recess. 
    • “But how much of that legislation their colleagues in the Senate will take up is a different question, as divisions continue to deepen.
    • “The House adopted a GOP-backed budget resolution along party lines on Wednesday, taking the first step toward passing a $95 billion reconciliation package that’s focused mostly on the Iran war. 
    • “But Senate Majority Leader John Thune, R-S.D. has remained lukewarm on such a package, especially if it includes certain aspects of the so-called SAVE America Act, which would require proof of citizenship to register to vote and photo ID at the polls. 
    • “I can’t count 50 right now on a budget resolution,” Thune told reporters on Thursday. He said the path to clearing the chamber’s so-called Byrd bath, which assesses compliance with reconciliation rules, “is still an open question.”
  • Beckers Clinical Leadership relates,
    • “HHS has rewritten the governing charters for the Advisory Commission on Childhood Vaccines and the National Vaccine Advisory Committee.
    • “The ACCV charter, filed July 21, removes the standalone designated federal officer section that appeared in the previous version, which specified that a full-time federal employee would approve meeting agendas, call meetings and maintain public-facing information on the committee’s activities.
    • “In its place, the new charter refers more broadly to “the federal official responsible for ACCV oversight” calling or approving meetings. The revised charter also adds a provision allowing that federal official, if appointed by the HRSA administrator, to serve as temporary chair if ACCV members have not selected a chair and vice chair. The ACCV advises the HHS secretary on the National Vaccine Injury Compensation Program, including changes to the Vaccine Injury Table and how the government collects and uses vaccine adverse event data.
    • “The revised NVAC charter adds duties not previously included in the panel’s purview, directing members to weigh what it terms “non-immunization strategies,” including healthy lifestyle and disease prevention initiatives, off-label use of already approved drugs and dietary supplements marketed for immune support.”
  • Govexex tells us,
    • “The National Active and Retired Federal Employees Association on Thursday said the Office of Personnel Management still has not sufficiently protected federal workers and retirees as part of a plan to collect claims-level health data in an effort to root out fraud.” * * *
    • “[I]n a letter to [OPM Director Scott] Kupor Thursday, NARFE National President William Shackelford said that while his organization appreciates the steps taken thus far to shield FEHBP and PSHBP participants’ identities, he remains troubled by OPM’s insistence that it be able to re-identify employees via their health records in the future. Under the Health Insurance Portability and Accountability Act, health care data should be not just pseudonymized, but de-identified entirely, he wrote.
    • “NARFE’s position is straightforward. OPM has moved in the right direction,” Shackelford wrote. “But we asked for de-identified data and OPM has offered pseudonymized data, and those are not the same commitment. Pseudonymization does not remove the risk that our members’ health information will be linked back to them; it makes that linkage a matter of OPM’s discretion, exercisable by whoever holds the relevant authority in any future administration.”
    • “Additionally, most of OPM’s reassurances about privacy and the data collection’s anti-fraud purpose exist solely within Kupor’s blog post, and not the proposal published in the Federal Register last month.”
  • Over 700 public comments were submitted by yesterday’s deadline. As the FEHBlog has noted, OPM is not giving FEHB and PSHB carriers and the OPM Inspector General credit for preventing most fraud, waste and abuse in these programs.
  • The American Hospital Association News informs us,
    • “The U.S. Trade Representative yesterday announced it is implementing a 10% or 12.5% tariff on 60 trading partners, which became effective today. These tariffs follow an investigation under Section 301 of the Trade Act of 1974 for lacking or failing to enforce a ban on goods produced with forced labor, according to the agency. Nations that the USTR said had made commitments to adopt and effectively enforce forced labor import prohibitions will receive a 10% tariff, while nations that the agency said had failed to adopt a forced labor import ban will receive a 12.5% tariff. The USTR notice outlines which products are excluded from the new tariffs, including products already subject to Section 232 tariffs, products qualifying under the U.S.-Mexico-Canada trade agreement and certain pharmaceuticals and pharmaceutical ingredients.”
  • and
    • “The Consumer Product Safety Commission yesterday announced it is modernizing the National Electronic Injury Surveillance System, the national database for tracking consumer product-related injuries. The CPSC said that it will replace its manual coding process, used since 1972, with an electronic data exchange through a Qualified Information Network. The new system, NEISS-Remodel, will expand the network to all 50 states, up from 36 under the previous system. NEISS-R is expected to become fully operational by the beginning of 2027.” 

From the Food and Drug Administration front,

  • MedTech Dive reports,
    • It’s been over two months since Dr. Marty Makary stepped down from his post as FDA commissioner, and there has yet to be visible progress toward naming his permanent successor. The gap in leadership is sparking concerns among industry watchdogs that pharma could lack clear guidance on federal priorities for weeks or months to come.
    • The Trump administration has yet to name a nominee to replace acting commissioner Kyle Diamantas — and there are currently multiple hurdles in front of any confirmation process. In particular, the Senate isn’t going to be around much in the coming months. 
  • The Wall Street Journal relates,
    • “Biohackers, longevity enthusiasts and alternative medicine doctors want the peptide BPC-157. Now compounders may be one step closer to lawfully providing it. 
    • “The Food and Drug Administration’s Pharmacy Compounding Advisory Committee voted in favor of easing restrictions on six of seven peptides up for consideration, following strong warnings from the agency’s scientists. It’s now up to the FDA to decide whether to greenlight the drugs for compounding pharmacies to make—and pave the way for a peptide gold rush.
    • * * * “The committee voted against one peptide called Emideltide, evaluated for opioid withdrawal, chronic insomnia, and narcolepsy. David Pope, a pharmacist who voted affirmatively for other peptides, voted “no” on this one, citing a complex regimen and “potentially dangerous downstream consequences.”
  • USA Today tells us,
    • “Consumers will soon have a new over-the-counter pain relief option that combines Tylenol with naproxen, an anti-inflammatory medication.
    • “The Food and Drug Administration on July 24 approved the non-prescription combination of 650 mg of Tylenol (acetaminophen) and 220 mg of naproxen sodium.
    • “The non-opioid tablet can be used by adults and children aged 12 and ​older for temporary relief of headaches, back pain, muscle aches, toothache, menstrual cramps and minor pain from arthritis, the FDA said.
    • ‘Kenvue, which owns Tylenol, said the tablet combination will soon be available for purchase without a prescription at major retailers.”
  • Fierce Pharma informs us,
    • “With all eyes on Tavneos’ seemingly precarious approval status in the U.S., Amgen is advancing plans to defend the ANCA-associated vasculitis (AAV) drug it inherited in its $3.7 billion buyout of ChemoCentryx. 
    • “The California pharma on Thursday submitted data and analyses to the FDA to help secure a hearing in hopes of keeping Tavneos on the U.S. market. The package includes a third-party re-evaluation of the med’s controversial pivotal trial, real-world evidence and patient and HCP testimonials.
  • Cardiovascular Business lets us know,
    • “Penumbra is recalling specific lots of its RED 68 Perfusion Catheter due to an ongoing safety concern. 
    • “The U.S. Food and Drug Administration (FDA) has ruled that this is a Class II recall. This means using the device without following the manufacturer’s recommendations could lead to “temporary or medically reversible adverse health consequences.” 
    • ‘The recall was put in place due to a risk of the catheters fracturing. Penumbra has said “manufacturing issues” are to blame, but the company is still investigating the issue to learn more.”

From the public health and medical / Rx research front,

  • The Centers for Disease Control and Prevention announced today,
    • “As of July 24, 2026, the amount of acute respiratory illness causing people to seek health care is very low.
    • “Considering multiple data sources, COVID-19 activity is low and stable nationally but is beginning to show early signs of an increase in the West and South.
    • “RSV activity is very low in most areas of the country. Emergency department visits and hospitalizations for RSV are low but remain highest among infants and children younger than 4 years old.
    • “Seasonal influenza activity is low.
    • “Parainfluenza (PIV) is elevated nationally. Whooping cough (pertussis) continues to circulate at lower levels compared to post-pandemic peaks.”
  • The American Hospital Association News reports,
    • “There have been 2,318 confirmed measles cases in the U.S. so far this year, the most in the country since 1991, according to the latest data from the Centers for Disease Control and Prevention. There were 2,289 cases in 2025. Cases this year have been reported by 45 jurisdictions. The CDC said that 93% of cases are outbreak-associated. The vaccination status of 93% of cases is unvaccinated or unknown. The agency said that 7% of cases this year have been hospitalized, lower than last year’s figure of 11%.”
  • The Washington Post offers an opportunity to check out your county’ measles vaccination rates for kindgarteners.
    • “The share of U.S. counties where 95 percent or more of kindergartners were vaccinated against measles — the number doctors say is needed to achieve overall protection for the class, known as “herd immunity” — has dropped from 50 percent before the pandemic to 28 percent, according to The Post’s examination of the public records from 44 states and the District of Columbia.”
  • The Wall Street Journal tells us,
    • “Public-health officials are investigating four additional states as part of a multistate cyclospora outbreak linked to iceberg lettuce that they warn could be even broader.
    • Illinois, Kansas, Oklahoma and Pennsylvania are the latest states added to the investigation, the Centers for Disease Control and Prevention said Friday. The health agency said last week it was investigating the outbreak in Indiana, Kentucky, Michigan, Ohio and West Virginia. 
    • “The CDC said epidemiologic data continued to show the outbreak stemmed from the consumption of iceberg lettuce from Taylor Farms. Nearly 2,000 people who ate food from Taco Bell have been sickened in those nine states during the outbreak, the agency said. Nearly 100 people have been hospitalized. 
    • “The iceberg-lettuce outbreak might be even broader than what health authorities have found. The authorities are investigating a number of food-related outbreaks, including several involving cyclospora, a parasite that causes explosive diarrhea. For now, the authorities are probing the various cyclospora outbreaks as if they are distinct, but it is possible they are related and investigators so far haven’t been able to connect them.”
  • and
    • “Warmer winters and changes in land use are driving ticks carrying Lyme disease and alpha-gal syndrome into new areas such as Ohio and Michigan.
    • “In 2025, Lyme disease cases jumped more than 60% in Ohio and almost 80% in Michigan as blacklegged tick populations expanded.
    • “Lone-star ticks, which cause the meat allergy alpha-gal syndrome, are established in 19 counties in Ohio and five in Michigan.”
  • The New York Times points out,
    • “The same chemical process that turns a baking cake golden brown is at work aging your body’s cells. Over decades, your tissues, baking steadily at 98.6 degrees, slowly accumulate compounds called advanced glycation end products, or AGEs, as sugars interact with protein and fat in the bloodstream. The buildup of AGEs is a hallmark of the aging process, making tissues like collagen sticky and rigid and causing inflammation that can lead to heart disease, eye damage, kidney disease and diabetes.
    • “Researchers have tried unsuccessfully to develop medications that can stop AGEs from forming. But a new study, published on July 16 in the journal Nature Communications, describes a different tack: Scientists created an enzyme that cleans one of the most common AGEs from human tissue, helping to turn back the clock even after the aging compounds have settled in the body. This cleanse can help repair the tissue and has the potential to allow cells to act younger.
    • “It’s a small step in this bigger direction, because aging is very complicated,” said Aaron Cravens, a founder and the chief executive of Revel Pharmaceuticals, which developed the new enzyme, and the lead author of the study. “It’s the first time, I think, that anyone in the field has shown at the structural level that you can actually reverse some of these changes.”
  • MedPage adds,
    • “Exceptional memory at age 80 and beyond was not due simply to good genes, an analysis of prospective data suggested.
    • “The study assessed outcomes for superagers — people 80 or older with episodic memory at least as good as adults 20 or 30 years younger — and cognitively average controls.
    • “Genotype distributions and APOE status did not differ between groups, reported Ignazio Stefano Piras, PhD, of the Translational Genomics Research Institute at City of Hope in Phoenix, and co-authors.
    • “Neither APOE nor any of three polygenic risk scores predicted whether a person would be a superager, Piras and colleagues wrote in Alzheimer’s Research & Therapy. Results were similar after accounting for global non-European or African ancestry.”
  • Health Day informs us,
    • “About 50% to 88% of children with autism experience motor skill challenges
    • “Organized sports — especially martial arts and aquatic training — can improve motor skills
    • “Consistently large improvements were seen in balance, coordination, overall motor skills and object control.”
  • and
    • “Increases in a problematic social media use may contribute to worsening attention-deficit/hyperactivity disorder (ADHD) symptoms during adolescence, particularly among boys, according to a study published online July 17 in JAMA Network Open.”
  • The Wall Street Journal notes,
    • “Ipsen said its drug Bylvay missed the primary objective in a late-stage clinical trial for biliary atresia, a rare liver disease affecting babies.
    • “Bylvay missed the study’s primary objective of showing an improvement in native liver survival rates compared to a placebo, Ipsen said.
    • “Ipsen said biliary atresia, the leading cause of pediatric liver transplants, has no approved therapeutic options beyond surgery or transplant.”
  • Per BioPharma Dive,
    • “Sanofi is calling it quits on an experimental eczema drug that it had seen as a potential successor to its blockbuster medication Dupixent, according to a Friday announcement.
    • “Sanofi had said in January that it intended to seek clearance of the drug, amlitelimab, in atopic dermatitis despite mixed late-stage study results and signs of possible safety concerns. On Friday, though, the French pharmaceutical firm said that, during a pipeline review, it found that the “totality of efficacy and safety evidence generated to date” doesn’t support further development of amlitelimab in that indication.
    • “Sanofi’s decision follows a recent move by Amgen and Kyowa Kirin to shelve a similar experimental medicine. The pharma company will continue testing amlitelimab in celiac disease, though, and is slated to reveal data from a mid-stage study by the end of the year.”

From the U.S. healthcare business and artificial intelligence front,

  • Fierce Healthcare reports,
    • “HCA Healthcare on Friday affirmed its earlier warnings about Affordable Care Act (ACA) exchange subsidies fallout, telling analysts that patients who dropped off marketplace plan coverage due to increased premiums have “migrated almost one for one” to uninsurance. 
    • “The country’s largest for-profit brought in $20.23 billion in second-quarter revenue, up 8.7% year-over-year, net income of $1.69 billion, up 2.8%, and adjusted EBITDA of $4.027 billion, up 4.6%, according to financial results published Friday morning. The company also reported diluted earnings per share increasing 11.6% to $7.62 per share.
    • “In particular, a payer mix shift driven by increased uninsured volumes had an “unfavorable impact” on income of approximately $400 million before income taxes, above its estimates from earlier in the year.”
  • and
    • “Clinician-led artificial intelligence platform Anterior and health tech company Stellarus entered a strategic partnership Thursday to tackle automating prior authorizations.
    • “The partnership aims to support providers through automating tasks—such as case research and policy application—to allow teams to focus on complex determinations. The companies say providers will receive quicker, first-time approvals, ultimately giving members quicker care access. 
    • “Stellarus provides the healthcare technology platform, integration expertise and operational experience to help health plans put AI into practice, while Anterior brings leading clinical AI to automate the research, documentation and policy application that support prior authorization,” said Vanessa Colella, Stellarus president and CEO.”
  • and
    • “Addressing healthcare’s biggest challenges will require payers and providers working together.
    • “That’s why the team at Aetna has spent the past several years investing in ways to bridge those trust gaps and better unite the two sides of the industry that are often at odds. And a new survey suggests that work is paying off.
    • “Morning Consult polled 723 provider executives across multiple disciplines on Aetna’s behalf, and found an average provider trust score of 6.1 on a scale of one to 10. By comparison, a similar poll conducted in the first quarter found a 5.4 trust score.”
  • Modern Healthcare relates,
    • “Surgery Partners plans to sell its ownership interest in two Idaho hospitals to Intermountain Health.
    • ‘The proposed transaction, which values the facilities at an estimated $1.15 billion, would include Surgery Partners’ Idaho Falls Community Hospital and Mountain View Hospital, also in Idaho Falls, along with affiliated clinics.
    • “Surgery Partners is expected to receive about $795 million in the transaction, according to a Friday news release.”
       
  • MedTech Dive tells us,
    • “Edwards Lifesciences reported strong sales of its heart valves in the second quarter and outlined several upcoming catalysts expected to maintain solid growth rates, starting with an anticipated Medicare coverage expansion.
    • “Sales were better than the company expected for transcatheter aortic valve replacement devices, Edwards’ largest product line, as well as newer repair and replacement treatments for mitral and tricuspid diseases, due to increasing clinical demand, executives said on a Thursday earnings call.
    • “CEO Bernard Zovighian tied TAVR demand to growing evidence backing earlier use of the procedure to treat aortic stenosis patients and predicted the “durable” momentum would support the company’s 10% total sales growth target long term.”
  • Fierce Pharma informs us,
    • “After a post-[July 4th] holiday lull, prescriptions for GLP-1s have more than bounced back. Weekly prescriptions for Novo Nordisk’s Wegovy pill and Eli Lilly’s Foundayo reached new highs during the previous week, collecting 169,800 and 26,760, respectively, according to IQVIA data cited by Citi. The two oral drugs’ previous records were about 161.5K and 24.3K, respectively. 
    • “Other GLP-1 drugs also enjoyed a boost, as total GLP-1 scripts across obesity and diabetes increased 6.6% sequentially, according to Citi.
    • “Against this backdrop, Lilly’s oral Foundayo seemed to enjoy a small inflection point, with a total 24,303 scripts notably breaking away from its roughly 20K level in the prior five weeks.  
    • “Meanwhile, joining the bigger trend, Wegovy pill scripts dropped to 147.5K during the week, versus about 153K the prior week or 161.5K at its peak. But the contribution of the oral version to the overall Wegovy scripts remained stable at around a third, per Citi’s note.” 

Thursday report

Simplicity is a virtue.

From Washington, DC,

  • Bloomberg Law reports,
    • “The health insurance industry is adding to scrutiny of the American Medical Association’s control of billing codes, voicing resistance to the group’s planned overhaul of how doctors bill health plans for maternity care.
    • “Insurers say they didn’t have enough time to prepare for the change, while AMA claims the industry didn’t raise concerns during the development process. The dispute is gaining attention from policymakers amid a broader political rift between the AMA and Republicans over the country’s healthcare billing system.
    • “The AMA develops and trademarks the Current Procedural Terminology, or CPT, codes that doctors use to bill insurers for medical services. The codes are baked into government programs like Medicare, and critics—as well as Medicare’s payment advisory panel—have long questioned the conflict of interest in letting AMA help determine doctors’ payments.” * * *
    • “Overall, the new protocol eliminates 17 codes in favor of 12 new codes and six revised codes. AMA developed the codes over the course of three years with its CPT panel, which includes seats for representatives nominated by health insurance trade group AHIP and the Blue Cross Blue Shield Association. The codes were released in April, before the typical September release, to give everyone more time to prepare.
    • “But insurers say it’s not enough, pointing to the fact that babies due to be born in 2027 are already on the way. And while insurance representatives serve on the panel, participants are legally blocked from sharing information about the meetings, according to AHIP.” * * *
    • “The Centers for Medicare & Medicaid Services last week proposed extending the current coding system for an additional year alongside the new codes, saying it’s concerned the change will be disruptive.”
  • Beckers Payer Issues relates,
    • “Committees in the House and Senate each advanced healthcare price transparency legislation this week, both aiming to expand disclosure requirements for hospitals, insurers and other healthcare providers.  
    • “Both measures would expand the existing hospital and payer price transparency rules, bring ASCs and labs under similar mandates for the first time and add new reporting requirements for insurers, pharmacy benefit managers and health plan administrators, though they differ on penalty structures, effective dates and scope.” * * *
      • Patients Deserve Price Tags Act
        • “The Senate Committee on Health, Education, Labor and Pensions advanced legislation July 22 that would implement new price transparency requirements for hospitals, insurers, laboratories, imaging providers and ASCs, while also expanding group health plans’ access to claims and reimbursement data held by insurers and PBMs.
        • “The committee passed the Patients Deserve Price Tags Act by a vote of 21-1, one of several healthcare bills advanced together in the same en bloc vote. The bill now heads to the full Senate.
      • The Lower Costs, More Transparency Act
        • The House Energy and Commerce Committee advanced a broad healthcare price and cost transparency package July 21 in a 45-0 vote that would also expand price transparency rules for hospitals, insurers, ASCs and the administrators of employer-sponsored health plans if signed into law.
        • The bill was also referred to the House Ways and Means and Education and Workforce committees.
  • The Hill adds,
    • “Bipartisan legislation to cap the cost of insulin at $35 for people with private health insurance advanced through a key Senate committee Wednesday, but its future remains uncertain. 
    • “The measure cleared the Senate Health, Education, Labor and Pensions [HELP”] Committee by a bipartisan 17-5 vote, with six Republicans joining every Democrat on the panel.” 
  • STAT New notes,
    • “People with diabetes who use a popular long-acting insulin pen made by Sanofi have had to become pharmacy scouts in recent weeks as they encounter supply issues.
    • “The Lantus Solostar pen containing 3 milliliters of insulin glargine has been running low for several weeks because of increased demand “driven by broader market dynamics,” a Sanofi spokesperson told STAT. The issue is not technically considered a shortage by the Food and Drug Administration, but patients are nonetheless having trouble finding the medication.”* * *
    • “Pharmacists can try to switch patients over to Semglee or Rezvoglar, the FDA-approved biosimilars, if their insurance allows that. Or they could ask prescribers to go for Lilly’s Basaglar, which comes in pen form.”
  • Thompson Reuters tells us about
    • Rev. Proc. 2026-26 (July 21, 2026). Available at https://www.irs.gov/pub/irs-drop/rp-26-26.pdf
      • “The IRS has announced 2027 indexing adjustments for important percentages under the Affordable Care Act (ACA). The indexing adjustments are based on projections of premium growth and income growth. For 2025 and several years prior, the premium growth rate was based on per enrollee spending for employer-sponsored insurance as published in the National Health Expenditure Account. However, HHS revised the measure to also capture increases in individual market premiums, starting with the 2026 benefit year. The IRS is applying this updated premium growth measure for 2027 as well.
      • “The required contribution percentage is used to determine whether employer-sponsored health coverage is “affordable” for purposes of employer shared responsibility under Code § 4980H. It is adjusted from a 9.5% baseline to 10.22% for plan years beginning in 2027. (This is an increase from 9.96% for 2026.) The percentages used to determine the amount of household income that individuals who are eligible for premium tax credits must contribute toward the cost of Exchange coverage vary across household income bands. The 2027 percentages range from 2.15% to 10.22%.”
  • STAT News informs us,
    • “The Senate’s [HELP] panel delayed until next week a vote on Erica Schwartz to run the Centers for Disease Control and Prevention, after postponing a separate vote on Sean Kaufman for a key public health preparedness role.”
  • and
    • “Nearly 18 months after taking office, President Trump has nominated a leader for the federal agency that oversees mental health and addiction policy. 
    • “If confirmed by the Senate, Timothy Westlake, a Wisconsin-based physician with decades of experience in both clinical and policy roles, would serve as assistant secretary of mental health and substance use. The position would also make him head of the Substance Abuse and Mental Health Services Administration, which has operated without a long-term leader since Trump was inaugurated in January 2025.” 
  • Tammy Flanagan, writing in Govexec, discusses “Why your retirement experience may depend more on the agency than the benefit.”
    • “Federal retirees interact with OPM, the Thrift Savings Plan and Social Security at different stages of retirement. Their latest performance data reveals starkly different customer service experiences and highlights where delays remain most likely.”
  • OPM Director Scott Kupor added (Substack link) a post to this Secrets of OPM blog. This one concerns the vital importance of investment income to benefit programs.
    • “The federal government manages a number of trust funds, but the two largest are the Social Security Trust Fund (about $2.7 trillion today) and the Civil Service Retirement and Disability Funds (CSRDF) (about $1.1 trillion today), the latter of which we at the Office of Personnel Management (OPM) have the privilege of overseeing.”
    • “It’s unlikely we are going to get Congress to eliminate the Treasury-only investment restrictions on the Social Security Trust Fund or the CSRDF. One can dream, but we all know that hope is not a strategy. However, all hope is not lost – and we at OPM have partnered with the Treasury Department to change what we can to the benefit of the American taxpayer.
    • “Enter “duration.”
    • “A very quick lesson on the economics of treasuries (and bonds more generally). Treasuries have varying expiration dates (or “duration,” as the finance nerds prefer). For example, you can buy Treasury bills (less than 1-year in duration), Treasury notes (with 2, 3, 5, and 7-year durations) and Treasury bonds (with 20 and 30-year durations). It’s not always the case, but in general the longer the duration, the higher the interest rate the government will pay you on the bond. Today, a 30-year duration bond pays about 5% in annual interest, whereas the 10-year pays 4.5% and a 1-year pays 4%.
    • “Historically, the CSRDF has had an average duration across its entire Treasury portfolio of about 7.5 years. That means, that we had lots of different maturities, ranging from less than 1-year to up to 15-years, but the average was right in the middle. As a result, we have achieved the roughly 3-4% annualized returns that I mentioned above on the overall fund balance.”* * *
    • “Partnering with Treasury, we concluded that a longer average duration was appropriate for the CSRDF from a risk and pension liability perspective and would yield a better economic return to the fund. As a result, OPM has increased our duration from 7.5 years to 15 years by adding longer-date treasuries (e.g., 20- and 30-year bonds) to the portfolio.
    • “Who cares? Well, this enabled us to increase the expected investment return of the portfolio to approximately 4.4%.”

From the Food and Drug Administration front,

  • A Dallas Texas NBC TV station reports,
    • “The FDA announced that nearly 20 million eggs (more than 1.5 million cartons) are being recalled due to the risk of Salmonella.
    • “Midwest Poultry Services voluntarily issued the recall of white shell eggs and brown cage-free shell eggs that were sold at Kroger and Brookshire Grocery stores in Texas, as well as smaller retail outlets.
    • “The eggs are also sold in Louisiana, Oklahoma, Arkansas, New Mexico, and Mississippi.
    • “The eggs were produced and distributed in Texas between June 6 and July 3; the latest sell-by or best-by date is Aug. 17.
    • “The recalled eggs will have an identifying code number printed on the left or right sides of the carton in date-coding ink only. Only codes P-1950 or 0840962 with a Julian Date between 157 and 184 printed on the side of the carton are recalled.”
  • Fierce Pharma relates,
    • “An FDA advisory committee has recommended that two peptide drugs that were previously restricted because of potential safety concerns be restored to the 503A Bulk Drug Substances list, which would remove the restrictions on how they are produced by compounders.
    • “Eight of the 15 members of the Pharmacy Compounding Advisory Committee (PCAC) voted to add both drugs back to the list, with six members voting ‘no’ and one abstaining. 
    • “BPC-157 and KPV are the first two of seven drugs that are being reviewed Thursday and Friday by the PCAC. In 2023, 12 peptides were reclassified, which restricted their use. In addition to safety concerns, the FDA cited a lack of evidence supporting their efficacy.”
    • “BPC-157, which is not approved by the FDA, is a synthetic anti-inflammatory peptide used to treat ulcerative colitis. BPC-157 and KPV, also an anti-inflammatory,  have also gained popularity in wellness and fitness influencer circles for supposed soft-tissue healing and bone repair capabilities. 
    • “The FDA is not required to follow the recommendations of the PCAC. The agency will make the final decision on whether the peptides can be manufactured by compounders.”  
  • The Wall Street Journal informs us,
    • “The U.S. Food and Drug and Administration said Wednesday it is investigating an additional cyclospora outbreak that the agency said has sickened at least 72 people.
    • It is the latest of four continuing cyclospora outbreaks being investigated by the FDA. The largest involves at least 1,644 cases, which have been linked to shredded iceberg lettuce supplied by Taylor Farms and served at Taco Bellin five states. 
    • “The companies have said that the shredded lettuce, sourced from central Mexico, has been removed from the U.S. market. Taylor Farms said last week that it voluntarily recalled iceberg lettuce grown and processed in Mexico, including products sold in grocery stores and restaurants across 27 states in the U.S.
    • “The FDA hasn’t yet identified a source for any of the other cyclospora outbreaks.”
    • “The FDA also said it was investigating at least 106 reported cases of salmonella and eight cases of listeria. The sources of those illnesses have yet to be identified.”

No Surprises Act News

  • Modern Healthcare reports,
    • “The Centers for Medicare and Medicaid Services and its contractors can’t keep up with the ceaseless onslaught of No Surprises Act out-of-network billing cases, federal data show.
    • “Providers and health insurance plans initiated 1.43 million Independent Dispute Resolution arbitrations this year through May, 46% more than during the comparable period in 2025. The system resolved 1.36 million cases over those five months.” * * *
    • “There’s no real end in sight,” said Lawson Mansell, a senior health policy analyst at the Niskanen Center, a centrist think tank.
    • “There have been 6.3 million cases since Independent Dispute Resolution began in 2022, and arbitrators have resolved 5.9 million. Providers file the lion’s share of cases.” * * *
    • “The new gateway may reduce the backlog, Mansell said. But because providers can win large payments, they have an incentive to continue filing many cases, he said.”

From the judicial front,

  • Modern Healthcare reports,
    • “The Health and Human Services Department will fight to restore policies it says are vital to protecting the health insurance exchanges against fraud.
    • “HHS filed an appeal with the U.S. Court of Appeals for the 4th Circuit on Tuesday to reverse a decision the U.S. District Court for the District of Maryland handed down last month that invalidated portions of a program integrity final rule the Centers for Medicare and Medicaid Services issued last year.
    • “Democratic elected officials representing Baltimore, Chicago and Columbus, Ohio, are the lead plaintiffs in the case alongside the left-leaning advocacy groups Doctors For America and the Main Street Alliance. The plaintiffs contend CMS didn’t follow proper regulatory procedure when it issued the regulation.” * * *
    • “Last week, the same district court temporarily blocked sections of a separate health insurance exchange rule in a case brought by some of the same plaintiffs.”
  • The American Hospital Association News adds,
    • “The Centers for Medicare & Medicaid Services yesterday released implementation guidance following a district court ruling July 16 that enjoined eight provisions from its 2027 notice of benefit and payment parameters final rule, which were set to become effective July 20. The rule issues standards for qualified health plans offered through the health insurance marketplaces. “Accordingly, for plan year 2026, Exchanges must immediately begin to update their systems to stop removing or denying advance payments of the premium tax credit for any new applicants or existing enrollees due to having failed to file and reconcile prior years’ premium tax credits,” CMS wrote. “Exchanges must continue in this manner for plan year 2027.” The agency said that the Department of Health and Human Services reimplemented the automatic 60-day time extension to resolve inconsistencies in household income data.”

From the public health and medical / Rx research front,

  • Fox News reports,
    • “As New York City continues to investigate an outbreak of Legionnaires’ disease that has claimed multiple lives and sickened dozens of people, doctors say there are ways people can reduce the risk of exposure.
    • “As of July 21, there have been five deaths and 82 diagnoses linked to the Upper East Side outbreak, according to the New York City Department of Health and Mental Hygiene. Eight patients remain hospitalized.
    • “Health officials said no new cases had been reported in the previous six days, suggesting the source of exposure has likely been eliminated, although the investigation remains ongoing.
    • “Legionnaires’ disease is a serious type of pneumonia that is typically spread by tiny water droplets containing Legionella bacteria, according to the Centers for Disease Control and Prevention.”
  • The Wall Street Journal informs us,
    • “Many people are reconsidering their Caesar salad lunches and berry breakfasts as cases of cyclosporiasis, the explosive-diarrhea illness, continue to rise in the U.S.
    • “The good news is, they don’t have to. The Centers for Disease Control and Prevention hasn’t recommended that people cut fresh produce out of their diets, only that they avoid recalled iceberg lettuce from Taylor Farms.
    • “We asked food-safety experts what we know—and don’t—about how to safely eat produce right now.” * * *
    • The only food recalled in connection with the current cyclosporiasis outbreak is iceberg lettuce from Taylor Farms de Mexico, sourced from central Mexico. The CDC lists all of the affected products here. Of course, this list could grow so consumers should keep an eye on the latest news.
    • “The vast majority of fresh fruits and vegetables are safe to eat, food-safety experts say. All fresh produce carries some inherent risk, separate from the cyclosporiasis outbreak, but experts say the health benefits of eating these foods generally outweigh those. 
    • “It’s a special time of year,” said Kali Kniel, a professor of microbial food safety at the University of Delaware. “Go to the farmers market, buy local if you can, where you know a farmer in your area has grown that directly.”
    • “Commercial processing can magnify certain food-safety risks, including chopping and shredding in large facilities where a single contaminated leaf can mix with other produce. For salad lovers, experts recommend buying whole heads of lettuce and removing and discarding the outer couple of layers of leaves.
    • “Mixed-lettuce bags might make life easier, but they are particularly risky since the lettuce is pulled from different sources, said Marion Nestle, a professor emerita of nutrition, food studies and public health at New York University.” * * *
    • “Cooking produce to 158 degrees Fahrenheit is the surest way to eliminate risk of contamination, experts say. 
    • “Peeling, too, or removing outer layers of produce, is another effective safeguard. Cyclospora parasites often become entrapped in produce through contaminated water used to grow or wash it, so areas that come into contact with water are more likely to be affected. 
    • “Freezing might reduce some risk by eventually killing eggs of the parasite, but doesn’t guarantee safety.”
  • and
    • “Congratulations if you’re among the country’s nearly 56 million ex-smokers. Many health benefits are coming your way—some of them within just a few minutes.
    • “Over the long term, though, the health picture gets a lot more complex. Some problems caused by smoking take decades to clear up, and certain lung damage can’t be fixed. Plus, a higher risk for lung cancer never completely fades.
    • “Even so, there are plenty of steps ex-smokers can take to boost the benefits from quitting, from changing their diet to beefing up their exercise regimen. Even if restoring pristine lung condition isn’t an option, doctors say quitting still matters—both for health and quality of life.
    • “Quitting is absolutely one of the most powerful things that someone can do for their health at any stage, at any time,” says Eric Singhi, a thoracic medical oncologist with the MD Anderson Cancer Center in Houston.”
  • Cardiovascular Business tells us,
    • “Approximately 20 million routine chest CT scans are performed for non-cardiac reasons in the U.S. each year. They represent a large untapped opportunity to detect coronary artery disease.
    • “That’s according to a presentation at SCCT2026, the Society of Cardiovascular Computed Tomography (SCCT) annual meeting, by Suhny Abbara, MD, MSCCT, senior associate consultant and professor of radiology at Mayo Clinic in Jacksonville, Florida, editor-in-chief of Radiology, the flagship journal of the Radiological Society of North America (RSNA), and a former SCCT president. He urged health systems to capitalize on the incidental findings already visible on millions of imaging exams.
    • “As a cardiac CT person, I think I can make less of a difference population-wise with coronary CT,” Abbara said. “Those are patients that are already on our radar. There is a huge number of patients, 20 to 40 times more, where we can detect coronary atherosclerosis serendipitously in a CT done for other reasons.”
  • Health Day relates,
    • “Obesity treatment for young people in the U.S. is rapidly changing.
    • “Adolescents and young adults are increasingly using GLP-1 weight-loss medications, while rates of bariatric surgery are declining, according to a study published July 20 in JAMA Pediatrics.
    • “This research is the first national-scale Epic Cosmos analysis, to our knowledge, to characterize real-world use of combined GLP-1 receptor agonist therapy and metabolic and bariatric surgery among adolescents and young adults with obesity,” said lead author Sarah Messiah, associate dean for research at UT Southwestern’s Peter O’Donnell Jr. School of Public Health.
    • “Researchers analyzed records from more than 204,000 patients between 13 and 25 years of age who were treated for obesity between May 2022 and January 2026.
    • “They found exclusive GLP-1 use increased from 88.2% in 2022 to 96.1% by early 2026. During the same period, bariatric surgery rates fell from 11.6% to 3.7%.”
  • BioPharma Dive adds,
    • “Eli Lilly on Thursday bolstered the case for its new experimental obesity medicine, announcing the success of two more Phase 3 trials and plans to seek approval of the drug next year. 
    • “The Triumph-2 and Triumph-3 studies build on research released in May that found the drug, retatrutide, could help people lose 30% of their body weight after 104 weeks, reaching a level associated with bariatric surgery. The two new trials included overweight or obese patients who also had either type 2 diabetes or cardiovascular disease.
    • “The overall weight loss in the two studies was less than in the Triumph-1 study released in May, showing an average of 21% body weight loss after 80 weeks in the diabetes group and 23% loss in the cardiovascular disease cohort at the highest doses. Still, those results met expectations for patients with underlying conditions who often lose less weight, RBC Capital Markets analyst Trung Huynh wrote in a note to clients.”
  • The American Hospital Association lets us know “what doctors want patients to know about heart failure.
    • “Heart failure can affect energy, breathing and daily life, but early diagnosis, treatment and follow-up can help people manage symptoms.”
  • Fierce Pharma reports,
    • Johnson & Johnson has unveiled massive phase 3 survival data for its dual bispecific combination in earlier-line multiple myeloma, delivering another catalyst that could add a new twist in the commercial trajectories of off-the-shelf T-cell engagers versus personalized CAR-T therapies.
    • The combination of J&J’s Tecvayli and Talvey slashed the risk of disease progression or death by 89% compared to standard-of-care cocktails in second- to fifth-line multiple myeloma patients, according to results from the phase 3 MonumenTAL-6 trial. 
    • In another remarkable showing, the two T-cell engagers targeting BCMA and GPRC5D delivered a 62% reduction in the risk of death, J&J announced Thursday.

From the U.S. healthcare business and artificial intelligence front,

  • Beckers Hospital Review reports,
    • “Dallas-based Tenet Healthcare recorded an $826 million net income in the second quarter of 2026, up from $288 million during the same period, according to its July 23 financial report. 
    • “The publicly traded for-profit system reported operating income of $1.5 billion (26.7% operating margin) during the three months ended June 30, up from $823 million (15.6% margin) during the same period last year. 
    • “Total operating revenue was $5.6 billion in the second quarter of 2026, a 6.8% increase year over year. Tenet received $413 million in revenue in Q2 from the early conclusion of Conifer’s revenue-cycle services contract with Chicago-based CommonSpirit Health, bringing full control of the company back under Tenet. 
    • “Tenet’s salaries, wages and benefits totaled $2.23 billion in Q2 2026, a 3.3% increase year over year. Supply expenses totaled $984 million, a 5.6% increase. Other operating expenses totaled $1.2 billion, a 4.9% increase. 
  • and
    • “Most patients decide on a hospital before settling on a physician — or land on both in the same step — when they first encounter a new health concern, according to survey results U.S. News & World Report published July 20.
    • “U.S. News worked with PureSpectrum to poll 500 Americans nationwide who had personally arranged care for themselves or a family member within the past two years.
    • “Fifty-three percent of respondents said the hospital came first in their decision, or that hospital and physician were chosen together. The other 47% picked their physician before the hospital entered the picture.
    • “When a preferred physician cannot practice at a patient’s hospital of choice, 80% follow that physician to a different facility rather than give up the relationship. Only 20% take the opposite route, opting for a different physician to stay at the hospital they want.
    • “Patients trust referrals from physicians the most when it comes to sources of information about hospitals, averaging at 4.0 on a five-point scale of trustworthiness. Next was data directories, such as online directories or hospital websites, at 3.5 to 3.7, followed by AI chatbots, social media and podcasts, at 2.7 to 2.8.
    • “Age shifts that picture: patients between 26 and 40 place nearly as much trust in podcasts, AI chatbots and social platforms as they do in referrals or hospital websites — a gap that is far wider among older patients. That same younger group also leans on consumer reviews: 81% said sites like Google and Yelp shape what they decide.”
  • Beckers Physician Leadership points out five things to know about “the forces reshaping physician compensation in 2026.”
  • Fierce Healthcare tells us,
    • “Teladoc Health unveiled a new virtual care model for employers and health plans designed to offer a more coordinated, personalized approach for members, while tying payment to clinical and financial outcomes.
    • “The model, called Teladoc One, was built to replace fragmented, condition-specific healthcare programs with an integrated offering that dynamically supports a person’s entire health needs rather than only addressing one disease at a time, company executives said. As part of the model, Teladoc Health care teams deliver and coordinate care across virtual settings and in partnership with a member’s local providers. 
    • “Teladoc One, fundamentally, is a new care model that’s changing the way that we deliver care,” Kelly Bliss, president of U.S. Group Health at Teladoc Health, told Fierce Healthcare in an interview.”
  • and
    • “Cigna Healthcare is taking steps to significantly expand its personalized care management programs, leaning on AI to identify risks sooner and simplify the patient journey.
    • “Through the initiative, Cigna’s care teams use predictive analytics to identify individuals who may benefit from supports or intervention earlier, which can avert more negative outcomes or disease progression down the road.
    • “The insurer also deploys its more than 1,250 clinicians, including nurse managers and behavioral health professionals, to guide the care journey. They are empowered to coordinate care between providers and point members to supports available through their health plan that may be beneficial.”
  • and
    • “Erlanger Health System plans to join Prisma Health, creating a 27-hospital system in exchange for a $2 billion strategic capital commitment toward care in the Chattanooga, Tennessee area.
    • “The nonprofit health systems announced their signed non-binding letter of intent Wednesday morning but did not provide a tentative timeline for the deal. A final agreement will require approvals from Erlanger’s board of directors, who already have backed the deal, as well as Erlanger’s independent oversight monitor board, the local county commission and other state and federal regulators. 
    • “The pair said their proposed partnership will boost access to specialty care, better fund long-term capital projects, secure “mission critical programs” such as southeast Tennessee’s only Level 1 trauma center and other safety-net operations, and generally help the organization grow amid a toughening operating environment.” 
  • Beckers Health IT lets us know,
    • “OpenAI has expanded Health, a ChatGPT feature that lets users securely connect personal health data, to all eligible users in the U.S.
    • “The rollout covers logged-in users age 18 and older on web and iOS across the Free, Go, Plus and Pro plans, according to a July 23 OpenAI news release.
    • “Health lets users connect Apple Health data and supported medical records from U.S. hospital systems, One Medical or Function Health. With permission, ChatGPT can then use that information across any conversation, not just within a dedicated Health tab, to compare lab results, summarize changes since a last appointment, or factor in a recent injury or dietary restriction.
    • “OpenAI said the wider release builds on a limited early test in which more than 70% of health-related conversations happened outside the dedicated Health space, prompting the company to fold that context into everyday chats. Connected medical records and Apple Health data, along with conversations that use them, are not used to train OpenAI’s foundation models or target ads, the company said. Users can disconnect data sources at any time, and connected data is deleted from OpenAI’s systems within 30 days.
    • “The feature runs on GPT-5.5 Instant for free users and GPT-5.6 Sol for paid users, both developed with input from physicians and evaluated on OpenAI’s HealthBench Professional benchmark.” 
  • The Wall Street Journal adds,
    • “One of the looming worries about artificial intelligence is that it will automate away jobs. A report from researchers at Google released Thursday says that, so far, the technology is mainly being used as an aid to workers.
    • “It is a finding that, if it holds true as AI continues to develop, could point to a future where the demand for highly skilled workers is accentuated rather than diminished. 
    • “Just because you’re using AI doesn’t mean it’s going to automate your job,” said Google economist Scott Strand, one of the researchers.” * * *
    • “The research says that while workers in higher-paid occupations tend to use AI more, its use isn’t limited to jobs typically held by college-educated workers. People in manual and technical trades, such as electricians and auto mechanics, are using AI significantly as a hands-on collaborator, and are uploading images and videos to solve problems far more frequently than their white-collar counterparts. 
    • “The research also finds that people are turning to AI to help speed up drudge work at home, such as dealing with government paperwork, building household budgets or helping with home repairs. The gains people are getting from AI use at home are unlikely to show up in standard economic statistics.”