healthsystemcio.com

A federal MFA mandate for hospitals is on its way, but MFA alone did not stop EvilTokens. Microsoft's fix starts with a sign-in setting built for printers and conference-room gear. Source: Device Code Phishing Circumvents MFA as Congress Weighs Hospital M

Chuck Christian, VP of Technology/CTO at Franciscan Health, discusses why the cost controls health systems built for the cloud do not extend to AI. He describes the Cloud Cost Analyst role he created in 2023, the weekly report it produces, and a workload

A clinician's click on a vendor BAA looks like compliance, yet it leaves the health system's PHI uncovered. Two systems answered the same problem in opposite ways this month, and only one has finished deciding. Source: When Clinicians Click, Health System

Your detection stack watches for unusual behavior. The attacker holding a real employee's password never produces any. New federal guidance points to a cheap control that fires anyway, and to a cost the guidance never prices. Source: Cyber Decoys Target t

Matthew Kull, EVP, Chief Information and Digital Officer at Inova Health, discusses why walling scheduling data off from large language models costs health systems appointments. He reports API calls from ChatGPT into Inova's Epic environment have skyrocke

Three years of hospital losses made Oracle Health look like a vendor customers leave. An 11-hospital rural operator just signed anyway, before the acute care platform shipped, and the reason has little to do with the EHR. Source: Oracle Health Wins 11-Hos

Your device inventory already holds gaps your security team cannot close. The question nobody has answered is who agreed to live with them. New Health-ISAC baselines put a name on that decision. Source: Medical Device Security Exceptions Need a Named Owne

Nurses chart in hundreds of structured fields, which is why ambient AI reached physicians first. Oracle Health now says its EHR can fill those fields by voice. Three questions decide whether that holds up. Source: Oracle Health Hospitals Get EHR-Native AI

Most health systems are watching HHS for MFA and encryption mandates. A House bill heard Sept. 15 would write both into federal law, and the sector's own cyber council wants a key change first. Source: Hospitals Face Two Paths to Mandated MFA and Encrypti

Agent governance written for transfer and scheduling bots will be tested by what health systems are building now. Epic's second build-a-thon moved clinician-built agents into NICU risk flags and drug-interaction checks. What has to change before October?