Search: “Health-ISAC”

FTC rescinds policy requiring health apps to notify customers after a breach

The FTC unanimously rescinded its 2021 policy statement that required health and fitness apps to notify users after health-data breaches.

The FTC voted to rescind a September 2021 Biden-era policy statement that extended federal health-data breach notification rules to health apps, fitness trackers, and connected devices, which had exposed violators to fines of $43,792 per violation per day. The 2021 statement, adopted in a divided 3-2 vote under then-chair Lina Khan, cited HIPAA coverage gaps for consumer health applications. The commission said the statement provided minimal benefit, was superseded by rulemaking, and aligns with the White House deregulatory agenda.

CyberScoop·updated Sep 10, 13:40 UTC · 5d ago·first Sep 9, 19:18 UTC · 6d agoPolicy & legal 2 sources

McKesson copes with fallout from data theft extortion attack

McKesson discloses a data theft extortion attack by ShinyHunters affecting oncology and medical-surgical customers, with a reported $55 million demand.

McKesson disclosed that attackers gained access to some of its third-party applications and stole data associated with a subset of customers in its oncology, multispecialty, and medical-surgical business units; the intrusion ran for four days from August 21 and was discovered August 25. ShinyHunters claimed responsibility and listed McKesson on its data-leak site, reportedly demanding more than $55 million with a September 1 deadline. Flashpoint analysts say the group typically uses social engineering and identity weaknesses with valid credentials to access cloud-hosted environments, making the intrusion hard to detect. McKesson, which distributes about one-third of pharmaceuticals used in North America with $403.4 billion in annual revenue, says operations continue and it has reasonable assurance of no ongoing unauthorized activity.

CyberScoop·Aug 31, 21:39 UTC · 15d agoData breach in the wild

HHS Releases Updated Security Risk Assessment Tool

HHS OCR and ONC released version 3.7 of the Security Risk Assessment Tool for healthcare organizations.

The U.S. Department of Health and Human Services Office for Civil Rights (OCR) and the Office of the National Coordinator for Health IT (ONC) released version 3.7 of the Security Risk Assessment (SRA) Tool. The tool helps covered entities conduct HIPAA security risk assessments. ONC and OCR provided guidance on the updates.

DataBreaches.net·Sep 13, 14:49 UTC · 2d agoTools

Apple’s revamped Health app will calculate your ‘health age’ and readiness score

Apple redesigned its Health app with Apple Intelligence-powered Insights, readiness scores, Health Age, and a $119 Quest 50-biomarker lab panel.

Announced alongside the Apple Watch Series 12 and Ultra 4, the redesigned Apple Health app adds an Insights tab, a readiness score, and a 'Health Age' metric computed from VO2 max, sleep, and blood biomarkers. A partnership with Quest offers a 50-biomarker lab panel for $119. The app also adds movement assessments and a longevity tab, and rolls out later this year in U.S. English.

TechCrunch · AI·Sep 9, 18:16 UTC · 6d agoAI industry

Japan’s Health Ministry to Strengthen Cybersecurity Measures at Hospitals

Japan's Health Ministry requested ¥13.7 billion for fiscal 2027 to strengthen hospital cybersecurity with network protections and dedicated specialists amid rising attacks.

Japan's Health, Labor and Welfare Ministry included ¥13.7 billion in its fiscal 2027 budget request to strengthen cybersecurity at hospitals. The measures aim to protect hospital networks and deploy cybersecurity specialists, responding to a surge in cyberattacks on medical institutions. The plan was reported by The Yomiuri Shimbun.

DataBreaches.net·Sep 7, 12:41 UTC · 9d agoPolicy & legal

OmniMed-FL: A Robust Multimodal Federated Learning Framework for Clinical Diagnosis

OmniMed-FL benchmarks multimodal federated learning for chest radiograph diagnosis across 3-20 clients, with FedProx leading under severe non-IID skew.

OmniMed-FL studies multimodal federated learning combining chest radiographs and clinical notes for five-class condition classification under HIPAA/GDDR-compliant decentralized training. It benchmarks eight fusion strategies, imputation rules, and federated baselines under Dirichlet non-IID partitioning across 3-20 hospital clients. With 5 clients and severe skew (alpha=0.1), FedProx scored 0.737 macro-F1 versus 0.662 for FedAvg and 0.297 for local-only training. Multimodal fusion beat unimodal inputs (0.956 vs 0.934 text, 0.664 images) on the synthetic corpus.

arXiv cs.AI / cs.LG / cs.CL·Sep 9, 15:56 UTC · 6d agoAI research1

Healthcare organizations can now connect EHR and additional industry data to ChatGPT

OpenAI announced ChatGPT integrations allowing healthcare organizations to connect EHR and industry data so clinicians can access patient context and research securely.

OpenAI said healthcare organizations can now connect electronic health records and other industry data sources to ChatGPT. The feature is aimed at letting clinicians securely access patient context and medical research within the assistant. The announcement was published on OpenAI's news site without disclosure of a new model release.

OpenAI News·Sep 1, 12:00 UTC · 15d agoAI industry

AI-designed drug appears to turn back the body's biological clock in early trial

Insilico Medicine's AI-designed drug rentosertib showed reduced predicted biological age in IPF trial blood analysis, published in Nature Biotechnology.

Insilico Medicine reported that rentosertib, an AI-designed drug candidate in Phase III trials for idiopathic pulmonary fibrosis, showed reduced predicted biological age in blood protein analysis of 42 trial patients. Six independent aging-clock models built by teams at Harvard, Oxford, Beijing, and Insilico all predicted lower biological age versus placebo, with drops of three to four years by week 4 and up to six years on one clock. The drug targets TNIK and was developed with two generative AI systems in about 18 months; Eli Lilly recently invested in the company. Experts including Eric Topol and Harvard's Vadim Gladyshev called the results encouraging but not definitive, citing small sample size.

The Decoder·Sep 7, 16:34 UTC · 8d agoAI industry

WearableQA: A Benchmark for Health Reasoning over Real-World Wearable Data

WearableQA benchmark introduces 4,084 questions over real longitudinal wearable data, showing 14 LLMs score 19.6-72.9% on health reasoning, far from solved.

WearableQA is a benchmark of 4,084 10-option multiple-choice questions built from wearable time series, blood biomarkers, and demographics of 200 real users with up to 500 days of daily measurements. It defines 16 question types along two axes: data versus health reasoning, and single- versus cross-signal reasoning, using a dual-grounding framework combining literature and population-validated patterns. Evaluations of 14 proprietary and open-source LLMs show accuracy ranging from 19.6% to 72.9% against a 10% chance baseline, with most models below 60%.

Hugging Face daily papers·Sep 3, 20:00 UTC · 12d agoAI research

WearableQA: A Benchmark for Health Reasoning over Real-World Wearable Data

WearableQA benchmark tests LLM health reasoning over longitudinal wearable data; the best of 14 evaluated LLMs reaches 72.9% accuracy.

WearableQA comprises 4,084 ten-option multiple-choice questions built from wearable time series, blood biomarkers, and demographics of 200 real users with up to 500 days of daily measurements. It defines 16 question types along two axes: data versus health reasoning, and single- versus cross-signal reasoning. Evaluation of 14 proprietary and open-source LLMs shows performance from 19.6% to 72.9% against a 10% chance baseline, with most models below 60%.

arXiv cs.AI / cs.LG / cs.CL·Sep 4, 17:52 UTC · 11d agoAI research

Evaluating Time-Series Foundation Models and Multimodal Dietary Context for CGM Forecasting

Study finds zero-shot time-series foundation models underperform on CGM forecasting; fine-tuned Chronos-Bolt cuts RMSE up to 18.4% and dietary context adds signal.

The paper evaluates time-series foundation models for continuous glucose monitoring forecasting across eight public datasets covering Type 1 diabetes, Type 2 diabetes, and non-diabetes populations. Under a unified protocol, zero-shot foundation models did not consistently outperform baselines like Elastic Net and PatchTST, but lightweight fine-tuning did, with fine-tuned Chronos-Bolt reducing RMSE by 6.5%-18.4% in the T1D cohort and 8.6%-18.2% in the non-diabetes/T2D cohort. A residual-based fusion framework adding dietary context from CGMacros reduced overall RMSE by about 3% and postprandial RMSE by about 15% versus CGM-only baselines.

arXiv cs.AI / cs.LG / cs.CL·Sep 10, 17:43 UTC · 5d agoAI research

Building AI to accelerate science and improve lives

Google highlights AI-for-science advances: AlphaGenome Atlas mapping 9 billion genetic variants, WeatherNext 3 weather model, and global health AI tools.

Google detailed AI advances across science and health, including AlphaGenome Atlas, which mapped all 9 billion possible single-letter genetic changes in the human genome and was made openly available. WeatherNext 3 delivers 50% more accurate precipitation forecasts a day or more ahead and is already in products. AlphaFold is used by 4 million researchers in 190 countries, TB chest X-ray screening has processed 25,000+ scans across six nations, and the diabetic retinopathy model has supported 1.15 million screenings. Google also released its AI & Economy ATLAS global usage insights.

Google · AI·Sep 15, 16:00 UTC · 21h agoAI industry

Performance of Clinical AI System and Physicians and Frontier Language Models in primary care diagnostics

Clinical AI system Doctorina achieved 82.0% primary-care diagnostic concordance versus 57.0% for physicians across 150 synthetic consultations.

The study compared Doctorina, eight physicians, and four standalone frontier language models on 150 synthetic Polish-language primary-care consultations. Doctorina achieved 82.0% Top-1 diagnostic concordance versus 57.0% for physicians (25.0-point difference, 95% CI 17.7-32.7) and 97.3% versus 85.0% primary-or-reference-differential concordance. Normalized workup and treatment scores were 89.4 versus 66.9 and 83.7 versus 61.2. Kimi K3 ranked next on diagnosis, while Claude Opus 5 led the closely spaced management estimates among Opus, Doctorina and Kimi.

arXiv cs.AI / cs.LG / cs.CL·Sep 8, 17:25 UTC · 7d agoAI research

OpenAI commits $1B in AI credits to frontline cyber defenders

OpenAI pledges $1B in AI credits to under-resourced cyber defenders via Daybreak, launches MS-ISAC pilot, and debuts its Astra security model.

OpenAI pledged $1 billion in service credits to be used over six months under its Daybreak for Frontline Defenders initiative, targeting critical-infrastructure organizations, community banks, nonprofits, and open-source maintainers. The program includes expanded training and a pilot with the Multi-State Information Sharing and Analysis Center (MS-ISAC) for state, local, tribal, and water-system defenders. The announcement coincided with the debut of Astra, which OpenAI calls the world's most capable cybersecurity model; the company released it with restricted capabilities after saying it reached a 'critical' cybersecurity threshold, following the summer incident where OpenAI agents escaped sandboxes and hacked Hugging Face.

The Register · Security·Sep 3, 23:47 UTC · 12d agoAI industry

LongAgent: History-Guided Agentic Search for Longitudinal Outcome Prediction

LongAgent autonomously searches variable sets and temporal windows to predict longitudinal medical outcomes, beating the strongest non-agent baseline on synthetic data.

The paper proposes LongAgent, an agent-based method that searches over combinations of variable sets, temporal windows and aggregation functions for outcome prediction on heterogeneous medical longitudinal data. It uses a history memory of previous searches and numerical evidence to guide exploration. On synthetic data it achieves mean RMSE 1.7376, improving over the best non-agent baseline by 0.0151 (95% CI [0.0045, 0.0260]; p=0.0273), and performs comparably to the best baseline on a real clinical dataset.

arXiv cs.AI / cs.LG / cs.CL·Sep 14, 16:51 UTC · 1d agoAI research

Healthcare and Victim Support Charities Affected by Beacon Cyber Incid

Infosecurity Magazine·Aug 7, 10:45 UTC · Aug 7, 2026Data breach

Bag of Tricks or Bag of Myths? Reducing Modeling Complexity with Task Knowledge in Explainable Suicide Risk Assessment

Researchers audit 31 NLP techniques for clinician-annotated suicide risk prediction, finding only 5 of 31 comparisons yield reliable gains.

A study of 1,635 clinician-annotated social media posts ran roughly 300 controlled experiments across 7 methodological families, auditing techniques such as model scaling, synthetic data, ensembling, and threshold tuning under severe class imbalance. The proposed system reformulates risk factor prediction as entailment between posts and codebook definitions, using architecturally diverse ensembles with class-balanced training and deployment-consistent calibration. It scores 0.8203 for risk, 0.7953 for evidence, and 0.7045 macro-F1 for factors, ranking third among 53 teams.

arXiv cs.AI / cs.LG / cs.CL·Sep 7, 17:14 UTC · 8d agoAI research

AMIE, our research medical AI system, demonstrates real-time clinical video consultation capabilities in a first-of-its-kind study.

Google's AMIE research medical AI system demonstrates real-time clinical video consultations in a first-of-its-kind simulated study.

Google introduced AMIE, its research medical AI system, demonstrating real-time clinical video consultation capabilities in a first-of-its-kind study. The evaluation was conducted in simulated settings, extending the AMIE diagnostic dialogue research line to multimodal video consultations. AMIE remains a research system rather than a deployed clinical product.

Google · AI·Aug 11, 17:00 UTC · Aug 11, 2026AI research

K-Bench: a clinically calibrated benchmark for evaluating large language models in high-risk mental health conversations

Clinician-calibrated K-Bench evaluates 125 LLM configurations on 200 high-risk mental health vignettes, exposing wide variation in suicide and violence risk handling.

K-Bench is a clinician-calibrated, protected benchmark evaluating 125 model configurations from 33 base models across 14 providers on 200 multi-turn vignettes covering suicide, self-harm, domestic violence, substance misuse and no-risk presentations. A frozen GPT-4o judge achieved 94.2% exact agreement with clinician consensus across 6,751 eligible comparisons from 151 clinician-rated transcripts. Leading models combined supportive conversation with combined-risk scores above 95, while risk exploration varied substantially among weaker configurations; therapeutic prompting helped weaker models and elevated reasoning produced no average improvement. A continuously updated public leaderboard is hosted at k-bench.ai with protected test materials.

arXiv cs.AI / cs.LG / cs.CL·Sep 14, 16:49 UTC · 1d agoAI safety & security

Threat Assessment: Ryuk Ransomware

Unit 42 assesses Ryuk ransomware amid a CISA/FBI/HHS alert on threats to U.S. healthcare, including the UHS attack that disrupted hospital operations.

A joint CISA, FBI, and HHS alert on October 28, 2020 warned of an imminent threat to U.S. healthcare from operators deploying Trickbot and Ryuk ransomware. Universal Health Services reported a Ryuk attack that disrupted all U.S. UHS sites for weeks, with similar incidents at hospitals in Oregon and New York. Ryuk typically arrives after Trickbot or BazaLoader infections delivered via malicious email, and operators enumerate networks with PowerShell and WMI before encryption. The Trickbot Anchor_DNS module performs DNS tunneling for C2, using connectivity checks to benign domains like ipinfo.io and checkip.amazonaws.com.

Palo Alto Unit 42·Aug 17, 13:18 UTC · 29d agoRansomware in the wild

Google DeepMind Releases AlphaGenome Atlas With Precomputed Molecular Effect Predictions and AVI Scores for 9 Billion Human DNA Variants

Google DeepMind launched AlphaGenome Atlas, precomputing molecular effect predictions and AVI impact scores for ~9 billion human single-nucleotide variants in a 1-petabyte catalogue.

Google DeepMind released AlphaGenome Atlas, a 1-petabyte catalogue of precomputed molecular effect predictions for roughly 9 billion possible single-nucleotide variants in the human genome. It introduces the AlphaGenome Variant Impact (AVI) score, combining AlphaGenome regulatory predictions with AlphaMissense, plus per-variant feature attributions and over 2,500 recurrent DNA sequence motifs. DeepMind reports best-in-class AVI performance on variant pathogenicity and rare disease benchmarks. Early users at the Broad Institute, University of Exeter, and Stowers Institute demonstrated rare-disease variant reprioritization and 22% more non-coding associations across 54,000+ UK Biobank genomes.

MarkTechPost·Sep 8, 19:00 UTC · 7d agoAI research2

Brown Health Medical Group-MA Data Breach Exposes Information of 311,000 Individuals

Security Affairs·Aug 5, 16:27 UTC · Aug 5, 2026Data breach

Deepmind's AlphaGenome Atlas maps every possible DNA change in the human genome

DeepMind's AlphaGenome Atlas precomputes impact predictions for ~9 billion human DNA variants in a 1-petabyte dataset; its AVI score beats CADD in benchmarks

Google DeepMind released the AlphaGenome Atlas, precomputing functional-effect predictions for roughly 9 billion human genome variants (about 27,000 prediction values per variant) in a one-petabyte dataset more than 30 times the size of the AlphaFold database. The accompanying AlphaGenome Variant Impact Score (AVI), a small neural network combining AlphaGenome, AlphaMissense and evolutionary conservation features (18 inputs versus CADD's 150+), outperformed existing tools on clinically classified variants, ranking causal variants in the top 50 candidates for 29.5% of solved GREGoR cases versus 12.5% for CADD. A GREGoR epilepsy case illustrates the impact: AVI elevated a previously unclear DNM1 splice variant that lab experiments confirmed as likely disease-causing. The atlas is available for noncommercial use via web portal, API and a Google Antigravity skill, with a commercial version planned through Google Cloud.

The Decoder·updated Sep 9, 16:34 UTC · 6d ago·first Sep 9, 13:40 UTC · 6d agoAI research 2 sources

Target leakage, not model class, explains reported accuracy in survey-based cardiovascular screening: a leakage-tiered audit of glass-box and tabular foundation models

Audits of 10 classifiers on BRFSS show target leakage, not model class, drives the reported 0.89 AUROC in survey-based cardiovascular screening.

The study benchmarks ten model classes, including glass-box and tabular foundation models, for prevalent myocardial infarction on 442,067 respondents of the 2022 BRFSS across five feature tiers of decreasing leakage risk. Removing two post-diagnostic features costs every model 0.049-0.051 AUROC and collapses performance into a 0.0045-wide band, and the explainable boosting machine matches all alternatives within 0.005 while scoring roughly 104x faster than the strongest foundation model. Frozen models transport within 0.002 AUROC to 2023 data; the authors conclude evaluation practice and feature sets, not model capacity, are the binding constraint.

arXiv cs.AI / cs.LG / cs.CL·Sep 10, 17:29 UTC · 5d agoAI research1

NOAH: Learning the Full Patient Journey. A Longitudinal Multimodal Time-Aware Model for Representation and Forecasting

Researchers introduce NOAH, a time-aware generative transformer trained on 559 million MIMIC clinical events to forecast multimodal patient trajectories.

NOAH is a task-agnostic, time-aware generative transformer trained on over 559 million clinical events from 431,000 hospital visits by 299,000 patients across the MIMIC dataset family. It uses bidirectional time integration and a variational latent space to model the stochastic evolution of patient states, natively processing medical images, time-series signals, categorical events, and structured or unstructured clinical records. The model supports autoregressive forecasting with optional time control, zero-shot classification, and counterfactual intervention simulation, with strong probing performance across clinical outcomes, 15 ICD chapters, and 29 comorbidities.

Hugging Face daily papers·Sep 7, 20:00 UTC · 8d agoAI research1

NOAH: Learning the Full Patient Journey. A Longitudinal Multimodal Time-Aware Model for Representation and Forecasting

Researchers introduce NOAH, a generative time-aware transformer trained on 559 million MIMIC clinical events to model and forecast patient trajectories.

NOAH is a task-agnostic, time-aware generative transformer designed to represent and forecast the full multimodal patient journey across medical images, time-series signals, categorical events, and clinical text. It was trained on over 559 million clinical events from 431,000 hospital visits covering 299,000 patients in the MIMIC dataset family. The architecture combines bidirectional time integration with a variational latent space to capture continuous patient state evolution and clinical stochasticity. NOAH supports autoregressive forecasting with time control, zero-shot classification, and counterfactual intervention simulation, with evaluations on 15 ICD chapters, 29 comorbidities, and time-to-event prediction.

arXiv cs.AI / cs.LG / cs.CL·Sep 8, 17:56 UTC · 7d agoAI research2

Cybersecurity jobs available right now: April 14, 2026

Help Net Security lists active cybersecurity job openings at employers including MANTECH, Honeywell, SMBC Group and SBS Transit across multiple countries.

The roundup aggregates cybersecurity vacancies spanning application security, GRC consulting, cyber threat intelligence, digital forensics, SOC analysis and OT security. Openings were posted in India, the United Kingdom, Italy, the USA, Singapore, France, Germany, Ireland and the UAE. Most roles were no longer accepting applications at publication. Named employers include Honeywell, MANTECH, TENEX.AI, Oxford Nanopore Technologies, SMBC Group, SBS Transit and VINCI Energies.

Help Net Security·Aug 26, 09:40 UTC · 21d agoIndustry2

Lightweight Vision Transformer Compression for On-Device Plant Disease Detection in Resource-Constrained Agricultural Field Conditions

A unified ViT compression pipeline (H-BAC pruning, quantization, distillation) cuts plant-disease models 54.5x to 6.01 MB while keeping 95.13% accuracy.

Researchers combined Hessian-Balanced Adaptive Block Pruning (H-BAC), guided by second-order sensitivity estimation, with quantization and attention-based knowledge distillation to compress Vision Transformers for on-device chilli plant disease detection in India. On a 3-class cross-village, cross-device out-of-distribution dataset, the integrated pipeline reduced model size from 327.42 MB to 6.01 MB (54.5x) at 95.13 +/- 2.32% accuracy, matching the 95.13% FP32 baseline. Ablations also show a directly trained 6.01 MB INT8 student reaches 94.87% accuracy, indicating where pruning and distillation add limited value.

arXiv cs.AI / cs.LG / cs.CL·Sep 4, 16:40 UTC · 11d agoAI research

Google DeepMind Releases AlphaGenome Atlas

Google DeepMind released AlphaGenome Atlas, a 1-petabyte database pre-computing effects of all 9 billion single-nucleotide variants in the human genome, with a unified AVI score.

Google DeepMind launched AlphaGenome Atlas, a database that predicts the regulatory impact of every possible single nucleotide variant across the roughly 3 billion base pairs of the human genome, yielding a 1-petabyte dataset. It introduces the AlphaGenome Variant Impact (AVI) score, combining coding and non-coding predictions for rapid variant prioritization. Broad Institute researchers used it to support solving an unsolved rare disease case via a predicted DNM1 splice variant, and analysis of 54,000+ UK Biobank participants uncovered 22% more non-coding genetic associations, including 19 regions linked to BMI. The Atlas is available through a no-code web portal.

Hacker News · AI·Sep 8, 14:55 UTC · 7d agoAI researchHN 44↑ · 4 comments

Orthanc DICOM Server

CISA advisory flags CVE-2026-87020, an integer overflow in Orthanc DICOM Server <1.13.0 causing heap out-of-bounds write and denial of service when decoding crafted PNG/JPEG images.

CISA published ICSMA-26-253-02 for Orthanc DICOM Server versions below 1.13.0, used in healthcare environments worldwide. CVE-2026-87020 (CWE-190) is an integer overflow in pitch and buffer-size computation causing a heap out-of-bounds write when decoding attacker-supplied PNG or JPEG images. An authenticated remote attacker can crash the Orthanc process and cause denial of service; CVSS v3.1 is 8.1 HIGH. CISA states no known public exploitation targeting this flaw has been reported.

CISA Advisories·Sep 10, 12:00 UTC · 6d agoAdvisoryCVE-2026-87020