2 Minute Drill: Iran Cyber Threats, Microsoft Scams, and the 1300% Deepfake Surge with Drex DeFord

June 30, 2025: George Pappas, CEO of Intraprise Health by Health Catalyst, joins Drex for the news. They discuss a new H-ISAC white paper and the North Korean catfish issues, speculating on how you can verify identity in a world of AI. Can AI solve the very problems it creates? The most revealing discussion centers on a startling industry survey: nearly half of security leaders now spend more time babysitting their tools than actually defending their organizations. Join the discussion around whether our approach to cybersecurity has become counterproductive. Key Points: 01:29 AI and Digital Identity in Cybersecurity 10:56 Nationwide Recovery Services Breach 17:36 Survey Insights: Tool Management 22:01 Cybersecurity Risks to Business Language News Articles:  Artificial Intelligence and Digital Identity: A CISO’s Guide to Implementing Advanced Technologies to Fight Cyber Attacks and Fraud UChicago Medicine breaks ties with vendor after data breach Global State of Security Report Reveals Critical Need for Connected Security Operations X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Drex covers three critical cybersecurity developments: Scattered Spider's shift to targeting insurance companies including Erie Insurance, Philadelphia Insurance, and Aflac using advanced social engineering tactics; escalating Iran-related cyber threats to US critical infrastructure amid Middle East tensions; and a massive dark web leak exposing 1.6 billion login credentials. Don't miss these actionable security recommendations including reviewing password reset processes, implementing strong authentication measures, and preparing for potential nation-state attacks on healthcare infrastructure.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

June 23, 2025: Samme Diaz, Vice President of Advisory Services at Healthlink Advisors, joins Sarah for the news. How can healthcare organizations address the persistent challenge of EHR-driven nurse burnout when clunky interfaces and poor workflow integration continue to hinder their progress? And as Emory Healthcare pioneers the nation's first Apple-powered hospital environment, what possibilities emerge when consumer technology meets clinical care? Beyond the technology itself, Sarah and Samme draw from their CIO experience to examine the often-overlooked human elements of digital transformation. Key Points: 01:43 Nurses and EHR Burnout 06:52 Emory’s Apple-Powered Hospital 14:34 Challenges and Opportunities News Articles:  Nurses Continue to Name EHRs a Top Driver of Burnout and Resignation in 2025, Black Book Nurses' Week Survey Emory Healthcare debuts 1st Apple-powered hospital

Drex breaks down three critical cybersecurity developments healthcare organizations need to monitor. First, escalating geopolitical tensions suggest increased cyber attacks from Iran and allied nations targeting U.S. critical infrastructure, including healthcare systems. Second, Vanderbilt University Medical Center reports sophisticated Microsoft Teams impersonation attacks where scammers pose as supervisors to request urgent actions like software installation or payments. Finally, deepfake fraud attempts skyrocketed 1300% in 2024, with new "spoofing as a service" platforms making AI-powered voice and video scams more accessible to cybercriminals. Healthcare IT leaders should prepare defenses against these evolving threats and educate staff on verification protocols for suspicious requests.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

After a HIMSS conference presentation on North Korean hackers posing as remote employees led him down an unexpected rabbit hole, Drex unveils his new intermittent series "UnFake". Dive into a world of digital deception and synthetic media, as Drex sets out to help you the listener stay protected and discern fact from fiction in the increasingly complicated field of cybersecurity.You've Been Catfished: The New Remote-Work Employee You Just Hired Is Actually A North Korean HackerRemember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer 

June 16, 2025: Philipp von Gilsa, CEO of Kontakt.io, joins Bill Russell for the news. What happens when America's hospitals reach dangerous occupancy thresholds that could make them unable to function properly? And as workplace violence against healthcare workers spikes, what combination of technology and process can effectively protect staff? The conversation delves into the tension between technology capabilities and practical healthcare applications, questioning whether approaches to new innovations like AI are simply recycling the same discussions we've had about cloud and IoT in previous years. As healthcare leaders face these converging challenges, how can they remain focused on core priorities? Key Points: 02:22 America's Hospital Bed Shortage Crisis 15:14 Overpromising and Underdelivering 21:21 Workplace Violence in Hospitals News Articles:  America’s Hospital-Bed Shortage Is About to Become a Crisis Connected health needs more provider collaboration for better data integration AHA report finds workplace and community violence costs hospitals more than $18 billion annually X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Drex covers three critical cybersecurity incidents: dual cyber attacks affecting healthcare systems in Lewiston, Maine; an AT&T database breach exposing 86 million records with decrypted sensitive data; and concerning backup management issues at login.gov that could impact government service access. The episode concludes with a practical reminder to test backup systems regularly.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer 

June 9, 2025: Healthcare organizations face an unprecedented challenge as potential Medicaid cuts threaten heavy IT staff reductions, but what if the real solution lies hidden in plain sight within their own systems? Jason Rose, CEO of Clearsense, discusses how "zombie applications" - applications that are neither fully alive nor completely dead - are silently draining millions from healthcare budgets. The conversation delves into the harsh realities of crisis governance models, the hidden costs of transition service agreements, and whether healthcare leaders are prepared to make the difficult operational decisions required in the days ahead. Enjoyed the Discussion? Dive Deeper with “How Application Portfolio Management Accelerates M&A Value in Healthcare” Key Points: 01:43 Zombie Applications 04:30 Mergers and Acquisitions 08:30 Cost Reduction Strategies  11:47 Real-World Examples and Case Studies News Articles: Leading Through the Storm: Functioning After a 20% IT Staff Reduction   X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Drex covers four major healthcare cybersecurity developments: Kettering Health's Epic systems recovery following their May 20th cyber attack, with core components now operational while inbound calling systems remain down. Covenant Health faces a new cybersecurity incident affecting three hospitals in Maine and New Hampshire. Seattle's Fred Hutch Cancer Center agreed to a $52 million class action settlement after criminals from their 2023 breach directly threatened patients with data exposure. Plus, a mysterious whistleblower called "Gang Exposed" has leaked thousands of chat logs and documents exposing key figures in the Conti and TrickBot ransomware operations, potentially providing crucial evidence against Russian cybercriminals.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer 

Drex covers Kettering Health's week-long cyber attack recovery with radiation oncology back online, the mass exodus of CISA leadership amid federal downsizing, and the growing frustration over lack of comprehensive federal cybersecurity strategy for healthcare. Discussion includes regional coordination during cyber incidents and the reality that hospitals are fighting nation-state actors without adequate government support.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer