2 Minute Drill: Small Clinics Under Attack and AI Governance Risks with Drex DeFord

In this episode, Drex covers three critical healthcare cybersecurity developments. Cyber attackers are shifting focus from hospitals to smaller physician practices and specialty groups that lack robust defenses, with attacks now directly targeting EHRs and patient portals at the point of care. The May 2025 breach report shows 45 healthcare providers reported breaches in a single month, primarily through network server attacks and unauthorized email access. Finally, healthcare organizations are rushing into AI implementation without proper data governance, creating amplified risks when pulling in massive datasets without understanding ownership and consent structures.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

July 14, 2025: Kevin Day, CTO at Rhapsody, joins Drex for the news. While 96% of healthcare executives say they're ready for digital health solutions, two-thirds still battle interoperability challenges that create real patient care problems. Kevin and Drex bring up an alarming trend: 28 healthcare breaches affecting over 5 million people in June 2025, with attack vectors evolving from phishing emails to unpatched third-party software. Kevin discusses how AI might solve duplicate patient record problems while revealing why the soft underbelly of healthcare cybersecurity may not be where most organizations think it is. Key Points: 03:59 The Impact of Duplicate Records 06:00 AI and Data Management Solutions 08:14 Mergers and Acquisitions in Healthcare 13:43 HHS Breach Reports News Articles:  Vast Majority of Healthcare Execs Embrace Digital Despite Interoperability Hurdles, Says MIT 25 hospital M&As finalized in 2025 HSS Breach Report X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Drex covers three major cybersecurity developments impacting healthcare: the expanding North Korean remote worker infiltration scheme targeting US companies with stolen identities and deepfakes, a cyberattack on medical device manufacturer Monic that disrupted critical supply chains, and the suspicious shutdown of Hunter's International ransomware group offering free decryption tools. Essential insights for healthcare organizations on hiring security, supply chain vulnerabilities, and evolving ransomware tactics. Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer 

July 7, 2025: Mick Coady, CTO at Armis, joins Drex for the news. This episode examines a sobering milestone: the first confirmed patient death directly attributed to a ransomware attack on London's blood distribution system. The conversation explores how a single cyber incident creates cascading effects across entire healthcare networks, flooding neighboring hospitals with redirected patients and overwhelming emergency departments. With 28 healthcare security incidents reported in June alone—many involving third-party vendors—the discussion questions whether the industry fully understands how interconnected systems create compounding vulnerabilities. From agricultural equipment with satellite connectivity to medical devices running outdated firmware, every connected endpoint represents a potential entry point for attackers. Key Points: 01:43 Ransomware Attack Leads to Patient Death 06:10 Rural Healthcare During Cyber Attacks 09:11 Third-Party Risks in Cybersecurity 10:29 Cybersecurity in Agriculture and Implications News Articles:  Ransomware attack contributed to patient’s death, says Britain’s NHS HHS Breach Portal College students hacked into tractors. Manufacturers wanted them to do it X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Drex covers three critical cybersecurity developments: Expo's groundbreaking AI-powered penetration testing system dominates HackerOne with over 1,000 vulnerabilities found, Microsoft redesigns the iconic Blue Screen of Death after 40 years, and the Scattered Spider ransomware group pivots from insurance to airline industry attacks using advanced social engineering and deepfakes.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer 

June 30, 2025: George Pappas, CEO of Intraprise Health by Health Catalyst, joins Drex for the news. They discuss a new H-ISAC white paper and the North Korean catfish issues, speculating on how you can verify identity in a world of AI. Can AI solve the very problems it creates? The most revealing discussion centers on a startling industry survey: nearly half of security leaders now spend more time babysitting their tools than actually defending their organizations. Join the discussion around whether our approach to cybersecurity has become counterproductive. Key Points: 01:29 AI and Digital Identity in Cybersecurity 10:56 Nationwide Recovery Services Breach 17:36 Survey Insights: Tool Management 22:01 Cybersecurity Risks to Business Language News Articles:  Artificial Intelligence and Digital Identity: A CISO’s Guide to Implementing Advanced Technologies to Fight Cyber Attacks and Fraud UChicago Medicine breaks ties with vendor after data breach Global State of Security Report Reveals Critical Need for Connected Security Operations X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Drex covers three critical cybersecurity developments: Scattered Spider's shift to targeting insurance companies including Erie Insurance, Philadelphia Insurance, and Aflac using advanced social engineering tactics; escalating Iran-related cyber threats to US critical infrastructure amid Middle East tensions; and a massive dark web leak exposing 1.6 billion login credentials. Don't miss these actionable security recommendations including reviewing password reset processes, implementing strong authentication measures, and preparing for potential nation-state attacks on healthcare infrastructure.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

June 23, 2025: Samme Diaz, Vice President of Advisory Services at Healthlink Advisors, joins Sarah for the news. How can healthcare organizations address the persistent challenge of EHR-driven nurse burnout when clunky interfaces and poor workflow integration continue to hinder their progress? And as Emory Healthcare pioneers the nation's first Apple-powered hospital environment, what possibilities emerge when consumer technology meets clinical care? Beyond the technology itself, Sarah and Samme draw from their CIO experience to examine the often-overlooked human elements of digital transformation. Key Points: 01:43 Nurses and EHR Burnout 06:52 Emory’s Apple-Powered Hospital 14:34 Challenges and Opportunities News Articles:  Nurses Continue to Name EHRs a Top Driver of Burnout and Resignation in 2025, Black Book Nurses' Week Survey Emory Healthcare debuts 1st Apple-powered hospital

Drex breaks down three critical cybersecurity developments healthcare organizations need to monitor. First, escalating geopolitical tensions suggest increased cyber attacks from Iran and allied nations targeting U.S. critical infrastructure, including healthcare systems. Second, Vanderbilt University Medical Center reports sophisticated Microsoft Teams impersonation attacks where scammers pose as supervisors to request urgent actions like software installation or payments. Finally, deepfake fraud attempts skyrocketed 1300% in 2024, with new "spoofing as a service" platforms making AI-powered voice and video scams more accessible to cybercriminals. Healthcare IT leaders should prepare defenses against these evolving threats and educate staff on verification protocols for suspicious requests.Remember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

After a HIMSS conference presentation on North Korean hackers posing as remote employees led him down an unexpected rabbit hole, Drex unveils his new intermittent series "UnFake". Dive into a world of digital deception and synthetic media, as Drex sets out to help you the listener stay protected and discern fact from fiction in the increasingly complicated field of cybersecurity.You've Been Catfished: The New Remote-Work Employee You Just Hired Is Actually A North Korean HackerRemember, Stay a Little Paranoid X: This Week Health LinkedIn: This Week Health Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer