July 22, 2026: Clay Maddux, Healthcare Horizon Practice Director at CrowdStrike, joins Drex DeFord to preview a free, live webinar on August 13th that tackles one of the fastest-growing threats in healthcare security: adversary-in-the-middle attacks on SaaS applications. Clay shares a preview of what's coming, including real cases of "payroll pirates" hijacking Workday accounts and rerouting employee paychecks, plus a live demo of browser-in-browser phishing in action. Open to the entire healthcare security community, no CrowdStrike account required. Register now and bring your team.

Register for the Defending Against AiTM Attacks in Healthcare Webinar: https://go.crowdstrike.com/2026-08-aitm-healthcare.html?utm_campaign=stop_ai_accelerated_adversaries&utm_medium=evt&utm_source=prtn&utm_language=en-us

Key Points:

• 01:10 Webinar Invitation

• 02:37 What Attendees Learn

• 04:31 Phishing And Browser Attacks

• 05:07 Live Demo And Token Theft

Keep up to date on the latest in health IT:

https://thisweekhealth.com/news/

X: This Week Health

LinkedIn: This Week Health

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

In 2022, a furious insider leaked more than 300,000 internal messages from Conti, one of the most notorious ransomware gangs on the planet, and it read like the group chat from hell.

Buried in the gossip and office politics was a message that stopped Drex cold, a gang member pushing to attack hundreds of American hospitals and laughing about who might die. But not everyone inside Conti agreed with him.

What happened next in Ireland shows just how thin the line is between catastrophe and survival, and why you can never build a security program on the hope that the person attacking you has a conscience.

Remember, stay a little paranoid.

Linkedin: https://www.linkedin.com/company/229p
Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer - https://www.alexslemonade.org/mypage/3173454

July 20, 2026: A new Nature of Medicine study claims general-purpose LLMs outperform specialized clinical AI, but is that the right benchmark to begin with? Bill and Drex are joined by Yaw Fellin, General Manager of UpToDate at Wolters Kluwer, and Matt Troup, Clinical Strategy Principal at Abridge, to break down what those benchmarks actually measure, why shadow AI is already spreading through health systems, and what "clinical grade" really means. Plus: the first-ever look at UpToDate's new drug dosing feature in Expert AI, and why automaticity bias may be the next liability crisis hiding in plain sight.

Key Points:

• 03:18 Nature Study Breakdown

• 10:25 Shadow AI Reality Check

• 18:37 Transparency and Provenance

• 23:40 Human in the Loop Wrap

Keep up to date on the latest in health IT:

https://thisweekhealth.com/news/

X: This Week Health

LinkedIn: This Week Health

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Sebastian Estades, Senior Account Executive for Enterprise Platforms and Devices at Google, brings 15 years of healthcare software experience to a conversation that starts with a hard question: do you actually know what AI tools your clinicians are using? Drex DeFord sits down with Sebastian to dig into where health system browser security is quietly breaking down, why shadow AI usage is the gap most organizations can't even see yet, and how enterprise browser is building a real financial case against VDI infrastructure costs.

Key Points:

• 02:30 AI Blind Spots in the Browser

• 04:56 The Shadow AI Question

• 06:19 Quick Start Enrollment Steps

Keep up to date on the latest in health IT:

https://thisweekhealth.com/news/

X: This Week Health

LinkedIn: This Week Health

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

July 16, 2026: Dr. Everett Weiss, Medical Director, Health Informatics at Rochester Regional Health, has been a clinician, a vendor, and a health system informatics leader -- and that full arc is exactly what makes this conversation different. In this episode of Flourish, Sarah Richardson sits down with Dr. Everett to unpack why clinician burnout is a systemic problem long before it's a technology problem, what a holistic wellness program looks like when it's built by someone who's lived on every side of the equation, and what really happens when a provider looks up from a keyboard for the first time in years.

Keep up to date on the latest in health IT:

https://thisweekhealth.com/news/

Key Points:

• 04:01 Wellness Beyond HR

• 08:27 Power of No

• 10:47 AI With Purpose

• 17:59 Closing Advice and Wrap

X: This Week Health

LinkedIn: This Week Health

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

July 15, 2026: Adam Hawkins, EVP, Healthcare and Life Sciences at Cyderes, has spent more than 20 years at the intersection of clinical operations and cybersecurity, from co-founding a clinical decision support startup in college to building Cyderes's healthcare vertical from the ground up. Drex DeFord and Adam cover what the sprint to AI actually looks like from the security side, why most health systems are building guardrails while the car is already on the freeway, and the emerging concept of "blast radius", understanding not just what's vulnerable, but what actually breaks when something goes down. The conversation ends with a clear-eyed look at the next five years: machines versus machines, and what that shift means for healthcare security leadership.

Key Points:

• 01:22 Adam’s Early Healthcare Start

• 05:10 Lessons from Robert Hershebeck

• 07:30 Today’s Biggest CISO Challenge

• 09:49 Security Context and Blast Radius

• 13:03 Machines vs Machines Future

Keep up to date on the latest in health IT:

https://thisweekhealth.com/news/

X: This Week Health

LinkedIn: This Week Health

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

Drex and Sarah join to discuss how board members are quietly using personal AI tools to review confidential health system materials, and most organizations have no policy for it. From there, the conversation gets personal. Sarah shares how she uses her AI agent as a real-time wellness coach, adjusting nutrition and habits on the fly. Drex unpacks his experience with WHOOP and asks the question every wearable user should be asking: when you clicked accept, who actually owns your data? Then the conversation shifts to Epic's Su Mi, his decision to step away, and what it reveals about identity, purpose, and the cost of never stopping

Key Points: 

• 02:38 Secure Tools and Training

• 06:56 Wellness Coach in Your Pocket

• 12:02 Epic Leadership Shift

• 17:15 Purpose and Closing Thoughts

X: This Week Health

LinkedIn: This Week Health

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

A threat researcher at Sysdig was picking through the logs of a recent breach when something stopped him cold. The attacker moved too fast. No pauses, no fumbles, no fatigue. Over 600 payloads fired in sequence. When one failed, it read the error and adjusted. One time, from a failed login to a working fix in thirty-one seconds. No human does that.

Buried in the attacker's code were comments -- the kind a chatbot writes when it's reasoning through a problem. No person was at the keyboard. An AI agent had run the entire heist: reconnaissance, credential theft, lateral movement, persistence, and finally locking up 1,300 configurations before leaving a ransom note. Sysdig calls it Jade Puffer, and they believe it's the first ransomware attack ever run end-to-end by an AI.

The entry point was a vulnerable open-source AI tool sitting on the internet with cloud credentials right behind it. Health systems are bolting AI onto every workflow right now. Every one of those tools is a new door. The skill floor for running a full ransomware operation just dropped to the cost of an agent subscription. Drex has a few questions for your next leadership meeting.

Remember, Stay a Little Paranoid

X: This Week Health LinkedIn: This Week Health Donate: Alex's Lemonade Stand: Foundation for Childhood Cancer

July 10, 2026: Bill Reid, Healthcare and Life Sciences Lead in the Office of the CISO at Google, has spent his career working with health system security leaders, and he keeps running into the same blind spot: healthcare is underestimating the browser as an attack surface. Drex DeFord sits down with Bill to explore why the shift from thick client infrastructure to a secure, browser-first endpoint model is no longer theoretical. It is what resilient health systems are building. From managing transient clinical staff to simplifying a fractured endpoint environment, Bill makes the case for why the browser is the future of healthcare endpoint security.

Key Points:

• 01:21 Browser Attack Surface

• 03:39 Resilient Endpoint Posture

• 05:40 CISO-CIO Conversation

LinkedIn: 229Project

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer

July 6, 2026: Bill Russell, Drex DeFord, and Sarah Richardson are back from four executive summits in Napa, covering CIOs, Chief Application Officers, Chief Analytics Officers, and CNIOs. The through-line across every room? AI pressure is intense, budget cuts are real, and a clear leadership vision is nearly impossible to find. From nurses being left out of decisions they should be driving, to analytics leaders managing a shadow IT explosion, to health systems already quietly building agents for referrals and claims, this is an unfiltered read on where health IT actually stands right now.

Key Points:

01:05 Napa Summit Themes

04:55 Nursing Wins and Workflow

07:22 IT Demand and AI Vision

13:20 Bright Spots and Agent Builds

LinkedIn: 229Project

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer