Steve Ayers, PhD

Category: Health IT Security

  • The Critical Path for Clinical Genomics: Balancing Innovation and Security

    The transition of genomic science from research laboratories into routine clinical workflows is accelerating. As we generate and integrate multi-omic datasets into everyday patient care, we must ensure our informatics infrastructure matures at the exact same pace.

    Managing the AI Revolution in Genomics

    AI is adding capabilities in the area of genomics, but it must be carefully managed. Machine learning models are exceptionally useful for identifying variant patterns within massive datasets. However, these tools cannot operate as black boxes in the clinic.

    • Algorithms should augment, not replace, clinical judgment.
    • Rigorous validation of AI-derived insights is required.
    • Human expertise remains essential to interpret computational findings.

    The Imperative of Healthcare Data Security

    As sequencing becomes commonplace, the sheer volume of sensitive health data is exploding. Data security is vital to the continued advancement of the healthcare industry. Recent cybersecurity trends, particularly sophisticated ransomware attacks targeting clinical workflows, expose a critical vulnerability.

    We cannot expect continued progress in precision medicine if the underlying data architecture is compromised. Protecting immutable genetic information and patient records is a foundational priority. Robust encryption, secure data silos, and stringent access controls are non-negotiable elements of modern healthcare informatics.

    Focusing on Bench to Bedside

    Ultimately, technological and computational advancements must serve patient outcomes. Whether we are deploying new bioinformatic pipelines or refining diagnostic panels, bench to bedside is very important.

    It is not enough to develop predictive models in a vacuum. We must aggressively push these findings into real-world applications that improve patient care. The future of healthcare relies on this pragmatic integration: harnessing powerful new tools, securing our data, and remaining steadfastly focused on clinical utility.

  • Securing the Genomic Revolution: Where NGS Innovation Meets Healthcare Data Security

    The landscape of clinical genomics is evolving at a breakneck pace, but as we push the boundaries of Next-Generation Sequencing (NGS) and precision medicine, we are simultaneously navigating one of the most treacherous cybersecurity environments healthcare has ever seen. Looking at the latest developments from the past 24 hours, the intersection of genomic innovation and healthcare data security has never been more critical.

    The Rapid Maturation of NGS

    The latest trend reports indicate that NGS is definitively transitioning from a specialized research tool to a standard component of routine clinical care. We are seeing broader applications across oncology, rare disease diagnostics, and even newborn screening. The focus is shifting from simple single-gene analysis to complex polygenic models and multifactorial disease mapping.

    However, this clinical integration brings a massive data challenge. Bioinformatics and AI are becoming absolute necessities to interpret these multi-dimensional genomic datasets. The bottleneck is no longer sequencing the DNA; it is storing, analyzing, and protecting the terabytes of highly sensitive data generated per patient.

    The Escalating Threat to Healthcare Data

    Concurrently, healthcare data security reports paint a sobering picture. Ransomware remains the predominant threat, with cybercriminals increasingly deploying double-extortion tactics—stealing the data before encrypting it. What makes this particularly alarming for clinical genomics is that these attacks are specifically targeting clinical workflows and supply chain vulnerabilities, including third-party EHR hosts and cloud environments.

    The regulatory landscape is tightening in response, with stricter HIPAA Security Rule enforcement and mandates for continuous compliance and zero-trust architectures. The cost of a healthcare data breach is now astronomical, not just financially, but in the potential compromise of patient safety and the permanent exposure of immutable genetic data.

    The Informatics Imperative

    Given my professional background in genomics and informatics, I view this intersection as the defining challenge of our field. Genomics relies fundamentally on data liquidity—the ability to share, compare, and analyze vast datasets across institutions to find meaningful biological signals. Yet, security demands strict data compartmentalization, robust encryption, and rigorous access controls.

    We cannot treat genomics and IT security as siloed disciplines. The infrastructure that supports high-throughput sequencing must be designed with “security-by-default” principles. This means implementing network segmentation to isolate genomic sequencers, utilizing AI for preemptive threat detection within our bioinformatic pipelines, and rigorously vetting the security posture of our third-party analysis vendors.

    As we move toward 2026 and beyond, the success of precision medicine won’t just depend on the accuracy of our sequencers or the sophistication of our AI models. It will depend equally on our ability to build resilient, secure informatics architectures that protect the very patients we are trying to cure. The future of genomics is inextricably linked to the future of data security.

  • Sandworm: A new era of cyberwar and the hunt for the Kremlin’s most dangerous hackers

    Sandworm: A new era of cyberwar and the hunt for the Kremlin’s most dangerous hackers

    I was pleasantly surprised by Andy Greenberg’s dramatic recount of recent cybersecurity events, which included valuable insight into the progression of cyberwarfare tactics to include real-world impact on infrastructure. 

    It was helpful to have a high-level review of these events in a style that was highly engaging. I found myself still amazed and horrified to hear the gory details of the NotPetya attack and the damage unleashed within the US as well as in Russia, as well as the power system attacks leading up to in in Georgia and Ukraine. It’s clear that the era of cyberwarfare has already arrived.

    Greenberg’s storytelling ability makes this a captivating work, even for those already familiar with the subjects he covers, but it also stands on its own. He takes time to not only wade into the dubious field of attribution, but to digest and reevaluate the relationship of subgroups, eventually seeming to settle on a collaborative model.

    This was an entertaining and informative book, which I would feel comfortable recommending to people interested in this area, no matter what their background and experience.

  • This is How they Tell me The World Ends: The Cyberweapons Arms Race

    Once in a while, it’s good to take a step back from the daily grind of security and governance to stop and think about where this is all going. Nicole Perlroth’s title seemed like an enticing opportunity for just such an interlude and, after shopping around I was able to get early access to this work and was satisfied with what it had to offer. She uses her narrative to guide the reader through the shady underworld of cybercrime, focusing on the growing zero day exploit market and providing some cool insights into its relatively banal and perhaps well-intentioned origins, leading into an overview of the current state, which is not quite world-ending but perhaps world-changing.

    While most cybercriminals still take advantage of the old standard vectors, (i.e., misconfigured or unpatched systems and uneducated users), zero day exploits seem to offer special powers, enabling malicious actors to invade fully patched systems without alerting users. This has made them an irresistable tool to state actors with deep pockets, who are able to use them as the perfect surveillance tool for intelligence gathering. State actors have proven to be willing to pay large bounties for zero day exploits, which they secretly retain until they are needed for intelligence operations. Even large companies (i.e., the big 4) are simply unable to keep up with governments who are willing to pay 6 figures for critical exploits. This creates an incentive for independent bug hunters to keep their findings private, ultimately leading to less secure computing environments for all users. 

    Up until now, over-eager attribution to ‘State Actors’ and APTs has been something of a clichè, it seems these type of actors may play a more dominant role in security incidents, as stockpiling zero-days has proven to be a valuable strategy by such actors, even including US and Israeli intelligence agencies. To parse the idea of ‘world-ending’ in a bit more detail, we can expect to encounter an increasing number of undisclosed vulnerabilities as time goes on. In Rumsfeldlish, these are ‘unknown unknowns’–issues that we didn’t even know we should worry about. In reality, zero-days are negative-days, since the impact could have already been encountered for an unknown amount of time prior to their discovery. If your system has been specifically targeted by a state actor using a zero-day, then there really isn’t much you could directly do to defend against it. However, it does raise the importance of general DR planning, including failover systems, site recovery strategies and offline backups. National borders also have heightened importance in this type of scenario, since a state actor would essentially have unlimited power to act within their own borders, so if your business strategy leverages cloud infrastructure, it might be worth considering how your global footprint could reduce the potential impact of rogue state actors in other parts of the world.

    As I’ve hopefully illustrated, I am glad Nicole has created this insightful work, which is both an engaging narrative and a discussion starter security people.