This brief explains current Medicaid cost sharing rules and changes made to cost sharing rules by the 2025 reconciliation law, reports on cost sharing amounts states currently impose on ACA expansion adults, and highlights literature on the impact of cost sharing.

Splunk Enterprise Pre-Auth RCE Chain Exposes Database With Zero Authentication
A critical vulnerability chain in Splunk Enterprise has been disclosed, enabling unauthenticated attackers to achieve remote code execution (RCE) through a misconfigured PostgreSQL sidecar service.


