What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2026-03-31 compared with 2025-03-31 · 34 added, 33 removed, 44 unchanged (60% of the section changed)

7 unchanged sentences

Risk Management and Strategy

We have recently implemented additional security

measures as part of an evolving cybersecurity posture and will continue to devote resources to address security vulnerabilities in an

effort to prevent cyberattacks and mitigate the damage that could result from such an attack.

All employees have recently begun receiving

cybersecurity training and other education regarding their use of computers, information technology, and sensitive data including specifically

how to recognize common attack strategies .

As the Company does not have a physical office location, it does not have a local network or

in-house servers and proprietary applications.

We therefore utilize third parties applications and resources to support our information

technology (“IT”) needs.

We have implemented additional security measures

as part of an evolving cybersecurity posture and will continue to devote resources to address security vulnerabilities in an effort to

prevent cyberattacks and mitigate the damage that could result from such an attack.

All employees have recently begun receiving cybersecurity

training and other education regarding their use of computers, information technology, and sensitive data including specifically how to

recognize common attack strategies.

As the Company does not have a physical office location, it does not have a local network or in-house

servers and proprietary applications.

We therefore utilize third parties applications and resources to support our information technology

(“IT”) needs.

All applications utilized by the Company are Software as a Service (“SaaS”) offerings.

As our applications are developed and managed by third parties, we are dependent on these providers for many functions including disaster

recovery during a disaster or cyber incident.

As our applications

are developed and managed by third parties, we are dependent on these providers for many functions including disaster recovery during

a disaster or cyber incident.

Our goal is to only utilize the most secure and trusted providers for our IT needs.

business continuity plans are evaluated against evolving security and service level standards, which includes evaluating those cybersecurity

threats associated with our use of key third party service providers.

Our business continuity

plans are evaluated against evolving security and service level standards, which includes evaluating those cybersecurity threats associated

with our use of key third party service providers.

Our cybersecurity management strategy consists

23 unchanged sentences

For our largest third-party provider,

our Contract Research Organization (“CRO”) which is helping us manage our global trial of Berubicin, we

are currently conducting a security assessment and review including their cybersecurity practices, protocols and protections, handling

of information protected by HIPAA, and physical security.

Board of Directors is responsible for oversight of cybersecurity risk.

Financial Officer and Chief Executive Officer are the members of management responsible for managing and assessing our

cybersecurity practices and have recently commenced reporting on such practices and risks.

The plan for the future is that

they will continue to report to the Board on cybersecurity at least quarterly.

Should any cybersecurity threat or incident be

detected, our senior management team would timely report such threat or incident to the Board of Directors and provide regular

communications and updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and

reporting requirements of such incident are appropriately identified and assessed for further necessary or appropriate action to be

our Contract Research Organization (“CRO”) which is helping us manage our global trial of Berubicin, we are currently conducting

a security assessment and review including their cybersecurity practices, protocols and protections, handling of information protected

by HIPAA, and physical security.

The Board of Directors is responsible for oversight

of cybersecurity risk.

Our Chief Financial Officer and Chief Executive Officer are the members of management responsible for managing

and assessing our cybersecurity practices and have recently commenced reporting on such practices and risks.

The plan for the future is

that they will continue to report to the Board on cybersecurity at least quarterly.

Should any cybersecurity threat or incident be detected,

our senior management team would timely report such threat or incident to the Board of Directors and provide regular communications and

updates throughout the incident and any subsequent investigation, in order that the impact, materiality, and reporting requirements of

such incident are appropriately identified and assessed for further necessary or appropriate action to be taken.

We believe we are appropriately staffed (as supported

by our outsourced IT provider) to support a healthy cybersecurity posture given our size and scope.

Our Chief Financial Officer , who reports

to the Chief Executive Officer, is directly responsible for IT functions and has earned a Master of Business Administration and also a

Master of Science degree in Accounting with a Management Information Systems concentration.

To date, there have been no risks identified from

cybersecurity threats or previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect

However, despite all of the above aforementioned efforts, a cyberattack, if it occurred, could cause system operational problems,

disrupt service to clinical trial sites, compromise important data or systems or result in an unintended release of confidential information.

To date, there have been no risks

identified from cybersecurity threats or previous cybersecurity incidents that have materially affected or are reasonably likely to materially

affect the company.

However, despite all of the above aforementioned efforts, a cyberattack, if it occurred, could cause system operational

problems, disrupt service to clinical trial sites, compromise important data or systems or result in an unintended release of confidential

See “Item 1A.

6 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments