Risk Factors Update Summary

• Research and development expenses expected to decrease in 2024, primarily due to completion of trials.
• Inclusion of "diversion of management attention" highlights the potential impact of security incidents.
• Cash and cash equivalents decreased from $17.8 million to $8.6 million as of December 31, 2023.
• Changes in privacy laws may impact business operations and ability to provide products and services.
• Addition of "mitigate" to our security measures may enhance our ability to address vulnerabilities effectively.
• Entered into LPC Purchase Agreement for up to $26.0 million of shares, $25.0 million remains available.
• Failure to achieve primary endpoint in ENVASARC trial may impact ability to raise additional financing.
• Expansion to notify "affected individuals, customers, regulators, and investors" may increase compliance costs.
• Potential delisting from Nasdaq due to market value below $35.0 million and failure to meet bid price.
• Potential adverse effects on business due to security incidents or interruptions in third-party service providers.