entertainment -WSS

entertainment

author：Wikipedia 2025-08-25 16:35:28 - browse：235

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： FDA approval of Sarepta Duchenne genetic therapy gives me hope
Next article： Teladoc has a new CEO, but challenges remain the same

knowledge

WSS

My daughter's legacy lives on through her writing, phage therapy

How a billionaire couple greased the skids for Pelosi’s drug pricing bill

Cigna wins case to block Amy Bricker's move to CVS

Criminal prosecution for violating HIPAA: an emerging threat

Solving academic medical centers' existential crisis

HIV vaccine remains elusive. Immunologists keep trying new ideas

knowledge

entertainment

explore

Novavax promises a turnaround & Lilly roils the obesity market

'Essentially witchcraft:' A former naturopath takes on the field

Drug repurposing or repositioning? The language matters

Readout Newsletter: Nvidia, Biogen, Ionis, AstraZeneca, ChatGPT

Hepatitis C has a cure — but many Americans still lack access to it

5 takeaways from STAT's examination of Zynex Medical

As demand for Covid shots wanes, Moderna seeks its next success

Health care court cases: Humana, Sutter, Novant

Anesthesiologist group: stop taking Ozempic before surgery

Readers respond to H5N1 and livestock movements, and more

knowledge

ALS patient reclaims some autonomy thanks to wearable 'robot'

Addiction experts warn against a second 'war on drugs'

The system is set up to fail children with medical complexity

'Essentially witchcraft:' A former naturopath takes on the field

Deposition: Sackler embraced plan to conceal OxyContin’s strength

Microsoft's Peter Lee says ChatGPT shouldn't be used for initial diagnosis

focus

knowledge

knowledge

Wikipedia