fashion -WSS

fashion

author：comprehensive 2025-09-06 03:53:12 - browse：33327

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Over 800 arrested across France in 3rd night of riots after fatal police shooting of teen
Next article： Explaining an after

leisure time

WSS

Infant mortality in U.S. rose last year for first time in decades: CDC

In Gaza, a nonprofit 3D prints tourniquets and stethoscopes

Brain injuries and the importance of a second opinion

Readout Newsletter: Medeor's stem cell study, Moderna's stock dip

Kidney transplant patients stopped immunosuppressants in trial

Young boy dies in trial for Pfizer Duchenne gene therapy

Wikipedia

fashion

focus

Trump demands the U.S. pay no more for drugs than other countries … again

Scientific mystery highlights the blind spots in genomics databases

George Santos makes 1st court appearance after pleading not guilty to 13 counts

Bird flu reported in person exposed to presumably infected cattle

ChatGPT in medicine: STAT answers readers' burning questions

Medicare must police algorithms in Medicare Advantage, Dems say

Guidelines to prevent youth baseball injuries need more muscle

What is microchimerism and how does it affect maternal health?

How one medical school became remarkably diverse

Study: Black kids more likely to die after surgery than white kids

knowledge

Overprescribed: High cost isn't America's only drug problem

First Opinion on colorectal cancer screening: letter and response

Covid silver lining: Unprecedented look at human immune system

Study: Black kids more likely to die after surgery than white kids

UnitedHealth, in a surprise, takes aim at Steward’s physician group

Trial using CRISPR to edit HIV out of cells disappoints

explore

leisure time

explore

focus