entertainment -WSS

entertainment

author：knowledge 2025-09-27 21:55:42 - browse：1

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Supreme Court strikes down use of affirmative action
Next article： Gene therapy denied for Afghan refugee whose father aided U.S.

knowledge

WSS

Correcting Robert F. Kennedy Jr.'s vaccine 'facts'

Vertex cell therapy lets patients with type 1 diabetes stop insulin

Correcting Robert F. Kennedy Jr.'s vaccine 'facts'

Merck to acquire Harpoon Therapeutics for $680 million

Being 'nonadherent' patient made me a more empathetic doctor

A preacher's new calling: Diversifying neuroscience research

hotspot

entertainment

Wikipedia

How one medical school became remarkably diverse

Fauci's latest grilling in Congress: 9 hours, behind closed doors

Supreme Court strikes down use of affirmative action

Fauci's latest grilling in Congress: 9 hours, behind closed doors

Food as medicine: CMS rules hamper 'prescribing' of fruits, veggies

Medicare Advantage coverage denials need scrutiny, senators say

Bright Health sells Medicare Advantage business to Molina

Readout Newsletter: Cytokinetics and Novartis' starcrossed tale

ChatGPT in medicine: STAT answers readers' burning questions

Male doctors called my cancer incurable. A female doctor showed it wasn't

hotspot

The biotech scorecard for Q3: 15 stock

Rune Labs, whose app tracks Parkinson's symptoms, raises $12M

JPM 2024 Review: Hope for the XBI, deals from J&J, Merck, GSK

Canadians with cystic fibrosis outlive Americans by a decade

Prescription digital therapeutics are key to pharma’s future

Drug cartel violence flares in western Mexico after vigilante leader's killing

focus

knowledge

focus

leisure time