fashion -WSS

fashion

author：explore 2025-09-29 01:37:07 - browse：51572

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： FDA approval of Sarepta Duchenne genetic therapy gives me hope
Next article： What will Novo Nordisk's VC do with its influx of cash?

leisure time

WSS

Racing yachts have close encounter with pod of orcas near Strait of Gibraltar

Elizabeth Holmes on track for early release from her 11

Threats against the LGBTQIA+ community intensifying: Department of Homeland Security

CRISPR base editing slashes cholesterol levels in monkeys

With Roe v Wade overturned, abortion providers work to adapt

WHO recommends second malaria vaccine

leisure time

fashion

Wikipedia

Continuity nursing helped my family in our darkest PICU moments

A new study sees potential in DNA sequencing of infants

Hollywood unions extend contract negotiations for actors

Some top drug companies are starting to take action on climate

DIEP, the 'gold standard' of breast reconstruction, is under threat

Experts study whether long Covid risk adds up with each reinfection

ChatGPT in medicine: STAT answers readers' burning questions

Will an HIV vaccine ever be a reality?

Heart attack and stroke risk calculators need revising

The stability of $0 premiums in Medicare Advantage

focus

New oral drug delivery patch is modeled after octopus tentacles

Petition to FDA: Get the lead out of consumer hair dyes

Lawsuit highlights wrinkle for disputes over surprise medical bills

Dozens of Pride flags vandalized at Stonewall monument in NYC, 3rd time this month: Police

Why ADHD is under

What will Novo Nordisk's VC do with its influx of cash?

leisure time

hotspot

hotspot

Wikipedia