fashion -WSS

fashion

author：Wikipedia 2025-09-28 02:30:36 - browse：9231

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Sports medicine is finally prioritizing gender equality
Next article： FDA approves world's first CRISPR

WSS

Supreme Court wrestles with OxyContin maker's bankruptcy deal

As the dark side of IVF slowly comes into focus, even more transparency is needed

In diabetes hearing, Sanders takes on a new foe: food makers

CDC: Cases of alpha

Congenital heart disease patients face new threat of heart failure

As the dark side of IVF slowly comes into focus, even more transparency is needed

hotspot

fashion

Wikipedia

Guidelines to prevent youth baseball injuries need more muscle

Ending health disparities requires full federal government, panel says

State Dept. review finds Biden bears some blame for Afghanistan failures

Pfizer plans to depart BIO

Peter Hotez and the public health issue of online harassment

Biden announces an advanced cancer research initiative

Walensky prepares to leave CDC — and Congress — behind

Timeline: Special counsel's probe into Trump's handling of classified documents

FDA approval of Sarepta Duchenne genetic therapy gives me hope

Alexander Hamilton and the argument for universal insurance

focus

Roche to buy Carmot Therapeutics, developer of obesity drugs

VC firm RA Capital starts a new synthetic biology incubator

Timeline: Special counsel's probe into Trump's handling of classified documents

Hospitals, health systems can help patients avoid medical debt

After sickle

Trader Joe's recalls 10K cases of broccoli cheddar soup over potential foreign material

knowledge

Wikipedia

focus

focus