fashion -WSS

fashion

author：explore 2025-09-28 19:25:45 - browse：138

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： At least 13 dead in Texas as scorching temps continue
Next article： DeSantis talks Trump, trans issues and 'what wokeness is'

focus

WSS

Winning ticket for $1 billion Powerball jackpot sold in California

Awakening the world to the whoosh: A patient's crusade

Custom gene therapy hints at new path for rare disease treatments

Rescued Australian man who was adrift 3 months in Pacific with dog 'grateful' to be alive

Senate committee advances SCOTUS ethics bill after alleged justice misconduct

How dance can help nurses traumatized by Covid

entertainment

fashion

hotspot

After affirmative action ruling, medical educators look to 'holistic review'

Wildfires rage amid heat wave in Greece, prompting evacuations and call for European support

Over 800 arrested across France in 3rd night of riots after fatal police shooting of teen

DeSantis talks Trump, trans issues and 'what wokeness is'

Hollywood unions extend contract negotiations for actors

DeSantis talks Trump, trans issues and 'what wokeness is'

Activists slam private health insurers over coverage restrictions

Google and Epic fight stronger regulation of AI in health care

Psychedelics group wrestles with new pharma identity

Group opposing PBM reform sets lobbying record

hotspot

Biden tests positive for Covid

Awakening the world to the whoosh: A patient's crusade

Stanford president's case begs question: Who takes blame?

Judge rejects Trump's request to move Stormy Daniels hush

I learned firsthand about improving diversity in clinical trials

At Orexo, a ‘turning point’ for everything but digital health

focus

knowledge

explore

leisure time