fashion -WSS

fashion

author：leisure time 2025-09-30 23:05:59 - browse：4299

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： FDA approval of Sarepta Duchenne genetic therapy gives me hope
Next article： Prescription digital therapeutics are key to pharma’s future

focus

WSS

NASA releases new images of 'fingerprint

Churchill Downs extends trainer Bob Baffert's ban through 2024

A timeline of the missing Titanic tourist submersible

How Robert F. Kennedy Jr. distorted vaccine science

Palestinian attacker wounds 8 in Tel Aviv as Israel presses on with West Bank operation

Skip the lead apron during X

hotspot

fashion

focus

Peter Hotez and the public health issue of online harassment

1 dead, 9 hurt in July 4th fireworks explosion

Biden outlines 'new path' to provide student loan relief after Supreme Court rejection

How Robert F. Kennedy Jr. distorted vaccine science

Hollywood unions extend contract negotiations for actors

Leon Gautier, last member of French D

State Dept. review finds Biden bears some blame for Afghanistan failures

Vertex cell therapy lets patients with type 1 diabetes stop insulin

Drug repurposing or repositioning? The language matters

A letter from the executive editor: The 2023 STATUS List

focus

Palestinian attacker wounds 8 in Tel Aviv as Israel presses on with West Bank operation

Grandmother of French teen shot dead by police officer pleads with rioters to stop the violence

Use doctors trained outside the U.S. to ease the physician shortage

Undocumented workers face uncertainty as immigration law takes effect in Florida

Elon Musk announces 'temporary limits' for reading Twitter posts

The Democratic Party promised to overhaul its primaries. Doing that has been anything but simple

leisure time

focus

Wikipedia

focus