fashion -WSS

fashion

author：leisure time 2025-09-30 22:41:33 - browse：7

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Alkermes shareholders re
Next article： Key House Republican on health care plans exit from Congress

hotspot

WSS

Readout LOUD podcast: How biotech is using artificial intelligence

Biogen Alzheimer’s drug launch off to slow start

Readout Newsletter: Biogen, Rocket Pharma, KalVista, and more

More hospitals are billing patients as online messages surge

Phoenix breaks record with 19 consecutive days above 110 degrees Fahrenheit

Idaho college killings: Prosecutors dispute DNA could have been planted at murder scene

entertainment

fashion

hotspot

Medical leaders decry Supreme Court decision on affirmative action

What should King Charles tell the public about his cancer?

DIEP, the 'gold standard' of breast reconstruction, is under threat

Doctors' information doesn't help them choose wisely when sick

The cancer drug shortage isn’t new — and neither are the solutions

What we’ve learned from the Aduhelm mess

Dobbs anniversary: the lost opportunity of abortion as health care

A strong 6.5

Guidelines to prevent youth baseball injuries need more muscle

Key House Republican on health care plans exit from Congress

entertainment

House passes resolution saying Israel isn't a 'racist or apartheid state'

Doctors' information doesn't help them choose wisely when sick

Britain’s MI6 chief says his spies are using AI to disrupt flow of weapons to Russia

House passes resolution saying Israel isn't a 'racist or apartheid state'

UK homeowners get some respite as inflation falls by more than anticipated to a 15

Israeli protesters block highways, train stations as Netanyahu moves ahead with judicial overhaul

Wikipedia

hotspot

hotspot

focus