fashion -WSS

fashion

author：Wikipedia 2025-10-01 10:57:25 - browse：5

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Activists slam private health insurers over coverage restrictions
Next article： Anthos stroke drug appears safer than common blood thinner

leisure time

WSS

Congress must reauthorize a committee to support older Americans

Public health communication lessons from Covid

Biden jokes that Republicans may impeach him because inflation is starting to cool down

Morphosys mixed study results for blood cancer drug

Will biotech layoffs continue through 2023?

A daunting task: navigating dual Medicare, Medicaid eligibility

focus

fashion

focus

Heart attack and stroke risk calculators need revising

Ending health disparities requires full federal government, panel says

Heart attack and stroke risk calculators need revising

Ransomware attacks on hospitals: Study outlines patient impact

Continuity nursing helped my family in our darkest PICU moments

Alexander Hamilton and the argument for universal insurance

Bright Health sells Medicare Advantage business to Molina

FDA's Woodcock to retire early next year

After affirmative action ruling, medical educators look to 'holistic review'

Timeline: Special counsel's probe into Trump's handling of classified documents

focus

American Airlines has a tentative contract deal with its pilots. Southwest is still negotiating

VC firm RA Capital starts a new synthetic biology incubator

Ford recalls 870K F

Wegovy, Zepbound and weight loss drugs that preserve muscle

'The boss' wants server deleted: New allegations emerge in Trump indictment

'The boss' wants server deleted: New allegations emerge in Trump indictment

leisure time

hotspot

explore

focus