Wikipedia -WSS

Wikipedia

author：entertainment 2025-09-30 23:20:11 - browse：45

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： The cancer drug shortage isn’t new — and neither are the solutions
Next article： Readout Newsletter: AstraZeneca's CEO, Roivant's $5 billion deal

leisure time

WSS

Roche acquires Telavant from Roivant, adding experimental IBD treatment

Gov. Ron DeSantis' push for 'civics' education: What does it look like?

Cassava Sciences’ Alzheimer’s clinical trials should be halted

Study on Amgen’s bispecific immunotherapy produces positive data

The leaders of Italy and Poland say European Union should focus on stopping migration

Man with guns arrested near Obama home 'attempted to evade' Secret Service: Prosecutors

hotspot

Wikipedia

hotspot

Trump demands the U.S. pay no more for drugs than other countries … again

Supreme Court shows surprising restraint in chaotic year of crises: ANALYSIS

FDA approval of Sarepta Duchenne genetic therapy gives me hope

Readout Newsletter: AstraZeneca's CEO, Roivant's $5 billion deal

The high cost of giving birth even with insurance

STAT Summit: Ending the crisis of Black deaths in the U.S.

Sports medicine is finally prioritizing gender equality

China dismisses criticism of top diplomat's comments appearing to push for race

Wildfire smoke exposes gaps in outdoor worker protections

Dramatic video released of Russian fighter jets 'harassing' US drones over Syria

knowledge

Myanmar's Supreme Court hears arguments in 2 appeals by ousted leader Aung San Suu Kyi

Ph.D. graduate surprised with gift registry: 'You deserve to be celebrated'

Roivant's CEO is a star, but biotech's black hole persists

5 shark bites reported on Long Island as officials deploy surveillance drones

Questions loom on AstraZeneca cancer drug as safety concerns ebb

5 shark bites reported on Long Island as officials deploy surveillance drones

leisure time

entertainment

explore

explore