entertainment -WSS

entertainment

author：hotspot 2025-10-02 18:47:33 - browse：64

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Continuity nursing helped my family in our darkest PICU moments
Next article： Hearing on Medicare drug price negotiation gets unusually heated

knowledge

WSS

Readout LOUD podcast: possible new ALS drug, artificial wombs

Presidential candidate assassinated in Ecuador, 1 suspect dead and 6 arrested

Second xenotransplant done with gene

TB outbreak tied to bone grafts underscores testing shortcomings

Second xenotransplant done with gene

Wikipedia

entertainment

knowledge

At least 13 dead in Texas as scorching temps continue

Changes to biosimilar regulatory framework must prioritize patients

Sports medicine is finally prioritizing gender equality

CDC's new outbreak response network to include Northeastern

Affirmative action in medical school literally saved lives

After John Oliver segment, STAT readers share their opioid

New air purifier tech could be key to improving indoor air quality

Presidential candidate assassinated in Ecuador, 1 suspect dead and 6 arrested

The Supreme Court will review a ruling striking down a domestic violence federal gun ban

Case for ALS therapy Nurown relies on ‘deficient’ data, FDA finds

explore

Changes to biosimilar regulatory framework must prioritize patients

Presidential candidate assassinated in Ecuador, 1 suspect dead and 6 arrested

What Congress can do to address the rural doctor shortage

Newly revealed memo details efforts to keep Trump in power following election loss

AstraZeneca, Daiichi breast cancer treatment succeeds in trial

Timeline: Special counsel's investigation into Trump's handling of classified documents

explore

knowledge

knowledge

hotspot