fashion -WSS

fashion

author：focus 2025-10-02 20:48:18 - browse：2

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Moonlake's readout produced a cash windfall. Risks remain
Next article： Lawsuit challenges CMS nursing home minimum staffing rule

WSS

PBM executives asked to testify by House panel

U.S. death rates show how politics are affecting public health

Novel spinal cord stimulator treats paralysis without surgery

Unmasking the 'centricity' illusion in clinical trials

Bubonic plague hit France in 1720. Officials dithered. Sound familiar?

Chemotherapy before breast cancer surgery might fuel metastasis

focus

fashion

entertainment

State Dept. review finds Biden bears some blame for Afghanistan failures

Congress: Prevent baby formula shortages by passing a new bill

BioMarin wins approval for gene therapy to treat hemophilia A

Lawsuit challenges CMS nursing home minimum staffing rule

In age of alternative facts, a scholarly course on calling out crap

Bubonic plague hit France in 1720. Officials dithered. Sound familiar?

Moonlake's readout produced a cash windfall. Risks remain

AI for drug discovery: Experts on separating hype from reality

Food as medicine: CMS rules hamper 'prescribing' of fruits, veggies

AI for drug discovery: Experts on separating hype from reality

Wikipedia

Empower primary care with adequate payments and technology

Most antidepressants don't work on kids, teens, study finds

Achieving telehealth equity for people with hearing loss

Why some fertility treatments produce more boy babies

Richard Slayman had a rejection episode of his pig kidney before leaving hospital

Lawmakers grill UnitedHealth CEO on Change cyberattack

Wikipedia

Wikipedia

focus

focus