fashion -WSS

fashion

author：explore 2025-10-02 17:27:37 - browse：4764

In the last year, cyberattacks on hospitals have surged, putting a spotlight on the need to protect patients’ health data. But hackers don’t need to attack providers directly to get that valuable info. A new cybersecurity report shows it is remarkably easy for bad actors to steal it through third-party apps and data aggregators that tap into providers’ electronic health record systems.

Hacker and cybersecurity analyst Alissa Knight got access to more than 4 million patient and clinician records by exploiting vulnerabilities in data aggregators’ application programming interfaces, along with associated apps that track medications and share patient records — records that include demographics, lab results, medications, procedures, allergies, and more. Collectively, the tested tools can read and write data to the major EHR systems.

Knight initially set out looking for vulnerabilities in APIs built by the EHR companies themselves. Built on the open Fast Healthcare Interoperability Resources (FHIR) standard for health care data, those APIs are a powerful tool to unify data collected by different systems and support interoperability. “The EHR companies themselves have been partnering with me, allowing me access to their APIs” to conduct security testing, said Knight. But when she couldn’t find any soft spots in their systems, she began testing the FHIR APIs built by third-party data aggregators that interface with electronic health records, along with the gallery of apps that developers have built on those APIs.

Unlock this article by subscribing to STAT+ and enjoy your first 30 days free!

GET STARTED Log In

Previous article： Drug repurposing or repositioning? The language matters
Next article： How to convince healthy people to buy insurance

WSS

Wildfire smoke exposes gaps in outdoor worker protections

State Dept. review finds Biden bears some blame for Afghanistan failures

The cancer drug shortage isn’t new — and neither are the solutions

Lung cancer screening guidelines updated for cigarette smokers

How to convince healthy people to buy insurance

In Gaza, a nonprofit 3D prints tourniquets and stethoscopes

knowledge

fashion

focus

Medical records are filled with copy

How to save PrEP access — and even expand it

Food as medicine: CMS rules hamper 'prescribing' of fruits, veggies

What does generative AI mean for health care? We asked experts

United colonoscopy coverage change 'may cost lives,' doctors say

STAT Readout: The latest on Wegovy, Mounjaro, and Covid shots

Anesthesiologist group: stop taking Ozempic before surgery

DeepMind touts AlphaFold's new skills as protein folding AI models face off

Activists slam private health insurers over coverage restrictions

Readout LOUD podcast: ESMO highlights & Roivant's big deal

Wikipedia

Sarepta Duchenne therapy fails to meet primary endpoint in trial

Anesthesiologist group: stop taking Ozempic before surgery

As demand for Covid shots wanes, Moderna seeks its next success

Explaining an after

Travis Kelce and the trap of celebrity vaccine endorsements

All of Us, NIH's precision medicine initiative, gets a big boost

explore

focus

hotspot

leisure time