An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources (FHIR) API to get access to sensitive electronic health records (EHR).
This Cyber News was published on www.tenable.com. Publication date: Fri, 08 Nov 2024 17:01:03 +0000