Issue 156: FHIR APIs vulnerable to abuse, 3D printers facing hijacking risk, API security webinar
Brief
This week, we have a vulnerability report from Alissa Knight on Fast Healthcare Interoperability and Resources (FHIR) APIs being potentially vulnerable to abuse, and more details on how the breach at MakerBot’s Thingiverse 3D printing repository website could lead to hijacking users’ 3D printers.
In addition, there’s an article summing up the increasing numbers of API attacks and breaches, and an upcoming Kuppinger Cole webinar on continuous API security.
Vulnerability: FHIR APIs vulnerable to abuse
This week saw the release of the cybersecurity researcher Alissa Knight’s latest research into FHIR APIs and the mobile apps that access them .
The key finding is that although the APIs themselves are well-secured, there were serious shortcomings detected in the downstream mobile apps that consume the APIs.