Department of Homeland Security and healthcare IT vendor Philips have issued alerts about a security vulnerability in the company’s Tasy electronic medical records system that could put patient data at risk. The alert issued on April 30 by DHS’ Industrial Control Systems Computer Emergency Response Team notes that the cross-site scripting vulnerability in Philips’ system could lead to a compromise of patient confidentiality and system integrity. Some experts say the type of vulnerability identified is relatively common and can affect other records systems, health IT products and medical devices.”]
Source: https://www.inforisktoday.com/alerts-vulnerability-in-philips-records-system-a-12441