Healthcare · Platforms & Architecture
Articles in this selection, newest first. Change the filters, or clear them to see every article.
8 articles · Healthcare · Platforms & Architecture
Articles
Week of 11 May 2026
Payer prior authorization APIs will only help the providers ready to call them
By January 2027, federal rules require health insurers to offer electronic doorways for prior authorization. Only health systems that have settled three things first will benefit: which system knocks on the door, whether the chart can answer, and who owns the request.
Week of 13 October 2025
Why Windows 10’s end of support split every hospital fleet in three
Windows 10 support ended and hospital computers split into three groups: those IT controls, those medical device makers control and those nobody clearly controls. Reporting them as one migration hid where the real risk sat, and only the first group had a simple answer.
Week of 13 February 2023
Why a file-transfer server belongs on the list of systems that hold PHI
The GoAnywhere breach reached patient data through file-transfer software most health systems saw as mere plumbing. In fact it is a store of sensitive data with its own exposure, retention and accountability, and it deserves the care given to any core system.
Week of 10 October 2022
In a merged health system, the network decides which hospitals go to paper
Ransomware at CommonSpirit Health in 2022 sent some of its hospitals to paper for weeks while others carried on. In a merged health system, shared logins, shared networks and who can order a shutdown decide how far one attack spreads.
Week of 13 June 2022
Internet Explorer retired; its clinical applications did not
Internet Explorer was retired, but hospitals’ old clinical web applications were not. A compatibility mode in Edge kept them running, and the list it required became a ready-made map of legacy risk, best worked down by who could fix each site.
Week of 27 September 2021
Trust nobody owned: the expired root certificate and hospital legacy clients
On September 30, 2021, a widely used root certificate expired. The websites were fine; the old software talking to them broke. In hospitals, the trouble hid in devices and integrations whose trust lists nobody owned or even knew about.
Week of 30 August 2021
Hurricane Ida and the IT dependencies that sit under the EHR
Hurricane Ida knocked out Louisiana’s grid and phone networks, and hospitals ran on generators for days. The week tested three layers hidden beneath the electronic health record, each owned by a different team: power, connectivity and hosting.
Week of 20 January 2020
Citrix gateways: the most exposed system in the hospital
The Citrix flaw exploited in January 2020 revealed that the gateway clinicians used to reach patient records from outside was a hospital’s most exposed system. Securing it took a clear owner, walls behind it and a search for intruders after every fix.