Healthcare staff find AI-built tools handling patient data that IT never approved
RESEARCHredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Survey data from Paubox reports that nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-generated code touching patient data before deployment, while seven in ten have found AI-built tools processing that data without IT or security awareness. The article notes that code review only covers submitted code, so scripts, automations and integrations assembled with AI coding assistants can escape governance. No CVEs or specific product vulnerabilities are referenced.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Inventory scripts, automations and integrations that staff have built with AI coding assistants, especially those touching patient data.
- Extend governance beyond formal code review to cover tools created outside IT and security oversight.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security