Collaborate Disseminate
Any effort to overhaul the cyber security of connected medical devices is likely to take considerable time and energy. Given that many of them are made to last decades, securing them while they’re in use can make turning an ocean liner look posit… Continue reading How to help your medical devices meet the UL (and FDA) standard
Vulnerabilities in healthcare devices and hospital systems are leading to growing concerns in the infosec community about patient safety. Continue reading Black Hat 2018: With Healthcare Security Flaws, Safety’s Increasingly at Stake
What does cyber security mean for connected medical devices? Recently, the U.S. Food and Drug Administration (FDA) officially announced that it formally recognizes UL 2900-2-1. The announcement follows up the FDA’s acceptance last year of UL 2900… Continue reading Building security into connected medical devices
A slew of products from medical dispensing company BD are susceptible to the KRACK vulnerability disclosed last fall. Continue reading KRACK Vulnerability Puts Medical Devices At Risk
News, via Sean Gallagher – writing at Ars Technica, details at least five critical flaws in a multi-vender software package shipped under the moniker ‘Natus Xltek NeuroWorks 8′. Give’s one pause, before hooking up to the machines at your local… Continue reading The Noggin Tales: Flaws of EEG
via Zaid Shoorbajee – reporting for Cyberscoop, comes a story of security entropy, this time in medical imaging device system patching and an esteemed University’s research targeting those systems. In this case, a research paper from Israel’s Ben-Guri… Continue reading BGU Security Researchers Urge Physicians to Patch Their Systems
Pacemakers and pacemaker programmers lack authentication and are plagued with thousands of software vulnerabilities across leading manufacturers. Continue reading Pacemaker Ecosystem Fails its Cybersecurity Checkup
Companies such as Siemens and Bayer are planning to release patches for medical devices hit by the ransomware WannaCry over the past several days. Continue reading Patches Pending for Medical Devices Hit By WannaCry
Mike Mimoso and Chris Brook recap this year’s SOURCE Boston Conference and discuss the week in news, including the long term implications of the NSA’s DoublePulsar exploit, and the HipChat breach. Continue reading Threatpost News Wrap, April 21, 2017
At Source Boston, Josh Corman of the Atlantic Council said that healthcare is suffering from a lack of security talent, devices rife with vulnerabilities, and government incentivizing bad behavior. Continue reading Healthcare Sector Suffers From Lack Of Security Professionals