Medical Device Security

7 New Vulnerabilities Threaten Supply Chain, Medical Device Security

by Jill McKeon

Forescout's global research team, Vedere Labs, and CyberMDX discovered seven vulnerabilities that impact the PTC Axeda agent and threaten supply chain and medical device security. The...

BD Discloses Viper, Pyxis Medical Device Vulnerabilities

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) issued two advisories concerning medical device vulnerabilities in some Becton, Dickinson and Company (BD) products. If exploited, the...

Healthcare IoT, Medical Device Vulnerability Disclosures Skyrocket

by Jill McKeon

Healthcare IoT, IT, and medical device vulnerability disclosures have increased in recent years, signaling a need for better industrial control system (ICS) security, a new report by Claroty found....

75% of Infusion Pumps Contain Known Security Gaps, Report Finds

by Jill McKeon

Researchers from Unit 42 analyzed over 200,000 infusion pumps and found known security gaps in 75 percent of them, a recent report revealed. The discovery has grim implications for medical device...

KLAS: Evaluating Top Healthcare IoT Security Vendors

by Jill McKeon

Medigate, Ordr, and Armis are among the most considered and adopted healthcare Internet of Things (IoT) security vendors in 2022, according to a new KLAS report. Healthcare IoT solutions can help...

Healthcare Sector Spearheads SBOM Adoption to Support Cybersecurity

by Jill McKeon

The healthcare sector is spearheading rapid software bill of materials (SBOM) adoption to mitigate growing cybersecurity concerns and support the Food and Drug Administration’s (FDA) push toward...

53% of Connected Medical Devices Contain Critical Vulnerabilities

by Jill McKeon

More than half of connected medical devices and other IoT devices contain critical vulnerabilities, a new report by Cynerio discovered. If exploited, these vulnerabilities could be detrimental to...

FDA Provides Guidance on Remote Data Collection for Clinical Investigations

by Jill McKeon

The Food and Drug Administration (FDA) released draft guidance offering recommendations for stakeholders surrounding the use of digital health technologies (DHTs) for remote data collection in clinical...

HSCA Releases Cybersecurity Guidelines for Medical Device Manufacturers

by Jill McKeon

The Healthcare Supply Chain Association (HSCA) released guidance for medical device manufacturers and healthcare providers concerning cybersecurity and patient privacy practices. HSCA is a trade...

CISA Warns of 13 Vulnerabilities in Fresenius Kabi Infusion Systems

by Jill McKeon

The Cybersecurity & Infrastructure Security Agency (CISA) released an advisory regarding 13 newly discovered vulnerabilities in Fresenius Kabi Agilia Connect Infusion Systems that could pose risks...

CISA Warns of Authentication Vulnerabilities in Cardiology Products

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) released a medical advisory warning healthcare organizations of authentication vulnerabilities associated with certain Hillrom Welch Allyn...

FDA, MITRE, MDIC Create Medical Device Threat Modeling Playbook

by Jill McKeon

MITRE and the Medical Device Innovation Consortium (MDIC) teamed up to release a playbook for medical device threat monitoring to help organizations strengthen the cybersecurity of medical...

Philips Discloses Additional Medical Device Security Vulnerabilities

by Jill McKeon

As part of its voluntary Coordinated Vulnerability Disclosure (CVD) program, Philips alerted the healthcare industry to two new medical device vulnerabilities that may allow for its patient monitoring...

Using Software Bill of Materials (SBOMs) For Medical Device Security

by Jill McKeon

A software bill of materials (SBOM) provides a list of all software components in a given device, enabling transparency by allowing device manufacturers, buyers, and operators to identify and mitigate vulnerabilities and manage medical...

IoT Security Incidents Increase as Healthcare Leans into Connected Health

by Jill McKeon

Connected health enables quality care by means of telehealth, remote patient monitoring tools, wearable technology, and other digital tools, but it also presents the risk of IoT security incidents....

Insufficient Access Controls Cause Philips MRI Vulnerabilities

by Jill McKeon

Three newly identified low-to-medium severity Philips MRI vulnerabilities may allow unauthorized actors to manipulate software, modify system configurations, and export protected health information...

Researchers Discover 13 Medical Device Security Vulnerabilities

by Jill McKeon

Researchers from Forescout Research Labs discovered a set of 13 new medical device software vulnerabilities affecting the Siemens Nucleus TCP/IP stack. The software suite is used in critical devices...

Best Practices for Responding to Medical Device Security Incidents

by Jill McKeon

As healthcare organizations continue to integrate connected medical devices into everyday clinical care, it is imperative that providers recognize and prepare for medical device security risks that...

3 Barriers to Achieving Medical Device Security

by Jill McKeon

Achieving medical device security requires a healthcare organization to have full visibility into how many devices are on its network, regularly patch and replace out-of-date devices, and stay ahead of the latest technical vulnerabilities...

2021’s Top Healthcare Cybersecurity Threats, What’s Coming in 2022

by Jill McKeon

Healthcare cybersecurity threats continue to cast a dark shadow on the already overburdened US healthcare system, especially as the COVID-19 pandemic persists. Feeding on global chaos, threat actors have orchestrated sophisticated...