Call us now:
Thank you for posting Olaf Classen. Now things are getting serious as the US Food and Drug Administration (FDA) publishes its finding of cybersecurity vulnerabilities found in Contec Medical Devices that ‘may put patients lives at risk after being connected to the internet.It appears cyber vulnerabilities in Contec CMS8000 and Epsimed MN-120 have been identified:1. The patient monitor patients may be remotely controlled by an unauthorized user or not work as intended.2. The software on the patient monitors includes a backdoor, which may mean that the device or the network to which the device has been connected may have been or could be compromised.3. Once the patient monitor is connected to the internet, it begins gathering patient data, including personally identifiable information (PII) and protected health information (PHI), and exfiltrating (withdrawing) the data outside of the health care delivery environment.The implications are that personal healthcare data is being sent to the manufacturer. It also implies that that device can be remotely controlled or could be used to compromise a network it is connected to.CISA also raise concerns of an embedded firmware back door.https://lnkd.in/eJhZizaR@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC#cybersecurity #cyberriskmanagement #cybervulnerabilities
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7291032523751522304