Medical Device Security

NetSPI recaps Black Hat 2023: AI dominated vendor offerings, AppSec pushed deeper into CI/CD pipelines, and automotive, aerospace, and IoT security drew growing interest.

A talk with Mattapan Community Health Center's CMO on how COVID-19 pushed 90% of care onto telemedicine, clinician adoption hurdles, and new security questions raised by home medical devices.

A webcast recap on implementing the FDA's 2023 medical device cybersecurity requirements (H.R. 2617 Section 524B), requiring lifecycle monitoring and prompt patching, plus compliance steps.

Medical device makers face new FDA premarket cybersecurity rules by October: vulnerability monitoring, patching, and an SBOM. The FBI found 53% of connected medical devices had known critical flaws.

NetSPI's Black Hat and DEF CON research shows z/OS Unix is an overlooked mainframe attack surface, with paths from authenticated user to APF-authorized code execution and UID 0.

NetSPI leadership distills four key themes from Black Hat USA 2024, where the team demoed its CAASM solution, unveiled a $500 laser hardware hacking tool, and paired EASM with CAASM for CTEM.