IEEE Spectrum has a a story on Medical device security, which follows a report from Reuters that The U.S. Department of Homeland Security is investigating possible security flaws in medical devices and hospital equipment.
From Reuters:
The products under review by the agency's Industrial Control Systems Cyber Emergency Response Team, or ICS-CERT, include an infusion pump from Hospira Inc and implantable heart devices from Medtronic Inc and St Jude Medical Inc, according to other people familiar with the cases, who asked not to be identified because the probes are confidential.
According to Spectrum the ICS-CERT team:
wants to help manufacturers fix software bugs and other vulnerabilities that could be exploited by hackers; agency sources emphasized that the companies did not do anything wrong.
The Spectrum article also references the 2011 case of remotely hacking an insulin pump, demonstrated by Jerome Radcliffe.
(Score: 1, Informative) by Anonymous Coward on Tuesday October 28 2014, @06:27PM
A little over a year ago, a grassroots movement was started at Security BSides Las Vegas for network and application security experts to reach out to critical industries -- medical devices, transportation, power companies -- and help them do a better job at securing their products. As we all know, there is plenty of room for improvement.
The movement is called I am the Cavalry [iamthecavalry.org]. I encourage you to check it out and become part of the solution to this current mess.
I'm posting anonymously so as not to appear to be grubbing for karma.