Insights

Field notes from the MedTech security trenches.

Deep dives on FDA expectations, threat modeling, penetration testing, SDLC, and the standards your team is being asked to meet.

Pen Testing· Jan 13, 2024

25 Use Cases for White-Box Penetration Testing

This article explores white box penetration testing use cases and their importance in ensuring robust cybersecurity.

#Pen Testing

Read article

Primer· Jan 11, 2024

A Guide to Hacker Hat Colors

Learn how different hacker types - white, gray, black hats - impact medical device security. Understand threat modeling and FDA-compliant pen testing strategies.

#Primer

Read article

FDA· Jan 11, 2024

Medical Device Cybersecurity: SBOM & SAST

SBOM + SAST explained: learn how component transparency and static code scanning strengthen medical device cybersecurity, align with FDA guidance, and cut risk.

#FDA#SBOM

Read article

Risk· Jan 10, 2024

The Top 50 Cybersecurity Issues with Medical Devices

This blog lists the 50 cybersecurity issues in medical devices and explains how penetration testing could have prevented them.

#Risk

Read article

FDA· Jan 9, 2024

Medical Device Threat and Attack Trees

In this post, we explore the differences and similarities between threat trees and attack trees, specifically in the context of medical device FDA clearance and cybersecurity.

#FDA#Threat Modeling

Read article

FDA· Jan 7, 2024

JTAG and UART Vulnerabilities

Updated April 13, 2025 In the rapidly evolving landscape of medical technology, integrating advanced debugging tools like JTAG (Joint Test Action Group) and UART (Universal Asynchronous Receiver-Transmitter) has become a pivotal aspect of medical device design and maintenance. These tools are not ju

#FDA

Read article

Primer· Jan 7, 2024

The Top 10 Most Vulnerable Medical Devices

This blog lists the top 10 medical devices that have been hacked, emphasizing the need for robust cybersecurity in healthcare technology.

#Primer

Read article

FDA· Jan 6, 2024

FDA Cybersecurity Requirements for Medical Devices (2026)

This post explores the FDA's cybersecurity requirements for medical devices, their importance, and the challenges manufacturers face in complying with them.

#FDA

Read article

Primer· Jan 6, 2024

Examples of Hacked Medical Devices

Discover how weak cybersecurity left medical devices exposed to hackers - and how FDA guidance and secure design can prevent future breaches.

#Primer

Read article

Testing· Dec 23, 2023

Medical Device Software Testing

There are two main types of software testing with medical devices: static and dynamic. Static testing combs over the code base to look for vulnerable code snippets and provide alternative, secure code. Dynamic testing looks for vulnerabilities in the running application through various types of test

#Testing

Read article

Pen Testing· Sep 19, 2023

SQL Injection on a Login Page: A Medical Device Cybersecurity Case Study (and How to Prevent It)

A real-world SQL injection case study showing how login flaws can escalate to system compromise - plus prevention and verification steps for medical device teams.

#Pen Testing#Web Security

Read article

Primer· Dec 16, 2022

Blue Goat Cyber Blog

The Blue Goat Cyber blog offers detailed insights into cybersecurity, focusing on areas like healthcare cybersecurity trends, hacker profiles and motivations, medical device cybersecurity, and methods of initial access by attackers.

#Primer

Read article

Ready when you are

Get FDA cleared without the cybersecurity headaches.

30-minute strategy session. No cost, no commitment - just answers from people who've shipped 250+ submissions.