Today's medical device cybersecurity news: CISA KEV adds, FDA letters, breaches, guidance updates, and 524B moves curated by Blue Goat Cyber.
A cybersecurity vulnerability has been identified in the software that could allow a malicious user to take over an administrator session, delete or modify image or study data, or lock legitimate users out of the system. Additionally, a software issue has been identified that…
(Retrospectively reported) Cybersecurity vulnerability identified in communication protocol between the customer-provided infrastructure (network storage, servers, or computers) and in vitro diagnostic devices which may result in compromised data transmission.
(Retrospectively reported) Cybersecurity vulnerability identified in communication protocol between the customer-provided infrastructure (network storage, servers, or computers) and in vitro diagnostic devices which may result in compromised data transmission.
(Retrospectively reported) Cybersecurity vulnerability identified in communication protocol between the customer-provided infrastructure (network storage, servers, or computers) and in vitro diagnostic devices which may result in compromised data transmission.
(Retrospectively reported) Cybersecurity vulnerability identified in communication protocol between the customer-provided infrastructure (network storage, servers, or computers) and in vitro diagnostic devices which may result in compromised data transmission.
(Retrospectively reported) Cybersecurity vulnerability identified in communication protocol between the customer-provided infrastructure (network storage, servers, or computers) and in vitro diagnostic devices which may result in compromised data transmission.
Therapy Disc (TD) that powers and sends stimulation signals to an Implantable Pulse Generator (IPG), part of a neurostimulation system, has a firmware issue that causes the TD to attempt to restart, then fail, leading it to become non-functional, and if a secondary TD is…
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
Retrospective review of servicing records identified AIC units requiring various hardware, firmware, and/or software update(s): 1. RFID firmware issue that may result in failure of the AIC to recognize the purge cassette during case setup or cassette change. This issue may…
Retrospective review of servicing records identified AIC units requiring various hardware, firmware, and/or software update(s): 1. RFID firmware issue that may result in failure of the AIC to recognize the purge cassette during case setup or cassette change. This issue may…
Retrospective review of servicing records identified AIC units requiring various hardware, firmware, and/or software update(s): 1. RFID firmware issue that may result in failure of the AIC to recognize the purge cassette during case setup or cassette change. This issue may…
Delayed or no result when analyzing clinical samples with EMAG system (ref: 418591/418591U) due to a randomly occurring software error, Error 10003 Heater timeout after updating to recent firmware SP4 Patch 2
