Podcast · Episode 85

    Building Cyber Resilience Into Medical Devices with Joe Saunders

    With Joe Saunders - What if a medical device could prevent an attacker from exploiting a vulnerability, even before a patch becomes available?

    Listen hereOpen audio file
    Christian Espinosa, Founder & CEO at Blue Goat Cyber

    By Christian Espinosa, MBA

    Founder & CEO · Blue Goat Cyber

    Listen now

    What if a medical device could prevent an attacker from exploiting a vulnerability, even before a patch becomes available?

    Joe Saunders, CEO and co-founder of RunSafe Security, joins Christian Espinosa to explore a different approach to protecting the software inside medical devices and other critical infrastructure.

    Joe goes through how RunSafe's technology changes the way software functions load into memory, making certain exploits ineffective without introducing the performance demands typically associated with additional security software.

    But the implications extend beyond stopping an attack. For medical device manufacturers, vulnerability management can create significant development, testing, and regulatory challenges. Could preventing exploitation at runtime also reduce the burden of patching and help companies get products to market faster?

    The conversation explores the economics of cybersecurity, the threat of compromised software updates, and why increasingly capable attackers are forcing manufacturers to rethink how they protect devices already deployed in the field.

    In This Episode:

    02:44 Protecting critical infrastructure and medical devices

    05:25 Why traditional runtime security creates challenges

    07:25 How RunSafe protects software without a running agent

    11:05 Understanding memory-based exploits

    20:59 The cost of constant patching and recertification

    25:54 Reducing exploitation risk from 12,000 potential gadgets to zero

    28:16 Cybersecurity and faster medical device approvals

    30:45 Threats to critical infrastructure

    36:24 The danger of compromised medical device updates

    38:43 Why AI is accelerating the cybersecurity challenge

    40:10 Building security into software from the beginning

    Learn more about RunSafe Security:https://runsafesecurity.com[https://runsafesecurity.com](https://runsafesecurity.com)

    Bring this work to your device

    Need help with fda premarket cybersecurity?

    Blue Goat Cyber delivers fda premarket cybersecurity services for medical device manufacturers - from threat modeling to FDA-ready reports.

    FDA Premarket Cybersecurity Services

    More on FDA Premarket Cybersecurity

    Ready when you are

    Get FDA cleared without the cybersecurity headaches.

    30-minute strategy session. No cost, no commitment - just answers from people who've shipped 275+ devices supported.