The US Food and Drug Administration (FDA) has updated its premarket cybersecurity guidance to include devices that can connect to the internet. The draft guidance considers not only devices that are purposefully internet-enabled but potentially any device that could accidentally connect. The FDA also advised that device manufacturers prepare for potential vulnerability disclosures, adjust their plans as required and ensure robust threat modelling documentation.
Understanding the Top Cybersecurity Threats to Healthcare Organizations
Even with increased awareness and specific guidance, cybersecurity in healthcare still faces major challenges. Threats range from social engineering to known exploited vulnerabilities (KEVs) in