The Cybersecurity and Infrastructure Security Agency (CISA) has warned of vulnerabilities in Contec’s CMS8000 patient monitors that could jeopardise patient safety. The firm’s firmware versions contain a backdoor allowing potentially unauthorised third parties to access patient data. It recommends healthcare providers disconnect monitors connected to the internet and Contec confirmed with the FDA that there is currently no software patch to help mitigate the risk.

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed a new malware named RESURGE. Deployed in exploiting Ivanti Connect Secure appliances’ patched security flaw,