Security researchers have identified 11 vulnerabilities in GE HealthCare’s Vivid series of ultrasound machines and related software. These vulnerabilities could enable attackers to disrupt medical procedures, compromise patient data, and interfere with diagnoses. The most prominent threat involves deploying ransomware to lock healthcare providers out of the system. GE HealthCare affirms that safety risks are controlled, and advises healthcare providers to install patches, ensure physical security, implement network segmentation, and use firewall rules to mitigate risks.
SEC Disclosures Up, But Not Enough Details Provided
New regulations by the US Securities and Exchange Commission (SEC) have caused the number of cybersecurity incident reports from public companies to rise by 60%