The Food and Drug Administration on Nov. 16 announced a new report from government contractor MITRE, Next Steps Toward Managing Legacy Medical Device Cybersecurity Risks. The FDA acknowledges that legacy medical devices—those that cannot be reasonably protected against current cybersecurity threats—can pose significant risks to the health care sector. Legacy devices were legally put on the market and may still be broadly in use. To address this important security issue, the FDA contracted with MITRE to outline practical approaches and recommendations that can further drive sector-wide legacy device cyber risk management efforts. 

Headline
The Food and Drug Administration has issued an early alert for all heart pump controllers by Abiomed, which sent a correction notice to all customers with…
Headline
Microsoft announced May 19 that it disrupted operations of Fox Tempest, a threat actor operating as a malware-signing-as-a-service used by cybercriminals to…
Headline
An AHA Cyber & Risk Intel blog by John Riggi, AHA national advisor for cybersecurity and risk, explores what health care leaders need to consider to reduce…
AHA Cyber Intel
Cyberattacks against hospitals, health systems and mission-critical health care third-party providers have surged in recent years. While these attacks often…
Headline
Microsoft Threat Intelligence is warning of a large scale, multistage phishing campaign that disproportionately targeted the health care sector, sending “code…
Headline
The Cybersecurity and Infrastructure Security Agency has launched a new initiative for critical infrastructure to defend against cyberattacks through proactive…