The Food and Drug Administration today released a plan to improve medical device safety. The plan calls for increased funding to develop an active surveillance capability for FDA’s National Evaluation System for health Technology (NEST) and conduct post-market studies to evaluate specific safety concerns. The agency also will explore ways to streamline post-market safety mitigations; spur innovation towards safer medical devices; advance device cybersecurity; and integrate its activities to promote safety across the product lifecycle. With respect to cybersecurity, the agency plans to update premarket guidance to better protect against risks such as ransomware campaigns and vulnerabilities that could enable a remote multi-patient attack. It also will consider requiring firms to build into a product’s design the ability to update and patch device security and provide a “software bill of materials” listing software embedded in a device, and developing a CyberMed Safety Analysis Board to serve as a resource to device makers and FDA. The agency is accepting comments on the plan at https://www.regulations.gov.

Headline
An FBI alert released Sept. 1 warns of cyber actors impersonating government officials, media and other public individuals on a commercial messaging app to…
Headline
In this conversation, John Riggi, AHA national advisor for cybersecurity and risk, and Scott Gee, AHA deputy national advisor for cybersecurity and risk, break…
Headline
Boston Scientific announced Sept. 8 that the network disruption to its remote monitoring services following an Aug. 25 cyber incident has been resolved. The…
Headline
The Food and Drug Administration has issued an early alert for all automated Impella controllers by Abiomed following an issue that has caused three deaths and…
Headline
The FBI and the Department of Justice Aug. 26 announced the disruption of a China-linked hacking group known as QTFY. The group, which also identifies as QT…
Headline
Boston Scientific, a large supplier of medical devices, said in an Aug. 26 statement posted on its website that on Aug. 25 it “identified a cybersecurity…