Medical monitoring machines spotted stealing patient data, users warned to pull the plug ASAP

A security roundup reports that FDA and CISA warn of a critical backdoor in Contec/Epsimed CMS8000 patient monitors that can remotely execute code, crash devices, exfiltrate patient data and overwrite files to hide itself; additional items include Dell security updates for multiple components, several high-severity CVEs (notably an actively exploited Zyxel router zero-day), MGM Resorts’ $45M settlement over past breaches, a Community Health Center breach affecting over a million individuals, AWS Redshift tightening defaults, and a Cisco Talos-discovered phishing campaign delivering a new .NET backdoor (“TorNet”) with IoCs.