Code Blue: 8k Vulnerabilities in Software to manage Cardiac Devices

Whitescope researchers analyzed hardware and software for implantable cardiac devices from four vendors and found pervasive security weaknesses — including hardcoded credentials, outdated third-party libraries (thousands of known vulnerabilities), unencrypted patient data, unsigned firmware, and insecure update channels — that could enable reverse engineering, firmware tampering, and remote or local attacks on pacemakers and associated home monitoring systems, posing serious risks to patient safety.