FDA: Medical Device Makers, Hospitals Need To Boost Cyber Security

The FDA and DHS ICS-CERT warned that security researchers discovered hard-coded administrative/backdoor passwords in hundreds (~300) of medical devices from 40 vendors—covering infusion pumps, ventilators, and monitoring systems—creating a serious risk of unauthorized privileged access; vendors and hospitals were urged to review cybersecurity practices, restrict access to networked devices, and implement layered network protections while coordination with researchers and vendors continues.