X-Rays Behaving Badly: Devices Give Malware Foothold on Hospital Networks

TrapX Security warns that unpatched and poorly configured medical devices — including PACS radiology systems and blood gas analyzers — are being used as stealthy pivot points by malware (reported examples include Zeus and Citadel) to harvest credentials and exfiltrate patient data; their testing of a NOVA CCX running Windows 2000 found default DBA credentials, local database backups, and other weaknesses that enable lateral movement and long‑term undetected infection across healthcare networks.