More Warnings on Security in Implantable Medical Devices

Researchers at KU Leuven and the University of Birmingham demonstrated that multiple implantable cardiac defibrillators remain vulnerable to wireless snooping, replay, and denial-of-service attacks after reverse-engineering the devices' proprietary communication protocol; the flaws can be exploited with inexpensive commercial equipment to identify patients, infer therapy details, and potentially reprogram or disrupt life-critical devices.