Monday 23 January 2023, 11am-12noon (GMT)

In recent years, the healthcare industry has seen an increase in the use of connected medical devices within its infrastructures. This interconnectivity offers many benefits, such as the ability to remotely monitor patients, access and share medical records, and improve the efficiency and effectiveness of healthcare delivery. However, it also creates new vulnerabilities and enlarges the attack surface for cyber criminals.

Medical devices and infrastructures are vulnerable to cyber-attacks, which can have serious consequences for patients and healthcare providers. These attacks can take various forms, such as malware that disrupts device functionality, ransomware that locks access to data or systems until a ransom is paid, or supply chain attacks that insert malicious software into devices during the manufacturing process.

This talk gave us an overview of the medical sector threat landscape and explained the most common vulnerabilities affecting medical devices and infrastructures. We showcased some critical flaws discovered among IoMT devices and presented some key points vendors should take into consideration when manufacturing these kinds of devices.

Chaired by

Martin Smith MBE (info), Founder and Chairman, The SASIG

Presented by

Alessandro Magnosi (info), Principal Consultant, BSI