FBI Issues Notice to Health Industry Highlighting Risks of Unpatched Medical Devices

The FBI has issued a Private Industry Notification targeted to the health care sector, warning that it has “identified an increasing number of vulnerabilities posed by unpatched medical devices that run on outdated software and devices that lack adequate security features.” The potential threats identified include outdated software that is unable to be patched or hasn’t been patched, devices using default configurations that can be exploited by threat actors, and devices that did not incorporate security features during the development stage.