In-brief: A survey of web and mobile applications by the firm Veracode finds that governments are the most likely to use insecure software, as measured against the OWASP (Open of Web Application Security Project) Top 10.
Healthcare
X-Rays Behaving Badly: Devices Give Malware Foothold on Hospital Networks
In-brief: serious breaches of hospital networks are almost certainly more common than has been reported, as compromised medical devices often hide the telltale signs of malware infection and data theft, according to a report from the security firm TrapX.
IEEE Proposes Standards For Safe, Connected Health Products
In-brief: a new publication by IEEE lays out a “building code” for medical device makers to help address security and privacy issues in products.
Researcher: Drug Pump the ‘Least Secure IP Device I’ve Ever Seen’
In-brief: A researcher studying the workings of a wireless-enabled drug infusion pump by the firm Hospira said the device utterly lacked security controls, making it “the least secure IP enabled device” he had ever worked with. His research prompted a warning from the Department of Homeland Security.
Surgical Robots The Latest To Fall To Whitehats
In-brief: Researchers from the University of Washington demonstrated attacks against “a slew” of exploitable vulnerabilities in a surgical robot they helped develop. They included attacks that could cause “jerky motion of robot’s arms” or render the surgical robot “motionless” and “almost unusable.”
