CISA Warns About Siemens, Philips Medical Device Flaws

November 15, 2021 CynergisTek, Inc.

Vulnerabilities Identified in Siemens' Nucleus RTOS, Philips MRI Products

CISA is warning of security flaws in Siemens' Nucleus products, as well as vulnerabilities in some Philips MRI devices.

Federal authorities this week issued alerts about security vulnerabilities identified in medical device products from two manufacturers, Siemens and Philips. Both companies also issued their own advisories related to the issues.

The advisories, all issued Tuesday, concern 13 security flaws in the TCP/IP stack and related services of Siemens' Nucleus Real-Time Operating System and three vulnerabilities in certain Philips MRI products.

In this article, Benjamin Denkers, CIO of Privacy and Security at CynergisTek discusses Siemens and Philips product vulnerabilities and how a patient can be affected and healthcare can be disrupted.

Read the full article.

About the Author

CynergisTek is a top-ranked cybersecurity consulting firm dedicated to serving the information assurance needs of healthcare. CynergisTek offers specialized services and solutions to help organizations achieve privacy, security, and compliance goals. The company has been recognized by KLAS in the 2016 and 2018 Cybersecurity reports as a top performing firm in healthcare cybersecurity, as well as the 2017 Best in KLAS winner for Cybersecurity Advisory Services.
Follow on Twitter Follow on Linkedin Visit Website More Content by CynergisTek, Inc.

Philips, CISA Warn of Medical Device Product Security Flaws

Benjamin Denkers, CIO Privacy and Security at CynergisTek, discusses vulnerabilities identified in the Phil...

Attracting, retaining healthcare CISOs: Maybe it’s not a money problem

Mac McMillan discusses financial compensation for security leaders and challenges with attracting and retai...

Insights Center

CISA Warns About Siemens, Philips Medical Device Flaws

About the Author

Previous Article

Next Article

CISA Warns About Siemens, Philips Medical Device Flaws

About the Author

Previous Article

Next Article

Most Recent Articles

Jon Moore considers how healthcare entities should address patient data risks when clinicians use ChatGPT or similar AI tools

This article shares some of the highlight results from Healthcare Innovation's annual survey, with analysis of the results by industry leaders and observers.

Hacking and business associate incidents dominated in 2022, foreshadowing the top risks and threats that will impact healthcare and their vendors this year

Jon Moore shares his predictions for 2023 cybersecurity supply chain risk

Jon Moore discusses cybersecurity supply chain risk and the actions that organizations should take in order to properly implement and prepare for new technology.

Dave Bailey shares 2023 predictions in healthcare cybersecurity including ransomware, supply chain, and medical device threats.

A joint investigation by STAT and The Markup of 50 direct-to-consumer telehealth companies found Virtual care websites were leaking sensitive information to the world’s largest advertising platforms.

The provider says pixels used to collect information about website users may have transferred certain types of patient information since 2017.

Andrew Mahler discusses recent OCR bulletin outlining how organizations using tracking tech like Meta Pixel should pay close attention to whether PHI is being handled in accordance with HIPAA.

Andrew Mahler discusses the recent HHS warning on the use of tracking code in many healthcare websites and portals could be violating HIPAA privacy regulations.

Andrew Mahler, former OCR investigator shares his expertise on new privacy laws and challenges and best practices healthcare, and how they may have added salience in a post-Dobbs decision world.

Clearwater's Jon Moore Jon Moore considers several lessons emerging from the Somnia case related to vendor security.

Andrew Mahler discusses the idea that providers now need to think outside of routine types of patient information disclosures.

Health systems have made progress, but they still have a long way to go, says Clearwater CEO Steve Cagle. Hospital executives must drive change from the top.

Healthcare organizations should be ready to find and patch instances of OpenSSL 3.0, warn cybersecurity experts.

Healthcare security experts are offering their two cents on the technical supply chain as part of a cybersecurity awareness month campaign

Ben Denkers discusses the industry alert issued in September 2022 from the FBI regarding unpatched and outdated medical devices that are vulnerable to cyberattacks

Mac McMillan discusses the impacts and cost of disruption at the latest HCP Fall Conference.

Healthcare security experts are offering their two cents on enabling multi-factor authentication as part of a cybersecurity awareness month campaign