Latest Posts

What’s going on in the world of medical device cybersecurity as well as here at Cy4Med.ca We provide alert information, commentary, and information on the latest in our industry to help you stay informed.

  • Interesting Reading – August 2024

    Various links and documents that pertain to cybersecurity and healthcare cybersecurity that I have found interesting this month.

    Read More →

  • CrowdStrike Outage – Resources for Healthcare

    Resources for the recent CrowdStrike outage – tailored to healthcare.

    Read More →

  • CrowdStrike Outage in Canadian Healthcare

    Impacts of the CrowdStrike outage in Canadian healthcare and how to use it to get your department ready for future responses.

    Read More →

  • Interesting Reading – July 2024

    Various links and documents that pertain to cybersecurity and healthcare cybersecurity that I have found interesting this month – Updated as the month goes on.

    Read More →

  • Interesting Reading – June 2024-Updated

    Various links and documents that pertain to cybersecurity and healthcare cybersecurity that I have found interesting this month – Updated as the month goes on.

    Read More →

  • Canadian Regulatory and Legal Resources

    Online resources to help understand the legal and regulatory framework within Canada as it relates to cybersecurity. Some resources specific to healthcare are also included.

    Read More →

  • Ransomware in the Canadian marketplace

    A report from Telus cybersecurity that looks at ransomware in the Canadian marketplace with some insights into healthcare as well.

    Read More →

  • ECRI lists ransomware as a health technology hazard

    In their annual listing of top health technology hazards ECRI has listed ransomware as #6. Cybersecurity-related hazards have routinely made onto ECRI’s hazard list for the better part of a decade now.

    Read More →

  • Digital Health Laws and Regulations

    I would love to see the Federal government enact some legislation for the Provinces to follow around minimum standards for cybersecurity – above just ensuring data privacy. The jurisdictional issues aside –

    Read More →

  • NIST releases CSF 2.0

    NIST’s updated CSF aims to help organizations of all sizes improve their cyber-posture. Providing new documentation and resources and adding some additional focus on governance and supply chains.

    Read More →

  • Medical Device vulnerabilities actively exploited in the wild.

    I came across an insightful article from 2022 during the holiday break, revealing that vulnerabilities in medical technology are actively exploited by advanced persistent threats (APTs). Our database highlights over 190 known vulnerabilities in medical devices, challenging the belief that our niche field in Biomedical Engineering is immune to cyber threats. This underscores the necessity…

    Read More →

  • CISA Urges End of Default Passwords

    CISA urges technology manufacturers to eliminate usage of default password. Implementation proactively eliminates known path of exploitation.

    Read More →