Loading story…
Ebenezer Arumai, director of IT infrastructure and security at Inogen, emphasizes the necessity of integrating security frameworks into the initial design of medical devices. He highlights the risks of retrofitting security and the importance of strong OEM partnerships. Arumai's insights come ahead of his participation in the 10th ManuSec Summit, focusing on actionable strategies for cyber resilience in manufacturing.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Healthcare sector experts said **medical device cybersecurity** may become more manageable as manufacturers provide more complete **software bills of materials (SBOMs)** and hospitals improve asset visibility. Phil Englert of Health-ISAC said that when vulnerabilities such as **SweynTooth** emerge, organizations with better device component inventories can more quickly identify affected systems, and he pointed to U.S. FDA rules in effect since 2023 that require medical device makers to include SBOMs for commercial, open-source, and off-the-shelf components in premarket submissions for covered "cyber devices." Englert said higher-quality, more consistent SBOM data, combined with evolving **AI-enabled tools**, should help healthcare delivery organizations and manufacturers streamline vulnerability identification and resilience efforts across medical device environments. The reporting is based on the same HIMSS 2026 interview carried by two outlets, while separate commentary on **systemic third-party risk** in healthcare tied to the Change Healthcare ransomware incident addresses a different issue and does not describe the same specific development in medical device security.
Jun 29, 2026
Implantable neural devices and brain-computer interfaces are introducing a new class of cybersecurity and privacy risks, according to Professor Kevin Fu, director of the Archimedes Center for Health Care and Medical Device Cybersecurity at Northeastern University. These devices, which can include drug pumps and electrical therapies for neurological conditions, store highly sensitive neural data and are increasingly using sensors and AI to adapt therapies automatically, raising concerns about data protection and privacy engineering. The complexity of securing these devices is heightened by their limited battery power and the critical nature of the data they process. Research at the Archimedes Center, supported by substantial funding, is focused on addressing these challenges and ensuring that privacy is built into the engineering of implantable medical technologies. As these devices become more advanced and widely used, ensuring robust cybersecurity measures and privacy protections is essential to safeguard patient data and prevent potential exploitation or misuse of neural information.
Jun 29, 2026
Ed Harris, the global director of information security at Mauser Packaging, has emphasized the growing importance of securing operational technology (OT) environments in the manufacturing sector. As manufacturing systems become increasingly connected, the risk profile for OT has expanded, making it a more attractive target for cyber attackers. Harris highlighted that OT security, once a theoretical concern, is now a practical necessity as threat actors actively seek vulnerabilities in these environments. He stressed the need for IT security executives to develop a deep understanding of OT-specific risks, which differ significantly from traditional IT threats. The integration of IT and OT systems introduces new connectivity and security challenges, requiring a careful balance to avoid disrupting essential manufacturing operations. Harris advocates for close collaboration between IT security teams and engineering departments to leverage specialized knowledge and build robust cybersecurity defenses. He pointed out that engineering teams possess critical insights into the operational aspects of OT systems, which are vital for designing effective security controls. The interview also addressed the importance of maintaining operational efficiency while implementing security measures, as excessive restrictions can hinder production processes. Harris’s experience, spanning over 30 years in cybersecurity across various manufacturing companies, informs his approach to managing these complex environments. He noted that the historical separation between IT and OT is no longer viable, and organizations must adopt integrated strategies to protect both domains. The discussion took place in the context of the upcoming ManuSec Summit in Chicago, where over 150 IT and OT security leaders are expected to convene and share best practices. Harris’s insights underscore the urgency for manufacturing organizations to reassess their security postures in light of evolving threats. He also mentioned the need for ongoing education and awareness among both IT and OT personnel to keep pace with the changing threat landscape. The conversation highlighted that regulatory pressures and industry standards are increasingly mandating stronger OT security controls. Harris concluded by encouraging organizations to proactively address OT security challenges before they result in significant operational disruptions. The interview serves as a call to action for manufacturing leaders to prioritize OT security as a core component of their overall risk management strategy. By fostering partnerships between IT and engineering, companies can better safeguard their operations against emerging cyber threats.
Jun 29, 2026