Information Sharing to Mitigate Emerging Vulnerabilities
summary
Health‑ISAC reports delivering 1,000+ emerging vulnerability exposure alerts in 2023, using targeted Shodan scans to inventory medical imaging systems and viewers, finding roughly 4,000 exposed DICOM servers (≈1,000 in the US) down from ~10,000 after outreach. Alerts cite active exploitation and public proof‑of‑concepts for Sante and Micro DICOM viewers and an FFT server, recommend network segmentation, TLS, bitstream validators and sandboxed detonation of patient files, and push targeted quarterly reports and Atlas‑fed advisories to affected sites.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 3:10Health ISAC and healthcare security
- 5:55DICOM vulnerabilities and attacks
- 18:34Five DICOM attack types
- 34:23Recent DICOM vulnerabilities
- 41:36Future of DICOM security
- 44:21Q&A
related talks
37mMillions of Patient Records at Risk: The Perils of Legacy Protocols
22mRIS-ky Business: Exploiting Medical Information Systems
58mMedical Device Security
40mThe Attack Surface of the Healthcare Industry
19mSecurity in the Medical Internet of Things
36m Macabre stories of a hacker in the public health sector (Chile)
29mYou've Got Vulnerability: Exploring Effective Vulnerability Notifications
01h 05mCritical Information Infrastructure (CII) Protection: Challenges & Opportunities