The Ongoing Silent Storm - Cybersecurity Challenges in the Medical Devices Industry

Explore the complex challenges facing the medical device industry in this hour-long conference talk from the 38th Chaos Communication Congress (38C3). Gain deep insights into how heavily regulated the medical technology sector is and understand the mounting cybersecurity requirements that particularly impact small to medium-sized manufacturers. Learn about key industry developments including eStar evolution, regulatory frameworks, and the roles of various stakeholders from manufacturers to security companies. Examine critical aspects of modern medical device development including Software Bill of Materials (SBOM), threat modeling, and security risk management. Delve into numerous technical and regulatory challenges such as legacy systems, embedded technology, certifications, CPE management, and National Vulnerability Database complexities. Speaker Haitham Abbadi provides a comprehensive overview of the intersection between medical device manufacturing and cybersecurity requirements, highlighting the industry's struggle to balance innovation with compliance in an increasingly complex regulatory landscape.