The backdoor on Contec CMS8000 patient-monitoring devices could allow an IP address at an unnamed university to remotely download and execute unverified files, according to CISA.

  • @[email protected]
    link
    fedilink
    English
    51 day ago

    As someone who has to deal with PCI compliance issues, there’s plenty of noob mistakes, out-of-date thinking and outright “let’s log this data for debugging purposes even though if any regulator found out they’d nuke us from orbit.”

    • @Benjaben
      link
      English
      31 day ago

      Fair enough, I can imagine that pretty easily.