Accessibility Statement Skip Navigation
  • Why PRWeb
  • How It Works
  • Who Uses It
  • Pricing
  • Login
  • GDPR
  • Create a Free Account
Return to PRWeb homepage
  • News
  • Resources
  • Contact
When typing in this field, a list of search results will appear and be automatically updated as you type.

Searching for your content...

No results found. Please change your search terms and try again.
  • News in Focus
      • Browse News Releases

      • All News Releases
      • Multimedia Gallery

      • All Multimedia
      • All Photos
      • All Videos
  • Business & Money
      • Auto & Transportation

      • Aerospace, Defense
      • Air Freight
      • Airlines & Aviation
      • Automotive
      • Maritime & Shipbuilding
      • Railroads and Intermodal Transportation
      • Supply Chain/Logistics
      • Transportation, Trucking & Railroad
      • Travel
      • Trucking and Road Transportation
      • View All Auto & Transportation

      • Business Technology

      • Blockchain
      • Broadcast Tech
      • Computer & Electronics
      • Computer Hardware
      • Computer Software
      • Data Analytics
      • Electronic Commerce
      • Electronic Components
      • Electronic Design Automation
      • Financial Technology
      • High Tech Security
      • Internet Technology
      • Nanotechnology
      • Networks
      • Peripherals
      • Semiconductors
      • View All Business Technology

      • Entertain­ment & Media

      • Advertising
      • Art
      • Books
      • Entertainment
      • Film and Motion Picture
      • Magazines
      • Music
      • Publishing & Information Services
      • Radio & Podcast
      • Television
      • View All Entertain­ment & Media

      • Financial Services & Investing

      • Accounting News & Issues
      • Acquisitions, Mergers and Takeovers
      • Banking & Financial Services
      • Bankruptcy
      • Bond & Stock Ratings
      • Conference Call Announcements
      • Contracts
      • Cryptocurrency
      • Dividends
      • Earnings
      • Earnings Forecasts & Projections
      • Financing Agreements
      • Insurance
      • Investments Opinions
      • Joint Ventures
      • Mutual Funds
      • Private Placement
      • Real Estate
      • Restructuring & Recapitalization
      • Sales Reports
      • Shareholder Activism
      • Shareholder Meetings
      • Stock Offering
      • Stock Split
      • Venture Capital
      • View All Financial Services & Investing

      • General Business

      • Awards
      • Commercial Real Estate
      • Corporate Expansion
      • Earnings
      • Environmental, Social and Governance (ESG)
      • Human Resource & Workforce Management
      • Licensing
      • New Products & Services
      • Obituaries
      • Outsourcing Businesses
      • Overseas Real Estate (non-US)
      • Personnel Announcements
      • Real Estate Transactions
      • Residential Real Estate
      • Small Business Services
      • Socially Responsible Investing
      • Surveys, Polls and Research
      • Trade Show News
      • View All General Business

  • Science & Tech
      • Consumer Technology

      • Artificial Intelligence
      • Blockchain
      • Cloud Computing/Internet of Things
      • Computer Electronics
      • Computer Hardware
      • Computer Software
      • Consumer Electronics
      • Cryptocurrency
      • Data Analytics
      • Electronic Commerce
      • Electronic Gaming
      • Financial Technology
      • Mobile Entertainment
      • Multimedia & Internet
      • Peripherals
      • Social Media
      • STEM (Science, Tech, Engineering, Math)
      • Supply Chain/Logistics
      • Wireless Communications
      • View All Consumer Technology

      • Energy & Natural Resources

      • Alternative Energies
      • Chemical
      • Electrical Utilities
      • Gas
      • General Manufacturing
      • Mining
      • Mining & Metals
      • Oil & Energy
      • Oil and Gas Discoveries
      • Utilities
      • Water Utilities
      • View All Energy & Natural Resources

      • Environ­ment

      • Conservation & Recycling
      • Environmental Issues
      • Environmental Policy
      • Environmental Products & Services
      • Green Technology
      • Natural Disasters
      • View All Environ­ment

      • Heavy Industry & Manufacturing

      • Aerospace & Defense
      • Agriculture
      • Chemical
      • Construction & Building
      • General Manufacturing
      • HVAC (Heating, Ventilation and Air-Conditioning)
      • Machinery
      • Machine Tools, Metalworking and Metallurgy
      • Mining
      • Mining & Metals
      • Paper, Forest Products & Containers
      • Precious Metals
      • Textiles
      • Tobacco
      • View All Heavy Industry & Manufacturing

      • Telecomm­unications

      • Carriers and Services
      • Mobile Entertainment
      • Networks
      • Peripherals
      • Telecommunications Equipment
      • Telecommunications Industry
      • VoIP (Voice over Internet Protocol)
      • Wireless Communications
      • View All Telecomm­unications

  • Lifestyle & Health
      • Consumer Products & Retail

      • Animals & Pets
      • Beers, Wines and Spirits
      • Beverages
      • Bridal Services
      • Cannabis
      • Cosmetics and Personal Care
      • Fashion
      • Food & Beverages
      • Furniture and Furnishings
      • Home Improvement
      • Household, Consumer & Cosmetics
      • Household Products
      • Jewelry
      • Non-Alcoholic Beverages
      • Office Products
      • Organic Food
      • Product Recalls
      • Restaurants
      • Retail
      • Supermarkets
      • Toys
      • View All Consumer Products & Retail

      • Entertain­ment & Media

      • Advertising
      • Art
      • Books
      • Entertainment
      • Film and Motion Picture
      • Magazines
      • Music
      • Publishing & Information Services
      • Radio & Podcast
      • Television
      • View All Entertain­ment & Media

      • Health

      • Biometrics
      • Biotechnology
      • Clinical Trials & Medical Discoveries
      • Dentistry
      • FDA Approval
      • Fitness/Wellness
      • Health Care & Hospitals
      • Health Insurance
      • Infection Control
      • International Medical Approval
      • Medical Equipment
      • Medical Pharmaceuticals
      • Mental Health
      • Pharmaceuticals
      • Supplementary Medicine
      • View All Health

      • Sports

      • General Sports
      • Outdoors, Camping & Hiking
      • Sporting Events
      • Sports Equipment & Accessories
      • View All Sports

      • Travel

      • Amusement Parks and Tourist Attractions
      • Gambling & Casinos
      • Hotels and Resorts
      • Leisure & Tourism
      • Outdoors, Camping & Hiking
      • Passenger Aviation
      • Travel Industry
      • View All Travel

  • Policy & Public Interest
      • Policy & Public Interest

      • Advocacy Group Opinion
      • Animal Welfare
      • Congressional & Presidential Campaigns
      • Corporate Social Responsibility
      • Domestic Policy
      • Economic News, Trends, Analysis
      • Education
      • Environmental
      • European Government
      • FDA Approval
      • Federal and State Legislation
      • Federal Executive Branch & Agency
      • Foreign Policy & International Affairs
      • Homeland Security
      • Labor & Union
      • Legal Issues
      • Natural Disasters
      • Not For Profit
      • Patent Law
      • Public Safety
      • Trade Policy
      • U.S. State Policy
      • View All Policy & Public Interest

  • People & Culture
      • People & Culture

      • Aboriginal, First Nations & Native American
      • African American
      • Asian American
      • Children
      • Diversity, Equity & Inclusion
      • Hispanic
      • Lesbian, Gay & Bisexual
      • Men's Interest
      • People with Disabilities
      • Religion
      • Senior Citizens
      • Veterans
      • Women
      • View All People & Culture

  • Hamburger menu
  • Cision PRWeb provides efficient communication tools to continuously engage with target audiences across multiple online channels
  • Create a Free Account
    • ALL CONTACT INFO
    • Contact Us


      11AM ET Sunday – 8PM ET Friday

  • Send a Release
  • Sign up
  • Log in
  • Resources
  • RSS
  • GDPR
  • News in Focus
    • Browse All News
    • Multimedia Gallery
  • Business & Money
    • Auto & Transportation
    • Business Technology
    • Entertain­ment & Media
    • Financial Services & Investing
    • General Business
  • Science & Tech
    • Consumer Technology
    • Energy & Natural Resources
    • Environ­ment
    • Heavy Industry & Manufacturing
    • Telecomm­unications
  • Lifestyle & Health
    • Consumer Products & Retail
    • Entertain­ment & Media
    • Health
    • Sports
    • Travel
  • Policy & Public Interest
  • People & Culture
    • People & Culture
  • Send a Release
  • Sign up
  • Log in
  • Resources
  • RSS
  • GDPR
  • Send a Release
  • Sign up
  • Log in
  • Resources
  • RSS
  • GDPR
  • Send a Release
  • Sign up
  • Log in
  • Resources
  • RSS
  • GDPR

Next Generation Cybersecurity Tools Accelerate Discovery and Remediation of Critical Medical Device Vulnerabilities


News provided by

STR

Mar 24, 2025, 10:00 ET

Share this article

Share toX

Share this article

Share toX


New security analysis tools have led to the discovery of critical vulnerabilities in widely-deployed hospital patient monitoring devices used for tracking vital signs and providing life-saving care. The discovery demonstrates how next generation cybersecurity tools can dramatically improve the security of critical medical infrastructure across U.S. healthcare facilities.

WOBURN, Mass., March 24, 2025 /PRNewswire-PRWeb/ -- New security analysis tools have led to the discovery of critical vulnerabilities in widely-deployed hospital patient monitoring devices used for tracking vital signs and providing life-saving care. The discovery demonstrates how next generation cybersecurity tools can dramatically improve the security of critical medical infrastructure across U.S. healthcare facilities.

The tools, developed under STR's Automated Medical device Patching (AMdP) project with funding through ARPA-H's DIGIHEALS program, enabled the discovery of security flaws in the Contec CMS8000 patient monitor that could allow malicious actors to gain control of the device and compromise patient safety. The findings triggered a January 30th FDA safety communication and technical advisory from the Cybersecurity and Infrastructure Security Agency (CISA). No security incidents involving these vulnerabilities have been reported.

"Until now, finding and fixing vulnerabilities across 30 million legacy medical devices seemed impossible. "These new tools make that challenge solvable, offering a path to systematically improve healthcare cybersecurity nationwide."

Post this

Current approaches to finding vulnerabilities in medical devices rely on labor-intensive manual analysis of device firmware (known as binary analysis), often producing many false leads that security teams must investigate. AMdP represents a breakthrough in automation that rapidly identifies genuine vulnerabilities while filtering out false positives. This enables security teams to analyze thousands of devices across a hospital's diverse medical equipment ecosystem using precise, targeted information about each vulnerability discovered.

AMdP combines STR's automated vulnerability detection technology with Vector 35's Binary Ninja commercial reverse engineering platform and Aarno Labs' innovative firmware analysis and patching capabilities. Binary Ninja, an industry-leading platform for examining how devices operate at their most fundamental level, now hosts AMdP's capabilities through its cloud-based enterprise infrastructure. This integration gives security teams powerful new automated tools for discovering vulnerabilities without requiring deep expertise in reverse engineering.

"With over 30 million legacy medical devices in U.S. healthcare facilities, and an estimated 6.2 vulnerabilities per device on average, manual security analysis cannot scale," said Thomas Sherman, AMdP Principal Investigator at STR. "Our tools enable healthcare providers to rapidly assess their medical equipment, while giving device manufacturers new options for precise security fixes that could accelerate recertification."

"Until now, finding and fixing vulnerabilities across 30 million legacy medical devices seemed impossible," said David A. Markowitz Ph.D., Vice President for Health and Life Sciences at STR. "These new tools make that challenge solvable, offering a path to systematically improve healthcare cybersecurity nationwide."

In addition to finding and disclosing the vulnerability, AMdP tools verified that the vendor's firmware update correctly addressed the critical issue. Currently, a manufacturer's update is opaque and difficult to evaluate, leaving end-users and regulators to trust that the manufacturer has implemented the fix correctly. Most manufacturers use ad-hoc testing, which only checks a limited set of scenarios. In contrast, Aarno Labs' CodeHawk Platform provides automated software verification, mathematically confirming that a patch truly eliminates the vulnerability—not just that it appears to work in tests. In this instance, CodeHawk verified that Contec's patch fully closed the vulnerability, and this result was shared with Contec and regulatory bodies.

Widespread adoption of these automated security tools could dramatically improve patient safety across the U.S. healthcare system. Healthcare providers will be able to rapidly identify and address security risks across their diverse medical equipment ecosystem. Device manufacturers can quickly evaluate reported vulnerabilities and develop targeted fixes. Security firms can comprehensively assess entire device families. Together, these capabilities enable a coordinated response to medical device security that directly enhances patient safety at a national scale.

This vulnerability discovery has already prompted coordinated action between federal agencies, device manufacturers, and healthcare providers. AMdP's automated analysis capabilities have been validated through extensive testing on real-world medical devices, offering a new approach to securing legacy healthcare infrastructure at scale.

Organizations interested in evaluating AMdP can access its capabilities through the Binary Ninja commercial platform. For organizations interested in alternative deployment options or integration with existing security infrastructure, STR offers flexible transition paths tailored to specific use cases.

About STR

STR (https://str.us/) develops advanced technology solutions for complex national security challenges. STR's healthcare cybersecurity initiatives focus on protecting critical medical infrastructure through automated analysis and security tools.

About Vector 35

Vector 35 (https://vector35.com) develops the Binary Ninja platform, providing enterprise-grade reverse engineering and binary analysis capabilities to security researchers worldwide.

About Aarno Labs

Aarno Labs (https://aarno-labs.com) develops advanced automated capabilities to improve the security of critical systems. Aarno's CodeHawk binary analysis and patching platform provides rapid and verified mitigation of security vulnerabilities for legacy systems.

Media Contact

Lillian Marcoux, STR, 1 7245912665, [email protected], str.us

SOURCE STR

Modal title

Contact PRWeb

  • 11AM ET Sunday – 8PM ET Friday
  • Contact Us

About PRWeb

  • About PRWeb
  • Partners
  • Partnership Programs
  • Editorial Guidelines
  • Resources

Why PRWeb

  • Why PRWeb
  • How It Works
  • Who Uses It
  • Pricing

Accounts

  • Create a Free Account
  • Log in
  • Contact Us

Do not sell or share my personal information:

  • Submit via [email protected] 
  • Call Privacy toll-free: 877-297-8921

Contact Cision

Products

About

My Services
  • All News Releases
  • Online Member Center
  • ProfNet
Cision Distribution Helpline
888-776-0942
  • Legal
  • Site Map
  • RSS
  • Cookie Settings
Copyright © 2025 Cision US Inc.