"FDA Recalls Medtronic Insulin Pump Controller, Cites Cybersecurity Risks"

The U.S. Food and Drug Administration (FDA) issued a notice regarding the recall of all Medtronic MiniMed remote controllers used with the Medtronic MiniMed 508 insulin pump or the MiniMed Paradigm family of insulin pumps because of potential cybersecurity risks. Medtronic urges users to stop using and disconnect the remote controller, disable the remote feature, and return it. The remote controller uses wireless radio frequency (RF) to communicate with the insulin pump and helps program a specific amount of insulin into the pump without requiring the user to press any insulin pump buttons. According to the FDA, an unauthorized person could record and replay the wireless communication between the remote and the MiniMed insulin pump. Using specialized equipment, the pump could be instructed to deliver extra insulin to a patient or stop insulin delivery, potentially leading to death. The recall brings further attention to the need to improve medical device security. This article continues to discuss the recall of remote controllers used with Medtronic's MiniMed Paradigm and MiniMed 508 insulin pumps for potential cybersecurity risks and previous discoveries surrounding the potential weaponization of medical devices by hackers. 

HealthITSecurity reports "FDA Recalls Medtronic Insulin Pump Controller, Cites Cybersecurity Risks"