Kaspersky has a recent and detailed blog post on vulnerabilities that many medical devices that deliver treatment to patients (including chemotherapy and radiation, as well as vital electrolytes) can be hacked.
As with the power grid, there is a question as to why the devices would be accessible through the public Internet (a subject of Ted Koppel’s book “Lights Out”), but they could be hacked from the other side of the world.
And we’re talking about actual treatment devices, not “just” the medical records that have already been lost to ransomware at several hospitals.
A security business owner was interviewed by WJLA-7 in Washington. He inspects hospital devices for DHS, and finds serious vulnerabilities in most of them. He opens them up and examines the firmware. (Story aired tonight, not yet online).