The Med Device Cyber Podcast

Why are Software Bill of Materials (SBOMs) critical for medical device security? In this episode, Cortez Frazier Jr. joins Christian and Trevor to discuss SBOMs, vulnerability prioritization, and why companies should stop fearing software transparency. The conversation covers real-world security challenges, regulatory trends, and how organizations can protect themselves before a major breach force...

What are some of the biggest cybersecurity risks medical devices face after they hit the market? This episode dives into the challenges of postmarket surveillance for medical devices. Christian and Trevor discuss vulnerabilities that emerge after deployment, how manufacturers and hospitals handle updates, and why continuous security testing is essential. They also cover penetration testing and the...

What is threat modeling, how does it differ from penetration testing, and why are both necessary? This episode dives into the nuances of advanced threat modeling for medical devices. Christian and Trevor discuss essential frameworks, the importance of early cybersecurity integration, and real-world examples of vulnerabilities in healthcare environments. Key points: * Threat modeling involves stepp...

How might the second Donald Trump administration and Robert F. Kennedy Jr. impact the medtech cybersecurity world? In this episode, Christian and Trevor discuss how the Trump administration and RFK Jr.’s policies could reshape medical device cybersecurity and regulation. They explore potential Food and Drug Administration restructuring, the impact of tariffs on China, and new scrutiny on supply ch...

How does the FDA’s latest AI guidance on medical devices impact manufacturers and cybersecurity challenges in healthcare? In this episode, Christian and Trevor discuss the latest FDA AI guidance and how it will impact real-world AI applications in healthcare. Key points: * The FDA’s new guidance on AI in medical devices, released in January 2025. * Differences between artificial intelligence (AI)...

How does human behavior impact medical device cybersecurity? Also, why do cybersecurity awareness programs often fail to make a lasting impact? This episode dives into the human factor in medical device cybersecurity. Christian and Trevor discuss how human error and resistance to change contribute to vulnerabilities in healthcare networks and medical devices. They share real-life stories and actio...

What are some of the key challenges MedTech companies face in balancing innovation with compliance? This episode dives into the intersection of quality management and cybersecurity in the MedTech industry. Hosts Christian Espinosa and Trevor Slattery are joined by Etienne Nichols, an expert from Greenlight Guru, who shares insights on regulatory compliance, risk management, and the importance of d...

How do medical device vulnerabilities pose life-threatening risks? In this episode, Christian and Trevor again explore the fascinating and critical world of medical device cybersecurity. Specifically, they discuss past attacks, present challenges, and future risks, from vulnerable pacemakers to autonomous surgical robots. They highlight the importance of transparency, proactive security design, an...

What are the most common mistakes medtech startups make in cybersecurity, and how can founders avoid them? In this episode, Christian Espinosa and Trevor Slattery dive into the challenges medtech startups face with their guest, Steve Bell, a 35-year veteran of the industry. They explore the critical importance of integrating cybersecurity from the start, managing regulatory hurdles, and focusing o...

How can some of the biggest cybersecurity concerns with medical devices be addressed in the design phase? In this episode, Christian and Trevor highlight the importance of addressing cybersecurity from the very beginning of the development process to prevent vulnerabilities later on. They explore how different technologies contribute to the security of devices, the importance of a resilient infras...

What are the main categories of medical devices, and how do regulatory bodies govern them? In this episode, Christian Espinosa and Trevor Slattery unpack the complex regulatory environment surrounding medical device cybersecurity. In discussing the key regulations, standards, and FDA guidelines that govern the industry, they explore how these regulations shape the design, development, and deployme...

How vulnerable are current medical devices to cyberattacks, and what are the consequences of these exploits? In this episode, Christian Espinosa and Trevor Slattery discuss the critical vulnerabilities in medical devices and the cybersecurity threats they face. From AI-assisted diagnostic tools to surgical robots, they delve into real-world examples and explain the consequences of exploited device...

How do medical device cybersecurity risks differ from traditional cybersecurity threats? In this episode, Christian Espinosa and Trevor Slattery discuss the critical importance of cybersecurity for medical devices, sharing real-life stories and insights into how device vulnerabilities can impact patient safety. Topics discussed and key points: * Differences between traditional cybersecurity and me...

You rely on a medical device to stay healthy, but what if that device could be hacked? What if someone, miles away, could manipulate it, putting your loved one’s life at risk? Welcome to the trailer for The Med Device Cyber Podcast, the podcast dedicated to medical device cybersecurity. Join Christian Espinosa, CEO of Blue Goat Cyber, and Trevor Slattery, Director of Medical Device Cybersecurity,...