Patch Management Advice for Fixing IoT Vulnerabilities

In addressing healthcare cybersecurity, Fortra's Tyler Reguly emphasizes the importance of prioritizing Internet-enabled device misconfigurations, starting with CIS Benchmarks and then adopting industry-specific standards. Reguly underscores the vulnerability posed by network-connected devices, urging healthcare organizations to bolster vulnerability management programs to thwart cyber threats. He warns against lag times in patching IoT devices, emphasizing the need for segmentation to mitigate risks. Reguly also highlights concerns regarding the complexity of interconnected medical devices and the broad access to electronic health records. Regarding AI, he suggests relying on vendors and cybersecurity experts for now, until AI technologies mature further for internal use in managing evolving vulnerabilities. Operating from a position of zero trust and leveraging network segmentation are recommended for combating man-in-the-middle attacks in healthcare settings.