NIST Cybersecurity Framework 2.0 Expands Guidance’s Scope, Introduces ‘Govern’ Function

The US FDA has issued an updated final guidance document on cybersecurity considerations for medical device manufacturers that replaces a previous final guidance the agency issued in 2023.

Now that the US FDA has chosen not to appeal a March ruling effectively killing the agency’s efforts to regulate lab-developed tests as medical devices, will the agency adopt a different strategy to flex its regulatory muscle?

Congress has launched an inquiry into 23andMe amid privacy concerns following its bankruptcy, particularly regarding the potential sale of sensitive user data. Additionally, a Cybernews report gave 40 DNA testing firms an average cybersecurity grade of D, citing widespread vulnerabilities and data breaches, along with inadequate public information about their security practices.

AI systems used in healthcare are vulnerable to adversarial cyberattacks, which are a growing concern, said Atif Azad, a professor of AI at Birmingham City University. Azad’s research group has developed a method that trains AI to become more resilient to cyber threats through the use of random image adjustments.