Story image

Legacy applications a ‘healthcare cybersecurity nightmare’

13 Feb 2019

A new whitepaper launched today that sought to bring light to just how dire the cybersecurity situation with hospitals really is.

The report - ‘Legacy Applications: A Healthcare Cybersecurity Nightmare’ - was co-authored by clinical and cybersecurity consultancy, AbedGraham, and healthcare data management specialists, BridgeHead Software.

Delving into the far-reaching implications that vulnerable legacy applications have for healthcare organisations regarding cyberattacks, the report looks at examples like the devastating effect of 2017’s Wannacry attacks and the increase of cybercrime specifically targeted at the healthcare industry to gain an idea of the clinical, operational, financial, and governance risks posed by providers that continue to run and maintain legacy systems.

“Healthcare is the new frontier of cybercrime and cyberwarfare,” says medical doctor, healthcare cyber warfare expert, and co-author of the whitepaper Dr Saif Abed.

“Attackers are looking for any way they can to compromise systems and networks at scale even if that means threatening patient care. Legacy applications, in particular, are often riddled with vulnerabilities ready to be exploited by everyone from petty opportunists to major organised crime.”

There is clearly concern in the industry too, as in its 2019 Top of Mind survey, The Center for Connected Medicine polled IT executives across 38 health systems, concluding that cybersecurity continues to be the biggest concern across the industry.

BridgeHead Software chief technology officer and co-author of the whitepaper Gareth Griffiths says the recognition is there, but now healthcare providers need to take action.

“As we saw from the Wannacry outbreak, cyberattacks can have devastating effects for providers. It’s not just limited to the challenges associated with quickly and efficiently recovering systems and data, which is a given; it’s the disruption to hospital operations and critical patient services that create a domino effect,” says Griffiths.

“From discharge and referral delays, cancellation of elective surgical procedures, the redistribution and transfer of patients to alternative providers, the list goes on. These effects can have a direct bearing on a hospital’s finances, regulatory compliance, legal position, and reputation. So, why not eliminate or, at the very least, mitigate these risks by reducing the threat – decommission legacy applications and remove the security loopholes that cyber-criminals are increasingly drawn to.”

Hackbusters! Reviewing 90 days of cybersecurity incident response cases
While there are occasionally very advanced new threats, these are massively outnumbered by common-or-garden email fraud, ransomware attacks and well-worn old exploits.
SEGA turns to Palo Alto Networks for cybersecurity protection
When one of the world’s largest video game pioneers wanted to strengthen its IT defences against cyber threats, it started with firewalls and real-time threat intelligence from Palo Alto Networks.
Forrester names Trend Micro Leader in email security
TrendMicro earned the highest score for technology leadership, deployment options and cloud integration.
LogRhythm releases cloud-based SIEM solution
LogRhythm Cloud provides the same feature set and user experience as its on-prem experience.
One Identity named Leader in PAM and IAM by KuppingerCole
KuppingerCole lead analyst Anmol Singh evaluated the strengths and weaknesses of 20 solution providers in the PAM market for the report.
Healthcare environments difficult to secure - Forescout
The convergence of IT, Internet of Things (IoT) and operational technology (OT) makes it more difficult for the healthcare industry to manage a wide array of hard-to-control network security risks.
Bitglass appoints new cloud, business development leaders
The cloud security company has appointed vice presidents for worldwide channels and worldwide business development.
Exploring the different needs for cloud services across Europe
Although digital transformation is happening across Europe, each country continues to have its own IT needs and the different cloud markets highlight this.