Safety Alert on Medtronic Cybersecurity Software Fix
FDA has issued a safety alert following a Medtronic software update to address a risk caused by cybersecurity vulnerabilities associated with an Internet connection between its Carelink 2090 and Carelink Encore 29901 Programmers that are used to download software for the company’s cardiac implantable electrophysiology devices. FDA says the software update is a correction (voluntary recall) by the manufacturer to address the safety risk caused by the cybersecurity vulnerability. FDA says it has confirmed that these vulnerabilities could allow an unauthorized user to change the programmer’s functionality or the implanted device during the device implantation procedure or during follow-up visits.