[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnCZcIWH6O5oZM3uK4CQn2wF6_jsEtOSP_3s59i0isU4":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49,"controls":50},"f613f575-ad83-42b7-9302-56f7d4ad68f2","unauthenticated-ble-commands-allow-attackers-to-hijack-medical-stimulator","7d98dc91-3e69-400e-8db9-8fd85d798367","Unauthenticated BLE Commands Allow Attackers to Hijack Medical Stimulator","The Pulsetto Vagus Nerve Stimulator exposes a critical flaw in its Bluetooth Low Energy implementation, allowing attackers to send hidden commands without any authentication or encryption. This means anyone within BLE range can disable safety features or alter stimulation settings on a patient's device, posing direct physical harm. The absence of a vendor response to CISA compounds the risk, leaving users with no official mitigation path. This case highlights how security-by-obscurity and unauthenticated wireless interfaces in medical devices create life-threatening attack surfaces.","**Immediate actions:**\n- Disable or limit Bluetooth connectivity on the device when not actively in use to reduce the attack surface.\n- Users and healthcare providers should monitor CISA advisories and apply any vendor-issued patches immediately upon release.\n\n**Long-term improvements:**\n- Require mutual authentication and end-to-end encryption for all BLE communications in medical device firmware.\n- Mandate security testing (including wireless protocol fuzzing) as part of the medical device development and certification lifecycle.\n- Enforce vendor accountability by requiring documented incident response commitments before regulatory approval of connected medical devices.\n\n**Detection measures:**\n- Deploy BLE monitoring tools in clinical environments to detect anomalous or unauthorized command traffic targeting medical devices.\n- Establish a coordinated disclosure and response SLA with device manufacturers to ensure timely mitigation of reported vulnerabilities.",[12,13,14,15,16,17,18,19,20,21],"NIST SP 800-82 (ICS Security Guide)","NIST AC-17 (Remote Access Controls)","NIST SC-8 (Transmission Confidentiality and Integrity)","NIST IA-3 (Device Identification and Authentication)","CIS Control 4 (Secure Configuration of Enterprise Assets)","CIS Control 7 (Continuous Vulnerability Management)","CIS Control 12 (Network Infrastructure Management)","FDA Cybersecurity in Medical Devices Guidance (2023)","IEC 62443-4-2 (Security for Industrial Automation – Component Requirements)","GDPR Article 32 (Security of Processing – where patient data is involved)",{},"published","2026-08-11T18:21:56.554981+00:00","2026-08-11T18:21:56.452+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-medical-advisories\u002Ficsma-26-223-02","pulsetto-vagus-nerve-stimulator-e0a2ab","Pulsetto Vagus Nerve Stimulator",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":38,"name":39,"slug":40,"description":41,"color":42},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":44,"name":45,"slug":46,"description":47,"color":48},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",[],[51,55,59],{"slug":52,"name":53,"problem":54},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":56,"name":57,"problem":58},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":60,"name":61,"problem":62},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection."]