Cybersecurity
CISA SBOM updates and medical device security mandates
CISA updated its minimum SBOM elements to include component hashes and tool names, aligning with FDA requirements for cyber devices. This transparency helps mitigate risks like the Medtronic Paceart Optima vulnerability, which allows threat actors to modify or exfiltrate cardiac data.