Connected medical devices are clinical tools such as infusion pumps, patient monitors, imaging systems, or laboratory analyzers that communicate with hospital networks, cloud services, or other medical systems. Because they exchange data and receive configuration updates, they are part of the organization’s attack surface, not just standalone equipment.
They matter in cyber security because compromise can affect confidentiality, integrity, and availability, and in healthcare that can quickly become a patient-safety issue. Attackers may abuse weak passwords, outdated firmware, insecure remote access, or flat network design to move from a device into adjacent systems. Defenders reduce risk with lifecycle controls: asset inventory, vendor support tracking, patch management, network segmentation, secure remote maintenance, logging, and continuous monitoring. A document-only inventory is not enough; security teams need to know where the device is, what it talks to, and how failure would affect care.