Harbor Labs Supports DOJ False Claims Act Litigation in Healthcare
Harbor Labs supports the U.S. Department of Justice in False Claims Act litigation involving healthcare IT and cybersecurity investigations.
Projects
The 2015 FDA Cybersecurity Alert That Shaped the Medical Device Industry
The FDA’s 2015 cybersecurity alert on the Hospira Symbiq infusion pump marked a turning point in medical device safety and launched a new era of regulatory oversight.
Dr. Mike Rushanan Teaches Groundbreaking Course on Medical Device Cybersecurity at Johns Hopkins University
In a new course, students prepare for the FDA's ramped up security requirements for insulin pumps, pacemakers, and other wearables.
Compliance v. Completeness: Rethinking SBOMs Under FDA Premarket Cybersecurity Guidance
Dr. Mike Rushanan explores how an FDA-compliant SBOM may still omit critical software and hardware dependencies, exposing hidden cybersecurity risks in medical devices.
Regulatory Science Meets Cyber Science; Why It’s So Much More than a Pen Test
Harbor Labs CEO Nick Yuran distinguishes cybersecurity from cyberscience, and explains why understanding the shared scientific disciplines of regulators and security professionals are important in achieving positive regulatory outcomes.
SBOM Transparency v. Exposure: Evaluating Adversarial Risk in Healthcare
A new case study explores the risks of public SBOM transparency in healthcare, evaluating how adversarial access may reduce exploitation effort and introduce unintended exposure.
Why FDA Rejects the Cybersecurity Content of Regulatory Submissions
Harbor Labs' Dr. Avi Rubin identifies some of the most common reasons why the FDA rejects the cybersecurity content of regulatory submissions.
Medical Device Manufacturer Must Do’s for Cybersecurity
Harbor Labs Director of Medical Security Dr. Mike Rushanan provides a comprehensive outline of the cybersecurity must-do’s necessary to meet regulatory approval. Based on years of experience working with the FDA and other regulatory bodies, Dr. Rushanan’s blog provides insights into the common pitfalls that can disqualify or delay regulatory approvals.
Best Practices for Ensuring Cybersecure and Cybersafe Medical Device Design
This white paper addresses best practices for ensuring cybersecure and cybersafe medical device design to mitigate the risk of compromise or misuse.
Medical Systems and Third-Party Smart Devices
As more medical devices leverage phones and other consumer devices, are they introducing more risk to patients? We’ll go inside a conceptual hack and explore the impact of the crossover between unregulated third-party devices and smart medical devices.