An alert issued by the DHS’s National Cybersecurity and Communications Integration Center (NCCIC) on the ICS-CERT website is based on a blog post published in mid-April by Cylera, a company that provides cybersecurity and intelligence solutions for healthcare organizations.
Cylera’s Markel Picado Ortiz discovered a “fundamental design flaw” in DICOM, a widely used international standard for storing, transmitting, retrieving, processing and displaying medical imaging information.
The organization that maintains the standard says DICOM is used in virtually all hospitals around the world, including by imaging equipment (CT, MR, ultrasound), imaging information systems (HIS, RIS, PACS), and peripheral equipment (workstations and 3D printers).
