Medical Device Cybersecurity Podcast

About Medical Device Cybersecurity Podcast

Medical devices save lives—but are they secure? This podcast explores cybersecurity risks, real-world attacks, and best practices to protect life-saving technology. Designed for medical device professionals, engineers, and security experts, we cover FDA & EU regulations to hacking risks and investigations. Hosted by Mathieu 'Cyber Doctor' Peteau, a cybersecurity specialist, this podcast simplifies complex security issues into actionable insights. Subscribe now to stay ahead in medical device security and protect healthcare technology.

Publisher

Cyber Doctor

Category

health & fitness

Language

en

Explicit

No

First episode

3 Feb 2025

Latest episode

6 Jul 2025

Latest episodes

19 episodes in the feed.

1. 

   6 Jul 2025

   18. My biggest learnings

   The Cyber Doctor reflects on key learnings about medical device cybersecurity and entrepreneurship from Season 1 conversations, offering insights for medical device manufacturers.

2. 

   29 Jun 2025

   17. Documentation & Security for your Medical Device

   Richie Christian, medical device consultant, discusses documentation processes and cybersecurity for AI-driven medical devices, focusing on FDA and EU requirements and effective collaboration in this interview.

3. 

   3 Jun 2025

   16. The state of Medical Device Cybersecurity Part 2 with Axel Wirth and Christopher Gates

   Axel Wirth and Christopher Gates explore the intricacies of leading cybersecurity in hospitals and the specifications manufacturers seek, offering insights into controversial cybersecurity questions in this interview.

4. 

   27 May 2025

   15. The state of Medical Device Cybersecurity Part 1 with Axel Wirth and Christopher Gates

   Industry experts Axel Wirth and Christopher Gates discuss the evolution of medical device cybersecurity over the last decade, offering valuable insights for medical device engineers in this interview.

5. 

   20 May 2025

   14. How to do the "As low as possible" approach the right way with Tibor Zechmeister

   Picking the right approach to look at risk is very important. Get it wrong and you're in for a denied submission. MDR requires manufacturers to use the As Low as Possible Approach. And it ahs consequeces on the way we look at cybersecurity in general. Our gest today is an all-around expert in medical devices. Tobor Zechmeister was a medical device entrepreneur, and now works as a consultant and an auditor in medical devices. His different perspectives make this episode unique in the angles of conversation it brings. Through this episode you'll understand which method to choose to submit a device in Europe, how it differes from other risk management methodologies, and the implications it has on cyber as a whole. Feel free to connect with us on our LinkedIn accounts: https://www.linkedin.com/in/tibor-zechmeister/ https://www.linkedin.com/in/mathieupeteau/ Be sure to follow the podcast, we have some nice episodes coming, including a two part epsiode with the people I consider to be the Fathers of Medical Device Cybersecurity. Stay tuned. Securely yours, Cyber Doctor

6. 

   6 May 2025

   13. Cybersecurity implications of ISO 14971 and IEC 81001-5-1

   There are somany standards for Medical Devices. Today we're taking a look at 2 of the most used in the cybersecurity space. ISO 14971 is the main standard for managing risks in medical devices. It helps organizations find and control risks to improve device safety. IEC 81001-5-1 focuses on managing cybersecurity risks in health software. It guides how to handle and reduce digital threats to medical IT systems. Tune in to find out more on how these standards play against each other, and how you can use them to create safer medical devices that keep thriving on the market. Securely yours, Cyber Doctor

7. 

   28 Apr 2025

   12. Going beyond the Password - Medical Device Authentication with Aaron Painter

   Can you imagine if we trusted that everyone who logs into a device? It would be chaotic. This is why we need to make sure the person logging in is indeed the person they say they are. This is the process of authentication. And it's critical to get it right to ensure medical devices are protected. Through this episode my ghuest and I talk about what it means to have a secure authentication process and what it looks like to implement a quality process in practice. My guest Aaron Painter is a cybersecurity expert and CEO of Nametag Inc., where he develops advanced AI solutions to secure devices and prevent online impersonation and deepfakes. With a background in global tech leadership, Aaron specializes in protecting digital identities and making online interactions safer. Feel free to connect with us on LinkedIn:https://linkedin.com/in/mathieupeteau/https://www.linkedin.com/in/aaronpainter/Aaron's company: https://getnametag.com/ Securely yours, Cyber Doctor

8. 

   19 Apr 2025

   11. FDA mass firing and Medical Devices with Etienne Nichols

   The FDA is undergoing massive job cuts. Whether we like it or not, this will undoubtedly change the approval landscape of medical devices. And it already has. My guest Etienne Nichols and I talk about the implications of these changes for Manufacturers and what they can do to remain competitive in this evolving landscape. Etienne Nichols is an all around talent in Medical Devices. He started as a mechanical engineer and is now leading the community of Greenlight Guru with his podcast: the Gobal Medical Device Podcast. On it he welcomes guiests of all fields to share their knowledge on making better devices. More ways to reach us: https://www.linkedin.com/in/mathieupeteau/ https://www.linkedin.com/in/etiennenichols/ I have a newsletter with weekly tips on improving emdical device cybersecurity. You can find it here: http:// cyberdoctornotes.com Episode timestamps: 00:00 FDA dismissals 01:51 About Etienne Nichols 04:09 Dismissal implications 07:28 Making better submissions 13:31 Improving Q&R 18:18 Predictions on submissions 21:12 MEDUFA 26:01 Secrecy in Medical Devices 28:48 AI for submissions 31:51 Best MDMs do this Any questions or feedback I'm very happy to hear your thoughts: mathieu@cyberclinic.io Securely yours, Cyber Doctor

9. 

   8 Apr 2025

   10. A Hospital's Perspective on Cybersecurity with Christopher Frenz

   Healthcare institutions are the ones buying the medical device, ultimately. Yet, we don't often talk about their cybersecurity demands. Our guest Christopher Frenz has spent most of his career protecting hospitals from cyber attacks. And it's not an easy task. While the landscape evolves every month, medical devices often stay the same for years, if not decade. How do these challenges manifest themselves? And what can a medical device manufacturer do about them? Christopher is the author of many influential publications such as the OWASP Secure Medical Device Deployment Standard, the OWASP Anti-Ransomware Guide, and most recently the CSA Medical Device Incident Response Playbook. Join me on this reality-check conversation where we dive into the other side of the medical device. Securely yours, Cyber Doctor

10. 

    1 Apr 2025

    9. MDR versus AI act, GDPR, and NIS2 withe Elisabetta Biasin

    Today we're tackling some of the biggest questions around the EU regulations landscape in cybersecurity of medical devices. Our guest is Elisabetta Biasin, a legal researcher specializing in cybersecurity, AI regulation, and EU laws. Elisabetta provides critical insights into the complex regulatory landscape facing medical device manufacturers implementing AI in Europe. She expertly breaks down how multiple frameworks—including the AI Act, MDR, NIS2, and GDPR—overlap and create compliance challenges, explains the specific cybersecurity requirements for AI systems under Article 15, and clarifies how data protection requirements extend beyond just personal data. With real-world examples of potential cybersecurity vulnerabilities in medical devices like pacemakers, this episode delivers essential knowledge for manufacturers navigating the evolving European regulatory environment. Want weekly actionable advice on medical device cybersecurity from yours truly? go here -> http://cyberdoctornotes.com Elisabetta's profile: https://mastodon.social/@bisilisib@eupolicy.social https://www.linkedin.com/in/elisabetta-biasin-550a4711a/ elisabetta.biasin@kuleuven.be (mailto:betta.biasin@gmail.com) Please share with a friend & rate the show 💚 Securely yours, Cyber Doctor

11. 

    27 Mar 2025

    8. Protecting the Organization with Karandeep Singh Badwal

    I think you understand how important it is to protect medical devices. But what about the organization that makes the medical device? Well, it has its own security requirements. European legislation such as NIS2 require that MDMs maintain a certain level of security. Plus on top of just following regulation, following basic cybersecurity practices improves the company's ability to withstand attacks and protect its intellectual property. After all, if the Terchnical Files are public, what's to stop someone else to copy your device? Karandeep and I go into what Manufacturers of Medical Devices should do. And cherry on top, most of these measures do not cost money, just a bit of planning. Future you will thank you for having put this work in. Receive 1 actionable tip in your inbox every week: http://cyberdoctornotes.com With a background in pharmaceutical and cosmetic science from De Montfort University, Badwal transitioned early into the medical device sector, holding key roles in regulatory affairs and quality management at companies such as Abbott and St. Jude Medical. His expertise includes ISO 13485, EU MDR, and software as a medical device (SaMD), and he shares valuable insights on LinkedIn and YouTube. Karandeep's contact: karandeep@qramedical.com https://www.linkedin.com/in/karandeepbadwal/ If you liked the episode, please consider sharing it to one friend 💚 Securely yours, Cyber Doctor

12. 

    20 Mar 2025

    7. Empower Threat Models with Fun with Christoph Niehoff

    There's hundreds of tasks to do before releasing a medical device. What if we could make one of them fun all while being more productive? That's the idea that our guest Christoph Niehoff expanded upon. He created a card game that encourages players to have conversations around the security of the medical device. Join us to understand the benefits of this approach, the rules of the game, and how to make it fit into your medical device organization. In this enlightening episode, we explore how gamification transforms the often tedious process of threat modeling into an engaging team exercise. Christoph shares how his innovative card game bridges communication gaps between technical and non-technical stakeholders while producing more comprehensive security assessments. Learn how this approach not only improves compliance documentation but also builds a stronger security culture within development teams. Whether you're a seasoned security professional or new to medical device development, you'll discover practical ways to implement this game-changing methodology in your own organization. Don't miss this opportunity to turn security from a checkpoint into a collaborative adventure that yields better protected medical devices and more engaged teams.

13. 

    11 Mar 2025

    6. Dealing with Unpatable Devices with Matthew Webster

    Medical Devices need patching. Whether it's for functionality or security, devices must be able to be updated remotely. But what about those devices that you cannot patch? What are some things manufacturers can do still ensure security? In this episode with guest Matthew Webster, we deepdive into cybersecurity of medical devices keeping in mind the perspective of hospitals. Here are links to check out: Connect with me: https://linkedin.com/in/mathieupeteau (https://linkedin.com/in/mathieupeteau) Matthew's LinkedIn: https://www.linkedin.com/in/matthew-webster-2087a3/ (https://www.linkedin.com/in/matthew-webster-2087a3/) Matthew's book: https://www.amazon.es/Harm-Protecting-Connected-Healthcare-Adversarial-ebook/dp/B0973SQ86N (https://www.amazon.es/Harm-Protecting-Connected-Healthcare-Adversarial-ebook/dp/B0973SQ86N) Please consider sharing this with a medical device colleague 💚 Securely yours, Cyber Doctor

14. 

    4 Mar 2025

    5. Use GxP for More Secure Devices

    Why reinvent the wheel? Industry-leading experts have already paved the way for medical device security. By following established good practices, you can ensure the safety and integrity of your devices without unnecessary complexity. My guest, Marina Daineko is a medical device industry expert, specializing in regulatory compliance and quality management. She helps manufacturers ensure patient safety and deliver high-quality products in a rapidly evolving healthcare landscape. Actionable medical device tips: https://cyberdoctornotes.com Marina's LinkedIn: https://www.linkedin.com/in/marinadaineko/

15. 

    25 Feb 2025

    4. What CISA Expects from You with Jacob Barkai

    CISA and the FBI have released a report guiding Medical Device Manufacturers on how to code their devices securely. At the top of the priority list is a new recommendation to phase out the use of C and C++ in medical device software. While these languages can be useful in certain circumstances, they significantly compromise the security of devices. So, what can you do about it? Efforts to improve the security aspects of these languages are already underway. However, they may not offer a complete solution. And while transitioning to newer languages like Rust is an option, it might render existing C/C++ libraries incompatible. What’s the answer? This episode solves the puzzle—and here's a spoiler: it involves strategic planning. With the first deadline set for January 2026 and final submissions scheduled by 2030, these guidelines are set to bring about significant changes. My guest, Jacob Barkai, has over a decade of experience in application development and just as much expertise in tackling security challenges. Connect with him on LinkedIn (https://www.linkedin.com/in/jbarkai/) If you like this episode, please share it with a friend 💚 Securely yours, Cyber Doctor

16. 

    18 Feb 2025

    3. Threat Modeling Medical Devices with Adam Shostack

    Medical Devices are getting increasingly complex. We're now dealing with interconnected medical devices with tens of inputs, dozens of connections, and a plethora of connections. How can you handle security in this context? Threat modeling is the process recommended by the FDA in which you discover vulnerabilities, respond to risks, and analyze your work. It's done in a 4 question framework: What are we working on? What can go wrong? What are we going to do about it? Did we do a good job? To guide us through the intricacies of threat modeling, we have a true luminary in the field, Adam Shostack. Adam is the author of "Threat Modeling: Designing for Security" and "Threats: What Every Engineer Should Learn from Star Wars." He’s a leading expert on threat modeling, a consultant, expert witness, and game designer. With decades of experience delivering security, Adam's insights range from founding startups to nearly a decade at Microsoft. What you'll understand after listening to the episode: Threat modeling is built on simple questions. Ask them early in development when changes are easier to make. Visibility is key. Start with simple whiteboard sketches to get everyone on the same page before moving to more formal diagrams. Focus on practical solutions. Sometimes, redesigning to avoid problems entirely is better than trying to calculate and mitigate specific risks. Want to dive even deeper into threat modeling and medical device cybersecurity? 🔹 Stay up-to-date with the latest in medical device cybersecurity with my weekly newsletter at⁠⁠cyberdoctornotes.com⁠⁠ (https://⁠cyberdoctornotes.com⁠) 🔹 Explore Adam's groundbreaking work on threat modeling at ⁠shostack.org (https://shostack.org/) 🔹 Read Adam's latest bookon Amazon (https://a.co/d/disDcLF) Please share with a fellow medical device security pioneer! Securely yours,Cyber Doctor

17. 

    11 Feb 2025

    2. Securing Medical Devices from Design to Market with Jose Bohorquez & Mohamed Foustock

    Everyone knows cybersecurity in medical devices is important. But how many knowhow to make secure devices? Our two guests Jose Bohorquez and Mohamad Foustok are packed of experience in building medical devices and they share their best practices on how to do so. Here are my top learnings from this one: ✦ Include cybersecurity from the start in architecture - have at least one security-savvy architect to avoid major reworks ✦ Minimize third-party dependencies - each additional library increases security risk and monitoring burden ✦ Match security controls to attacker incentives - attackers operate like businesses and won't spend more than potential gains Want to become even more knowledgeable? 🔹 Get actionable advice on how to secure your medical devices every Thursday from my newslettercyberdoctornotes.com (https://cyberdoctornotes.com) 🔹 Find out more about Jose and Mohamed's work in medical device software development & cybersecurity athttps://boldtype.com/ (https://boldtype.com/) If you have 10 seconds to give my show a review I will be very happy! Securely yours, Cyber Doctor

18. 

    4 Feb 2025

    1. Why cybersecurity mattters? A patient's perspective with Veronica Schmitt

    To get us started on this journey, I invited one of the most influential medical device patients in the cybersecurity space. Veronica "Vee" Schmitt is an advocate for cybersecurity in medical devices. Veronica shares her personal journey from experiencing fainting spells at 19 to becoming fascinated with the security of medical devices. Having faced this situation first hand, she understands the struggles that patients go through. Throughout this episode you'll learn about the surprising reality of being a medical device patient in cybersecurity: - Patients are scared of medical devices's cybersecurity risk fueled by the media. - Physicians are not trained on cybersecurity risk. - There are many risks to factor against benefits. Want to receive actionable advice on how to build more secure medical devices? Sign up to my newsletter at cyberdoctornotes.com (Https://cyberdoctornotes.com) Find out more about Veronica: http://www.veronicaschmitt.com/ (http://www.veronicaschmitt.com/) Get involved at the biohacking village: https://www.villageb.io/ ( https://www.villageb.io/) Please give my show a review! Securely yours, Cyber Doctor

19. 

    3 Feb 2025

    0. Hello!

    Hi Folks! This introduction episode is to present the Medical Device Cybersecurity Podcast and myself, your holt, Mathieu “Cyber Doctor” Peteau. Since this episode might be the only one that focuses on me, I'll take advantage of this and your burning questions: ✔️ How I random events led me to medical device cybersecurity ✔️ Why I'm the Cyber Doctor? ✔️ How I left a top cybersecurity company to pursue Medical Device Cybersecurity? 🔹 Timestamps: 01:02 The podcast's mission 02:59 The Importance of Medical Device Cybersecurity 06:17 Introducing the Cyber Doctor 08:05 From Cyber Narratives to Medical Devices 10:38 My Journey in Cybersecurity 11:33 Excitement for the Future Are you passionate about medical device cybersecurity and have amazing ideas on how to improve it? Let’s talk! Reach out to me at mathieu@cyberclinic.io Resources Mentioned: 👋 My LinkedIn: linkedin.com/in/mathieupeteau 💡 Weekly actionable Medical Device Security advice: cyberdoctornotes.com I can't wait to share the rest of the journey with you. In the meantime, if you could please subscribe and take a moment to leave a review, I would appreciate it very much. All the best, Your Cyber Doctor.

Who has been a guest on Medical Device Cybersecurity Podcast

Names identified in recent episode analyses. Showing up to five guests.

• Richie Christian
• Axel Wirth
• Christopher Gates

Reach and audience

Public platform figures. Ratings count people who left a rating, not total listeners.

Spotify

5.0 / 5

3 ratings

Podcast Authority Score: 31 / 100

A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.

Quality

49

Social presence

0

YouTube

0

Engagement

32

Contact Medical Device Cybersecurity Podcast

Guest appearances

Does not typically book guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.