St. Jude Medical Discovers New Cardiac Device Flaws, Issues Patch Update

St. Jude Medical has promised a patch to protect the Merlin@home Transmitter range from cyberattacks, only a month after patching a variety of security flaws in similar devices.

The medical device equipment manufacturer issued an update to an ICS-CERT security advisory this week warning of the impending update.

According to the notice, a third-party security research firm warned St. Jude that the Merlin@home transmitter radio-frequency (RF) and "inductive" models are vulnerable to man-in-the-middle (MITM) attacks which allow attackers to remotely compromise the device and eavesdrop on communication between the transmitter and devices connected to it.

Back to news