Vulnerabilities in GE Healthcare Vivid ultrasound system could allow malicious insiders to install ransomware, access patient data

Nozomi Networks revealed that it found 11 vulnerabilities in GE Healthcare’s Vivid T9 ultrasound system that could potentially allow malicious insiders to install ransomware, manipulate patient data, and disrupt hospital operations. According to Nozomi, this requires physical interaction with the device, but hackers could speed up the process by using a malicious thumb drive. Nozomi has demonstrated the feasibility of the hack via a proof-of-concept ransomware attack.