Alerts & Updates
Key news and regulatory shifts that actually affect your products.
14 posts · page 2 of 2
CISA Adds Three Actively Exploited Vulnerabilities to Its KEV Catalog in One Bulletin, All Now Patched
Langflow, N-able N-central, and Apache Tomcat share no code and no vendor, but the pattern behind all three is one every product security team managing vendor risk should notice.
European Commission Publishes Practical Guidance to Help Manufacturers Meet Cyber Resilience Act Reporting Deadline
New non-binding guidance from the Commission clarifies Cyber Resilience Act scope, substantial modification, and reporting obligations weeks before the September 11 reporting deadline hits connected products, including many MedTech accessories and software not exclusively regulated under MDR or IVDR
Explore other pillars
MedTech Security & Privacy
Practical insights for medical device and digital health environments.
Articles on threat modeling, secure development, and vulnerability management for the teams responsible for keeping regulated medical products secure across the total product lifecycle, from premarket design through postmarket surveillance.
AI & Cyber Awareness
Spot the AI-powered attack before it reaches your patients, products or people.
Practical articles on deepfakes, AI-driven phishing and social engineering in healthcare, securing AI-enabled medical products, and the awareness habits that keep clinical and product teams one step ahead, set against the EU AI Act and evolving global AI governance.
Career Growth
Build a product security career that compounds over time.
Mentorship, strategy, and hard-won perspective for professionals navigating the product security and MedTech cybersecurity space, whether you are breaking in, levelling up, or building your own platform.