Enterprise Iot

Palo Alto Networks Announces Medical IoT Security to Protect Connected Devices Critical to Patient Care

Palo Alto Networks | December 12, 2022 | Read time : 05:21 min

Palo Alto Networks
As healthcare providers use digital devices such as diagnostic and monitoring systems, ambulance equipment, and surgical robots to improve patient care, the security of those devices is as important as their primary function. Today, Palo Alto Networks (NASDAQ: PANW) announced Medical IoT Security — the most comprehensive Zero Trust security solution for medical devices — enabling healthcare organizations to deploy and manage new connected technologies quickly and securely. Zero Trust is a strategic approach to cybersecurity that secures an organization by eliminating implicit trust by continuously verifying every user and device.

"The proliferation of connected medical devices in the healthcare industry brings a wealth of benefits, but these devices are often not well secured. For example, according to Unit 42, an alarming 75% of smart infusion pumps examined on the networks of hospitals and healthcare organizations had known security gaps, This makes security devices an attractive target for cyberattackers, potentially exposing patient data and ultimately putting patients at risk."

Anand Oswal, senior vice president of products, network security at Palo Alto Networks

While a Zero Trust approach is critical to help protect medical devices against today's innovative cyberthreats, it can be hard to implement in practice. Through automated device discovery, contextual segmentation, least privilege policy recommendations and one-click enforcement of policies, Palo Alto Networks Medical IoT Security delivers a Zero Trust approach in a seamless, simplified manner. Medical IoT Security also provides best-in-class threat protection through seamless integration with Palo Alto Networks cloud-delivered security services, such as Advanced Threat Prevention and Advanced URL Filtering.

The new Palo Alto Networks Medical IoT Security uses machine learning (ML) to enable healthcare organizations to:

Create device rules with automated security responses: Easily create rules that monitor devices for behavioral anomalies and automatically trigger appropriate responses. For example, if a medical device that typically only sends small amounts of data unexpectedly begins to use a lot of bandwidth, the device can be cut off from the internet and security teams can be alerted.
Automate Zero Trust policy recommendations and enforcement: Enforce recommended least-privileged access policies for medical devices with one click using Palo Alto Networks Next-Generation Firewalls or supported network enforcement technologies. This eliminates error-prone and time-consuming manual policy creation and scales easily across a set of devices with the same profile.
Understand device vulnerabilities and risk posture: Access each medical device's Software Bill of Materials (SBOM) and map them to Common Vulnerability Exposures (CVEs). This mapping helps identify the software libraries used on medical devices and any associated vulnerabilities. Get immediate insights into the risk posture of each device, including end-of-life status, recall notification, default password alert and unauthorized external website communication.
Improve compliance: Easily understand medical device vulnerabilities, patch status and security settings, and then get recommendations to bring devices into compliance with rules and guidelines, such as the Health Insurance Portability Accountability Act (HIPAA), General Data Protection Regulation (GDPR), and similar laws and regulations.
Verify network segmentation: Visualize the entire map of connected devices and ensure each device is placed in its designated network segment. Proper network segmentation can ensure a device only communicates with authorized systems.
Simplify operations: Two distinct dashboards allow IT and biomedical engineering teams to each see the information critical to their roles. Integration with existing healthcare information management systems, like AIMS and Epic Systems, helps automate workflows.
Healthcare organizations are using Palo Alto Networks products to secure the devices that deliver cutting-edge care to millions of patients all over the world.

"Establishing and maintaining acute situational awareness of the Internet of Medical Things (IoMT) environment is paramount to establishing an effective enterprise cybersecurity program. The ability to accurately detect, identify and respond to cyber threats is critical to ensuring minimal operational impact to clinical operations during a cyber event," said Tony Lakin, CISO, Moffitt Cancer Center. "Palo Alto Networks IoT capability seamlessly integrates with our continuous monitoring processes and threat-hunting operations. The platform consistently provides my teams with actionable information to allow them to proactively manage the threat surface of our medical device portfolio."

"With thousands of devices to manage, healthcare environments are extremely complex and require intelligent security solutions capable of doing more. Palo Alto Networks understands this requirement and is leveraging machine learning (ML) for Medical IoT security. Adding intelligence will enable providers to improve operational efficiency, which will enhance patient and practitioner experience and alleviate the burden of an ongoing IT skills shortage," said Bob Laliberte, principal analyst, ESG.

"Healthcare providers continue to be high-value targets for attackers. This reality, combined with the diversity of medical IoT devices and their inherent vulnerabilities, points to a real need for device security that is purpose-built for healthcare use cases. The ability to defend against threats targeting critical care devices while maintaining operational availability and strengthening the alignment of device governance responsibilities between IT and Biomed engineering teams is quickly becoming a necessity for the protection of patient data and lives," said Ed Lee, research director, IoT and Intelligent Edge Security, IDC.

About Palo Alto Networks

Palo Alto Networks is the world's cybersecurity leader. We innovate to outpace cyberthreats, so organizations can embrace technology with confidence. We provide next-gen cybersecurity to thousands of customers globally, across all sectors. Our best-in-class cybersecurity platforms and services are backed by industry-leading threat intelligence and strengthened by state-of-the-art automation. Whether deploying our products to enable the Zero Trust Enterprise, responding to a security incident, or partnering to deliver better security outcomes through a world-class partner ecosystem, we're committed to helping ensure each day is safer than the one before. It's what makes us the cybersecurity partner of choice.

At Palo Alto Networks, we're committed to bringing together the very best people in service of our mission, so we're also proud to be the cybersecurity workplace of choice, recognized among Newsweek's Most Loved Workplaces (2021), Comparably Best Companies for Diversity (2021), and HRC Best Places for LGBTQ Equality (2022).

Spotlight

According to Counterpoint Research, the 5G+Wi-Fi 7 market will see cumulative shipments of over 7 billion devices through 2027 and grow at more than 100% annually between now and 2027 driven by leading applications including smartphones, gateways and routers, and the automotive sector.


Other News
Infrastructure, Industrial IoT

Tuya Smart, AWS Jointly Establish Collaborative IoT Security Lab

Staff Writer | September 07, 2023

Tuya Smart, an IoT service provider leader, and Amazon Web Services have collaborated to establish an IoT Collaborative Security Lab. This announcement at the re:Inforce China conference aims to enhance security, compliance capabilities, and technological innovation in the IoT industry, focusing on Matter PKI, DevSecOps, privacy computing, and international data compliance. It has prioritized security and compliance in IoT, actively engaging in IoT security initiatives and standards development. Chief Information Security Officer, Joy Liu at Tuya Smart said, Since the first day of its establishment, Tuya has regarded security and compliance as the core of our strategy and has always persisted in long-term construction and investment in security. [Source: Tuya Smart] Tuya Smart and AWS have been cooperating for nearly ten years, added Joy Liu. This has resulted in a deep integration of their cloud security products and a strengthening commitment to IoT security. In product design, Tuya systematically breaks down security requirements into actionable steps, ensuring security measures are integrated throughout the development process. This includes continuous monitoring, Zero Trust Provisioning over-the-air enhancements, user-focused privacy solutions, and vulnerability mitigation to enhance product security and dependability. The Tuya IoT Development Platform has registered over 846,000 developers from over 200 countries and regions as of 30 June 2023. In the ‘2022 Global IoT Security White Paper’ published jointlyby theioXt Alliance (Internet of Secure Things Alliance) andResearch Center for Cyber Governance (RCGCG) in 2022, Tuya Smart was recognized as one of the businesses with the most effective security practices. With the increasing application scenarios and the number of devices in the IoT, security concerns have become increasingly complicated. The 'Collaborative Security Lab,' a joint venture between AWS and Tuya Smart, strengthens both parties for IoT domain cooperation and exploration. This collaborative effort aims to provide industry-wide solutions. About Tuya Smart Tuya Smart is a technology company at the forefront of IoT connectivity solutions. Its cloud platform facilitates seamless device interconnectivity, setting interoperability standards for smart devices across industries. The company empowers partners and customers to enhance product value and consumer convenience. Its expanding Software as a Service (SaaS) offerings prioritize data security. Tuya’s transparent and open information security strategy increases partner and expert participation, thereby consolidating industry standards.

Read More

Enterprise Iot

Qualcomm Aware Enhances Global Connectivity, Joins Hands with floLIVE

floLIVE | September 11, 2023

floLIVE, the global creator of the largest hyperlocal global cellular network and a provider of global connectivity and network solutions for IoT has announced a collaborative effort with Qualcomm Technologies, a leading provider of advanced wireless technologies. This partnership aims to enhance connectivity globally on the innovative Qualcomm Aware Platform. The collaboration between floLIVE and Qualcomm Technologies has global implications as it seeks to address the IoT connectivity challenges faced by enterprises worldwide, benefiting diverse industries. The integration of floLIVE's expertise into the Qualcomm Aware Platform underscores their commitment to providing innovative global connectivity solutions. floLIVE's contribution to the Qualcomm Aware ecosystem brings unique hyperlocal global cellular network capabilities to the table. This network, tailored for OEMs and global enterprises, complements Qualcomm Aware's suite of technologies and intelligence. Together, they offer nearly seamless local connectivity woldwide, redefining how IoT devices connect and communicate globally. Qualcomm Aware targets issues related to ecosystem fragmentation and system design complexity, offering differentiated services for managing assets that require precise and timely decision-making. One of the significant challenges enterprises encounter is the time and cost associated with establishing reliable connectivity. floLIVE's solution addresses these concerns by enhancing connectivity reliability, enabling devices to access a global network operator database, and overcoming roaming restrictions. President, Americas at floLIVE, Curtis Govan, stated, Qualcomm Technologies' integration of floLIVE into the Qualcomm Aware Platform to help enhance global connectivity is a testament to our dedication to delivering innovative and impactful global connectivity solutions. [Source: Cision PR newswire] Curtis further said that they are excited to collaborate with Qualcomm Technologies to bring their hyperlocal cellular network expertise to Qualcomm Aware, empowering businesses to harness the full potential of IoT. Mohammed Ansari, Senior Director of Business Development at Qualcomm Technologies, expressed enthusiasm about the inclusion of floLIVE into the Qualcomm Aware ecosystem as a collaboration partner. He noted that a significant feature of Qualcomm Aware is its capacity to incorporate and enhance global IoT device connectivity intelligently, with a strong emphasis on security. Additionally, he highlighted the system's ability to intelligently oversee the connection from the device to the cloud, tailored to meet customers' requirements across various industries. Qualcomm Technologies is set to revolutionize the IoT landscape with its Qualcomm Aware platform, designed to unify and optimize developer tools, hardware, software, positioning capabilities at the chipset level, and global connectivity. This initiative will add digital intelligence, visibility, and control to enterprises while simplifying the complexities and challenges of IoT deployment. About floLIVE floLIVE operates the world's premier hyperlocal global cellular data network, strategically positioned with local points of presence (POPs) across numerous international locations. One can easily monitor their devices, access real-time network data and events, remotely switch operators, and proactively address potential issues, ensuring uninterrupted device performance. Its network provides direct access, allowing it to manage connectivity, while its global connectivity library is unparalleled in its scope, offering centrally managed, localized connectivity solutions for any device, anywhere. This global reach empowers businesses to operate without geographical constraints, while its localized approach ensures minimal latency, exceptional performance, and full compliance with privacy regulations, data laws, and roaming restrictions.

Read More

Security

Gorilla Technology Group Joins Protactics to Expand Global Footprint

Gorilla Technology Group | September 15, 2023

Gorilla Technology Group, a global provider of AI-based edge video analytics, IoT technologies, and security convergence, has entered into a partnership with Protactics, a Colombian-based enterprise specializing in integral solutions and technology for state-of-the-art security and defense equipment in Latin America. Juan Arango, the COO of Protactics, expressed confidence in the partnership with Gorilla, stating that Protactics and Gorilla together are well-positioned to redefine security, defense, and smart cities across Latin America. This partnership highlights their unwavering commitment to pioneering solutions, harnessing the full potential of AI and Cybersecurity in the region, and ushering in an era of enhanced safety and technological advancement. The collaboration aims to leverage Gorilla's innovative smart and safe city solutions to expand Protactics' presence in Latin America, focusing on the broader Latin American market. This partnership will accelerate the adoption of AI and cybersecurity solutions in Latin America, enhancing safety and security in the rapidly evolving technological landscape of the region. Established in July 2023, it grants Protactics the rights to offer sales and support for Gorilla's AI-based Video Analytics and Security Convergence solutions in select Latin American markets, including Mexico, Colombia and Venezuela. Additionally, Protactics will acquire Gorilla's solutions to conduct customer demonstrations and training for its team of experts. Vice President at EMEA, Gorilla Technology, William Addison, stated, The partnership is a resounding win for both Protactics and Gorilla. We believe this collaboration will expedite the adoption of AI & Cybersecurity solutions in Latin America. With our shared values of providing superior technology to enhance safety and security, we are excited to drive innovation and create a lasting relationship with Protactics to positively impact Latin America's rapidly evolving technological landscape. [Source: GlobeNewswire] Chairman and CEO of Gorilla Technology, Jay Chandan, remarked that their collaboration with Protactics strengthens their determination to expand Gorilla further as part of their global expansion strategy. This partnership extends the reach into markets with significant potential as they embark on digitalization and the implementation of smart and secure city solutions. He extended their thoughts that they are confident about the cooperation of their new partner and that they together will deliver outstanding deployments throughout Latin America, creating sustainable solutions and enhancing community protection and economic growth. About Gorilla Technology Group Gorilla Technology Group is a global solutions provider specializing in security intelligence, network intelligence, business intelligence, and IoT technology. Gorilla offers a diverse range of solutions, including smart city, network, video, security convergence, and IoT services across various sectors. Through relentless technological advancements, ethical practices, and an unwavering dedication to quality, the company aspires to shape a future where every interaction, transaction, and experience is elevated through technology. About Protactics Protactics, based in Bogota, Colombia, specializes in providing unique security and defense equipment. Its product range encompasses cybersecurity solutions, smart law enforcement tools, non-invasive inspection systems, end-to-end encrypted storage and data management, contraband detection technologies, and biometric fever screening devices. Protactics plays a pivotal role in enabling government agencies to elevate their security and defense capabilities.

Read More

Industrial IoT

KORE Bags IoT Evolution's 2023 LPWAN Excellence Award

KORE | September 13, 2023

On Sep 12, 2023, KORE, a global leader in Internet of Things Solutions and a pioneering IoT hyperscaler, was honored with the 2023 IoT Evolution LPWAN Excellence Award for its LoRaWAN solution, KORA. This award recognizes KORE's exceptional innovation and creativity in utilizing LPWAN (Low Power Wide Area Network) technology to address complex challenges across various industries. KORE's President and CEO, Romil Bahl, remarked, The uniqueness of KORA lies in its ability to manage multiple public and private LoRaWAN networks via a single interface, giving customers full control and visibility over deployments and sensor data. [Source: Cision PR Newswire] He stated that they have integrated with the leading public cloud providers, which enables the customers to select the way they want to integrate field data with enterprise applications. KORA, a Software-as-a-Service based Service Delivery Platform (SDP), offers seamless deployment, management, and connectivity for LoRaWAN devices via a cost-effective LPWA network. It ensures the longevity of IoT devices while providing robust connectivity solutions. Its capabilities support the expansion of ‘Massive IoT,’ which leverages LPWA networks like LoRaWAN to create a connected ecosystem of accessible data, thereby enhancing operational efficiency across industries. This transformative power extends from applications in smart farming, including livestock and soil monitoring, to optimizing city services, ultimately reshaping various sectors. Rich Tehrani, CEO of TMC, expressed his pleasure in recognizing KORA as an innovative solution that has earned KORE the 2023 IoT Evolution LPWAN Excellence Award. The IoT Evolution LPWAN Excellence Award recognizes outstanding products and solutions that leverage LPWAN technology. KORE's innovative work and contributions to the rapidly evolving IoT industry have earned this prestigious recognition. The company’s recognition with this award underscores its commitment to advancing IoT solutions and driving innovation within the industry. KORA's capabilities have the potential to significantly impact various sectors by enabling efficient and cost-effective IoT deployments. About Kore KORE is a pioneering force and a prominent leader, serving as a reliable consultant for mission-critical IoT solutions and services. Its mission revolves around equipping organizations, regardless of their size, to enhance operational efficiency and achieve improved business outcomes by simplifying the intricacies of the Internet of Things. KORE's extensive expertise in IoT, coupled with its global reach, purpose-built solutions, and agile deployment capabilities, drive significant and swift impacts on the operational success of its clientele.

Read More

Spotlight

According to Counterpoint Research, the 5G+Wi-Fi 7 market will see cumulative shipments of over 7 billion devices through 2027 and grow at more than 100% annually between now and 2027 driven by leading applications including smartphones, gateways and routers, and the automotive sector.

Resources