4 ms·

Reminder to not put these things on the Internet (~2,600 results): https://beta.shodan.io/search?query=dicom+server+response https://beta.shodan.io/search?quer

• jacquesm 6y ago
  Hospitals tend to have piss-poor security. Their IT budget is usually low, they have one or two sysadmins who are eternally busy fixing things that users have messed up. Pentests are slowly becoming more accepted as a requirement, mostly because the GDPR has come into effect. And those inevitably turn up large lists of criticals. Typically, gear is left with all the settings at 'default', things are opened up to the net for temporary access which is then never removed again, it's possible for the whole hospital to have only one LAN segment and so on. Ransomware, directed attacks to gain admin privileges and substantial violations of patient confidentiality have all been recorded with great regularity. I'm assuming that if I have to go into the hospital again for whatever reason that that data will be on the street before I leave the building.