Encryption & Key Management , Healthcare , Industry Specific

Medical Devices Face a Post-Quantum Security Gap

Legacy medical devices have long been a thorn in the side of most healthcare organizations trying to get a better handle on device cybersecurity. But now these providers are facing another major hurdle - a potentially lengthy and difficult transition to post-quantum cryptography, with medical devices and other tech lagging far behind traditional IT systems in their ability to support quantum-resistant security, according to new research.

Currently, only 6% of internet of medical things devices and 16% of operational technology devices use versions of Secure Shell implementations capable of supporting post-quantum cryptography, or PQC, according to new research released on Tuesday by Forescout Research's Vedere Labs.

In comparison, 50% of traditional IT devices use PQC-capable SSH implementations, the research said.

For its study, Forescout analyzed more than 2.5 million devices across more than 50 healthcare delivery organizations, averaging about 50,000 devices per provider. The research examined not only healthcare's readiness for future quantum threats to current encryption standards but also which systems and types of patient information could face the greatest risk.