![\"\"](\"https:\/\/www.newsbeep.com\/uk\/wp-content\/uploads\/2026\/04\/ICS-2026-970250-SW-1-1024x264.jpg\")
<\/a><\/p>\nIn another scenario, the researchers described how an extortion group or a state-sponsored threat actor could cause a DoS condition in a healthcare environment by delivering malicious firmware to devices.<\/p>\n
\u201cOnce activated, the weaponized firmware could cause serial-to-IP converters to stop responding on the network. Potential impacts include: analyzers stop reporting results to laboratory information systems, creating processing backlogs; surgical lighting controllers become unresponsive to remote commands; infusion pump calibration and certification workflows are halted; telemetry from environmental sensors is interrupted; Patient monitors lose network connectivity,\u201d the researchers explained.<\/p>\n
Lantronix and Silex have both been notified and they have released patches. The cybersecurity agency CISA recently published an advisory<\/a> describing the Lantronix vulnerabilities. Silex<\/a> has published an advisory on its own website.\u00a0<\/p>\n It\u2019s important for organizations not to ignore the risks posed by the use of serial-to-IP converters, as these devices have been targeted in the wild. They were targeted by Russian hackers in the 2015 Ukraine energy attack<\/a> and, more recently, in attacks targeting energy facilities in Poland<\/a>.\u00a0\u00a0<\/p>\n Forescout has published a report detailing the BRIDGE:BREAK<\/a> vulnerabilities.\u00a0<\/p>\n *updated with link to the Forescout report<\/p>\n Related: Lantronix Device Used in Critical Infrastructure Exposes Systems to Remote Hacking<\/a><\/p>\n Related: 1,000 Instantel Industrial Monitoring Devices Possibly Exposed to Hacking<\/a><\/p>\n