Medical device cybersecurity is lousy beyond lousy. The word from security experts for most of the past decade has been that while the physical security of most is superb, these devices are frighteningly insecure. A study by WhiteScope IO released in May reported more than 8,000 vulnerabilities in the code that runs in seven pacemakers from four manufacturers. A report released in December 2016 on an investigation into new implantable cardiac defibrillators found security flaws in the proprietary communication protocols of 10 of them.”]