{"id":675,"date":"2023-05-01T09:58:57","date_gmt":"2023-05-01T09:58:57","guid":{"rendered":"https:\/\/certerassl.com\/blog\/?p=675"},"modified":"2023-05-10T06:14:47","modified_gmt":"2023-05-10T06:14:47","slug":"illumina-dna-sequencing-patient-data-exposed","status":"publish","type":"post","link":"https:\/\/certera.com\/blog\/illumina-dna-sequencing-patient-data-exposed\/","title":{"rendered":"Critical Security Flaw Exposed Illumina DNA Sequencing Patient Data"},"content":{"rendered":"\n

Illumina DNA Sequencing security vulnerability results Unauthorized disclosure of Patient Data<\/h2>\n\n\n\n

The U.S. government has rung the alarm regarding a critical software vulnerability found in genomics giant Illumina’s DNA sequencing devices, which malicious users can exploit to alter or steal sensitive medical data of patients.<\/p>\n\n\n\n

FDA <\/strong>and the U.S. Cybersecurity Infrastructure Security Agency (CISA)<\/strong> issued separate advisories on Thursday alerting the security flaw, also known as CVE-2023-1968<\/strong>. The vulnerability received a maximum severity rating of 10 out of 10. It could enable cybercriminals to gain unrestricted remote access to a compromised device over the internet.<\/p>\n\n\n\n

“An unauthenticated malicious user could upload and execute malware remotely at the operating system level, which could allow a hacker to change configurations, settings, software, or access sensitive data on the affected product,”<\/em><\/strong> a CISA alert issued yesterday.<\/p>\n\n\n\n

Considering the increasing use of genetic sequencing in medicine, this vulnerability could have serious consequences. Illumina <\/strong>is a California-based medical technology organization that develops and manufactures advanced bioanalysis and DNA sequencing machines.<\/p>\n\n\n\n

The company extensively uses its products for DNA sequencing in clinical settings, research organizations, universities, biotechnology firms, and the pharmaceutical sector in more than 140 countries. Using Illumina sequencing technology, healthcare professionals and researchers can examine a patient’s DNA and find genetic mutations connected to various diseases. An unauthorized modification of genomic information has been leading to the risk of causing inaccurate diagnoses, ineffective therapies, and serious health risks to patients.<\/p>\n\n\n\n

The advisories also warn of a second vulnerability, CVE-2023-1966<\/strong>, rated 7.4 out of 10<\/strong> for severity. The flaw might provide hackers access to the operating system level, where they could upload and run malicious programs to change settings and access private information on the impacted product.<\/p>\n\n\n\n

The Vulnerable Illumina products include<\/strong><\/h3>\n\n\n\n