
Free Daily Podcast Summary
by Blue Goat Cyber
In a time where healthcare and technology are deeply intertwined, understanding medical device cybersecurity is not just important—it's essential. Welcome to The Med Device Cyber Podcast, your go-to resource for understanding the complexities of this critical field of cyber security. As the definitive podcast on medical device security, we explore everything from identifying and mitigating vulnerabilities to navigating this ever-evolving regulatory landscape. Hosted by Christian Espinosa, Founder & CEO of Blue Goat Cyber, each episode features expert insights into the latest cybersecurity threats, innovative solutions, and best practices for protecting the medical devices that are at the heart of modern healthcare. Whether you're a healthcare provider, a device manufacturer, a cybersecurity professional, or just someone looking to learn about the importance of cybersecurity in human lives, this podcast empowers you with the knowledge and tools to ensure patient safety and secure the future of medical technology.
The most recent episodes — sign up to get AI-powered summaries of each one.
What makes medical device penetration testing different from a traditional cybersecurity penetration test?In this solo episode, Christian Espinosa explains why medical device penetration testing has to be approached through the lens of patient safety rather than simply data protection.Christian breaks down the difference between vulnerability scanning and penetration testing, why the threat model and hazard analysis should drive the scope, and why hardware interfaces such as USB, Bluetooth, JTAG and UART need to be included alongside software, cloud and mobile components.He also walks through the testing methods the FDA expects to see, including abuse and misuse cases, robustness testing, fuzz testing, attack surface analysis and vulnerability chaining, as well as the importance of traceability, tester independence, retesting and reproducibility.IN THIS EPISODE:00:06 What medical device penetration testing actually is03:10 Vulnerability scanning versus penetration testing05:14 Traditional IT testing versus medical device testing07:19 Why hardware attack surfaces matter11:44 Why penetration testing needs independence14:56 Abuse, misuse and robustness testing18:09 Vulnerability chaining and attack surface analysis22:20 What the FDA expects in the final report27:38 Why retesting and traceability matter29:51 Common penetration testing mistakes that cause FDA problemsThe Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more: https://bluegoatcyber.comSchedule a Discovery Session:https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-sessionChristian Espinosa on LinkedIn:https://www.linkedin.com/in/christianespinosa/Blue Goat Cyber on LinkedIn:https://www.linkedin.com/company/blue-goat-cyber/Blue Goat Cyber on Instagram:https://www.instagram.com/bluegoatcyber/Blue Goat Cyber on Facebook:https://www.facebook.com/bluegoatcyber/Blue Goat Cyber on YouTube:https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
What happens when a medical device company experiences a serious cyber incident?Daniel Hammond joins Christian Espinosa to discuss why incident-response decisions should be made before an organization is under attack.They explore the role of tabletop exercises, why ransomware decisions are rarely as simple as “we never pay,” and what happens when attackers compromise the very network an incident-response team depends on.Daniel explains why cybersecurity programs built primarily around compliance can leave organizations preparing for yesterday’s threats instead of today’s risks. The conversation covers third-party dependencies, medical device shutdown decisions, business continuity and the rapidly increasing speed of AI-enabled cyberattacks.In this episode:07:14 What happens when a medical device vulnerability can harm patients11:30 Why tabletop exercises should go beyond compliance13:44 Making ransomware decisions before the crisis17:52 What happens when communications fail during an attack20:25 Where do you respond if attackers own your network?23:00 Compliance versus a risk-based cybersecurity mindset24:00 Planning for a compromised medical device28:40 The danger of critical vendor dependencies34:20 How AI is accelerating cyberattacks36:08 Why neutral third-party perspectives reveal blind spotsConnect with Daniel Hammond: https://www.linkedin.com/in/daniel-l-hammond/The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more: https://bluegoatcyber.comSchedule a Discovery Session:https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-sessionChristian Espinosa on LinkedIn:https://www.linkedin.com/in/christianespinosa/Blue Goat Cyber on LinkedIn:https://www.linkedin.com/company/blue-goat-cyber/Blue Goat Cyber on Instagram:https://www.instagram.com/bluegoatcyber/Blue Goat Cyber on Facebook:https://www.facebook.com/bluegoatcyber/Blue Goat Cyber on YouTube:https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
When is the right time to start cybersecurity for a medical device?For many manufacturers, the answer still seems to be somewhere close to submission. In this solo episode, Christian Espinosa explains why that approach can create major delays, expensive redesigns and even force companies to abandon products they have spent years developing.Christian breaks down where cybersecurity should enter the product lifecycle, why requirements and hardware decisions matter, and how frameworks like the SPDF and Total Product Lifecycle change the way manufacturers should think about security.He also covers penetration testing, secure updates, decommissioning, attack surface reduction and post-market monitoring, showing why cybersecurity has to extend from design through disposal.In This Episode:* 00:07 Why manufacturers say they’re “not ready” for cybersecurity* 02:08 When cybersecurity should actually begin* 04:19 How early design decisions create security problems* 06:28 Cybersecurity from cradle to grave* 10:32 Why hospital networks should be treated as hostile* 12:41 Secure updates and device decommissioning* 15:54 Building cybersecurity into development* 17:07 Post-market monitoring and why waiting costs moreThe Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry.Learn more about Blue Goat Cyber: https://bluegoatcyber.comSchedule a Discovery Session: https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-sessionChristian Espinosa on LinkedIn: https://www.linkedin.com/in/christianespinosa/Blue Goat Cyber on LinkedIn:https://www.linkedin.com/company/blue-goat-cyber/Blue Goat Cyber on Instagram:https://www.instagram.com/bluegoatcyber/Blue Goat Cyber on Facebook:https://www.facebook.com/bluegoatcyber/Blue Goat Cyber on YouTube:https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
AI is becoming more capable, more autonomous and more accessible. What does that mean for medical device cybersecurity?Liam Dowd joins Christian Espinosa to discuss the changing security landscape, from continuous SBOM monitoring and vulnerable hospital environments to the growing role of AI on both sides of the cybersecurity equation.They explore how AI could make attackers faster while also giving defenders better tools, why excessive agency may become one of the technology’s biggest security risks, and where AI could genuinely improve healthcare.In This Episode:* 01:01 Why continuous SBOM monitoring matters* 02:55 Why hospital networks should be treated as unsafe* 05:05 Hacking into a surgical device in seconds* 06:49 How AI is changing offensive cybersecurity* 09:20 Using AI defensively* 10:03 The AI cybersecurity arms race* 16:17 The danger of excessive AI agency* 21:36 Why AI still needs human oversight* 23:48 Where AI could improve healthcare* 27:46 AI hallucinations and autonomous systems* 32:53 Liam’s view of where AI is headingConnect with Liam Dowd: https://www.linkedin.com/in/liam-j-dowd/The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more: https://bluegoatcyber.comSchedule a Discovery Session:https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-sessionChristian Espinosa on LinkedIn:https://www.linkedin.com/in/christianespinosa/Blue Goat Cyber on LinkedIn:https://www.linkedin.com/company/blue-goat-cyber/Blue Goat Cyber on Instagram:https://www.instagram.com/bluegoatcyber/Blue Goat Cyber on Facebook:https://www.facebook.com/bluegoatcyber/Blue Goat Cyber on YouTube:https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
What makes medical device penetration testing different from traditional cybersecurity?Christian Espinosa is joined by Blue Goat Cyber penetration tester Parker Daudt to explore what ethical hacking looks like when the device being tested can directly affect patient safety.Parker explains how penetration testing pushes beyond vulnerability scanning to uncover the real impact of an exploit, why outdated threat models can leave important attack surfaces untested, and why even something as simple as a CD drive can become a meaningful entry point.They also discuss hospital environments, exploitability, the risks created by large-scale device deployment and why medical device security has to be considered through the lens of the patient, not just the technology.In This Episode:* 01:30 Moving from traditional cybersecurity to patient safety* 05:57 Working with manufacturers on real-world risk* 09:25 Vulnerability scanning versus penetration testing* 11:55 Unexpected medical device attack surfaces* 14:26 Why penetration testing depends on the threat model* 17:38 Why hospitals should be treated as hostile environments* 20:08 Exploitability versus probability* 22:45 Why medical device cyber risk has real-world consequences* 24:50 How one compromised device can create a foothold* 26:16 Is hacking really like the movies?* 29:21 Parker’s biggest takeaway for manufacturersConnect with Parker Daudt:https://www.linkedin.com/in/parkerdaudt/The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry.Learn more: https://bluegoatcyber.comSchedule a Discovery Session:https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-sessionChristian Espinosa on LinkedIn:https://www.linkedin.com/in/christianespinosa/Blue Goat Cyber on LinkedIn:https://www.linkedin.com/company/blue-goat-cyber/Blue Goat Cyber on Instagram:https://www.instagram.com/bluegoatcyber/Blue Goat Cyber on Facebook:https://www.facebook.com/bluegoatcyber/Blue Goat Cyber on YouTube:https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
Medical device cybersecurity is still surrounded by some persistent misconceptions.In this solo episode, Christian Espinosa breaks down seven of the most common misunderstandings he continues to hear across MedTech, from what actually makes a device “cyber” to why cybersecurity cannot be treated as a final-stage compliance task.He also explains why medical device cybersecurity is fundamentally different from traditional IT security, and why getting these basics wrong can create problems long before a product reaches the market.In this episode:00:07 What actually makes a medical device “cyber”?02:12 Why medical device cybersecurity is about patient safety05:21 Why cybersecurity cannot be a point-in-time exercise06:27 Exploitability versus probability08:30 Why pre-market clearance is not the finish line10:43 Why software developers are not cybersecurity experts11:47 Why traditional cybersecurity is different from medical device cybersecurityThe Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry.Learn more about Blue Goat Cyber:https://bluegoatcyber.comSchedule a Discovery Session:https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-sessionChristian Espinosa on LinkedIn:https://www.linkedin.com/in/christianespinosa/Blue Goat Cyber on LinkedIn:https://www.linkedin.com/company/blue-goat-cyber/Blue Goat Cyber on Instagram:https://www.instagram.com/bluegoatcyber/Blue Goat Cyber on Facebook:https://www.facebook.com/bluegoatcyber/Blue Goat Cyber on YouTube:https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
What if a medical device could prevent an attacker from exploiting a vulnerability, even before a patch becomes available?Joe Saunders, CEO and co-founder of RunSafe Security, joins Christian Espinosa to explore a different approach to protecting the software inside medical devices and other critical infrastructure.Joe goes through how RunSafe's technology changes the way software functions load into memory, making certain exploits ineffective without introducing the performance demands typically associated with additional security software.But the implications extend beyond stopping an attack. For medical device manufacturers, vulnerability management can create significant development, testing, and regulatory challenges. Could preventing exploitation at runtime also reduce the burden of patching and help companies get products to market faster?The conversation explores the economics of cybersecurity, the threat of compromised software updates, and why increasingly capable attackers are forcing manufacturers to rethink how they protect devices already deployed in the field.In This Episode:02:44 Protecting critical infrastructure and medical devices05:25 Why traditional runtime security creates challenges07:25 How RunSafe protects software without a running agent11:05 Understanding memory-based exploits20:59 The cost of constant patching and recertification25:54 Reducing exploitation risk from 12,000 potential gadgets to zero28:16 Cybersecurity and faster medical device approvals30:45 Threats to critical infrastructure36:24 The danger of compromised medical device updates38:43 Why AI is accelerating the cybersecurity challenge40:10 Building security into software from the beginningConnect on Linkedin with Joe Saunders: https://www.linkedin.com/in/joesaunders/Learn more about RunSafe Security: https://runsafesecurity.com The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more by visiting https://bluegoatcyber.com .If you're interested in our services or partnering with us, schedule a Discovery Session:https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-session Christian Espinosa is the CEO and founder of Blue Goat Cyber.Christian Espinosa on LinkedIn: https://www.linkedin.com/in/christianespinosa/ Blue Goat Cyber on LinkedIn: https://www.linkedin.com/company/blue-goat-cyber/ Blue Goat Cyber on Instagram: https://www.instagram.com/bluegoatcyber/ Blue Goat Cyber on Facebook: https://www.facebook.com/bluegoatcyber/ Blue Goat Cyber on YouTube: https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
What if the biggest problem in skin cancer diagnosis is not finding suspicious lesions, but what happens after we find them?Stefan Mazy joins Christian Espinosa to discuss the personal experience that led him to explore a different approach to skin cancer testing after his mother underwent extensive surgery for an aggressive basal cell carcinoma.Stefan explains how his team is developing a microneedle patch designed to collect cellular tissue without a traditional surgical biopsy, and why he believes the current diagnostic pathway is struggling to scale as skin cancer awareness and testing increase.The conversation also explores the role of AI in identifying suspicious lesions, the trade-off between sensitivity and specificity, and why detecting more abnormalities could increase pressure on an already strained clinical pathway.Christian and Stefan also discuss cybersecurity in medical technology, manufacturing risks, brain-computer interfaces and why connected devices require founders to think beyond the device itself.In This Episode:* 03:33 Stefan’s mother’s skin cancer diagnosis* 08:14 Why he began searching for an alternative to biopsy* 10:08 The scale of unnecessary skin biopsies* 12:37 How the microneedle patch works* 15:13 Why uncertainty creates a diagnostic bottleneck* 23:44 Can AI reliably identify skin cancer?* 28:07 The problem with false positives* 31:50 Cybersecurity, brain-computer interfaces and future risk* 35:20 Stefan’s key takeaway on technology and healthcareCheck out Stefan Mazy and DermaR here: https://www.linkedin.com/in/stefanmazy/The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more by visiting https://bluegoatcyber.com.If you’re interested in our services or partnering with us, schedule a Discovery Session:https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-sessionChristian Espinosa is the CEO and founder of Blue Goat Cyber.Christian Espinosa on LinkedIn: https://www.linkedin.com/in/christianespinosa/Blue Goat Cyber on LinkedIn: https://www.linkedin.com/company/blue-goat-cyber/Blue Goat Cyber on Instagram: https://www.instagram.com/bluegoatcyber/Blue Goat Cyber on Facebook: https://www.facebook.com/bluegoatcyber/Blue Goat Cyber on YouTube: https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
Listeners also like.

Random Access Memories
Conversations with tech professionals reveal the personal stories behind their careers in cybersecurity, AI, startups, and leadership.

Made for Health | Peptides | Lyme | Chronic Infections | Long Covid | Insulin Resistance | Hypermobility
A physician explores science-based approaches to treating chronic conditions and restoring health.

The Biohacking Standards
A deep dive into biohacking fundamentals—nutrition, movement, sleep, and mindfulness—grounded in science and holistic wellness principles.

Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.

Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure
Expert discussions on cybersecurity, national security, and threats to critical infrastructure like energy and water systems.

Security Now (Video)
A weekly deep dive into cybersecurity news, threats, and defenses with Steve Gibson and Leo Laporte.

The Watchtower
Cybersecurity, data, and AI leaders share candid insights on real-world challenges and innovations beyond the headlines.

Health vs Hype with the American Medical Association
A medical expert debunks viral health trends and misinformation with science-backed insights from physicians.

The Antisocial Doctors Podcast
Sonia Singh MD & Rebecca Berens MD
Ahead of the Threat: The FBI Cyber Podcast
FBI officials and experts discuss emerging cyber threats and cybersecurity fundamentals with government and industry guests.

FDA Watch
A regulatory expert hosts discussions on FDA policies and developments across pharmaceuticals, devices, food, and cosmetics.

The Health Continuum
High-performing professionals learn science-based health strategies to sustain energy, focus, and resilience in demanding careers.
In a time where healthcare and technology are deeply intertwined, understanding medical device cybersecurity is not just important—it's essential. Welcome to The Med Device Cyber Podcast, your go-to resource for understanding the complexities of this critical field of cyber security. As the definitive podcast on medical device security, we explore everything from identifying and mitigating vulnerabilities to navigating this ever-evolving regulatory landscape. Hosted by Christian Espinosa, Founder & CEO of Blue Goat Cyber, each episode features expert insights into the latest cybersecurity threats, innovative solutions, and best practices for protecting the medical devices that are at the heart of modern healthcare. Whether you're a healthcare provider, a device manufacturer, a cybersecurity professional, or just someone looking to learn about the importance of cybersecurity in human lives, this podcast empowers you with the knowledge and tools to ensure patient safety and secure the future of medical technology.
AI-powered recaps with compact key takeaways, quotes, and insights.
Get key takeaways from The Med Device Cyber Podcast in a 5-minute read.
Stay current on your favorite podcasts without falling behind.
It's a free AI-powered email that summarizes new episodes of The Med Device Cyber Podcast as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Blue Goat Cyber.
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
The Med Device Cyber Podcast publishes weekly. Our AI generates a summary within hours of each new episode.
The Med Device Cyber Podcast covers topics including Science, Technology, Medicine, Fitness, Health & Fitness, Life Sciences. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.