In a time where healthcare and technology are deeply intertwined, understanding medical device cybersecurity is not just important—it's essential.
Welcome to The Med Device Cyber Podcast, your go-to resource for understanding the complexities of this critical field of cyber security.
As the definitive podcast on medical device security, we explore everything from identifying and mitigating vulnerabilities to navigating this ever-evolving regulatory landscape.
Hosted by Christian Espinosa, Founder & CEO of Blue Goat Cyber, and Trevor Slattery, Director of Medical Device Cybersecurity, each episode features expert insights into the latest cybersecurity threats, innovative solutions, and best practices for protecting the medical devices that are at the heart of modern healthcare.
Whether you're a healthcare provider, a device manufacturer, a cybersecurity professional, or just someone looking to learn about the importance of cybersecurity in human lives, this podcast empowers you with the knowledge and tools to ensure patient safety and secure the future of medical technology.
This podcast is brought to you by Blue Goat Cyber, specializing in providing elite cybersecurity solutions.
Site
RSS
Apple
Recent rankings
Latest chart positions across Apple Podcasts and Spotify rankings.
Shared links between episodes and podcasts
Links found in episode descriptions and other podcasts that share them.
What It Takes to Succeed in the Medtech Industry with Omar Khateeb
Season 1 · Episode 54
Wednesday, January 14, 2026 • Duration 53:00
Ever thought about what it really takes to launch a successful medtech startup?
Omar M. Khateeb knows the challenges firsthand. As a founder with a track record of building healthtech companies, he’s lived through the hurdles that come with innovating in the medtech space.
In this episode, Omar dives into the highs and lows of his entrepreneurial journey, sharing key lessons, pivotal moments, and the strategies that helped him succeed. From tackling complex healthcare issues to navigating the regulatory maze, Omar breaks down what it takes to make a lasting impact in medtech.
Join us for an inside look at the future of health tech and why it’s the perfect time for the next generation of entrepreneurs to get involved.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cyber-criminals by visiting https://bluegoatcyber.com
If you’re interested in our services or partnering with us, schedule a Discovery Session: https://meetings.hubspot.com/blue-goat-cyber/discovery-session
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
Christian Espinosa on LinkedIn: https://www.linkedin.com/in/christianespinosa/
Blue Goat Cyber on LinkedIn: https://www.linkedin.com/company/blue-goat-cyber/
Blue Goat Cyber on Instagram: https://www.instagram.com/bluegoatcyber/
Blue Goat Cyber on Facebook: https://www.facebook.com/bluegoatcyber/
Blue Goat Cyber on YouTube: https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
Trevor Slattery on LinkedIn: https://www.linkedin.com/in/trevor-slattery-34852b1a9
Learn more about Christian Espinosa, buy his books, or invite him to speak on your stage: https://christianespinosa.com/
Christian Espinosa on YouTube: http://www.youtube.com/@ChristianEspinosaOfficial
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
Subscribe via Spotify: https://open.spotify.com/show/5ol62ROdF6mBfwOFqKFHmh
Subscribe via Apple Podcasts: https://apple.co/483OJ9I
Subscribe via YouTube: https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
Untangling Software Composition Analysis for MedTech Teams
Season 1 · Episode 53
Tuesday, January 6, 2026 • Duration 29:02
Why does software composition analysis matter beyond regulatory compliance?
This episode explores SCA (Software Composition Analysis) and explains how SBOMs (Software Bill of Materials), SOUP (Software of Unknown Provenance), and related tooling fit into the broader medical device cybersecurity landscape. Christian and Trevor clarify common misconceptions, including licensing fears, machine-readable requirements, and the role of static testing tools.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cyber-criminals by visiting https://bluegoatcyber.com
If you’re interested in our services or partnering with us, schedule a Discovery Session: https://meetings.hubspot.com/blue-goat-cyber/discovery-session
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
Christian Espinosa on LinkedIn: https://www.linkedin.com/in/christianespinosa/
Blue Goat Cyber on LinkedIn: https://www.linkedin.com/company/blue-goat-cyber/
Blue Goat Cyber on Instagram: https://www.instagram.com/bluegoatcyber/
Blue Goat Cyber on Facebook: https://www.facebook.com/bluegoatcyber/
Blue Goat Cyber on YouTube: https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
Trevor Slattery on LinkedIn: https://www.linkedin.com/in/trevor-slattery-34852b1a9
Learn more about Christian Espinosa, buy his books, or invite him to speak on your stage: https://christianespinosa.com/
How Market Intelligence Shapes MedTech Growth with Kevin Saem
Season 1 · Episode 46
Tuesday, November 18, 2025 • Duration 44:47
In the MedTech space, how can you leverage market intelligence and machine learning for business development and sales enablement?
In this episode, Christian and Trevor talk with Kevin Saem about how market intelligence and cybersecurity intersect in the MedTech space. They unpack how AI and data-driven insights are transforming sales enablement, investor confidence, and device security. They also discuss regulation delays, startup runway challenges, and the growing need for proactive cybersecurity.
Kevin Saem founded Zapyrus, a SaaS platform that helps MedTech service providers supercharge sales through AI-driven market intelligence.
Key points:
(04:20) Why medtech lags five years behind pharma in regulation and sales sophistication.
(06:30) How Zapyrus uses machine learning to identify market signals and automate sales research.
(08:45) Why regulatory clarity in Europe is fueling more medtech investment than in the U.S.
(12:00) How AI and connected devices are making cybersecurity a top concern for investors.
(19:07) What the Illumina case and AI therapy failures reveal about industry accountability.
(26:30) How medtech founders can self-regulate.
(32:40) When companies should start building scalable sales systems.
Thanks to Kevin Saem for being on the show. Connect with Kevin on LinkedIn:
Designing Secure Medical Device Software with Randy Horton
Season 1 · Episode 45
Tuesday, November 11, 2025 • Duration 39:41
In medical device software development, why should cybersecurity be viewed as an element of product quality, not an add-on?
In this episode, Christian and Trevor speak with Randy Horton of Orthogonal about the future of medical device software development. Together, they unpack how DevSecOps, quality systems, and modern engineering practices can elevate safety and speed innovation in MedTech. From the philosophy behind “move faster and break nothing” to lessons learned from real-world cybersecurity cases, this conversation reframes how medical device teams should approach software design.
Randy Horton is the Chief Solutions Officer at Orthogonal, where he helps MedTech companies build better, safer, and smarter connected devices. A lifelong software innovator, Randy brings profound insight into what it takes to merge cutting-edge tech with the regulated world of healthcare.
Key points:
(03:00) Randy shares how discovering the first web browser set him on a lifelong path of innovation.
(05:11) Why high-quality software inherently includes cybersecurity.
(08:52) Why traditional engineering mindsets struggle with the flexibility of software development.
(12:42) How the “move fast” culture in Silicon Valley clashes with MedTech’s demand for control and safety.
(16:09) Why some manufacturers avoid updating medtech devices, and how that hurts long-term device security.
(19:49) Randy predicts that born-digital MedTech companies will lead the next wave of innovation, pushing the industry to adapt faster.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cyber-criminals by visiting
Cyber Risk Management for MedTech Legacy Devices
Season 1 · Episode 44
Tuesday, November 4, 2025 • Duration 19:19
What options do MedTech manufacturers have to bring older devices up to modern cybersecurity standards? Also, how does the FDA’s latest guidance change the process for updating legacy devices?
In this episode, Christian and Trevor break down the evolving challenges of managing cybersecurity for MedTech legacy devices. They explain how the FDA’s recent guidance updates create new pathways for handling older devices without requiring full redesigns. Together, they explore practical steps manufacturers can take—like penetration testing and postmarket monitoring—to stay compliant and proactive about security risks.
Key points:
(02:13) How the FDA defines legacy devices and why updates to older equipment pose unique challenges.
(03:47) Why simply replacing old devices isn’t realistic for many healthcare organizations.
(05:00) How encryption standards evolve and why older devices often can’t meet modern security expectations.
(06:25) The FDA’s distinction between controlled and uncontrolled risk.
(09:02) The FDA’s reduced burden pathway for legacy devices.
(11:07) Best practices for postmarket management plans.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cyber-criminals by visiting https://bluegoatcyber.com
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
Webinar: Security Architecture Views: Protecting Medical Devices Through Strategic Design
Thursday, October 30, 2025 • Duration 42:19
How can security architecture views strengthen a medical device manufacturer’s FDA submissions?
This episode/webinar dives into the four critical security architecture views required by the FDA: global system, multi-patient harm, updatability and patchability, and secure use case views. Christian Espinosa and Trevor Slattery explain how each view strengthens product security while aligning with regulatory expectations. They also share practical strategies and examples, from cloud environments to physical updates, highlighting how proper documentation and foresight can mitigate real-world risks.
Highlights:
(01:19) Learn why the FDA requires four specific security architecture views and how they support threat modeling.
(03:10) Understand how integrating security into architecture views reflects secure coding and DevSecOps practices.
(04:15) Discover how global regulators beyond the FDA use similar documentation requirements.
(07:52) Explore why global system views must include both software and hardware components as well as data flows.
(11:02) The distinction between global system views and multi-patient harm views.
(14:36) Common vulnerabilities like hard-coded credentials that can lead to multi-patient harm.
(19:18) The risks of over-the-air updates versus physical updates for medical devices.
This episode was brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cyber-criminals by visiting https://bluegoatcyber.com
Why AI Literacy Matters for the Future of Healthcare with José Acosta
Season 1 · Episode 43
Tuesday, October 28, 2025 • Duration 36:58
How can AI literacy reduce patient risk in healthcare settings?
In this episode, Christian Espinosa and Trevor Slattery are joined by Dr. José Acosta. Together, they unpack the promise and pitfalls of artificial intelligence in healthcare—from the accuracy gap in diagnostics to the importance of ethics, alignment, and training. The conversation explores how clinicians can harness AI safely, ensuring innovation never comes at the cost of patient trust or care quality.
Dr. José Acosta is a retired Navy trauma surgeon turned AI literacy advocate. With decades of experience in medicine and leadership, he’s now helping clinicians understand AI—from how it works to how it should be used responsibly.
Key points:
(00:57) José’s background as a Navy trauma surgeon and his passion for AI literacy.
(02:53) What “AI literacy” really means.
(05:00) Why precision matters in medicine, and why 85–95% accuracy in AI models isn’t enough when lives are on the line.
(11:20) A chilling example of an AI therapy app that gave a fatal recommendation.
(14:16) José predicts a surge in “ambient AI scribes” and explains how they’ll reshape physician workflows.
(17:53) AI’s productivity paradox—how new tools can both help and overwhelm clinicians.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cybercriminals by visiting https://bluegoatcyber.com
If you’re interested in our services or partnering with us, schedule a Discovery Session:
What Is A Medical Device?
Season 1 · Episode 42
Tuesday, October 21, 2025 • Duration 20:09
MedTech developers and manufacturers, could your medical device unknowingly qualify as a “cyber device”?
In this episode, Christian and Trevor break down what the FDA considers a “cyber device” and why so many manufacturers misunderstand this definition. They reveal how even basic interfaces like USB, HDMI, or Bluetooth can make a device cyber-enabled—and why that matters for regulatory compliance.
Key points:
(00:33) What makes a medical device a “cyber device,” and why confusion persists among manufacturers.
(02:14) How proving a device has zero vulnerabilities is nearly impossible, even with minimal code.
(03:12) Why even a simple USB port can classify a device as “cyber.”
(05:05) Common interfaces (Wi-Fi, Bluetooth, RFID, NFC, HDMI) that make a device cyber-enabled.
(09:23) Implantable devices, like pacemakers, and how protocols such as MedRadio introduce hidden connectivity.
(12:20) A real case where the FDA classified a 3D-printing system as a cyber device due to its software dependencies.
(16:15) Practical advice on removing unnecessary ports or connectivity to avoid cyber classification.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cybercriminals by visiting https://bluegoatcyber.com
If you’re interested in our services or partnering with us, schedule a Discovery Session: https://meetings.hubspot.com/blue-goat-cyber/discovery-session
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
5 Most Common Misconceptions of Medical Device Security
Season 1 · Episode 41
Tuesday, October 14, 2025 • Duration 25:52
In this episode, Christian and Trevor unpack the five most common misconceptions that put medical device manufacturers at risk. From confusing data protection with patient safety to misunderstanding what qualifies as a cyber device, the hosts shed light on the blind spots that cause costly delays and compliance failures. They also explore how medical device cybersecurity differs fundamentally from traditional cybersecurity, emphasizing the need for specialized expertise and early integration of secure design principles.
Key points:
(01:18) Misconception #1: That cybersecurity is only about protecting data rather than patient safety.
(06:04) Misconception #2: That your product isn’t a “cyber device.”
(07:46) Misconception #3: That cybersecurity is a one-time thing to study rather than a full lifecycle process.
(12:17) Misconception #4: That software developers inherently understand cybersecurity.
(19:10) Misconception #5: Thinking that traditional cybersecurity and medical device cybersecurity are the same.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cybercriminals by visiting https://bluegoatcyber.com
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
What Happens When AI in Medical Devices Make Mistakes?
Season 1 · Episode 40
Tuesday, October 7, 2025 • Duration 24:36
MedTech manufacturers and developers, what happens if your AI-powered medical device makes a terrible, life-threatening mistake?
This episode explores what happens when artificial intelligence in medical devices goes wrong. Christian Espinosa and Trevor Slattery break down the real-world consequences of AI failure, using a tragic mental health chatbot case to highlight the stakes of inadequate oversight. They also examine the EU AI Act, new MDCG guidance, and the ethical, regulatory, and cybersecurity challenges facing innovators in the high-risk medical AI space.
Key points:
(03:02) The EU AI Act and how it intersects with the MDR and IVDR.
(03:55) A real case study involving a suicidal patient and an AI mental health chatbot.
(06:07) How general-purpose AI tools differ from regulated medical AI.
(09:57) Why threat modeling should apply to AI systems.
(12:16) Ethical decision-making in autonomous systems using self-driving car analogies.
(14:02) The Medical Device Coordination Group’s guidance on aligning the AI Act with EU medical device regulations.
(17:10) Shared accountability across regulators, manufacturers, and users for AI oversight.
(18:35) The U.S. still treats AI as a “Wild West” compared to the EU’s stricter approach.
(22:42) Regulators aren’t asking if your AI works—they’re asking how it fails.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cyber-criminals by visiting https://bluegoatcyber.com
If you’re interested in our services or partnering with us, schedule a Discovery Session:
Christian Espinosa on YouTube: http://www.youtube.com/@ChristianEspinosaOfficial
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
Subscribe via Spotify: https://open.spotify.com/show/5ol62ROdF6mBfwOFqKFHmh
Subscribe via Apple Podcasts: https://apple.co/483OJ9I
Subscribe via YouTube: https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cyber-criminals by visiting https://bluegoatcyber.com
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
In the MedTech space, how can you leverage market intelligence and machine learning for business development and sales enablement?
In this episode, Christian and Trevor talk with Kevin Saem about how market intelligence and cybersecurity intersect in the MedTech space. They unpack how AI and data-driven insights are transforming sales enablement, investor confidence, and device security. They also discuss regulation delays, startup runway challenges, and the growing need for proactive cybersecurity.
Kevin Saem founded Zapyrus, a SaaS platform that helps MedTech service providers supercharge sales through AI-driven market intelligence.
Key points:
(04:20) Why medtech lags five years behind pharma in regulation and sales sophistication.
(06:30) How Zapyrus uses machine learning to identify market signals and automate sales research.
(08:45) Why regulatory clarity in Europe is fueling more medtech investment than in the U.S.
(12:00) How AI and connected devices are making cybersecurity a top concern for investors.
(19:07) What the Illumina case and AI therapy failures reveal about industry accountability.
(26:30) How medtech founders can self-regulate.
(32:40) When companies should start building scalable sales systems.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity professionals specializing in providing elite cyber solutions for medical devices. Learn more about securing your product and business from cyber-criminals by visiting https://bluegoatcyber.com
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
Learn more about Christian Espinosa, buy his books, or invite him to speak on your stage: https://christianespinosa.com/
Christian Espinosa on YouTube: http://www.youtube.com/@ChristianEspinosaOfficial
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
Subscribe via Spotify: https://open.spotify.com/show/5ol62ROdF6mBfwOFqKFHmh
Subscribe via Apple Podcasts: https://apple.co/483OJ9I
Subscribe via YouTube: https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
Christian Espinosa is the CEO and founder of Blue Goat Cyber. Trevor Slattery is the Chief Technology Officer / Director of MedTech Cybersecurity at Blue Goat Cyber.
The Med Device Cyber Podcast is your essential resource for medical device cybersecurity. Each episode we dive into the latest threats, solutions, and best practices to protect modern healthcare technology. Whether you're a provider, a manufacturer, or a cybersecurity professional, gain the knowledge to safeguard patient safety by subscribing to the Med Device Cyber Podcast.
Discover shows related to The Med Device Cyber Podcast, based on actual content similarities. Explore podcasts with similar topics, themes, and formats, backed by real data.
