In a time where healthcare and technology are deeply intertwined, understanding medical device cybersecurity is not just important—it's essential.
Welcome to The Med Device Cyber Podcast, your go-to resource for understanding the complexities of this critical field of cyber security.
As the definitive podcast on medical device security, we explore everything from identifying and mitigating vulnerabilities to navigating this ever-evolving regulatory landscape.
Hosted by Christian Espinosa, Founder & CEO of Blue Goat Cyber, and Trevor Slattery, Director of Medical Device Cybersecurity, each episode features expert insights into the latest cybersecurity threats, innovative solutions, and best practices for protecting the medical devices that are at the heart of modern healthcare.
Whether you're a healthcare provider, a device manufacturer, a cybersecurity professional, or just someone looking to learn about the importance of cybersecurity in human lives, this podcast empowers you with the knowledge and tools to ensure patient safety and secure the future of medical technology.
This podcast is brought to you by Blue Goat Cyber, specializing in providing elite cybersecurity solutions.
Site
RSS
Apple
Data updated on 24/10/2026
Recent rankings
Latest chart positions across Apple Podcasts and Spotify rankings.
Shared links between episodes and podcasts
Links found in episode descriptions and other podcasts that share them.
When Should You Start Medical Device Cybersecurity? | Ep 89
Season 1 · Episode 89
Friday, October 23, 2026 • Duration 21:59
When is the right time to start cybersecurity for a medical device?
For many manufacturers, the answer still seems to be somewhere close to submission. In this solo episode, Christian Espinosa explains why that approach can create major delays, expensive redesigns and even force companies to abandon products they have spent years developing.
Christian breaks down where cybersecurity should enter the product lifecycle, why requirements and hardware decisions matter, and how frameworks like the SPDF and Total Product Lifecycle change the way manufacturers should think about security.
He also covers penetration testing, secure updates, decommissioning, attack surface reduction and post-market monitoring, showing why cybersecurity has to extend from design through disposal.
In This Episode:
* 00:07 Why manufacturers say they’re “not ready” for cybersecurity
* 02:08 When cybersecurity should actually begin
* 04:19 How early design decisions create security problems
* 06:28 Cybersecurity from cradle to grave
* 10:32 Why hospital networks should be treated as hostile
* 12:41 Secure updates and device decommissioning
* 15:54 Building cybersecurity into development
* 17:07 Post-market monitoring and why waiting costs more
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry.
Learn more about Blue Goat Cyber: https://bluegoatcyber.com
Schedule a Discovery Session: https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-session
Christian Espinosa on LinkedIn: https://www.linkedin.com/in/christianespinosa/
AI, Medical Devices and the Next Cybersecurity Arms Race with Liam Dowd | Ep 88
Season 1 · Episode 88
Thursday, October 15, 2026 • Duration 35:56
AI is becoming more capable, more autonomous and more accessible. What does that mean for medical device cybersecurity?
Liam Dowd joins Christian Espinosa to discuss the changing security landscape, from continuous SBOM monitoring and vulnerable hospital environments to the growing role of AI on both sides of the cybersecurity equation.
They explore how AI could make attackers faster while also giving defenders better tools, why excessive agency may become one of the technology’s biggest security risks, and where AI could genuinely improve healthcare.
In This Episode:
* 01:01 Why continuous SBOM monitoring matters
* 02:55 Why hospital networks should be treated as unsafe
* 05:05 Hacking into a surgical device in seconds
* 06:49 How AI is changing offensive cybersecurity
* 09:20 Using AI defensively
* 10:03 The AI cybersecurity arms race
* 16:17 The danger of excessive AI agency
* 21:36 Why AI still needs human oversight
* 23:48 Where AI could improve healthcare
* 27:46 AI hallucinations and autonomous systems
* 32:53 Liam’s view of where AI is heading
Connect with Liam Dowd: https://www.linkedin.com/in/liam-j-dowd/
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more: https://bluegoatcyber.com
Schedule a Discovery Session:
How Ethical Hackers Find Weaknesses in Medical Devices with Parker Daudt | Ep 87
Season 1 · Episode 87
Thursday, October 8, 2026 • Duration 33:46
What makes medical device penetration testing different from traditional cybersecurity?
Christian Espinosa is joined by Blue Goat Cyber penetration tester Parker Daudt to explore what ethical hacking looks like when the device being tested can directly affect patient safety.
Parker explains how penetration testing pushes beyond vulnerability scanning to uncover the real impact of an exploit, why outdated threat models can leave important attack surfaces untested, and why even something as simple as a CD drive can become a meaningful entry point.
They also discuss hospital environments, exploitability, the risks created by large-scale device deployment and why medical device security has to be considered through the lens of the patient, not just the technology.
In This Episode:
* 01:30 Moving from traditional cybersecurity to patient safety
* 05:57 Working with manufacturers on real-world risk
* 09:25 Vulnerability scanning versus penetration testing
* 11:55 Unexpected medical device attack surfaces
* 14:26 Why penetration testing depends on the threat model
* 17:38 Why hospitals should be treated as hostile environments
* 20:08 Exploitability versus probability
* 22:45 Why medical device cyber risk has real-world consequences
* 24:50 How one compromised device can create a foothold
* 26:16 Is hacking really like the movies?
* 29:21 Parker’s biggest takeaway for manufacturers
Connect with Parker Daudt:
https://www.linkedin.com/in/parkerdaudt/
The 7 Biggest Misconceptions About Medical Device Cybersecurity | Ep 86
Season 1 · Episode 86
Thursday, October 1, 2026 • Duration 16:20
Medical device cybersecurity is still surrounded by some persistent misconceptions.
In this solo episode, Christian Espinosa breaks down seven of the most common misunderstandings he continues to hear across MedTech, from what actually makes a device “cyber” to why cybersecurity cannot be treated as a final-stage compliance task.
He also explains why medical device cybersecurity is fundamentally different from traditional IT security, and why getting these basics wrong can create problems long before a product reaches the market.
In this episode:
00:07 What actually makes a medical device “cyber”?
02:12 Why medical device cybersecurity is about patient safety
05:21 Why cybersecurity cannot be a point-in-time exercise
06:27 Exploitability versus probability
08:30 Why pre-market clearance is not the finish line
10:43 Why software developers are not cybersecurity experts
11:47 Why traditional cybersecurity is different from medical device cybersecurity
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry.
Building Cyber Resilience Into Medical Devices with Joe Saunders | Ep 85
Season 1 · Episode 85
Thursday, September 24, 2026 • Duration 44:15
What if a medical device could prevent an attacker from exploiting a vulnerability, even before a patch becomes available?
Joe Saunders, CEO and co-founder of RunSafe Security, joins Christian Espinosa to explore a different approach to protecting the software inside medical devices and other critical infrastructure.
Joe goes through how RunSafe's technology changes the way software functions load into memory, making certain exploits ineffective without introducing the performance demands typically associated with additional security software.
But the implications extend beyond stopping an attack. For medical device manufacturers, vulnerability management can create significant development, testing, and regulatory challenges. Could preventing exploitation at runtime also reduce the burden of patching and help companies get products to market faster?
The conversation explores the economics of cybersecurity, the threat of compromised software updates, and why increasingly capable attackers are forcing manufacturers to rethink how they protect devices already deployed in the field.
In This Episode:
02:44 Protecting critical infrastructure and medical devices
05:25 Why traditional runtime security creates challenges
07:25 How RunSafe protects software without a running agent
11:05 Understanding memory-based exploits
20:59 The cost of constant patching and recertification
25:54 Reducing exploitation risk from 12,000 potential gadgets to zero
28:16 Cybersecurity and faster medical device approvals
30:45 Threats to critical infrastructure
36:24 The danger of compromised medical device updates
38:43 Why AI is accelerating the cybersecurity challenge
Can We Detect Skin Cancer Without a Biopsy? with Stefan Mazy | Ep 84
Season 1 · Episode 84
Friday, September 11, 2026 • Duration 38:51
What if the biggest problem in skin cancer diagnosis is not finding suspicious lesions, but what happens after we find them?
Stefan Mazy joins Christian Espinosa to discuss the personal experience that led him to explore a different approach to skin cancer testing after his mother underwent extensive surgery for an aggressive basal cell carcinoma.
Stefan explains how his team is developing a microneedle patch designed to collect cellular tissue without a traditional surgical biopsy, and why he believes the current diagnostic pathway is struggling to scale as skin cancer awareness and testing increase.
The conversation also explores the role of AI in identifying suspicious lesions, the trade-off between sensitivity and specificity, and why detecting more abnormalities could increase pressure on an already strained clinical pathway.
Christian and Stefan also discuss cybersecurity in medical technology, manufacturing risks, brain-computer interfaces and why connected devices require founders to think beyond the device itself.
In This Episode:
* 03:33 Stefan’s mother’s skin cancer diagnosis
* 08:14 Why he began searching for an alternative to biopsy
* 10:08 The scale of unnecessary skin biopsies
* 12:37 How the microneedle patch works
* 15:13 Why uncertainty creates a diagnostic bottleneck
* 23:44 Can AI reliably identify skin cancer?
* 28:07 The problem with false positives
* 31:50 Cybersecurity, brain-computer interfaces and future risk
* 35:20 Stefan’s key takeaway on technology and healthcare
Check out Stefan Mazy and DermaR here: https://www.linkedin.com/in/stefanmazy/
The Commercialization Gaps MedTech Founders Keep Missing with Ryan Roghaar | Ep 83
Season 1 · Episode 83
Thursday, August 27, 2026 • Duration 50:29
Why can a MedTech company have promising technology, a strong team and investor interest, yet still lose momentum when it matters most?
Ryan Roghaar joins Christian Espinosa to examine the commercialization gaps that can quietly weaken a medical device company long before the technology itself becomes the problem.
Ryan explains why companies often move through fundraising, regulatory strategy, sales and market entry in the wrong sequence, and why inconsistencies between a pitch deck, website, evidence and buyer messaging can immediately create doubt.
The conversation explores what happens when claims outpace evidence, why MedTech companies struggle to define exactly who they are selling to, and how cybersecurity and AI are adding entirely new layers of risk to commercialization.
In This Episode:
07:43 Why Ryan moved into MedTech
10:32 Moving from marketing agency to MedTech consultancy
11:32 Why devices fail outside the technology itself
12:41 Does MedTech commercialization follow a sequence?
16:08 The evidence gap inside MedTech companies
17:10 How investors pressure-test startups
19:55 When a company tells four different stories
23:36 Can cybersecurity become a commercial differentiator?
24:11 Why medical device hacking feels different
27:24 Cybersecurity risks from MRIs to brain implants
32:21 The three biggest commercialization gaps Ryan is seeing
35:57 Why unclear buyers dilute your message
39:08 The pressure to take the wrong customer
42:47 Ryan’s three key takeaways for MedTech companies
Why the Best MedTech Candidates Aren’t Applying to Your Jobs with Darwin Shurig | Ep 82
Season 1 · Episode 82
Thursday, August 20, 2026 • Duration 47:33
What happens when AI starts screening job candidates who are also using AI to get through the screening process?
In this episode of the Med Device Cyber Podcast, Christian Espinosa speaks with Darwin Shurig, founder of Top Talent Accelerant, about why recruiting in MedTech is becoming increasingly difficult and what companies can do to avoid costly hiring mistakes.
Darwin explores why traditional “post and pray” recruitment is breaking down, how strong candidates can be screened out while weaker candidates use AI to get through the process, and why some highly specialized roles in AI, machine learning and cybersecurity are remaining open for months.
The conversation also looks at the enormous cost of getting talent decisions wrong, why the best candidates often are not actively applying for jobs, and how showing candidates the real culture and expectations of a company can help create better alignment before an interview ever takes place.
Darwin also shares the personal journey behind his book, The Modern-Day Job, and how major changes in his business and personal life led him to reconsider success, purpose and the importance of the people we choose to work with.
In This Episode:
01:13 Darwin’s journey from critical care to MedTech recruiting
04:38 Why recruiting has become such a crowded industry
06:55 The cost of getting the hiring process wrong
09:00 How AI is changing candidate screening
10:11 Why specialized MedTech roles can stay open for months
11:26 Why traditional hiring processes need to change
12:31 Creating a better candidate experience
13:48 The $9 billion impact associated with warning letters
14:49 Why the best candidates are not applying to your job posts
The Hidden Barriers to Clinical Adoption with Amel Havkic | Ep 81
Season 1 · Episode 81
Thursday, August 13, 2026 • Duration 41:04
Why do so many promising MedTech companies fail even when the technology is strong, the funding is there and the product is compliant?
In this episode of the Med Device Cyber Podcast, Christian Espinosa speaks with Amel Havkic, founder of EvoMed Consulting, about the hidden barriers that prevent medical technologies from achieving real clinical adoption.
Amel explains why clinical adoption is often treated too late, how workflow friction can derail an otherwise strong product and why the founder’s greatest strength can sometimes become the company’s biggest strategic blind spot.
The conversation also explores the KOL trap, the cost of forcing behavior change inside already overstretched clinical environments and why cybersecurity, reimbursement, usability and implementation cannot be treated as separate problems.
In This Episode
01:08 Amel Havkic and VivoMed Consulting
02:41 Why 75% of MedTech companies fail
04:43 Clinical adoption, fundability and founder blind spots
07:23 Why one solution must satisfy many stakeholders
09:42 Economic viability and implementation friction
12:37 The hidden cost of changing clinical behaviour
15:43 The KOL trap and why pilots can mislead
18:46 Alarm fatigue and real-world clinical environments
20:46 Christian’s introduction to medical-device cybersecurity
27:49 Building the right team around a MedTech founder
32:38 Authenticity, intuition and choosing the right partners
37:17 Why being human may become a superpower in the age of AI
Check out Amel Havkic’s LinkedIn here.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more by visiting.
Why Consumer AI Is Not a Medical Device with Tyler Harmon | Ep 80
Season 1 · Episode 80
Thursday, August 6, 2026 • Duration 43:40
AI is moving quickly, but medical devices cannot afford to treat every new model like an ordinary software update.
In this episode of the Med Device Cyber Podcast, Christian Espinosa speaks with Tyler Harmon, CEO and co-founder of IASO Automated Medical Systems, about the risks and responsibilities surrounding AI as a medical device.
Tyler explains why consumer tools such as ChatGPT and Claude should not be treated as clinical diagnostic systems, even when a doctor remains involved in the final decision. He also explores why a human in the loop does not automatically make an AI system safe when the underlying model was never designed or cleared for that medical use.
The conversation examines how predetermined change control plans can support safer AI updates, why developers must understand the difference between frontier models and AI harnesses, and what can go wrong when a medical-device company builds on top of a third-party model.
In This Episode
00:48 Tyler Harmon and IASO Automated Medical Systems
03:34 What qualifies as AI as a medical device?
04:44 Predetermined change control plans
06:08 When should an AI medical device be updated?
09:00 Why medical AI is not new
11:32 Why medical AI still needs human oversight
17:40 Doctors using ChatGPT to interpret X-rays
20:09 Frontier models and AI harnesses
24:16 The challenge of developing proprietary AI
29:21 Why medical AI can take years to reach the market
34:28 Using consumer LLMs outside their intended licence
39:25 Licensing third-party AI for medical-device use
Discover shows related to The Med Device Cyber Podcast, based on actual content similarities. Explore podcasts with similar topics, themes, and formats, backed by real data.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry.
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more by visitinghttps://bluegoatcyber.com .
If you're interested in our services or partnering with us, schedule a Discovery Session:
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more by visiting https://bluegoatcyber.com.
If you’re interested in our services or partnering with us, schedule a Discovery Session:
Christian Espinosa is the CEO and founder of Blue Goat Cyber.
Christian Espinosa on LinkedIn: https://www.linkedin.com/in/christianespinosa/
Blue Goat Cyber on LinkedIn: https://www.linkedin.com/company/blue-goat-cyber/
Blue Goat Cyber on Instagram: https://www.instagram.com/bluegoatcyber/
Blue Goat Cyber on Facebook: https://www.facebook.com/bluegoatcyber/
Blue Goat Cyber on YouTube: https://www.youtube.com/@BlueGoatCyber/?sub_confirmation=1
Check out Ryan Roghaar’s LinkedIn here: https://www.linkedin.com/in/ryanroghaar/
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry.
Learn more by visiting https://bluegoatcyber.com.
If you’re interested in our services or partnering with us, schedule a Discovery Session:
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more by visitinghttps://bluegoatcyber.com.
If you’re interested in our services or partnering with us, schedule a Discovery Session:
The Med Device Cyber Podcast is brought to you by Blue Goat Cyber, cybersecurity experts providing essential security solutions for the medical device industry. Learn more by visitinghttps://bluegoatcyber.com.
If you’re interested in our services or partnering with us, schedule a Discovery Session:
