As cited
Copy frozen at (site build).
vulnerabilities
Critical Vulnerabilities Identified in Popular Consumer Fertility Device
Researchers at Northeastern University discovered 20 vulnerabilities affecting the Mira Hormone Monitor fertility tracker and its Android app, including two critical flaws that could expose reproductive health data, enable account takeover, and allow manipulation of fertility records. Separately, a critical vulnerability in the Pulsetto Vagus Nerve Stimulator firmware permits attackers to disable electrical safety protections via unencrypted Bluetooth commands. Mira's manufacturer released patched firmware and app versions, while Pulsetto has not responded to vendor coordination efforts.
Why it matters: Users of Mira monitors face immediate risk of health data theft and record falsification that could compromise fertility treatments; Pulsetto users need direct contact with the vendor since CISA coordination has stalled. Both device classes require urgent patching or vendor guidance to prevent safety and privacy incidents affecting sensitive health outcomes.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical Vulnerabilities Identified in Popular Consumer Fertility Device
Researchers at Northeastern University discovered 20 vulnerabilities affecting the Mira Hormone Monitor fertility tracker and its Android app, including two critical flaws that could expose reproductive health data, enable account takeover, and allow manipulation of fertility records. Separately, a critical vulnerability in the Pulsetto Vagus Nerve Stimulator firmware permits attackers to disable electrical safety protections via unencrypted Bluetooth commands. Mira's manufacturer released patched firmware and app versions, while Pulsetto has not responded to vendor coordination efforts.
Why it matters: Users of Mira monitors face immediate risk of health data theft and record falsification that could compromise fertility treatments; Pulsetto users need direct contact with the vendor since CISA coordination has stalled. Both device classes require urgent patching or vendor guidance to prevent safety and privacy incidents affecting sensitive health outcomes.
- Source published
- First seen by Cybersecurity Tracker