Many medical devices are produced by legacy companies that are new to designing software. Others are made by startups that have to bootstrap costs. The end result is that most medical devices are designed with open-source code that is easily hacked with malware. The good news, researchers say, is that most hackers aren’t looking to disable a pacemaker or zap a CT patient with a huge dose of radiation. Typically, they just want an entry point into a hospital’s system to steal valuable healthcare records to sell on the dark Web.