Hospitals and medical device manufacturers have more cybersecurity guidance and requirements than ever, but third-party attacks, AI-assisted vulnerability discovery, and aging equipment continue to complicate efforts to reduce risk.