Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
A vulnerability in some Applied Biosystems human identification software that can allow data files to be changed before analysis software loads them has been fixed by Thermo Fisher Scientific.
According to the vendor's July 31 security alert, circumventing laboratory controls could result in almost undetected changes to.fsa and.hid outputs.
With a CVSS v4.0 score of 8.2, Thermo Fisher classifies the problem as High and tracks it as CVE-2026-17583. Three end-of-life data gathering products will not receive vendor updates, while five supported product lines have received updates that include digital signatures.
Nathan Adams, Kevin Dyer, Laura Gaydosh Combs, and the U.S. Cybersecurity and Infrastructure Security Agency are credited by Thermo Fisher with recognizing the problem and o...