Embedded Software, Malware, and Medical Devices

I've occasionally heard from the lips of well meaning but uninformed persons that a medical device is secure because it uses embedded software. I'd like to introduce you to self-replicating malware for embedded firmware in routers.

Bizarre attack infects Linksys routers with self-replicating malware

I'd also like to take this opportunity to draw attention to a quote regarding the router's embedded firmware:

Unfortunately, no update is available for E1000 models, since they are no longer supported.

Sound familiar? Oh yes, Microsoft is ending all support for Windows XP Professional on April 8th of this year (2014).  No more patches, no more security updates.  Hope there aren't too many XP-based medical devices out there.