The health sector has long faced a real hurdle to patching security issues: A hospital’s security team may be able to identify a vulnerability in a clinical system in an afternoon, but safely installing a fix is usually hindered by the practical realities of a hospital’s frantic day-to-day pace. The device’s manufacturer may need to validate an update, the hospital may need to test it and schedule downtime, and some changes may even require a regulatory review. Attackers face none of those…