Zachary Minneker: MUMPS After 30 Years — Legacy Language Vulnerabilities in Government Systems

A DEF CON 30 talk about the MUMPS programming language, originally developed in the 1960s for healthcare systems but still widely used in critical infrastructure — from electronic medical records to banking platforms.

Using the VistA system as a case study, the researcher demonstrates how fuzzing open-source MUMPS implementations uncovered dozens of memory bugs and authentication vulnerabilities.