A significant security vulnerability in widely used crime laboratory equipment has raised concerns about the integrity of digital DNA evidence. Thermo Fisher Scientific recently issued a high-severity security bulletin regarding its Applied Biosystems human identification software, which is used by a majority of U.S. crime labs. The flaw, tracked as CVE-2026-17583, could allow an attacker to modify DNA data files before they are processed by analysis software, potentially creating undetectable changes to forensic results.
This vulnerability affects file types, which are the digital outputs generated when machines scan physical DNA samples. Researchers discovered that by bypassing laboratory security controls, these files could be altered to combine different DNA profiles or otherwise manipulate the data. While the flaw has likely existed in these systems since 1995, the emergence of accessible artificial intelligence tools has made it significantly easier to write the code necessary to perform these modifications in under an hour.
Thermo Fisher Scientific has released software updates for five supported product lines that implement digital signatures, allowing laboratories to verify that data files remain unchanged after leaving the instrument. However, three older, end-of-life product lines will not receive updates. The company emphasized that there are no known instances of this vulnerability being exploited in actual criminal cases, and it is working with the U.S. Cybersecurity and Infrastructure Security Agency to address the issue.
For laboratories unable to update their systems, the company recommends strengthening traditional security measures, such as restricting network access, enforcing strict file custody protocols, and limiting user privileges. The discovery highlights a growing tension between the rapid evolution of digital forensic technology and the need for robust, tamper-evident security standards in the criminal justice system. As the industry moves forward, the focus remains on ensuring that the digital records serving as the gold standard of forensic science are protected against modern cyber threats.