Fear to Awareness: Understanding Medical Security Vulnerabilities