A new study of the four biggest makers of pacemaker systems found thousands of software vulnerabilities, highlighting an industry-wide problem with software security updates.