DataBreachToday.com

Thousands of unique IP addresses are potentially exposing medical devices, electronic medical records systems and other sensitive healthcare information to the internet, said security researcher Himaja Motheram of security firm Censys, which made the discovery.

President-Elect's Crypto Push Fuels Concerns Over Market Stability and Conflicts
President-elect Donald Trump's strong cryptocurrency support amid market volatility is raising concerns over potential conflicts of interest, with experts warning his agenda - including potential plans to appoint a White House crypto czar - could destabilize the economy and undermine public trust.

Also: Africa Busts Cybercrime Suspects; Many Smart Devices Lack Update Transparency
This week, Microsoft previews its latest attempt to introduce AI-enabled Windows Recall - now with added privacy features; over 1,000 cybercrime suspects busted in Africa; regulators report "smart" device update promises often missing; and Florida IT professional caught spying for China.

Linux-Targeting Bootkitty Appears More Proof-of-Concept Than Threat, Researcher Say
Cybersecurity researchers have discovered the first-ever bootkit designed to target Linux systems and subvert their boot process for malicious purposes. The "Bootkitty" malware, first uploaded to VirusTotal this month, appears to be more "proof of concept" than full-fledged threat, they said.

Also: Python Library Update Steals Credentials; Drug Cartels Launder With Tether
This week's cryptohack roundup includes a U.S. federal judge striking down the SEC's expanded "Dealer Rule," a Python crypto library update stealing credentials, why digital payment apps are being excluded from some types of federal oversight, and drug cartels laundering profits via Tether.

How to Find a Career in Industrial IoT - on the Factory Floor or in the Cornfield
Cybersecurity once conjured images of IT departments, server rooms and corporate firewalls. Today, it extends far beyond these traditional domains, becoming essential in fields like manufacturing, agriculture, healthcare, transportation, robotics and space exploration.

Department of Treasury Overstepped its Authority, Fifth Circuit Rules
A U.S. federal appeals court ruled U.S. Department of Treasury exceeded its authority by sanctioning Tornado Cash, a cryptocurrency mixing service used by North Korean hackers to launder more than $455 million. Smart contracts "are not capable of being owned," the court ruled.

Likely Russian Hacker Exploits IoT Vulnerabilities, Many Known for Years
An apparent Russian script kiddie is converting widespread security gaps into powerful botnets capable of launching global-scale distributed denial-of-service attacks. A threat actor with the online moniker "Matrix" is exploiting IoT vulnerabilities such as default credentials and outdated software.

Largest US Telco Blocks Hackers But Warns Other Networks May Be Compromised
T-Mobile disputed claims Wednesday that Chinese state-sponsored hackers breached its systems and stole customer data, warning that some U.S. communications networks may still be compromised and detailing how its layered defenses and third-party cybersecurity partnerships thwarted the attack.

Henna Virkkunen Vows to Boost European innovation, Cut Regulations
Newly appointed EU tech commissioner Henna Virkkunen will lead efforts to establish Europe's tech sovereignty, said European Commission President Ursula von der Leyen, who will start a second term on Dec. 1. Virkkunen was a liberal-conservative Finnish member of the European Parliament.

ESET Discovers Two Major Vulnerabilities Exploited by Russian RomCom Hacking Group
Two vulnerabilities in Mozilla products and Windows are being actively exploited by RomCom, a Kremlin-linked cybercriminal group known for targeting businesses and conducting espionage, warn security researchers from Eset. Exploiting the two flaws together enables attackers to execute arbitrary code.

New Sysdig CEO Bill Welch Aims to Expand Real-Time Response and GSI Partnerships
New CEO Bill Welch discusses Sysdig's cloud security strategy, emphasizing AI, open-source leadership with Falco, and expansion plans to serve SMBs and midmarket businesses. He shares goals for real-time response and building a sustainable, profitable company.

New Law Calls for Better Reporting, Securing Devices and Critical Infrastructure
The Australian government's proposed cybersecurity legislation passed both houses of the Parliament on Monday, formalizing the government's strategy to boost ransomware payment reporting, mandate basic cybersecurity standards for connected devices and enhance critical infrastructure security.

Pentagon Seeking Industry Feedback in Developing New AI Contract Vehicle
The U.S. Department of Defense is seeking industry proposals for a new artificial intelligence contract vehicle to help revamp its multi-domain analytics platform, Advana, according to a newly released draft solicitation. The new contract vehicle could extend through July 2035.

HHS OIG: Current Audit Program Is Not Pushing Entities Enough to Improve Cyber
The U.S. Department of Health and Human Services' Office for Civil Rights should restart and toughen the scope of its HIPAA audits. A watchdog agency says HHS needs to better assess whether regulated healthcare organizations are taking required actions to reduce their cybersecurity risk.

'You Wonder, Should I Just Spend It on a Place to Stay in America For a Week'
Revisions to U.K. government research funding guidelines and their complex application pose a challenge to early-stage tech companies, experts on Tuesday told a parliamentary committee inquiry. "We have definitely had issues," said Peadar Coyle, founder of AudioStack.

Outpatient Appointments Cancelled at Wirral University Teaching Hospital
A U.K. National Heath Service teaching hospital in northwest England reported a major cyberincident on Tuesday that forced the healthcare facility to cancel outpatient appointments for the day. Maternity services, neo-natal and emergency triage are "running as normal."