Dark Reading Daily -- December 17, 2019

Ransomware 'Crisis' in US Schools: More Than 1,000 Hit So Far in 2019

Meanwhile, the mayor of the city of New Orleans says no ransom money demands were made as her city struggles to recover from a major ransomware attack launched last week.

SQL Server 2019 Tool Tells Attackers Which Data Is Sensitive

The design of SQL Data Discovery & Classification could let attackers pinpoint sensitive information while flying under organizations' radars.

Mobile Devices Account for 41% of DDoS Attack Traffic

DNS amplification attacks continue to dominate distributed denial-of-service (DDoS) attacks, while mobile devices make up a larger share of traffic.

Weak Crypto Practice Undermining IoT Device Security

Keyfactor says it was able to break nearly 250,000 distinct RSA keys - many associated with routers, wireless access points, and other Internet-connected devices.

Why Enterprises Buy Cybersecurity 'Ferraris'

You wouldn't purchase an expensive sports car if you couldn't use it properly. So, why make a pricey security investment before knowing it fits into your ecosystem?

Financial Services Breaches Less Common, More Damaging, Than Those in Other Sectors

While far less common than breaches in other industry sectors, financial services breaches were more than twice as expensive, per record exposed, than the average for tech businesses.

Rooster Teeth Alerts Customers to Magecart Attack

The entertainment company discovered malicious content on the Shopify platform for its online store and removed it the same day.

Data Leak Week: Billions of Sensitive Files Exposed Online

A total of 2.7 billion email addresses, 1 billion email account passwords, and nearly 800,000 applications for copies of birth certificate were found on unsecured cloud buckets.

Only Half of Malware Caught by Signature AV

Machine learning and behavioral detection are necessary to catch threats, WatchGuard says in a new report. Meanwhile, network attacks have risen, especially against older vulnerabilities, such as those in Apache Struts.

Visa Warns of Targeted PoS Attacks on Gas Station Merchants

At least two North American chains have been hit in sophisticated new campaigns for stealing payment card data.

EDITORS' CHOICE

Lessons Learned from 7 Big Breaches in 2019

Capital One, Macy's, FEMA, and others: key takeaways from the year's most notable breaches.

Waking Up to Third-Party Security Risk

You can't rely on the words, intentions, or security measures of others to guard your company, customer and brand.

NEW FROM THE EDGE

Disarming Disinformation

Disinformation attacks are just as detrimental to businesses as they are to national elections. Here's what's at stake in 2020 and what infosec teams can do about them.

What Should I Look for in a Data Protection Officer?

The right candidate will possess the following skills.

The Year in Security: 2019