Dark Reading Daily -- December 19, 2019

'Password' Falls in the Ranks of Favorite Bad Passwords

When it comes to choosing unsecure passwords, people instead show a preference for '123456' and '123456789.'

Your First Month as a CISO: Forming an Information Security Program

It's easy to get overwhelmed in your new position, but these tips and resources will help you get started.

Few Firms Use Segmentation, Despite Security Benefits

Network segmentation is considered a key security control to prevent attackers from easily accessing critical assets from compromised, but unprivileged, computers. So why aren't more companies doing it?

5 Security Resolutions to Prevent a Ransomware Attack in 2020

Proactively consider tools to detect anomalous behavior, automatically remediate, and segment threats from moving across the network.

Trading Online? Steps to Take to Avoid Getting Phished

From an IT manager's perspective, any employee using such a mobile app on a phone they also use for business opens up risks to the corporate network.

Worried About Magecart? Here's How to Check for It

Researchers share how everyday users can check for malicious code on e-commerce websites.

Microsoft Issues Out-of-Cycle SharePoint Update

The update repairs vulnerabilities that could lead to very effective phishing messages.

Lessons Learned from 7 Big Breaches in 2019

Capital One, Macy's, FEMA, and others: key takeaways from the year's most notable breaches.

Visa Warns of Targeted PoS Attacks on Gas Station Merchants

At least two North American chains have been hit in sophisticated new campaigns for stealing payment card data.

Ransomware 'Crisis' in US Schools: More Than 1,000 Hit So Far in 2019

Meanwhile, the mayor of the city of New Orleans says no ransom money demands were made as her city struggles to recover from a major ransomware attack launched last week.

EDITORS' CHOICE

7 Tips to Keep Your Family Safe Online Over the Holidays

Security experts offer key cyber advice for family members.

Why Enterprises Buy Cybersecurity 'Ferraris'

You wouldn't purchase an expensive sports car if you couldn't use it properly. So, why make a pricey security investment before knowing it fits into your ecosystem?

NEW FROM THE EDGE

5 Pieces of GDPR Advice for Teams Without Privacy Compliance Staff

Are you an army of one tasked with compliance and data privacy? Try these tips to get you and your organization in alignment with regulators.

The Year in Security: 2019