Dark Reading Daily -- January 25, 2019

Cisco Study Finds Fewer Data Breaches at GDPR-Ready Firms

Many organizations find that getting their data privacy house in order is paying off.

Database of 24 Million Mortgage, Loan Records Left Exposed Online

Breach latest example of how misconfigurations, human errors undermine security in a big way, experts say.

After Eight Years, Metasploit Gets Its First Major Update

Metasploit 5.0 offers a host of service-oriented features, along with a new commitment from Rapid7 for regular releases.

Cyberattackers Bait Financial Firms with Google Cloud Platform

A new wave of attacks abuses the Google Cloud Platform URL redirection in PDF decoys, sending users to a malicious link.

Collateral Damage: When Cyberwarfare Targets Civilian Data

You can call it collateral damage. You can call it trickledown cyberwarfare. Either way, foreign hacker armies are targeting civilian enterprises - as a means of attacking rival government targets.

Cloud Customers Faced 681M Cyberattacks in 2018

The most common attacks involved software vulnerabilities, stolen credentials, Web applications, and IoT devices.

New Phishing Campaign Packs Triple Threat

Attack threatens victims with three "deadly malware" infestations if they don't give up critical email account credentials.

DHS Issues Emergency Directive on DNS Security

All government domain owners are instructed to take immediate steps to strengthen the security of their DNS servers following a successful hacking campaign.

8 Tips for Monitoring Cloud Security

Cloud security experts weigh in with the practices and tools they prefer to monitor and measure security metrics in the cloud.

Stealthy New DDoS Attacks Target Internet Service Providers

Adversaries took advantage of the large attack surface of large communications networks to spread small volumes of junk traffic across hundreds of IP prefixes in Q3 2018, Nexusguard says.

EDITORS' CHOICE

Real-World Threats That Trump Spectre & Meltdown

New side-channel attacks are getting lots of attention, but other more serious threats should top your list of threats.

Why Cybersecurity Must Be a Top Priority for Small & Midsize Businesses

The big corporations may grab the headlines, but America's SMBs have the most to lose in the aftermath of a data breach.

The Year in Security 2018