Dark Reading Daily -- January 16, 2019

Hijacking a PLC Using its Own Network Features

Researcher to show how attackers can exploit the built-in advanced connectivity functions in some Rockwell PLCs.

The paradigm shift toward always-on IT requires business leaders to rethink their defense strategy.

Online Fraud: Now a Major Application Layer Security Problem

The explosion of consumer-facing online services and applications is making it easier and cheaper for cybercriminals to host malicious content and launch attacks.

Former IBM Security Execs Launch Cloud Data Security Startup

Sonrai Security, the brainchild of two execs from IBM Security and Q1 Labs, debuts with $18.5 million in Series A funding.

Report: Bots Add Volume to Account Takeover Attacks

Bots that can launch hundreds of attacks per second are making account takeover fraud more difficult to defend against.

US Judge: Police Can't Force Biometric Authentication

Law enforcement cannot order individuals to unlock devices using facial or fingerprint scans, a California judge says.

SEC Issues Charges in 'Edgar' Database Hack

One defendant is still facing charges issued in 2015 for a $30 million hacking and securities fraud scheme.

Advanced Phishing Scenarios You Will Most Likely Encounter This Year

In 2019, there will be no end in sight to email-driven cybercrime such as business email compromise, spearphishing, and ransomware.

Who Takes Responsibility for Cyberattacks in the Cloud?

A new CSA report addresses the issue of breach responsibility as more organizations move ERP application data the cloud.

DNS Hijacking Campaign Targets Organizations Globally

A group believed to be operating out of Iran has manipulated DNS records belonging to dozens of firms in an apparent cyber espionage campaign, FireEye says.

EDITORS' CHOICE

7 Privacy Mistakes That Keep Security Pros on Their Toes

When it comes to privacy, it's the little things that can lead to big mishaps.

Kudos to the Unsung Rock Stars of Security

It is great to have heroes, but the real security heroes are the men and women who keep the bad guys out while fighting their own organizations at the same time.

The Year in Security 2018