Dark Reading Weekly -- December 19, 2019

Ransomware 'Crisis' in US Schools: More Than 1,000 Hit So Far in 2019

Meanwhile, the mayor of the city of New Orleans says no ransom money demands were made as her city struggles to recover from a major ransomware attack launched last week.

Higher Degree, Higher Salary? Not for Some Security Pros

Turns out, skill beats experience and an academic degree doesn't guarantee higher compensation for five security positions.

Gallium: The Newest Threat Group on Microsoft's Radar

Hacking group has been targeting telecommunication providers.

5 Security Resolutions to Prevent a Ransomware Attack in 2020

Proactively consider tools to detect anomalous behavior, automatically remediate, and segment threats from moving across the network.

Cyberattacks on Retailers Could Increase 20% this Holiday Season

Commodity malware and ransomware continue to be the biggest threats, says VMWare Carbon Black.

Mobile Devices Account for 41% of DDoS Attack Traffic

DNS amplification attacks continue to dominate distributed denial-of-service (DDoS) attacks, while mobile devices make up a larger share of traffic.

Get Organized Like a Villain

What cybercrime group FIN7 can teach us about using agile frameworks.

Visa Warns of Targeted PoS Attacks on Gas Station Merchants

At least two North American chains have been hit in sophisticated new campaigns for stealing payment card data.

Why Enterprises Buy Cybersecurity 'Ferraris'

You wouldn't purchase an expensive sports car if you couldn't use it properly. So, why make a pricey security investment before knowing it fits into your ecosystem?

SQL Server 2019 Tool Tells Attackers Which Data Is Sensitive

The design of SQL Data Discovery & Classification could let attackers pinpoint sensitive information while flying under organizations' radars.

EDITOR'S CHOICE

Lessons Learned from 7 Big Breaches in 2019

Capital One, Macy's, FEMA, and others: key takeaways from the year's most notable breaches.

Talking to the Board about Cybersecurity

A chief financial officer shares five winning strategies for an effective board-level conversation about right-sizing risk.

NEW FROM THE EDGE

5 Pieces of GDPR Advice for Teams Without Privacy Compliance Staff

Are you an army of one tasked with compliance and data privacy? Try these tips to get you and your organization in alignment with regulators.

How to Manage API Security

Protecting the places where application services meet is critical for protecting enterprise IT. Here's what security pros need to know about "the invisible glue" that keeps apps talking to each other.

The Year in Security: 2019