Dark Reading Daily -- April 05, 2019

Third Parties in Spotlight as More Facebook Data Leaks

Two third-party services left Facebook user data exposed online -- in one case, 540 million records of user comments -- highlighting the ease with which third-party developers can access data and the risk of lax security.

New, Improved BEC Campaigns Target HR and Finance

Spearphishing campaigns from new and established business email compromise (BEC) gangs are stealing from companies using multiple tactics.

Threat Group Employs Amazon-Style Fulfillment Model to Distribute Malware

The operators of the Necurs botnet are using a collection of US-based servers to send out banking Trojans, ransomware, and other malware on behalf of other cybercriminals.

How iOS App Permissions Open Holes for Hackers

The permissions iOS apps request from users can turn the devices into spy tools and provide a toehold into the enterprise network, according to new research.

True Cybersecurity Means a Proactive Response

Successful, secure organizations must take an aggressive, pre-emptive posture if they want true data security.

Python-Based Bot Scanner Gorging on Recon Intel

Discovered by AT&T AlienLabs, new malware Xwo seeking default creds and misconfigurations in MySQL and MongoDB, among other services

Patched Apache Vulnerability Could Still Cause Problems

More than 2 million Apache HTTP servers remain at risk for a critical privilege escalation vulnerability.

10 Movies All Security Pros Should Watch

Don't expect to read about any of the classics, like 'War Games' or 'Sneakers,' which have appeared on so many lists before. Rather, we've broadened our horizons with this great mix of documentaries, hacker movies, and flicks based on short stories.

FireEye Creates Free Attack Toolset for Windows

The security services company releases a distribution of 140 programs for penetration testers who need to launch attacks and tools from an instance of Windows.

Quantum Computing and Code-Breaking

Prepare today for the quantum threats of tomorrow.

EDITORS' CHOICE

6 Essential Skills Cybersecurity Pros Need to Develop in 2019

In a time of disruption in the security and tech worlds, cybersecurity professionals can't afford to become complacent - even in the face of a skills shortage.

3 Lessons Security Leaders Can Learn from Theranos

Theranos flamed out in spectacular fashion, but you can still learn from the company's "worst practices."

5 Emerging Cyber Threats to Watch for in 2019