Dark Reading Daily -- January 17, 2019

Triton/Trisis Attack Was More Widespread Than Publicly Known

Signs of the attack first showed up two months before it was identified as a cyberattack, but they were mistaken for a pure equipment failure by Schneider Electric, security expert reveals at S4x19.

BEC Groups Ramp Up Payroll Diversion Attacks

Criminals are increasingly trying to defraud businesses by diverting payrolls of CEOs, other senior executives, Agari says.

Fortnite Players Compromised Via Epic Games Vulnerability

Bugs in Epic Games' platform could let intruders take over players' accounts, view personal data, and/or buy in-game currency.

Are You Listening to Your Kill Chain?

With the right tools and trained staff, any organization should be able to deal with threats before information is compromised.

Malware Built to Hack Building Automation Systems

Researchers dig into vulnerabilities in popular building automation systems, devices.

Oklahoma Data Leak Compromises Years of FBI Data

The Oklahoma Securities Commission accidentally leaked 3 TB of information, including data on years of FBI investigations.

Advanced Phishing Scenarios You Will Most Likely Encounter This Year

In 2019, there will be no end in sight to email-driven cybercrime such as business email compromise, spearphishing, and ransomware.

Former IBM Security Execs Launch Cloud Data Security Startup

Sonrai Security, the brainchild of two execs from IBM Security and Q1 Labs, debuts with $18.5 million in Series A funding.

Who Takes Responsibility for Cyberattacks in the Cloud?

A new CSA report addresses the issue of breach responsibility as more organizations move ERP application data the cloud.

EDITORS' CHOICE

7 Privacy Mistakes That Keep Security Pros on Their Toes

When it comes to privacy, it's the little things that can lead to big mishaps.

How the US Chooses Which Zero-Day Vulnerabilities to Stockpile

When it comes to acceptable circumstances for government disclosure of zero-days, the new Vulnerabilities Equity Process might be the accountability practice security advocates have been waiting for.

The Year in Security 2018