Dark Reading Weekly -- January 17, 2019

Cryptomining Continues to Be Top Malware Threat

Tools for illegally mining Coinhive, Monero, and other cryptocurrency dominate list of most prevalent malware in December 2018.

Triton/Trisis Attack Was More Widespread Than Publicly Known

Signs of the attack first showed up two months before it was identified as a cyberattack, but they were mistaken for a pure equipment failure by Schneider Electric, security expert reveals at S4x19.

Hijacking a PLC Using its Own Network Features

Researcher at S4x19 to show how attackers can exploit the built-in advanced connectivity functions in some Rockwell PLCs.

How the US Chooses Which Zero-Day Vulnerabilities to Stockpile

When it comes to acceptable circumstances for government disclosure of zero-days, the new Vulnerabilities Equity Process might be the accountability practice security advocates have been waiting for.

Government Shutdown Brings Certificate Lapse Woes

Among the problems: TLS certificates are expiring and websites are becoming inaccessible.

Are You Listening to Your Kill Chain?

With the right tools and trained staff, any organization should be able to deal with threats before information is compromised.

Advanced Phishing Scenarios You Will Most Likely Encounter This Year

In 2019, there will be no end in sight to email-driven cybercrime such as business email compromise, spearphishing, and ransomware.

Former IBM Security Execs Launch Cloud Data Security Startup

Sonrai Security, the brainchild of two execs from IBM Security and Q1 Labs, debuts with $18.5 million in Series A funding.

Who Takes Responsibility for Cyberattacks in the Cloud?

A new CSA report addresses the issue of breach responsibility as more organizations move ERP application data the cloud.

EDITORS' CHOICE

7 Privacy Mistakes That Keep Security Pros on Their Toes

When it comes to privacy, it's the little things that can lead to big mishaps.

Name that Toon: A Dog's Life

We provide the cartoon. You write the caption. Win a $25 Amazon gift card.

The Year in Security 2018