1 . AKA Triton, ICS malware that shut down Saudi petrochemical plant (6)
3 . Amazon's personal assistant (or surveillance) device (5)
[?] 5 . Mountain Lion is its most famous OS (3)
7 . white, black, or gray item (3)
8 . old web attack still in use (4)
[?]11. software security, for short (6)
[?]12. Fancy, Cozy, or Energetic (4)
13. what attackers do with SIM cards? (4)
15. log in (12)
18. ransomware known for long dwell time, human operators, that took down Tribune Publishing (4)
[?]20. Jackson Higgins or Sheridan (5)
21. the R in RSA (6)
23. ransomware strain or a nice place to be (8)
25. vuln being exploited in-the-wild (7)
27. home base for security first responders (3)
28. Def or Shmoo (3)
29. type of biometric scanner (11)
[?]31. something you have too many of (6)
[?]34. embedded systems security researcher Ruben (10)
36. European privacy law (4)
37. way to head off privacy snafus (3)
[?]38. microprocessor vulnerability (7)
39. PoisonIvy, Dark Comet, or Blackshades (3)
40. revealer of vulns on Patch Tuesday (9)
[?]