Takeaways Up Front 1. Attackers hid wallet-draining code in a third-party page-speed script, taking about $2.7 million from ...