Security News
![Review: Engineering-grade OT security: A manager’s guide](/static/build/img/news/review-engineering-grade-ot-security-a-managers-guide-small.jpg)
Rew Ginter is a widely-read author on industrial security and a trusted advisor for industrial enterprises. He currently works as a VP of industrial security at Waterfall Security Solutions.
![AuthLogParser: Open-source tool for analyzing Linux authentication logs](/static/build/img/news/authlogparser-open-source-tool-for-analyzing-linux-authentication-logs-small.jpg)
AuthLogParser is an open-source tool tailored for digital forensics and incident response, specifically crafted to analyze Linux authentication logs. Log file, extracting crucial details like SSH logins, user creations, event names, IP addresses, among others.
![Top 2024 AppSec predictions](/static/build/img/news/top-2024-appsec-predictions-small.jpg)
In this Help Net Security video, Shahar Man, CEO of Backslash Security, offers his top three AppSec predictions for 2024, uncovering future trends. The post Top 2024 AppSec predictions appeared...
![North Korea's Cyber Heist: DPRK Hackers Stole $600 Million in Cryptocurrency in 2023](/static/build/img/news/north-korea-s-cyber-heist-dprk-hackers-stole-600-million-in-cryptocurrency-in-2023-small.jpg)
Threat actors affiliated with the Democratic People's Republic of Korea (also known as North Korea) have plundered at least $600 million in cryptocurrency in 2023. The DPRK "was responsible for...
![Vim 9.1 released: New features and bug fixes](/static/build/img/news/vim-9-1-released-new-features-and-bug-fixes-small.jpg)
Vim, a highly adaptable text editor, is designed to efficiently create and modify all types of text. It comes included as vi in most UNIX systems and macOS. Renowned for its rock-solid stability, Vim is constantly evolving to improve further, and version 9.1 has recently been released.
![Uncovering the hidden dangers of email-based attacks](/static/build/img/news/uncovering-the-hidden-dangers-of-email-based-attacks-small.jpg)
Email-based attacks have evolved beyond traditional spam and phishing attempts. Email attacks can result in financial losses, reputational damage, and the compromise of sensitive information.
![Mortgage firm loanDepot cyberattack impacts IT systems, payment portal](/static/build/img/news/mortgage-firm-loandepot-cyberattack-impacts-it-systems-payment-portal-small.jpg)
U.S. mortgage lender loanDepot has suffered a cyberattack that caused the company to take IT systems offline, preventing online payments against loans.LoanDepot is one of the largest nonbank retail mortgage lenders in the USA, employing approximately 6,000 people and servicing loans of over $140 billion.
![Stealthy AsyncRAT malware attacks targets US infrastructure for 11 months](/static/build/img/news/stealthy-asyncrat-malware-attacks-targets-us-infrastructure-for-11-months-small.jpg)
A campaign delivering the AsyncRAT malware to select targets has been active for at least the past 11 months, using hundreds of unique loader samples and more than 100 domains. Microsoft security researcher Igal Lytzki spotted the attacks delivered over hijacked email threads last summer but couldn't retrieve the final payload. In September, AT&T's Alien Labs team of researchers noticed "a spike in phishing emails, targeting specific individuals in certain companies" and started to investigate.
![Secure Browser Usage Policy](/static/build/img/news/alt/ransomware-statistics-small.jpg)
A credit card or PayPal account is required for purchase. You will be billed the total shown above and you will receive a receipt via email once your payment is processed.
![KyberSlash attacks put quantum encryption projects at risk](/static/build/img/news/kyberslash-attacks-put-quantum-encryption-projects-at-risk-small.jpg)
Some popular projects using implementations of Kyber are Mullvad VPN and Signal messenger. The KyberSlash flaws are timing-based attacks arising from how Kyber performs certain division operations in the decapsulation process, allowing attackers to analyze the execution time and derive secrets that could compromise the encryption.