CybersecurityNews.ca

Developing Cloud Security

Massive Microsoft 365 Outage Halts Services Across Canada and North America

Latest
Threats & Vulnerabilities

URGENT ADVISORY: Update PHP NOW

Threats & Vulnerabilities

GitLab Issues Urgent Patch

Developing Server Security

Critical Apache HTTP/2 Flaw: Immediate Patching Urged for Web Servers

Patch now

Flaws under attack or rated critical in the last 30 days.

All threats

Latest critical CVEs

  1. 9.8 CVE-2026-116606 (cve.org, opens in a new tab) Exploited

    Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Exploited, added Nov 9

  2. 9.8 CVE-2026-123218 (cve.org, opens in a new tab) Exploited

    IBM Aspera Faspex Incorrect Authorization Vulnerability

    Exploited, added Nov 8

  3. 9.8 CVE-2026-116779 (cve.org, opens in a new tab) Exploited

    SignalWire FreeSwitch Code Injection Vulnerability

    Exploited, added Nov 8

  4. 9.8 CVE-2026-129171 (cve.org, opens in a new tab)

    NginxPulse 1.5.0 before 1.6.26 contains an unauthenticated sql injection vulnerability that allows remote attackers to append SQL via…

    Published Nov 13

  5. 9.1 CVE-2026-129165 (cve.org, opens in a new tab)

    Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates/preview/ endpoint because WeasyPrint…

    Published Nov 13

All critical CVEs Data: NVD (not endorsed by the NVD)

Top stories

The week in Canadian cybersecurity

One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue

Practical guides
Threats & Vulnerabilities
Featured

Coming up

All events

Security jobs

Hiring security people in Canada?

Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.

Post a job