CybersecurityNews.ca
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
OpenBSD Issues Urgent Advisory Targeting OpenSSH Vulnerabilities
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
-
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Linux Kernel
Patch available Nov 5
-
PHP2Shell: Active Exploitation Reports
PHP: 8.2.* to before 8.2.35, 8.3.* to before 8.3.36, 8.4.* to before…
Patch available Nov 5
-
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Alpine Linux: All installations utilizing openssh-server prior to ve…
Patch available Nov 5
-
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Debian APT: before 1.2.36, 1.4.0 to before 1.4.12, 1.6.0 to before 1…
No patch yet Nov 5
Latest critical CVEs
-
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Exploited, added Oct 28 · Our story
-
Google Brotli Unchecked Return Value Vulnerability
Exploited, added Oct 26 · Our story
-
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Exploited, added Oct 26
-
A flaw was found in the Keycloak server's client management component.
Published Nov 7
-
A vulnerability was determined in Tenda AC19 16.03.10.07.
Published Nov 7
All critical CVEs Data: NVD (not endorsed by the NVD)
Four Bay Street Law Firms Breached in Coordinated Campaign
Millions of Crime Stoppers tips exposed (updated)
Trending
- Breaches & Incidents Four Bay Street Law Firms Breached in Coordinated Campaign
- Breaches & Incidents Loblaw Begins Notifying Customers of February Data Breach
- Threats & Vulnerabilities Cisco Advisory AV26-1127 Warns of Active SD-WAN and Secure Firewall Zero-Day Exploitation
- Careers & Certifications How to start a career in cyber security in Canada
- Threats & Vulnerabilities URGENT ADVISORY: Update PHP NOW
The week in Canadian cybersecurity
One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue
Building a resilient Small Business Security Strategy
How to run a cyber security tabletop exercise for a small IT team
What to do after a data breach notice: fraud alerts and credit freezes in Canada
Cisco Advisory AV26-1127 Warns of Active SD-WAN and Secure Firewall Zero-Day Exploitation
URGENT ADVISORY: Update PHP NOW
Canadian Cyber Security Teams Urged to Patch Critical Drupal RCE Vulnerability
Coming up
- BSides Ottawa 2026 Nov 19, Ottawa
- INCYBER Forum Canada 2026 Dec 1, Ottawa
- Toronto CISO Executive Summit (December 2026) Dec 2, Toronto
Security jobs
Hiring security people in Canada?
Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.
Post a job