CybersecurityNews.ca
Hackers Hit OpenSSH ‘SSHole’ Flaw Within Hours: What Canadian Alpine Linux Users Need to Do
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
-
Hackers Hit OpenSSH ‘SSHole’ Flaw Within Hours: What Canadian Alpine Linux Users Need to Do
OpenSSH before 10.6p2 on Linux using musl libc without PAM, with pas…
Patch available Nov 8
-
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Linux Kernel
Patch available Nov 5
-
PHP2Shell: Active Exploitation Reports
PHP: 8.2.* to before 8.2.35, 8.3.* to before 8.3.36, 8.4.* to before…
Patch available Nov 5
-
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Alpine Linux: All installations utilizing openssh-server prior to ve…
Patch available Nov 5
Latest critical CVEs
-
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
Exploited, added Nov 9
-
IBM Aspera Faspex Incorrect Authorization Vulnerability
Exploited, added Nov 8
-
SignalWire FreeSwitch Code Injection Vulnerability
Exploited, added Nov 8
-
Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.
Published Nov 10
-
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Published Nov 10
All critical CVEs Data: NVD (not endorsed by the NVD)
Four Bay Street Law Firms Breached in Coordinated Campaign
Millions of Crime Stoppers tips exposed (updated)
The week in Canadian cybersecurity
One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue
Trending
- Breaches & Incidents Loblaw Begins Notifying Customers of February Data Breach
- Breaches & Incidents Four Bay Street Law Firms Breached in Coordinated Campaign
- Careers & Certifications Canada's security job market in 2026: more postings, fewer doors for beginners
- Small Business Security How pirates are bypassing traditional MFA in Canada
- Threats & Vulnerabilities Hackers Hit OpenSSH ‘SSHole’ Flaw Within Hours: What Canadian Alpine Linux Users Need to Do
Building a resilient Small Business Security Strategy
How to run a cyber security tabletop exercise for a small IT team
What to do after a data breach notice: fraud alerts and credit freezes in Canada
Cisco Advisory AV26-1127 Warns of Active SD-WAN and Secure Firewall Zero-Day Exploitation
Canadian Cyber Security Teams Urged to Patch Critical Drupal RCE Vulnerability
URGENT ADVISORY: Update PHP NOW
Coming up
- NKST Vancouver Summit 2026 Nov 10, Vancouver
- Cybersecurity Defense Ecosystem Summit (CDES) Canada 2026 Nov 10, Toronto
- Elite CIO/CISO Toronto 2026 Nov 12, Toronto
Security jobs
Hiring security people in Canada?
Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.
Post a job