Sorry, you need to enable JavaScript to visit this website.

CybersecurityNews.ca

Breaches & Incidents

Four Bay Street Law Firms Breached in Coordinated Campaign

Latest
Developing Threats & Vulnerabilities

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

Small Business Security

Building a resilient Small Business Security Strategy

Breaches & Incidents

Burnaby School District Data Leak

Developing Breaches & Incidents

Third-Party Software Breach at Williams Food Equipment

Patch now

Flaws under attack or rated critical in the last 30 days.

All threats

Latest critical CVEs

  1. 10.0 CVE-2026-97229 (cve.org, opens in a new tab) Exploited

    GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

    Exploited, added Oct 28 · Our story

  2. 9.8 CVE-2026-111497 (cve.org, opens in a new tab) Exploited

    Google Brotli Unchecked Return Value Vulnerability

    Exploited, added Oct 26 · Our story

  3. 9.3 CVE-2026-48356 (cve.org, opens in a new tab) Exploited

    Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

    Exploited, added Oct 26

  4. 9.1 CVE-2026-117691 (cve.org, opens in a new tab)

    A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak.

    Published Nov 5

  5. 9.1 CVE-2026-122321 (cve.org, opens in a new tab)

    Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by…

    Published Nov 4

All critical CVEs Data: NVD (not endorsed by the NVD)

Top stories

The week in Canadian cybersecurity

One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue

Practical guides
Threats & Vulnerabilities
Threats & Vulnerabilities

Broccoli2Shell: Critical Brotli Flaw Now Exploited in the Wild

Analysis Threats & Vulnerabilities

Lessons from the PHP Zero-Day Outage

Threats & Vulnerabilities

Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

Threats & Vulnerabilities

PHP shares mitigation for new RCE vulnerability with no patch

More in this topic

Advertisement

Reach the People Who Make Things

Featured

Coming up

All events

Security jobs

Hiring security people in Canada?

Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.

Post a job