CybersecurityNews.ca
Massive Microsoft 365 Outage Halts Services Across Canada and North America
Google Patches Critical Android Remote Code Execution Flaws Threatening Canadian Mobile Fleets
Zoom Patches Critical Windows Privilege Escalation Bug Threatening Canadian Hybrid Workforces
-
Critical Apache HTTP/2 Flaw: Immediate Patching Urged for Web Servers
Apache HTTP Server versions 2.4.55 through 2.4.70; standalone mod_h2…
Patch available Nov 12
-
Google Patches Critical Android Remote Code Execution Flaws Threatening Canadian Mobile Fleets
Android versions 14, 15, 16, 16 QPR2, and 17
Patch available Nov 11
-
Zoom Patches Critical Windows Privilege Escalation Bug Threatening Canadian Hybrid Workforces
Zoom Workplace for Windows versions 7.1.0 through 7.1.7 (CVE-2026-10…
Patch available Nov 11
-
Google Issues Emergency Chrome Patch
Chrome versions prior to 157.0.8103.50/.51
Patch available Nov 10
Latest critical CVEs
-
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
Exploited, added Nov 9
-
IBM Aspera Faspex Incorrect Authorization Vulnerability
Exploited, added Nov 8
-
SignalWire FreeSwitch Code Injection Vulnerability
Exploited, added Nov 8
-
XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote attackers to modify the…
Published Nov 12
-
XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary…
Published Nov 12
All critical CVEs Data: NVD (not endorsed by the NVD)
GitLab Issues Urgent Patch
URGENT ADVISORY: Update PHP NOW
The week in Canadian cybersecurity
One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue
Trending
- Cloud Security Massive Microsoft 365 Outage Halts Services Across Canada and North America
- Breaches & Incidents Four Bay Street Law Firms Breached in Coordinated Campaign
- Server Security Critical Apache HTTP/2 Flaw: Immediate Patching Urged for Web Servers
- Careers & Certifications Canada's security job market in 2026: more postings, fewer doors for beginners
- Threats & Vulnerabilities Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Building a resilient Small Business Security Strategy
How to run a cyber security tabletop exercise for a small IT team
What to do after a data breach notice: fraud alerts and credit freezes in Canada
PHP2Shell: Active Exploitation Reports
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Cisco Advisory AV26-1127 Warns of Active SD-WAN and Secure Firewall Zero-Day Exploitation
Lessons from the PHP Zero-Day Outage
Coming up
- Infosec Anti-Summit Toronto 2026 Nov 12, Toronto
- Elite CIO/CISO Toronto 2026 Nov 12, Toronto
- Operation: Defend The North 2026 (Calgary) Nov 13, Calgary
Security jobs
Hiring security people in Canada?
Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.
Post a job