CybersecurityNews.ca
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
-
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Linux Kernel
Patch available Nov 5
-
PHP2Shell: Active Exploitation Reports
PHP: 8.2.* to before 8.2.35, 8.3.* to before 8.3.36, 8.4.* to before…
Patch available Nov 5
-
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Alpine Linux: All installations utilizing openssh-server prior to ve…
Patch available Nov 5
-
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Debian APT: before 1.2.36, 1.4.0 to before 1.4.12, 1.6.0 to before 1…
No patch yet Nov 5
Latest critical CVEs
-
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Exploited, added Oct 28 · Our story
-
Google Brotli Unchecked Return Value Vulnerability
Exploited, added Oct 26 · Our story
-
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Exploited, added Oct 26
-
OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms…
Published Nov 8
-
OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-inventory lookup (DrugSalesService::sellDrug) that…
Published Nov 8
All critical CVEs Data: NVD (not endorsed by the NVD)
Four Bay Street Law Firms Breached in Coordinated Campaign
Millions of Crime Stoppers tips exposed (updated)
The week in Canadian cybersecurity
One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue
Trending
- Breaches & Incidents Four Bay Street Law Firms Breached in Coordinated Campaign
- Breaches & Incidents Loblaw Begins Notifying Customers of February Data Breach
- Breaches & Incidents Saskatoon Tribal Council says health and child welfare records may be exposed
- Threats & Vulnerabilities Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
- Threats & Vulnerabilities Broccoli2Shell: Critical Brotli Flaw Now Exploited in the Wild
Building a resilient Small Business Security Strategy
How to run a cyber security tabletop exercise for a small IT team
What to do after a data breach notice: fraud alerts and credit freezes in Canada
Cisco Advisory AV26-1127 Warns of Active SD-WAN and Secure Firewall Zero-Day Exploitation
Canadian Cyber Security Teams Urged to Patch Critical Drupal RCE Vulnerability
URGENT ADVISORY: Update PHP NOW
Coming up
- NKST Vancouver Summit 2026 Nov 10, Vancouver
- Cybersecurity Defense Ecosystem Summit (CDES) Canada 2026 Nov 10, Toronto
- Infosec Anti-Summit Toronto 2026 Nov 12, Toronto
Security jobs
Hiring security people in Canada?
Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.
Post a job