CybersecurityNews.ca

Developing Threats & Vulnerabilities

Zoom Patches Critical Windows Privilege Escalation Bug Threatening Canadian Hybrid Workforces

Latest
Developing Threats & Vulnerabilities

Google Issues Emergency Chrome Patch

Threats & Vulnerabilities

OpenBSD Issues Urgent Advisory Targeting OpenSSH Vulnerabilities

Patch now

Flaws under attack or rated critical in the last 30 days.

All threats

Latest critical CVEs

  1. 9.8 CVE-2026-116606 (cve.org, opens in a new tab) Exploited

    Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Exploited, added Nov 9

  2. 9.8 CVE-2026-123218 (cve.org, opens in a new tab) Exploited

    IBM Aspera Faspex Incorrect Authorization Vulnerability

    Exploited, added Nov 8

  3. 9.8 CVE-2026-116779 (cve.org, opens in a new tab) Exploited

    SignalWire FreeSwitch Code Injection Vulnerability

    Exploited, added Nov 8

  4. 9.8 CVE-2026-76954 (cve.org, opens in a new tab)

    An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager…

    Published Nov 11

  5. 9.8 CVE-2026-126812 (cve.org, opens in a new tab)

    blueprintUE Self-Hosted Edition before 4.3.7 contains an insecure default configuration in its Docker Compose examples that sets…

    Published Nov 11

All critical CVEs Data: NVD (not endorsed by the NVD)

Top stories

The week in Canadian cybersecurity

One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue

Practical guides
Threats & Vulnerabilities
Featured

Coming up

All events

Security jobs

Hiring security people in Canada?

Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.

Post a job