CybersecurityNews.ca
-
PostgreSQL Emergency Patch Wave Fixes 52 Flaws
PostgreSQL versions before 18.7, 17.12, 16.16, 15.20, and 14.25
Patch available Nov 14
-
Global Microsoft 365 Outage Exposes Critical Cloud Dependencies Across Canadian Hospitals, Transit, and Government
No patch yet Nov 13
-
Critical Apache HTTP/2 Flaw: Immediate Patching Urged for Web Servers
Apache HTTP Server versions 2.4.55 through 2.4.70; standalone mod_h2…
Patch available Nov 12
-
Google Patches Critical Android Remote Code Execution Flaws Threatening Canadian Mobile Fleets
Android versions 14, 15, 16, 16 QPR2, and 17
Patch available Nov 11
Latest critical CVEs
-
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
Exploited, added Nov 9
-
IBM Aspera Faspex Incorrect Authorization Vulnerability
Exploited, added Nov 8
-
SignalWire FreeSwitch Code Injection Vulnerability
Exploited, added Nov 8
-
NginxPulse 1.5.0 before 1.6.26 contains an unauthenticated sql injection vulnerability that allows remote attackers to append SQL via…
Published Nov 13
-
Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates/preview/ endpoint because WeasyPrint…
Published Nov 13
All critical CVEs Data: NVD (not endorsed by the NVD)
GitLab Issues Urgent Patch
The week in Canadian cybersecurity
One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue
Trending
- Cloud Security Massive Microsoft 365 Outage Halts Services Across Canada and North America
- Breaches & Incidents Vulnerability Exposed: York University Data Breach Compromises Personal Records Dating Back to 2007
- Server Security Critical Apache HTTP/2 Flaw: Immediate Patching Urged for Web Servers
- Mobile Security Google Patches Critical Android Remote Code Execution Flaws Threatening Canadian Mobile Fleets
- Breaches & Incidents Third-Party Software Breach at Williams Food Equipment
Building a resilient Small Business Security Strategy
How to run a cyber security tabletop exercise for a small IT team
What to do after a data breach notice: fraud alerts and credit freezes in Canada
Google Issues Emergency Chrome Patch
Hackers Hit OpenSSH ‘SSHole’ Flaw Within Hours: What Canadian Alpine Linux Users Need to Do
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Lessons from the PHP Zero-Day Outage
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Coming up
- Cybersecurity Summit Vancouver 2026 Nov 19, Vancouver
- CIOMeet Montreal 2026 Nov 19, Montreal
- BSides Ottawa 2026 Nov 19, Ottawa
Security jobs
Hiring security people in Canada?
Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.
Post a job