CybersecurityNews.ca
Hackers Hit OpenSSH ‘SSHole’ Flaw Within Hours: What Canadian Alpine Linux Users Need to Do
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
-
Google Issues Emergency Chrome Patch
Chrome versions prior to 157.0.8103.50/.51
Patch available Nov 10
-
Hackers Hit OpenSSH ‘SSHole’ Flaw Within Hours: What Canadian Alpine Linux Users Need to Do
OpenSSH before 10.6p2 on Linux using musl libc without PAM, with pas…
Patch available Nov 8
-
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Linux Kernel
Patch available Nov 5
-
PHP2Shell: Active Exploitation Reports
PHP: 8.2.* to before 8.2.35, 8.3.* to before 8.3.36, 8.4.* to before…
Patch available Nov 5
Latest critical CVEs
-
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
Exploited, added Nov 9
-
IBM Aspera Faspex Incorrect Authorization Vulnerability
Exploited, added Nov 8
-
SignalWire FreeSwitch Code Injection Vulnerability
Exploited, added Nov 8
-
The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18.
Published Nov 10
-
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that…
Published Nov 10
All critical CVEs Data: NVD (not endorsed by the NVD)
Four Bay Street Law Firms Breached in Coordinated Campaign
Millions of Crime Stoppers tips exposed (updated)
The week in Canadian cybersecurity
One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue
Trending
- Breaches & Incidents Loblaw Begins Notifying Customers of February Data Breach
- Breaches & Incidents Four Bay Street Law Firms Breached in Coordinated Campaign
- Careers & Certifications Canada's security job market in 2026: more postings, fewer doors for beginners
- Threats & Vulnerabilities Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
- Small Business Security How pirates are bypassing traditional MFA in Canada
Building a resilient Small Business Security Strategy
How to run a cyber security tabletop exercise for a small IT team
What to do after a data breach notice: fraud alerts and credit freezes in Canada
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Cisco Advisory AV26-1127 Warns of Active SD-WAN and Secure Firewall Zero-Day Exploitation
URGENT ADVISORY: Update PHP NOW
Canadian Cyber Security Teams Urged to Patch Critical Drupal RCE Vulnerability
Coming up
- NKST Vancouver Summit 2026 Nov 10, Vancouver
- Cybersecurity Defense Ecosystem Summit (CDES) Canada 2026 Nov 10, Toronto
- Infosec Anti-Summit Toronto 2026 Nov 12, Toronto
Security jobs
Hiring security people in Canada?
Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.
Post a job