CybersecurityNews.ca
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
OpenBSD Issues Urgent Advisory Targeting OpenSSH Vulnerabilities
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
-
Critical Linux Kernel TCP Vulnerability Exposes Servers to Remote Code Execution
Linux Kernel
Patch available Nov 5
-
PHP2Shell: Active Exploitation Reports
PHP: 8.2.* to before 8.2.35, 8.3.* to before 8.3.36, 8.4.* to before…
Patch available Nov 5
-
Critical OpenSSH Authentication Bypass Exposes Lightweight Linux Infrastructure
Alpine Linux: All installations utilizing openssh-server prior to ve…
Patch available Nov 5
-
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
Debian APT: before 1.2.36, 1.4.0 to before 1.4.12, 1.6.0 to before 1…
No patch yet Nov 5
Latest critical CVEs
-
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Exploited, added Oct 28 · Our story
-
Google Brotli Unchecked Return Value Vulnerability
Exploited, added Oct 26 · Our story
-
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Exploited, added Oct 26
-
Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search…
Published Nov 6
-
The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type…
Published Nov 6
All critical CVEs Data: NVD (not endorsed by the NVD)
Third-Party Software Breach at Williams Food Equipment
British businesses caught in Europe-wide supermarket fridge attacks
Trending
- Breaches & Incidents Four Bay Street Law Firms Breached in Coordinated Campaign
- Breaches & Incidents Loblaw Begins Notifying Customers of February Data Breach
- Threats & Vulnerabilities Cisco Advisory AV26-1127 Warns of Active SD-WAN and Secure Firewall Zero-Day Exploitation
- Breaches & Incidents British businesses caught in Europe-wide supermarket fridge attacks
- Careers & Certifications How to start a career in cyber security in Canada
The week in Canadian cybersecurity
One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue
Building a resilient Small Business Security Strategy
How to run a cyber security tabletop exercise for a small IT team
What to do after a data breach notice: fraud alerts and credit freezes in Canada
Cisco Advisory AV26-1127 Warns of Active SD-WAN and Secure Firewall Zero-Day Exploitation
URGENT ADVISORY: Update PHP NOW
Canadian Cyber Security Teams Urged to Patch Critical Drupal RCE Vulnerability
Coming up
- BSides Ottawa 2026 Nov 19, Ottawa
- INCYBER Forum Canada 2026 Dec 1, Ottawa
- Toronto CISO Executive Summit (December 2026) Dec 2, Toronto
Security jobs
Hiring security people in Canada?
Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.
Post a job