CybersecurityNews.ca Staff
Stories by the CybersecurityNews.ca newsroom: Canadian cybersecurity news, written and checked by our editors. How we work: our editorial standards.
Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
Cybersecurity experts warn that mitigating these flaws is far more complex than simply clicking an update button, as legacy codebases, hidden PHP instances, and enterprise deployment models complicate remediation efforts.
More in CybersecurityNews.ca Staff
-
Canadian Cyber Security Teams Urged to Patch Critical Drupal RCE Vulnerability
Canadian IT infrastructure and web operations teams are working quickly to patch a critical security flaw affecting Drupal, one of the most widely used enterprise content management systems across Canada's public and…
-
Gitea security advisory (AV26-845) - Update 1
Open-source reporting indicates that CVE-2026-20896 is being exploited in the wild. On August 25, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-60004 to their Known Exploited…
-
URGENT ADVISORY: Update PHP NOW
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled…
-
Quebec construction commission to alert 685,000 people after cyberattack data theft
The Commission de la construction du Québec says client and employee data was stolen in an August attack and is offering two years of Equifax protection to workers whose SIN may be affected.
-
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape
Attending Toronto’s premier cybersecurity summit, the DigitalXS team witnessed an undeniable paradigm shift: artificial intelligence has moved from a featured tool to the central battleground of modern digital defense.
-
Hijacked Shopify apps sent shoppers to fake checkout pages
App makers behind Selleasy and Hulk Product Options say intruders injected scripts into store settings that diverted some customers to look-alike payment pages.
-
Pattison Food Group says More Rewards customer data was accessed in breach
Names, contact details and birth dates of More Rewards members were accessed from a company server, Pattison Food Group says. Passwords and payment data were not touched, the company says.