Linux before several 5.x–7.x releases affected by CVE-2026-98432
Canada’s Cyber Centre urges administrators to review the linked material and apply updates when available.
44
Country
Canada
- Mentions · 7d36
- Mentions · 30d204
- All mentions433
- First seenAug 13, 2026
- Last mentioned2h ago
Timeline
433 articles · newest firstCloudflare mitigated 18.2 million DDoS attacks in Q3 2026
Attacks rose 208% year over year, but 98% stayed under 1 Gbps and most ended within ten minutes.
58
Sault police say Crime Stoppers breach scope is unknown
Two local police services paused Crime Stoppers ties, and the chapter stopped taking tips meant for both.
48
ADEX: 52% of 2026 ad-fraud schemes use AI as cloaking share falls
Across 1.2 million campaigns, iOS scripts and messenger phishing rose while cloaking’s share of suspensions fell to about 45%.
44
Meta partners with INCA on AI glasses for Canadians with vision loss
Funding covers community listening, peer demos, product feedback, and training, plus donated glasses for job seekers.
28
Meta partners with CNIB to bring AI glasses to more Canadians
CNIB will run peer training and feed community feedback to Meta, which is also donating glasses for job seekers.
28
Cloudflare blocked over 8,200 network DDoS attacks an hour in Q3
Most attacks lasted under ten minutes and stayed below 1 Gbps, while terabit-scale floods fell nearly 69% from the prior quarter.
58
Microsoft offers voluntary buyouts to about 60,000 employees
Staff in the US, UK, Canada and India have until December to accept terms close to ordinary severance.
42
n8n before 2.44.1 and 2.43.5 can expose other projects' data tables
Canada's Cyber Centre says a crafted workflow ID can reach data tables in other n8n projects and urges updates.
40
Cloudflare: short DDoS bursts rose 208% in Q3 2026
Attacks over 1 Tbps fell to 251 from 805 after takedowns of four large IoT botnets.
46
US seizes Virtualine bulletproof hosting domain used by cybercriminals
TRM Labs says the provider took nearly one-fifth of tracked illicit bulletproof-hosting inflows in 2026, and the seizure may not kill the infrastructure.
62
Canada flags Juniper Session Smart flaws fixed in recent releases
Session Smart Conductor and Router builds before 7.0.5, 7.1.7 and 7.2.3 are listed; no CVE ids or exploitation status are given.
44
Discord will let search engines index public server messages
About 63,000 Discoverable Servers get public web pages from November 16; new-message indexing starts mid-December.
52
Canadian help-desk vishing campaign bypasses MFA in real time
Callers send staff to branded relay pages, then register MFA methods and steal Microsoft 365 data before extortion.
72
Chrome desktop before 156.0.8078.73 affected, Google advisory says
Canadian advisory AV26-1095, dated October 28, tells users to install the Stable Channel updates.
38
WatchGuard Fireware OS and SSL VPN client affected by vulnerabilities
Canada’s October 28 notice lists Fireware OS and Mobile VPN with SSL Client builds before 2026.4 and 12.0, without naming CVEs.
38
TeamViewer clients before 15.83 affected by vulnerabilities, Canada warns
Windows, Linux and macOS clients and the Android app before 15.8.3 are listed, with no CVEs named.
40
FBI seizes Virtualine bulletproof hosting domain
Prosecutors say the host ignored abuse notices, offered to move infrastructure after law-enforcement requests, and took unhosted Bitcoin payments.
62
CISA lists critical Google Brotli flaw CVE-2026-111497 as exploited
Out-of-bounds writes in the decoder can yield code execution; fixed builds are 1.0.10, 1.1.1, and 1.2.1.
86
Nefilim and Hive affiliate Artem Stryzhak sentenced to nearly six years
The State Department is offering up to $11 million for co-conspirator Volodymyr Tymoshchuk; Hive hit about 1,500 victims worldwide.
62
FBI seizes Virtualine bulletproof hosting domain
A court authorized seizure of virtualine.net; prosecutors allege it kept serving a forum after child-abuse complaints and have not charged operators.
58
Nefilim and Hive ransomware affiliate sentenced to 70 months
Artem Stryzhak pleaded guilty after attacks on hospitals and large firms; an alleged accomplice remains at large.
58
Canadian privacy commissioner investigates Crime Stoppers tip platform breach
The probe targets Navigate360, which runs the tip platform, and will test its PIPEDA safeguards; incident details remain undisclosed.
52
Nefilim and Hive affiliate sentenced to 70 months
Artem Stryzhak pleaded guilty in December 2025; the FBI says the groups caused more than $100 million in losses.
58
Ontario Crime Stoppers suspend Navigate360 tip lines after leak
A hacktivist obtained 8.3 million tips; Nevada says about 10 percent of SafeVoice tips with PII were exposed.
72
Nefilim and Hive affiliate Artem Stryzhak sentenced to 70 months
He pleaded guilty after extradition from Spain for attacks from 2018 through 2021; prosecutors still seek co-conspirator Volodymyr Tymoshchuk.
46
Hitachi HiRDB, JP1 and TRO600 firmware affected by vulnerabilities
The October 27 bulletin lists many HiRDB and JP1 builds plus TRO600 firmware before 9.2.2.1, with no CVEs or exploitation status.
34
Johnson Controls Kantech Entrapass before 9.20 has two flaws
Canada's Cyber Centre says Johnson Controls confirmed two vulnerabilities and urges administrators to apply updates when available.
48
SkyW4lker phishing kit abuses Microsoft 365 device-code login
ANY.RUN linked 618 analyses from June through October 21, 2026, with monthly cases rising from 20 to 200.
74
Moxa MRC Client and OnCell LTE devices hit by three flaws
Canada's Cyber Centre says MRC Client through v4.2.0 and all OnCell G3150A-LTE firmware are affected, with fixes not named.
46
ArcGIS Server before 12.1 affected by vulnerabilities, Cyber Centre says
The October 27 notice tells administrators to review Esri’s October 2026 bulletin and apply updates when available.
28
Caseway CEO says expansion is shifting to Taiwan and Europe
The founder says a September 8 US directive halted new American sales while two existing US customers remain.
28
HashiCorp Consul auth bypass in service mesh leaf certificate API
Canada’s Cyber Centre urges admins to apply HashiCorp updates for Consul and Consul Enterprise as they become available.
52
Microsoft offers voluntary buyouts to up to 60,000 employees
Staff in the US, UK, Canada and India can take the offer, including many AI and Xbox teams but not security.
40
Craft CMS and Commerce-mollie need updates, Cyber Centre says
CMS before 4.18.9 and 5.11.2, and Commerce-mollie before 4.4.3, are affected as of October 23.
36
Platform and payment rules squeeze indie webcomic artists
The piece profiles Hazel and Bell, whose 2025 romance Always Raining Here is sold in Canadian bookstores.
4
Researcher warns Canada’s Lawful Access Act would weaken encryption
Kate Robertson told a Canadian Internet Society discussion that systems should be repaired rather than given new access holes.
28
Roundup: Tor exit hijacks, Heartbreaker ransomware, and platform breaches
A researcher says 333 Tor exits, about a tenth of them, captured SSH passwords and tried to plant Ebury.
58
k0t exploits edge firewalls and VPNs, exposing over 70,000 credentials
Group-IB and NyxLab say k0t used FortiWeb and PAN-OS flaws, then remote-access tools and cloud exfiltration, from February to June 2026.
78
MongoDB C# Driver before 3.13.0 has DoS and auth-bypass flaws
Canada's Cyber Centre urges administrators to apply MongoDB updates for the C# Driver as they become available.
58
Related CVEs
by mentions- CVE-2026-488422%8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash…
- CVE-2015-330699%10.0Arbitrary file read/write via ProFTPD 1.3.5 mod_copy
- CVE-2021-319930%9.8Path Traversal RCE in ONLYOFFICE Document Server
- CVE-2026-8207861%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157884%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2016-308197%8.1Command injection RCE in Apache Struts Dynamic Method Invocation
- CVE-2015-5477100%7.5Remote denial of service in ISC BIND via TKEY queries
- CVE-2023-228944%4.9Sensitive-data leak in Strapi admin query filters (through 4.5.5)
- CVE-2025-4911399%8.8Authenticated PHP Object Deserialization RCE in Roundcube Webmail
- CVE-2025-6846127%6.1Cross-Site Scripting via SVG animate Tag in Roundcube Webmail
Appears with
- Canadian Centre for Cyber Securityorganization · 216
- FBIorganization · 46
- Googlevendor · 34
- Microsoftvendor · 29
- CISAorganization · 28
- Canadian Centre for Cyber Securityvendor · 20
- ShinyHuntersthreat actor · 19
- OpenAIorganization · 17
- Metavendor · 16
- OpenAIvendor · 15
- Chromeproduct · 15
- Microsoftorganization · 14
- FBIvictim · 13
- Metaorganization · 11
- Googleorganization · 11
- Anthropicvendor · 10
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.