ZeroHour

Search: “canada”

83 stories

Your phone or computer may soon ask how old you are

California's Digital Age Assurance Act forces Windows, macOS, iOS, and Android to collect age brackets from January 2027, with open-source exemptions pending.

California's Digital Age Assurance Act, signed in October 2025, requires major operating systems to collect user age brackets (under 13, 13-15, 16-17, 18+) and share non-identifying age signals with app developers starting January 1, 2027, with existing setups complying by July 1, 2027. AB1856, passed in late August 2026, would exempt open-source operating systems under GPL, MIT, BSD, and Apache licenses and awaits the governor's signature. Colorado, Illinois, and New York have similar age assurance measures, and the EFF has criticized the law for privacy and censorship concerns.

Malwarebytes Labs · 14d agoPolicy & legal

Cybersecurity jobs available right now: July 21, 2026

Help Net Security lists current cybersecurity openings at Stellantis, Lloyds Banking Group, Los Alamos National Laboratory, and other organizations across the US, UK, and Europe.

Help Net Security's July 21, 2026 roundup of cybersecurity job listings includes Application Security Analyst at Stellantis, CRISO at CRISO Trustyfy in the UAE, Head of Cyber Defence Centre at Lloyds Banking Group, and insider threat, compliance, and engineer roles across the US. Many listed positions are no longer accepting applications. The listing also promotes a guide on succeeding at cybersecurity job interviews.

Help Net Security · 14d agoIndustry

Your AI chats could be used in court

AI chatbot conversations from ChatGPT and Claude are increasingly obtained by prosecutors and litigants, with OpenAI disclosures quadrupling in 2025.

A Washington Post report found chatbot logs cited in 12 court cases over the past two years, and OpenAI disclosed the content of more than 80 user accounts in the second half of 2025, more than four times the figure for the second half of 2024. In The New York Times' copyright lawsuit against OpenAI, a judge ordered the company to preserve chat logs, including ones users had asked to delete, despite GDPR and California privacy commitments. Chatbot conversations lack attorney-client or medical privilege, and OpenAI's policy allows reviewers to refer conversations to law enforcement when there is an imminent, credible risk of harm.

Malwarebytes Labs · 15d agoAI policy

The Collective Cyber Defense letter wrote your next vendor questionnaire

Op-ed argues the 200-company Collective Cyber Defense letter's three endorsed metrics should become standard vendor procurement questions.

More than 200 companies including Microsoft, Google, AWS, CrowdStrike, Anthropic and Okta signed an August 27 open letter calling for faster cyber defenses against AI-enabled attacks. The letter endorses three measurable metrics: coverage, containment speed, and verified remediation. The author turns those into five concrete procurement questions buyers should pose at vendor renewals, while noting the letter contains no deadlines, dollar figures or measurable targets.

CyberScoop · 16d agoIndustry

Cybersecurity jobs available right now: June 24, 2026

Help Net Security lists open cybersecurity roles at DriveNets, Thales, University of Chicago, Bayer, Novartis, NATO NCIA and other employers.

This is a recurring roundup of open cybersecurity job postings across multiple countries, including application security, cloud security architecture, red teaming, PKI and cryptography, and AI compliance governance roles. Listings span Israel, Canada, the USA, India, Ireland, the UK, Belgium and Australia. All positions shown are marked as no longer accepting applications.

Help Net Security · 17d agoIndustry

100-plus companies call for ‘global surge’ in AI

OpenAI, Anthropic, Google, Microsoft, AWS and 100+ organizations sign open letter urging a 'global surge' in AI-powered cyber defenses.

More than 100 companies including OpenAI, Anthropic, Google, Microsoft, AWS, Capital One, Mastercard, CrowdStrike, Palo Alto Networks and Proofpoint signed an open letter published Thursday calling for accelerated cybersecurity defenses as AI capabilities advance. The letter argues a shrinking 'defenders' window' exists to fix accumulated weaknesses such as excessive permissions, misconfigurations and unpatched legacy systems before AI-enabled attacks grow more widespread. It asks governments to coordinate cross-border defense and fund protection of critical infrastructure, and asks frontier AI labs to provide model access, funding and support. It references a June US executive order creating the Gold Eagle AI threat-sharing clearinghouse.

CyberScoop · 19d agoIndustry

Cybersecurity jobs available right now: May 19, 2026

Help Net Security's roundup lists cybersecurity openings across many countries, including CISO, threat intelligence, OT security, and AI security expert roles.

The roundup lists cybersecurity vacancies including CISO, SOC analyst, threat intelligence analyst, security engineer, OT security manager, and principal AI security expert positions. Employers include DataFence, Aldermore Bank, GDIT, Netcraft, Sonar, Sylvamo, MED-EL, and Crisis24 across the US, UK, India, Ireland, Australia, Austria, Canada, Germany, and the UAE. Nearly all listings were marked as no longer accepting applications at publication.

Help Net Security · 20d agoIndustry

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

INTERPOL's Operation Jackal IV arrested 58 and identified 263 suspects in West African cyber-fraud networks, seizing millions across 22 countries.

Operation Jackal IV, run by INTERPOL with 22 countries between November 2025 and June 2026, targeted West African organized crime groups such as Black Ace behind romance, investment, and business email compromise fraud. It produced 58 arrests and 263 identified suspects, including 17 arrests tied to a crime-as-a-service network providing domains and money laundering support to 196 identified individuals. Raids in Johannesburg netted 39 arrests, $2.67 million seized, and 257 blocked bank accounts, while a Romanian call-center investment scheme had stolen an estimated 143 million euros (~$166 million) and led to 11 arrests. The operation is the fourth iteration, following waves in 2022, 2023, and 2024 with 75, 103, and 300 arrests respectively.

The Hacker News · 21d agoPolicy & legal

Risky Bulletin: Russia starts blocking DoH and DoT

Russian users report blocks on DoH and DoT servers, including Cloudflare 1.1.1.1 and Google 8.8.8.8, in an apparent censorship crackdown.

Russian internet users began reporting failures connecting to DNS-over-HTTPS and DNS-over-TLS servers, suggesting a government crackdown on the two privacy protocols. The blocks reportedly cover Cloudflare's 1.1.1.1 and Google's 8.8.8.8 resolvers; Roskomnadzor has not officially confirmed the action. The agency tested a similar block in March on Beeline's network and had named DoH for blocking as early as 2021. The bulletin also briefly notes state-sponsored phishing of EU officials, a DDoS against Norway's Digdir, the ReliaQuest/ShinyHunters dispute, and older ransomware and breach disclosures.

Risky Business News · 22d agoPolicy & legal1

Cybersecurity jobs available right now: July 14, 2026

July 14, 2026 cybersecurity job listings featuring roles at Fiserv, American Express, Orca Security, Ofsted, and others across multiple countries.

This Help Net Security post lists cybersecurity jobs currently open at Fiserv, Integris Group, American Express, Orca Security, Jefferson County, Ofsted, Armstrong Fluid Technology, UNEY, Red Alpha Cybersecurity, Astranis, and lululemon. Roles span network engineering, threat intelligence leadership, AI security specialization, and security operations. All listed positions are on-site, hybrid, or remote across USA, Israel, UK, Canada, UAE, and Singapore. Most positions noted as no longer accepting applications.

Help Net Security · 22d agoIndustry1

Cybersecurity jobs available right now: July 28, 2026

July 28, 2026 cybersecurity job listings spanning cloud security, offensive security, AI safety, and application security roles across multiple organizations.

This Help Net Security post lists open cybersecurity positions at Toyota Automated Logistics, VELUX, Maryville University, BlackSea Technologies, AZ Group, Sedha Consulting, Gentex, cyforce, Postman, NVIDIA AI, Matillion, and RBC. Roles include cloud security engineering, offensive security leadership, AI safety research, and vulnerability triage management, spanning USA, Denmark, UAE, Israel, UK, and Canada. Positions are on-site, hybrid, or remote; many noted as no longer accepting applications.

Help Net Security · 22d agoIndustry1

ICE Collecting DNA Samples

ICE's DNA collection program projects detainee samples to reach 33% of CODIS offender index by 2030, raising privacy concerns.

A Schneier on Security blog post discusses ICE collecting DNA samples from detainees, citing Georgetown Law research. DHS detainee samples are projected to constitute 33% of the FBI's CODIS offender index in 2030, up from 0.2% in 2019. The post raises concerns that samples collected under civil authority are being searched against crime scenes indefinitely, potentially without legal cause under Fourth Amendment standards.

Schneier on Security · 28d agoPolicy & legal

Cybersecurity jobs available right now: June 16, 2026

Help Net Security rounds up cybersecurity job openings at Boeing, Lockheed Martin, Siemens Energy, and other firms across the US, Europe, India, and Israel.

Help Net Security's June 16, 2026 roundup lists cybersecurity job openings including Android vulnerability researcher, application security engineer, vulnerability management specialist, DevSecOps engineer, and OT/ICS consultant. Employers include Byteria, Millennium, Nava, Siemens Energy, Lockheed Martin, Enterprise Products, Audubon Companies, Boeing, and General Dynamics across the US, Ireland, Germany, India, Israel, and the UK.

Help Net Security · Aug 17, 2026Industry