York University breach exposes 19 years of student health and financial data
Archived webform submissions from 2007 through October 2026 were taken across 14 faculties, and no group has claimed the attack.
Stories per day · 30 days
15 RSS
Relatedadvisory21patch12data-breach6crime-stoppers4vulnerability4encryption3navigate3603accessibility2ai-glasses2beyondtrust2browser2chrome2citizen-lab2cve-2026-1027642google2ics2juniper2lawful-access2
154 stories, newest first · one card per story
Stories tagged #canada
The Children's Foundation notifies of breach at its IT provider
An unauthorized party reached Highland Shores systems on July 6, 2026, encrypted them, and was found on August 25.
Sault police say Crime Stoppers breach scope is unknown
Two local police services paused Crime Stoppers ties, and the chapter stopped taking tips meant for both.
Meta partners with INCA on AI glasses for Canadians with vision loss
Funding covers community listening, peer demos, product feedback, and training, plus donated glasses for job seekers.
Canada flags Juniper Session Smart flaws fixed in recent releases
Session Smart Conductor and Router builds before 7.0.5, 7.1.7 and 7.2.3 are listed; no CVE ids or exploitation status are given.
Mozilla advisory AV26-1100 covers Firefox, ESR and Thunderbird flaws
Canada’s Cyber Centre lists builds before Firefox 159, ESR 115.44 and 153.6, and matching Thunderbird versions.
Canadian help-desk vishing campaign bypasses MFA in real time
Callers send staff to branded relay pages, then register MFA methods and steal Microsoft 365 data before extortion.
1
TeamViewer clients before 15.83 affected by vulnerabilities, Canada warns
Windows, Linux and macOS clients and the Android app before 15.8.3 are listed, with no CVEs named.
Canadian privacy commissioner investigates Crime Stoppers tip platform breach
The probe targets Navigate360, which runs the tip platform, and will test its PIPEDA safeguards; incident details remain undisclosed.
1
Caseway CEO says expansion is shifting to Taiwan and Europe
The founder says a September 8 US directive halted new American sales while two existing US customers remain.
Craft CMS and Commerce-mollie need updates, Cyber Centre says
CMS before 4.18.9 and 5.11.2, and Commerce-mollie before 4.4.3, are affected as of October 23.
Researcher warns Canada’s Lawful Access Act would weaken encryption
Kate Robertson told a Canadian Internet Society discussion that systems should be repaired rather than given new access holes.
Toronto Crime Stoppers freezes tips after anonymity breach
A CBC investigation says more than 1.5 million tips were exposed, over 850,000 of them with personal information.
Toronto Crime Stoppers freezes operations after tip-data breach details emerge
Navigate360 told the chapter 176,859 Toronto tips from 2022 to 2025 were taken, including 14,973 names of unclear role.
1
Roundcube Webmail before 1.6.20 and 1.7.5 has security flaws
Canadian advisory AV26-1075 names the fixed releases but gives no CVE identifiers or impact details.
Eptura Archibus before 2025.02 affected by a vulnerability
Canada’s Cyber Centre gives no CVE or impact and tells administrators to apply updates when available.
Canadian Cyber Centre flags vulnerabilities across many Red Hat products
Advisory AV26-1061 lists every named product as affected in all versions and states no CVEs.
Encryption Is Getting Squeezed From All Sides
Canada's C-22 bill could force encryption backdoors and metadata retention, prompting Signal and Psiphon to threaten exit.
2
Google security advisory (AV26-1060)
Canada's Cyber Centre urges updates for vulnerable Chrome builds before 155.0.8059.84.
BMC Helix security advisory (AV26-1059)
Canada's Cyber Centre says BMC Helix Network Management before 26.3.01 is vulnerable and urges updates.
Progress security advisory (AV26-1058)
Canada’s Cyber Centre urges updates for critical MOVEit Transfer flaws fixed in 2025.1.6 and 2026.0.4.
AL26-025 - Critical vulnerability impacting BeyondTrust Remote Support – CVE-2026-102764
BeyondTrust Remote Support CVE-2026-102764 is being exploited for unauthenticated file upload and full appliance compromise.
6
The Lawful Access Act’s threats to Canada’s national security
Citizen Lab warns Canada’s Bill C-22 could force surveillance access into everyday communications technology.
Palo Alto Networks security advisory (AV26-1056)
Canada’s Cyber Centre flags a Palo Alto Idira Secrets Manager flaw fixed in version 13.9.1.