September 26, 2022 All applications and open-source projects using the Python terfile module are potentially vulnerable, according to cybersecurity company Trellix. Currently, 350,000 open-source projects and applications are at risk. The vulnerability, which is traced as CVE-2007-4559, has more...
September 23, 2022 A British Columbia municipality has acknowledged being the victim of a cyber attack just over two weeks ago. The admission made today comes after the LockBit ransomware gang listed the Sunshine Coast Regional District on more...
September 23, 2022 Welcome to Cyber Security Today. This is the Week in Review for the week ending Friday, September 23rd. From Toronto, I’m Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com. In a few minutes I’ll be more...
September 23, 2022 A lack of multifactor authentication led to a company’s email system being hacked, says Microsoft. Welcome to Cyber Security Today. It’s Friday, September 23rd, 2022 I’m Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com. Here’s more...
September 23, 2022 Microsoft has confirmed the breach that allowed a threat actor to gain access to cloud tenants hosting Microsoft Exchange servers. "The investigation revealed that the threat actor launched credential stuffing attacks against high-risk accounts that more...
September 22, 2022 Over 350,000 open-source repositories may be open to compromise because they include a Python module containing an unpatched 15-year-old vulnerability. That’s the finding of researchers at Trellix, who said the hole, CVE-2007-4559, is in Python’s more...
September 22, 2022 Canadian privacy regulators are urging governments, health sector institutions, and health providers to strengthen the IT networks that support the country’s medical infrastructure. Following a meeting in Newfoundland this week, privacy commissioners and ombudsmen from more...
September 22, 2022 Employees at small and medium-sized Canadian organizations have been given a “C” rating for their knowledge of cyber safety and awareness. The rating comes from the Insurance Bureau of Canada, which, after surveying 1,525 workers more...
September 22, 2022 Researchers from Palo Alto Networks uncovered 12,197 instances in which threat actors used "domain shadowing" in cyberattacks. Domain shadowing is a subcategory of DNS hijacking. It involves threat actors compromising the DNS of a legitimate more...
September 22, 2022 The newly released Windows 11 Insider Preview Build 25206 for the Dev Channel will ensure that Windows 11 SMB server is better protected against brute-force attacks. Microsoft has enabled the SMB authentication rate limiter by more...
