Breaking news: Several U.S. federal departments hit by MOVEit hack

Several U.S. government departments are the latest reported victims of the hack of the MOVEit file transfer tool. CNN quotes the U.S. Cybersecurity and Infrastructure Security Agency as saying it is providing support to several federal agencies that have experienced intrusions affecting their MOVEit applications. “We are working urgently to understand impacts and ensure timely

OWASP releases list of Top 10 API security risks

The Open Worldwide Application Security Project (OWASP) has released the second edition of its Top 10 API Security vulnerabilities. It’s the first update since 2019 and aims to be a comprehensive guide to help API developers, designers, architects and managers understand the risks and threats associated with their APIs, and how to secure them. Application

Canadian firms slow in responding to cyber attacks, report suggests

It can take Canadian organizations up to 48 days to detect and recover from a cyber attack, according to a new survey of infosec professionals. The number is included in a survey of 553 Canadian IT security and risk and compliance professionals released today by CDW Canada. The mean time to detect a cyber incident

Data on as many as 100,000 Nova Scotia healthcare staff stolen in MOVEit breach

Data on at least 100,000 employees in Nova Scotia’s healthcare sector were stolen as the result of the vulnerability in Progress Software’s MOVEit file transfer application, the province said Tuesday.  Data stolen includes Social Insurance numbers, addresses and banking information of employees of Nova Scotia Health, the public service and the IWK Health Centre, which