NEWS – CID Protect

Passkeys

May 7, 2023

Passkeys technology is a revolutionary solution for authentication and identity management. It replaces traditional passwords with a secure authentication mechanism that is convenient and reliable.

Quebec – Law 25

January 2, 2023

What is it about? Bill 25 consists of a set of provisions that aim to protect the privacy of Quebec residents. These new provisions are

Social Engineering

November 13, 2022

Financial records, trade secrets, and customer data are examples of information that could be extremely valuable. People who have access to this information are attractive

Security and privacy controls and assurance activities catalogue (ITSP.10.033) March 31, 2026
March 2026 Practitioner series ITSP.10.033 March 2026 | Practitioner series Alternate format: Security and privacy controls and assurance activities catalogue - ITSP.10.033 (PDF, 4.5 MB) Next Table of contents Foreword Overview 1. Introduction Purpose Scope and applicability Audience Publication taxonomy Publication organization 2. Concepts and structure Requirements, controls, and activities Controls and assurance activities, structure, and organization Implementation approaches […]
Cyber security and privacy risk management: A lifecycle approach March 31, 2026
This publication is part of a series of guidelines published by the Cyber Centre, under “Cyber security and privacy risk management: A lifecycle approach.” It contains definitions of assurance activities and controls for systems and organizations that practitioners can use as a foundation for selecting, tailoring and allocating controls and assurance activities to manage cyber […]
EtherHiding: The trojan in your toolchain March 31, 2026
The Canadian Centre for Cyber Security (Cyber Centre) is actively tracking a campaign exploiting blockchain technology to covertly host and distribute malware. This campaign leverages a technique known as EtherHiding. The Cyber Centre has compiled a detailed analysis derived from a recent investigation to help defenders combat attacks leveraging this technique. This analysis examines the […]
Joint guidance on securing space and cyber security for low earth orbit satellite communications March 25, 2026
This joint guidance is intended for users of LEO SATCOM services. It highlights the key cyber security risks and mitigation strategies to support informed decision-making.
Top 10 artificial intelligence security actions: A primer - ITSAP.10.049 March 5, 2026
Our top AI security actions are designed to help organizations of all sizes and sectors strengthen their cyber resilience.
Joint guidance on supply chain risks and mitigations for artificial intelligence and machine learning March 5, 2026
The Canadian Centre for Cyber Security (Cyber Centre) has joined the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and the following international partners in releasing cyber security guidance on supply chain risks and mitigations for artificial intelligence (AI) and machine learning (ML): Japan’s National Cybersecurity Office (NCO) New Zealand National Cyber Security Centre […]
Cyber threat bulletin: Iranian Cyber Threat Response to US/Israel strikes, February 2026 March 2, 2026
Overview On February 28, 2026, the United States (U.S.) and the State of Israel (Israel) launched military strikes against the Islamic Republic of Iran (Iran) to eliminate threats from the Iranian regime.Footnote 1 Iran retaliated with military strikes against Israel and U.S. military bases across the Middle East.Footnote 2 On February 28, 2026, the Government […]
Joint guidance on malicious cyber threats to SD-WAN networks February 25, 2026
Malicious cyber threat actors are targeting Software-Defined Wide Area Networks (SD-WAN) networks used by organizations globally. The Canadian Centre for Cyber Security (Cyber Centre), a part of the Communications Security Establishment Canada (CSE), and international partners strongly encourage immediate action to ensure SD-WANs are patched, hardened and investigated for potential compromise. Consult the following for […]
CSE calls on Canadian organizations and critical infrastructure providers to strengthen defences on fourth anniversary of Russia’s invasion of Ukraine February 20, 2026
The Communications Security Establishment Canada (CSE) and its Canadian Centre for Cyber Security (Cyber Centre) are urging Canadian organizations to stay vigilant and strengthen their defences against malicious cyber threats as the four-year mark of Russia's full-scale invasion of Ukraine approaches. Over the past four years, the Cyber Centre has observed pro-Russia cyber actors targeting […]
Security considerations for SIMs (ITSAP.10.021) February 16, 2026
February 2026 Awareness series ITSAP.10.021 February 2026 | Awareness series A subscriber identity module (SIM) card is an electronic chip that stores mobile network user information, such as your phone number and authentication key used to grant access to the cellular network. A SIM card is also referred to as a universal integrated circuit chip (UICC), which […]

Alerts and advisories

Google Chrome security advisory (AV26-306) April 1, 2026
Serial number: AV26-306Date: April 1, 2026 On March 31, 2026, Google published a security advisory to address vulnerabilities in the following product: Stable Channel Chrome for Desktop – versions prior to 146.0.7680.177/178 (Windows/Mac) and 146.0.7680.177 (Linux) Google is aware that an exploit for CVE-2026-5281 exists in the wild. The Cyber Centre encourages users and administrators to review the […]
HPE security advisory (AV26-305) March 31, 2026
Serial number: AV26-305Date: March 31, 2026 On March 31, 2026, HPE published a security advisory to address a critical vulnerability in the following product: HPE Telco Network Function Virtualization Orchestrator – version v7.5.0 and prior The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. HPESBNW05033 rev.1 - HPE […]
Symantec security advisory (AV26-304) March 31, 2026
Serial number: AV26-304Date: March 31, 2026 On March 30, 2026, Symantec published a security advisory to address a vulnerability in the following product: Symantec Data Loss Prevention (DLP) Windows Endpoint – versions prior to DLP 16.1 MP2 and DLP 25.1 MP1 The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary […]
[Control systems] ABB security advisory (AV26-303) March 31, 2026
Serial number: AV26-303Date: March 31, 2026 On March 31, 2026, ABB published a security advisory to address vulnerabilities in the following product: ABB 800xA History – version 7.0 and prior ABB Batch Management – version 6.2 and prior ABB Production Response Batch History – version 6.2 and prior ABB 800xA for Symphony Plus Harmony – version 6.2 and prior ABB 800xA […]
Nokia security advisory (AV26-302) March 31, 2026
Serial number: AV26-302Date: March 31, 2026 On March 30, 2026, Nokia published security advisories to address a vulnerability in the following products: Nokia GX G42, GX G31, GX G32, GX G34 – versions prior to GX r9.0 The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. CVE-2026-34485 - […]
Citrix security advisory (AV26-267) – Update 1 March 30, 2026
Serial number: AV26-267Date: March 23, 2026Updated: March 30, 2026 On March 23, 2026, Citrix published a security advisory to address critical vulnerabilities in the following products: NetScaler ADC and NetScaler Gateway 14.1 – versions prior to 14.1-60.58 NetScaler ADC and NetScaler Gateway 13.1 – versions prior to 13.1-62.23 NetScaler ADC FIPS and NDcPP – versions […]
Docker security advisory (AV26–301) March 30, 2026
Serial number: AV26-301Date: March 30, 2026 On March 30, 2026, Docker published a security advisory to address a vulnerability in the following product: Docker Desktop – versions prior to 4.67.0 The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates. Docker Desktop 4.67.0 security update: CVE-2026-33990
Roundcube security advisory (AV26-300) March 30, 2026
Serial number: AV26-300Date: March 30, 2026 On March 29, 2026, Roundcube published security advisories to address vulnerabilities in the following product: Webmail – versions prior to 1.6.15 Webmail – versions prior to 1.5.15 Webmail – versions prior to 1.7 RC6 The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. […]
Hitachi security advisory (AV26-299) March 30, 2026
Serial number: AV26-299Date: March 30, 2026 On March 27, 2026, Hitachi published security advisories to address vulnerabilities in the following product: Hitachi Disk Array Systems – multiple versions and models The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates. Security information for Hitachi Disk Array […]
Red Hat security advisory (AV26-298) March 30, 2026
Serial number: AV26-298Date: March 30, 2026 Between March 23 and 29, 2026, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products: Red Hat CodeReady Linux Builder – multiple versions and platforms Red Hat Enterprise Linux – multiple versions and platforms Red Hat Enterprise […]

Security Latest

Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool April 1, 2026
As DarkSword spreads, Apple tells WIRED it will enable iOS 18-specific fixes for millions of iPhone owners who remain on that iOS version rather than force them to update to iOS 26.
Iran Threatens to Start Attacking Major US Tech Firms on April 1 March 31, 2026
Tech giants like Apple, Google, and Microsoft are among those on a target list released by Iran’s Islamic Revolutionary Guard Corps.
The US Military’s GPS Software Is an $8 Billion Mess March 31, 2026
The GPS Next-Generation Operational Control System was due for completion in 2016. Ten years later, the software for controlling the military’s GPS satellites still doesn’t work.
The Broken System That Keeps Shipping Crews Stranded in the Strait of Hormuz March 31, 2026
Vessels are increasingly being abandoned during the war on Iran, revealing a hidden failure in the global systems that keep goods—and people—moving.
Iranian Hackers Breached Kash Patel’s Email—but Not the FBI’s March 27, 2026
Plus: Apple makes big claims about the effectiveness of its Lockdown Mode anti-spyware feature, Russia moves to implement homegrown encryption for 5G, and more.
How Trump’s Plot to Grab Iran's Nuclear Fuel Would Actually Work March 26, 2026
Experts say that an American ground operation targeting nuclear sites in Iran would be incredibly complicated, put troops’ lives at great risk—and might still fail.
A $20 Billion Crypto Scam Market Faces a New Government Crackdown March 26, 2026
The Telegram-based Xinbi Guarantee black market sells services that help prop up scam operations. British officials just hit the highly lucrative marketplace with sweeping sanctions.
Using a VPN May Subject You to NSA Spying March 26, 2026
US lawmakers are pressing Tulsi Gabbard to reveal whether using a VPN can strip Americans of their constitutional protections against warrantless surveillance.
Anduril Wants to Own the Future of War Tech. Mishaps, Delays, and Challenges Abound March 26, 2026
From drones to missiles to submarines, the $30.5 billion defense startup wants to transform how the tools of war are made. It’s not all going as planned.
When Satellite Data Becomes a Weapon March 25, 2026
As war reshapes the Gulf, the satellite infrastructure the world relies on to see conflict clearly is being delayed, spoofed, and privately controlled—and nobody is sure who is responsible.

Passkeys

Quebec – Law 25

Social Engineering

Guidance, news and events

Alerts and advisories

Security Latest

News and Events Feed by Topic

CONTACT US

Services

Useful Links

Follow us