Category: Canada

  • Why Modern Security Starts Beyond the Password

    Why Modern Security Starts Beyond the Password

    New research shows just how fragile many “secure” passwords really are. Using a single high‑end graphics card, researchers were able to crack the majority of common password hashes in under an hour, nearly half in less than a minute. Even more concerning for Canadian SMBs, attackers don’t need expensive hardware of their own; cloud-based computing…

  • Inside the Canada Life Breach

    Inside the Canada Life Breach

    Canada Life’s recent data breach is a reminder that one compromised account can expose more than most organizations expect. Publicly disclosed on April 23, 2026, the incident involved a single employee account being used by the criminal extortion group ShinyHunters to access Canada Life’s Salesforce environment, resulting in the confirmed exposure of personal information belonging…

  • Canadian Cybersecurity Laws in 2026

    Canadian Cybersecurity Laws in 2026

    Cybersecurity rules in Canada are changing and most businesses aren’t sure which laws apply to them. From PIPEDA and CASL to Quebec’s Law 25, understanding your obligations doesn’t have to be overwhelming. Here’s what Canadian businesses actually need to know in 2026. Canada doesn’t have a single cybersecurity law. Instead, businesses must navigate a combination…

  • Fake Settlement Scams Are Targeting Canadians Again

    Fake Settlement Scams Are Targeting Canadians Again

    Canadian businesses are being reminded to stay alert as scammers increasingly exploit familiar headlines to make fraud look legitimate. A recent example involves text messages claiming recipients are eligible for a “milk settlement,” despite no such class action existing. These messages typically include a link urging users to provide personal or financial information. While they…

  • When Helpful AI Becomes a Security Risk

    When Helpful AI Becomes a Security Risk

    In June 2025, a single email quietly compromised Microsoft 365 Copilot through a vulnerability known as EchoLeak (CVE‑2025‑32711). There were no clicks, no attachments, and no user error. Copilot simply processed the message as designed and unintentionally exposed emails, documents, Teams chats, and SharePoint data. Although Microsoft patched the issue quickly, the incident made one…

  • Canada–Philippines Cyber Cooperation

    Canada–Philippines Cyber Cooperation

    Canada and the Philippines have strengthened their cybersecurity cooperation following a recent meeting between senior defence and cyber security officials from both countries. The discussions focused on cyber defence, information security, and long-term collaboration to address evolving global cyber threats, reinforcing a growing bilateral security partnership. The engagement brought together leaders from the Philippines’ Department…