SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

Supply Chain Security Stories

Global Stories

Supply Chain Security stories

NVIDIA, SAP back OpenBao as secrets tool gains ground
DevOps

NVIDIA, SAP back OpenBao as secrets tool gains ground

Growing use by major tech groups is helping open source secrets manager OpenBao win trust as cloud and AI credential risks mount.

By Mark Tarre • 4 min read • Today
GitLab adds enterprise controls for agentic AI tools
DevOps

GitLab adds enterprise controls for agentic AI tools

Regulated teams can now keep AI processing inside GitLab Dedicated, with new secret handling, spending caps and security fixes added in 19.3.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Fortinet buys Virtue AI to boost AI security tools
Data Protection

Fortinet buys Virtue AI to boost AI security tools

The deal extends Fortinet's reach into AI runtime protection as companies race to secure agents, models and tools across production systems.

By Joseph Gabriel Lagonsin • 3 min read • Last week
Asia Pacific leaders urge overhaul of scam defences
Data Protection

Asia Pacific leaders urge overhaul of scam defences

Australia's new scams rules are adding pressure on firms to detect fraud faster as AI-powered attacks expose weak governance and identity controls.

By Sofiah Nichole Salivio • 4 min read • Last week
AI models expose new attack surfaces through misconfiguration
Ransomware

AI models expose new attack surfaces through misconfiguration

Misconfigured models are giving attackers a fresh route into cloud systems, raising the risk of data theft and service compromise.

By Anthony Caruana • 5 min read • Last week
OpenSSL conference 2026 to focus on post-quantum security
Cloud Security

OpenSSL conference 2026 to focus on post-quantum security

Businesses could face years of costly upgrades as OpenSSL brings developers and policymakers together in Prague to plot post-quantum encryption.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Prem launches CyberScan for Bitcoin security audits
Data Protection

Prem launches CyberScan for Bitcoin security audits

The new tool aims to catch Bitcoin software flaws between formal audits after a regression led to more than USD $116 million stolen.

By Sofiah Nichole Salivio • 4 min read • Last week
Endor Labs adds buildless C support to AI SAST tool
Application Security

Endor Labs adds buildless C support to AI SAST tool

Developers can now scan C code earlier in the process, as Endor Labs says its buildless AI SAST found 96 of 102 known bugs in tests.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Vercel launches public bounty to test sandbox escape
Virtualisation

Vercel launches public bounty to test sandbox escape

Researchers can claim up to USD $1 million for breaking Vercel Sandbox's isolation, as the cloud provider opens its boundary to public scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Mid-market firms account for 73% of ransomware victims
Data Protection

Mid-market firms account for 73% of ransomware victims

Ransomware groups are keeping up pressure on smaller rivals, with mid-market firms still making up 73% of victims across North America and Europe.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Clop-linked web shell hits Windchill in new exploit
Virtual Private Networks

Clop-linked web shell hits Windchill in new exploit

Manufacturers face credential theft and engineering-data loss after a tailored Windchill web shell tied to Clop exploited CVE-2026-12569.

By Sean Mitchell • 4 min read • Last week
Sonatype warns AI is speeding software risk growth
Digital Transformation

Sonatype warns AI is speeding software risk growth

Enterprise software teams are facing far more vulnerabilities as AI-assisted development multiplies application output and speeds exposure growth.

By Mark Tarre • 4 min read • Last week
Google Cloud unveils AI harness that finds flaws fast
Cloud Security

Google Cloud unveils AI harness that finds flaws fast

In two days, the system uncovered more than 100 critical bugs in stolen code repositories, outpacing manual review and aiding incident response.

By Mark Tarre • 5 min read • Last week
NASA lab console flaw allows unauthorised commands
Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last week

Stories from Other Regions

Supply Chain Security stories

CleanStart expands Middle East, Africa security push
Digital Transformation

CleanStart expands Middle East, Africa security push

Rising use of AI coding tools is widening software supply-chain risks for businesses across the Middle East, Türkiye and Africa.

By Sofiah Nichole Salivio • 4 min read • Last week
Harness launches AI security agents to speed fixes
Cloud Security

Harness launches AI security agents to speed fixes

The new tools aim to cut the gap between finding a flaw and fixing it from weeks to hours as attacks accelerate.

By Mark Tarre • 4 min read • Last week
Frontier AI compresses cyber attack timelines. Can Singapore's defences respond at machine speed?
Privileged Access Management

Frontier AI compresses cyber attack timelines. Can Singapore's defences respond at machine speed?

Singapore banks and telcos face a narrower window to stop AI-assisted attackers chaining small flaws into major breaches.

By Kris Day • 6 min read • Last week
Payward joins Anthropic's AI cyber defence project
Fintech

Payward joins Anthropic's AI cyber defence project

The move gives the crypto exchange's security team AI help to hunt flaws in critical code as threats to financial infrastructure grow.

By Karen Joy Bacudo • 4 min read • Last week