SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

Threat intelligence Stories - Page 19

Canadian Stories

Threat intelligence stories

Global Stories

Threat intelligence stories

iProov report warns of soaring iOS injection attacks
Unified Communications

iProov report warns of soaring iOS injection attacks

A 1,151% jump in iOS injection attacks in late 2025 has put mobile identity checks under fresh pressure, iProov says.

By Shannon Williams • 4 min read • Thu, 9th Apr 2026
Microsoft 365 EvilToken campaign hits hundreds daily
Multi-factor authentication

Microsoft 365 EvilToken campaign hits hundreds daily

Hundreds of Microsoft 365 users are being compromised daily as attackers bypass passwords with device code phishing and OAuth tokens.

By Shannon Williams • 4 min read • Thu, 9th Apr 2026
Qualys warns attackers exploit flaws before disclosure
Firewalls

Qualys warns attackers exploit flaws before disclosure

Security teams are falling behind as attackers now exploit some flaws before disclosure, leaving critical systems exposed for longer.

By Joseph Gabriel Lagonsin • 3 min read • Thu, 9th Apr 2026
TrendAI: Evolving the cybersecurity value proposition
Hybrid Cloud

TrendAI: Evolving the cybersecurity value proposition

New research shows two-thirds of Australian business and IT leaders feel pressured to approve AI projects while overlooking security risks.

By Donovan Jackson • 4 min read • Wed, 8th Apr 2026
Microsoft warns of Storm-1175's rapid Medusa attacks
Ransomware

Microsoft warns of Storm-1175's rapid Medusa attacks

Victims in healthcare, education and finance have faced Medusa ransomware within 24 hours of flaws emerging, Microsoft says.

By Joseph Gabriel Lagonsin • 3 min read • Wed, 8th Apr 2026
Qualys warns exploitation is outpacing manual patching
Firewalls

Qualys warns exploitation is outpacing manual patching

Attackers are now exploiting flaws before patches exist, leaving 85% of vulnerable assets unpatched at disclosure across 10,000 organisations.

By Sean Mitchell • 4 min read • Wed, 8th Apr 2026
Permiso launches sandbox for AI agent skill security
Firewalls

Permiso launches sandbox for AI agent skill security

Malicious downloads can now be caught at runtime, as the new tool records hidden network calls and file writes before deployment.

By Sofiah Nichole Salivio • 4 min read • Wed, 8th Apr 2026
China-aligned TA416 resumes spying on EU & Mideast
Phishing

China-aligned TA416 resumes spying on EU & Mideast

Diplomatic missions in Europe and the Middle East face renewed PlugX-backed espionage as TA416 shifts tactics and targets amid regional tensions.

By Sean Mitchell • 4 min read • Tue, 7th Apr 2026
Attackers turn trusted tools into cyber weapon
Malware

Attackers turn trusted tools into cyber weapon

Trusted software and identity sessions are now prime attack paths, with ClickFix linked to more than 44% of defence evasion incidents.

By Shannon Williams • 4 min read • Fri, 3rd Apr 2026
Cloud security turns to identity, access & sovereignty
Data Protection

Cloud security turns to identity, access & sovereignty

Breaches in large cloud environments are increasingly tied to weak identity controls, misconfigurations and poor data sovereignty governance.

By Mark Tarre • 6 min read • Fri, 3rd Apr 2026
Cloud security experts warn of control plane risks
Firewalls

Cloud security experts warn of control plane risks

Rising automation and data growth are exposing cloud users to identity drift, hidden telemetry gaps and fragmented defences.

By Mark Tarre • 4 min read • Fri, 3rd Apr 2026
Zscaler flags Xloader malware's tougher obfuscation
Malware

Zscaler flags Xloader malware's tougher obfuscation

ThreatLabz says the latest Xloader strain uses layered encryption and decoy servers to frustrate analysts while stealing browser credentials.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 2nd Apr 2026
Google links axios attack to suspected North Korean actor
DevOps

Google links axios attack to suspected North Korean actor

Broad exposure across thousands of applications is feared after Google tied the axios npm supply chain attack to suspected North Korean hackers.

By Mark Tarre • 3 min read • Thu, 2nd Apr 2026
DeepLoad malware steals credentials via ClickFix campaign
Malware

DeepLoad malware steals credentials via ClickFix campaign

Businesses face credential theft and reinfection risks as DeepLoad hides inside trusted Windows processes and evades routine clean-up.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 1st Apr 2026
Firms warned on ransomware amid backup & AI sprawl
Software-as-a-Service

Firms warned on ransomware amid backup & AI sprawl

Hidden software and poorly protected backups are leaving businesses more exposed to automated ransomware attacks, security experts warned.

By Joseph Gabriel Lagonsin • 5 min read • Wed, 1st Apr 2026

Stories from Other Regions

Threat intelligence stories

Regulated data dominates AI breaches in finance sector
Malware

Regulated data dominates AI breaches in finance sector

Managed AI tools are gaining ground in finance, yet regulated data still drives most policy breaches as staff mix personal and corporate accounts.

By Shannon Williams • 4 min read • Thu, 9th Apr 2026
Vulnetix named Australia's first global CVE authority
Malware

Vulnetix named Australia's first global CVE authority

Australian developers can now access free vulnerability tools as Vulnetix takes a formal role in global software flaw tracking.

By Mark Tarre • 3 min read • Tue, 7th Apr 2026