SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

Threat modelling Stories

Global Stories

Threat modelling stories

Microsoft tightens AI governance as agentic risks rise
AI Security

Microsoft tightens AI governance as agentic risks rise

Stricter controls on agent identities and tool access aim to curb security and reliability risks as autonomous AI systems spread.

By Joseph Gabriel Lagonsin • 4 min read • This month
HP patches three high-severity flaws in Easy Start
Network Security

HP patches three high-severity flaws in Easy Start

Mac users face a higher risk of tampered printer installs after HP fixed three bugs in Easy Start, including a root-level file flaw.

By Joseph Gabriel Lagonsin • 5 min read • This month
Cycode launches agentic code scanning & attack chaining
DevOps

Cycode launches agentic code scanning & attack chaining

Security teams could see fewer false positives and faster fixes as Cycode's new system blends rule-based checks with AI to trace attack paths.

By Joseph Gabriel Lagonsin • 4 min read • This month
Microsoft revamps responsible AI rules amid agentic risks
Supply Chain

Microsoft revamps responsible AI rules amid agentic risks

Faster agentic AI adoption is forcing tighter oversight, with new controls on permissions, monitoring and cyber-risk systems.

By Sean Mitchell • 4 min read • This month
Microsoft expands AI oversight in 2026 transparency report
Data governance

Microsoft expands AI oversight in 2026 transparency report

New controls and tests are being added as agentic AI systems spread, with Microsoft warning that risks now span tools, data and users.

By Joseph Gabriel Lagonsin • 4 min read • This month
CISOs say AI risk falls with stronger security programmes
Digital Transformation

CISOs say AI risk falls with stronger security programmes

Better AI security programmes are easing immediate threat concerns, but many CISOs still doubt their organisations can manage risks over the next two years.

By Joseph Gabriel Lagonsin • 4 min read • Last month
CREST launches AI testing standard for cyber firms
Application Security

CREST launches AI testing standard for cyber firms

Buyers of AI tools now have a benchmark to judge testing providers, as CREST's new standard targets gaps in assurance and due diligence.

By Mark Tarre • 4 min read • Last month
FIRST launches VulnOptiCON 2026 in Luxembourg on AI
Data Science

FIRST launches VulnOptiCON 2026 in Luxembourg on AI

Rising disclosure volumes are forcing security teams to predict which flaws attackers will exploit as FIRST broadens its vulnerability conference in Luxembourg.

By Sofiah Nichole Salivio • 4 min read • Last month
Google Cloud urges stronger cyber basics amid AI attacks
Malware

Google Cloud urges stronger cyber basics amid AI attacks

As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.

By Mark Tarre • 4 min read • Last month
Public exploit code targets Cudy router flaw chain
Network Security

Public exploit code targets Cudy router flaw chain

Patching is urgent for Cudy WR3000 rev 2.0 routers, as public code shows how two flaws can let attackers gain root command execution.

By Sean Mitchell • 5 min read • Last month
Prem launches CyberScan for Bitcoin security audits
Data Protection

Prem launches CyberScan for Bitcoin security audits

The new tool aims to catch Bitcoin software flaws between formal audits after a regression led to more than USD $116 million stolen.

By Sofiah Nichole Salivio • 4 min read • Last month
Vercel launches public bounty to test sandbox escape
Virtualisation

Vercel launches public bounty to test sandbox escape

Researchers can claim up to USD $1 million for breaking Vercel Sandbox's isolation, as the cloud provider opens its boundary to public scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Google Cloud unveils AI harness that finds flaws fast
Cloud Security

Google Cloud unveils AI harness that finds flaws fast

In two days, the system uncovered more than 100 critical bugs in stolen code repositories, outpacing manual review and aiding incident response.

By Mark Tarre • 5 min read • Last month
NASA lab console flaw allows unauthorised commands
Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last month
ArmorCode gets verified Claude access for cyber defence
Cloud Security

ArmorCode gets verified Claude access for cyber defence

Verified access to Anthropic's Claude models should sharpen ArmorCode's exploitability scoring as security teams race to cut alert noise.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Anthropic says Claude models accessed real systems in tests
Network Security

Anthropic says Claude models accessed real systems in tests

Misconfigured test setups let three Claude models touch live systems, exposing production data and credentials during security exercises.

By Mark Tarre • 4 min read • Last month
Island flags security concerns in nearly half of MCP servers
Cloud Security

Island flags security concerns in nearly half of MCP servers

Nearly half of scanned MCP server builds carried at least one security concern, underscoring fresh supply chain risks as AI agents rely on them.

By Sean Mitchell • 5 min read • Last month

Stories from Other Regions

Threat modelling stories

UK AI tests find Claude & GPT-5.6-Sol rogue actions
Phishing

UK AI tests find Claude & GPT-5.6-Sol rogue actions

The findings heighten concern that frontier AI agents can breach boundaries, pressure real people and target software supply chains under loose controls.

By Joseph Gabriel Lagonsin • 5 min read • Last month