The staff at the UK Department for Education did not hand attackers a password. They answered a help desk request, clicked a link, and responded to what looked like a legitimate internal process. On July 30, 2026, a threat group calling itself ExfilSquad confirmed they had used exactly that approach to steal 607,000 records from […]
Security Awareness for Schools: A Social Engineering Lesson Read More »
Canadian organizations are paying an average of CA$7.11 million every time a data breach occurs, according to IBM’s 2026 Cost of a Data Breach Report released July 29. That figure is the highest ever recorded since IBM began tracking breach costs in Canada, and it should prompt every security leader in the country to ask
Security Awareness Metrics: Canada’s $7M Breach Cost Read More »
Law enforcement took down Kratos. But the 1,800 criminal subscribers who paid for that phishing-as-a-service platform still have the kit code, and security researchers confirm they are already adapting it. For Canadian finance teams and executives, the practical question is not whether criminals will continue using these techniques; it is whether your organization is ready
When Business Email Compromise Survives the Takedown Read More »
The phone rings at a Canadian IT help desk. The caller identifies themselves as someone from the security team, explains that an account is about to be locked out, and asks the agent to quickly reset the user’s MFA credentials. The call is convincing, the urgency feels real, and the agent has been trained to
Vishing Awareness: Canada’s IT Help Desks Under Attack Read More »
The clients of the Centre for Newcomers came to Calgary for a fresh start. On July 17, 2026, they got something else: their personal records, immigration files, and sensitive status documents became part of a 380 GB haul claimed by the Interlock ransomware group. The organisation, a Calgary-based nonprofit providing immigration and settlement services across
Security Awareness for Nonprofits: The Interlock Problem Read More »
Your employees can spot a suspicious email. Fewer of them are prepared for the phone call that follows: someone claiming to be from IT, asking them to register a new passkey, and in minutes the attacker has their Microsoft 365 credentials. This is the active O-UNC-066 campaign, and it targets sectors that form the backbone
Pink Vishing: Security Awareness for Canadian Organizations Read More »
A single compromised employee account was all it took for ShinyHunters to access 70,000 Canadians’ personal records at Canada Life in April 2026. No exotic vulnerability, no extended campaign: one credential, one door left unlocked, and a major Canadian financial services provider was facing a data breach notification and an extortion deadline simultaneously. For the
Ransomware Awareness Training: The July Imperative Read More »
When a stranger walks into your office, identifies themselves as IT support, and plugs a USB drive into a workstation while your employee watches, every firewall you own is irrelevant. That is not a hypothetical. On May 26, 2026, the FBI issued a FLASH alert about the Silent Ransom Group (SRG), a Russia-linked extortion operation
Your Security Awareness Program Needs an In-Person Clause Read More »
When an employee picks up the phone and hears what sounds like internal IT asking them to re-enrol a multifactor token, the firewall is already irrelevant. That is the quiet truth behind the latest wave of voice phishing attacks that Google’s Mandiant team documented in January 2026, and it is why every Canadian organisation relying
Why Behaviour Change Cybersecurity Beats SSO Vishing Read More »
Every second Tuesday of the month, Microsoft releases security updates, and IT teams across the country quietly begin a race against exploitation. This month, the stakes are higher than usual. Microsoft’s April 2026 Patch Tuesday addressed 167 vulnerabilities, including eight rated critical and two zero-days, one of which is already being actively exploited in the
The SharePoint Zero-Day and Employee Security Training Read More »
