News

Behaviour Change Cybersecurity: The Starbucks Portal Lesson

In January 2026, attackers gained access to the personal and financial records of 889 Starbucks employees without ever penetrating the company’s core infrastructure. The method was precise: a convincing replica of Starbucks’ Partner Central, the internal portal workers use to manage payroll, benefits, and employment details, was built to harvest credentials. Workers who entered their […]

Behaviour Change Cybersecurity: The Starbucks Portal Lesson Read More »

Ransomware Awareness Training: Gunra Targets Nonprofits

On August 10, 2026, CISA, the FBI, the National Security Agency, and South Korea’s National Police Agency issued a joint advisory warning organizations worldwide about Gunra ransomware, a fast-growing criminal operation that has already claimed Canadian victims. Advisory AA26-222A names healthcare providers, nonprofit services, financial institutions, and government agencies as active targets and describes an

Ransomware Awareness Training: Gunra Targets Nonprofits Read More »

When Business Email Compromise Survives the Takedown

Law enforcement took down Kratos. But the 1,800 criminal subscribers who paid for that phishing-as-a-service platform still have the kit code, and security researchers confirm they are already adapting it. For Canadian finance teams and executives, the practical question is not whether criminals will continue using these techniques; it is whether your organization is ready

When Business Email Compromise Survives the Takedown Read More »

Security Awareness for Nonprofits: The Interlock Problem

The clients of the Centre for Newcomers came to Calgary for a fresh start. On July 17, 2026, they got something else: their personal records, immigration files, and sensitive status documents became part of a 380 GB haul claimed by the Interlock ransomware group. The organisation, a Calgary-based nonprofit providing immigration and settlement services across

Security Awareness for Nonprofits: The Interlock Problem Read More »

Ransomware Awareness Training: The July Imperative

A single compromised employee account was all it took for ShinyHunters to access 70,000 Canadians’ personal records at Canada Life in April 2026. No exotic vulnerability, no extended campaign: one credential, one door left unlocked, and a major Canadian financial services provider was facing a data breach notification and an extortion deadline simultaneously. For the

Ransomware Awareness Training: The July Imperative Read More »