security awareness

EvilTokens: Security Awareness for Canadian Organizations

On September 22, 2026, Microsoft and a coalition of technology partners dismantled EvilTokens, an AI-powered phishing service that had compromised more than 12,000 Microsoft 365 inboxes across 10,000 organizations worldwide. Canada was among the countries specifically named as a victim zone. If your organization uses Microsoft 365, this story concerns you directly. How Device-Code Phishing […]

EvilTokens: Security Awareness for Canadian Organizations Read More »

Ransomware Awareness Training: The July Imperative

A single compromised employee account was all it took for ShinyHunters to access 70,000 Canadians’ personal records at Canada Life in April 2026. No exotic vulnerability, no extended campaign: one credential, one door left unlocked, and a major Canadian financial services provider was facing a data breach notification and an extortion deadline simultaneously. For the

Ransomware Awareness Training: The July Imperative Read More »