December 17, 2023 | Local, Defence and Security
Threat actors are misusing OAuth-based applications as an automation tool for authentication, says Microsoft. "Threat actors compromise user accounts to create, modify, and grant high privileges to OAuth applications that they can misuse to hide malicious activity," the company said in a blog this week. "The misuse of OAuth also enables threat actors to maintain
October 11, 2023
The BianLian ransomware gang says Air Canada hasn't been forthright about the amount of data it stole in last month's cyber attack. Last month the airline said an attacker "briefly obtained limited access to an internal Air Canada system related to limited personal information of some employees and certain records." The statement didn't say how
September 17, 2023
Distributed denial of service attacks against the websites of federal departments and several Canadian provinces and territories -- including PEI, Yukon, Saskatchewan and Manitoba -- have prompted the federal cyber agency to issue an IT alert. Since September 13, the Canadian Centre for Cyber Security has responded to several DDoS campaigns targeting multiple levels within
October 30, 2023
Malware hiding as a cryptominer may have infected 1 million PCs since 2017. Welcome to Cyber Security Today. It's Friday, October 27th, 2023. I'm Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com and TechNewsday.com in the U.S. Data-stealing malware miscategorized by security researchers as a cryptocurrency miner has been infecting computers since at least 2017.