CFOtech Canada - Technology news for CFOs & financial decision-makers
Canada

Data breach Stories

Canadian Stories

Data breach stories

Global Stories

Data breach stories

Australian football fans share passwords, survey finds
Multi-factor authentication

Australian football fans share passwords, survey finds

Password reuse leaves Australian football fans exposed to wider account theft, despite the country recording the lowest sharing rate in the survey.

By Joseph Gabriel Lagonsin • 4 min read • Today
Klue breach lets attackers steal Salesforce CRM data
Customer Relationship Management

Klue breach lets attackers steal Salesforce CRM data

Trusted third-party access has let attackers quietly pull large volumes of Salesforce records from enterprise systems via a Klue integration.

By Sean Mitchell • 4 min read • 2 days ago
Varist launches DICOM engine to spot hidden malware
Data Protection

Varist launches DICOM engine to spot hidden malware

Healthcare providers face a new malware route as Varist's engine scans DICOM, HL7 and FHIR files for hidden threats in imaging systems.

By Sofiah Nichole Salivio • 3 min read • Last week
GitGuardian launches endpoint protection for laptops
Endpoint Protection

GitGuardian launches endpoint protection for laptops

A single compromised laptop can expose thousands of live keys, according to GitGuardian's early field tests, as attacks shift to developer machines.

By Sofiah Nichole Salivio • 4 min read • Last week
Enhanced.io flags MSP blind spots in security coverage
Network Security

Enhanced.io flags MSP blind spots in security coverage

Identity and IoT monitoring gaps leave managed service providers with little public scrutiny, despite rising threats to clients' systems.

By Mark Tarre • 4 min read • Last week
Rapid Brigantine ties ClickFix malware to fake updates
Malware

Rapid Brigantine ties ClickFix malware to fake updates

BlueVoyant says a ClickFix malware campaign using fake browser updates is linked to the Rapid Brigantine ransomware ecosystem.

By Mark Tarre • 3 min read • Last week
Attacks use remote access tools to evade detection
Malware

Attacks use remote access tools to evade detection

Trusted software is giving cybercriminals persistent access to PCs, making attacks harder to spot and raising the risk of data theft.

By Sean Mitchell • 4 min read • Last week
Cyber hygiene 101: The big fundamentals
Malware

Cyber hygiene 101: The big fundamentals

Weak passwords and outdated access rules are leaving small businesses exposed as AI speeds up phishing, credential theft and network probing.

By Jordan Riddles • 5 min read • Last week
Fans warned over World Cup cyber scams & fake tickets
Malware

Fans warned over World Cup cyber scams & fake tickets

Fans buying tickets or streams for the FIFA World Cup face fake sites, rogue apps and QR-code traps that can steal payment details.

By Joseph Gabriel Lagonsin • 5 min read • Last week
SailPoint to buy Entro in AI identity security push
Digital Transformation

SailPoint to buy Entro in AI identity security push

The move would deepen SailPoint's reach into fast-growing machine identity risks as firms race to control AI agents and cloud credentials.

By Joseph Gabriel Lagonsin • 4 min read • Last week
AI expansion lifts breach rate to 43%, Netwrix says
Data Protection

AI expansion lifts breach rate to 43%, Netwrix says

More than four in 10 firms where AI widened access were breached last year, underscoring a growing governance gap, Netwrix says.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Stories from Other Regions

Data breach stories

Irish adults back ban on public sector ransom payments
Data Protection

Irish adults back ban on public sector ransom payments

Most Irish adults want ministers to stop public bodies paying cyber ransoms, though concern rises sharply if citizens' data could be exposed.

By Sean Mitchell • 3 min read • Last week
Willis report says cyber cover meets most breach losses
Ransomware

Willis report says cyber cover meets most breach losses

Ransomware losses and third-party risks are testing policy limits as Willis data show most breach costs are still covered.

By Joseph Gabriel Lagonsin • 4 min read • Last week
SolarWinds appoints Justin Henkel as chief security officer
Security Operations Centres

SolarWinds appoints Justin Henkel as chief security officer

The hire comes as customers scrutinise SolarWinds' security posture more closely after its 2020 breach and rising cyber risk across software suppliers.

By Sofiah Nichole Salivio • 4 min read • Last week
Phishing falls as attackers turn to AI & encryption
Malware

Phishing falls as attackers turn to AI & encryption

Phishing is becoming harder to spot as attackers use encryption and AI-generated sites to target organisations more effectively.

By Sean Mitchell • 4 min read • Last week
Delinea and Cyera link identity and data risk visibility
Data Protection

Delinea and Cyera link identity and data risk visibility

Security teams can now rank privileged accounts by the sensitivity of data they can reach, helping cut alert noise and focus reviews.

By Sean Mitchell • 3 min read • Last week
StorONE & Myota launch secure enterprise S3 system
Data Protection

StorONE & Myota launch secure enterprise S3 system

The system is aimed at enterprises seeking S3-compatible storage that cuts flash use, lowers cloud fees and hardens data against ransomware.

By Sean Mitchell • 4 min read • Last week