Software & Apps — News & Reviews
OS updates, app launches, dev tools, and productivity
- AhsayCBS Is Being Exploited. Restrict Access Now
Matthew Leo · October 11, 2026 · GuidesAttackers are chaining two AhsayCBS flaws to install webshells and cryptominers. Versions through 10.3.4 are affected, and exposure needs immediate review.
- Find Admin Consoles Exposed to the Internet
Matthew Leo · October 11, 2026 · GuidesA forgotten management page can turn one software flaw into a network compromise. Use this audit to identify public consoles, close exposure and verify the fix.
- Someone Is Sending Email From Your Address. Was It Hacked?
Matthew Leo · October 9, 2026 · GuidesBounce notices and complaints from contacts do not always mean someone entered your mailbox. Learn how to separate address spoofing from a real account takeover…
- Citrix NetScaler Admins Need to Patch Again
Matthew Leo · October 9, 2026 · GuidesCitrix says attackers are exploiting a NetScaler SAML flaw that can repeatedly knock appliances offline. Here is what Canadian IT teams should check now.
- What to Do When You Get a Data-Breach Notice
Matthew Leo · October 9, 2026 · GuidesA Canadian data-breach notice should tell you what was exposed. Use that detail to secure the right accounts, credit files and identity documents.
- Anthropic Opens Stronger Cyber AI to More Defenders
Matthew Leo · October 9, 2026 · NewsAnthropic has widened access to cyber-capable Claude models. Canadian security teams should examine the access tiers, data rules and authorization limits.
- Audit the Open-Source Packages Your Business Uses
Matthew Leo · October 9, 2026 · GuidesA useful dependency audit goes beyond a vulnerability scan. Inventory direct and transitive packages, rank exposure, check maintenance and assign owners.
- Before Paying a Business Invoice With Stablecoins
Matthew Leo · October 9, 2026 · GuidesStablecoin payments can move quickly, but mistakes can be final. Canadian businesses should verify the payee, network, tax record and provider obligations.
- Windows’ New Agent Containers Put Permissions First
Matthew Leo · October 9, 2026 · AIMicrosoft Execution Containers are now generally available. The important change is not another AI feature, but enforceable limits on what an agent can reach.
- Check Whether Your Home Router Still Gets Security Updates
Matthew Leo · October 9, 2026 · GuidesAn old router can keep working long after its security support ends. Here is how to identify the model, check its update status and decide when replacement is s…
- SonicWall SMA1000: Patch CVE-2026-102255 Now
Matthew Leo · October 9, 2026 · GuidesA critical pre-authentication flaw affects SonicWall SMA1000 appliances. There is no confirmed exploitation, but exposed organizations should patch and assess a…
- A Suspected ShinyHunters Member Is Reportedly Helping the FBI
Matthew Leo · October 9, 2026 · NewsJordan has confirmed an arrest connected to an ongoing hacking investigation. Reuters reports the suspected ShinyHunters member is helping authorities find othe…
- Self-Hosted GitLab AI Gateway Users Need to Patch
Matthew Leo · October 4, 2026 · GuidesA 9.9-rated GitLab AI Gateway flaw can let an authenticated Duo user escape a prompt sandbox and run commands. GitLab-hosted gateways are already fixed.
- Check Which Mac Apps Have Full Disk Access
Matthew Leo · October 4, 2026 · GuidesApple plans tighter Full Disk Access controls as AI agents gain more autonomy. Mac users can check which applications already have broad access today.
- A Fake AI Policy Invite Can Steal a Microsoft 365 Session
Matthew Leo · October 2, 2026 · GuidesA China-aligned campaign used convincing AI-policy invitations to reach Microsoft 365 accounts. Ordinary MFA may not stop this kind of session theft.
- Google Announced Gemini 4, but You Can’t Use It Yet
Matthew Leo · October 2, 2026 · AIGemini 4 Argon is initially limited to selected cyber defenders. Google has published pricing and benchmarks, but no public release date for Canada or elsewhere…
- Cisco’s SD-WAN Admin Bypass Is Being Exploited
Matthew Leo · October 2, 2026 · NewsCisco says attackers are exploiting a critical SD-WAN Manager flaw. There is no workaround, and affected organizations need to preserve logs before upgrading.
- OpenAI’s Dots Can Keep Working After You Leave ChatGPT
Matthew Leo · October 1, 2026 · AIOpenAI’s always-on dots can work across connected apps. Canadian users should start with narrow access, explicit approvals and a controlled pilot.
- Fix Windows Memory Integrity Without Guessing at Drivers
Matthew Leo · September 29, 2026 · GuidesMemory integrity won't turn on because of a driver? Check what Windows names, update it safely, and understand the trade-off before disabling protection.
- Protect Your Canadian Phone Number From SIM-Swap Fraud
Matthew Leo · September 29, 2026 · GuidesAsk your carrier about port and SIM-change protection, secure account recovery, and know what to do if your number suddenly stops working.