https://hireaciso.ca/brief A free weekly email for founders and executives who own security: the week's breaches and incidents, and the decisions they put in front of you. en-CA https://hireaciso.ca/brief/8-patch-netscaler-then-read-the-labcorp-terms https://hireaciso.ca/brief/8-patch-netscaler-then-read-the-labcorp-terms Tue, 29 Sep 2026 13:00:00 +0000 Ottawa is looking at how a breach was disclosed, not only how it happened. Canada's federal privacy regulator opened an investigation into IDScan following a data breach. A stolen OAuth token from a former employee's laptop. CrowdSec confirmed that attackers took the contents of 170 private repositories from its GitHub organisation. https://hireaciso.ca/brief/7-fake-government-requests-real-ai-attacks https://hireaciso.ca/brief/7-fake-government-requests-real-ai-attacks Tue, 22 Sep 2026 13:00:00 +0000 A departed employee's GitHub account was still live, and 170 private repos walked. CrowdSec disclosed that an attacker copied roughly 170 of its private GitHub repositories in May using the account of an employee who had recently left the company. Revolut handed over customer data to someone pretending to be a government. Revolut confirmed that an unauthorized party obtained customer information by submitting a fraudulent data request from a legitimate government email domain. https://hireaciso.ca/brief/6-revolut-handed-data-to-a-fake-government-request https://hireaciso.ca/brief/6-revolut-handed-data-to-a-fake-government-request Tue, 15 Sep 2026 13:00:00 +0000 Trezor's supplier breach keeps growing, and it was never Trezor's system. Trezor says a breach at its supplier ShipMonk is considerably worse than first reported, now affecting around 81,000 customers. Revolut gave customer data to someone posing as a government agency. Revolut disclosed a breach after sharing customer data with a threat actor impersonating a government agency. Delaware amends its privacy and breach notification laws. On September 2, 2026, Delaware's governor signed HB 380 and HB 381. https://hireaciso.ca/brief/5-court-records-drivers-licences-and-an-ftc-bill https://hireaciso.ca/brief/5-court-records-drivers-licences-and-an-ftc-bill Tue, 08 Sep 2026 13:00:00 +0000 Thomson Reuters court software breached in March, disclosed in September. Thomson Reuters disclosed that an unauthorized party obtained files from C-Track, the court case management platform sold by its West Publishing unit, in March 2026. An ID verification vendor appears to be the source of 153 million licence scans. A new dark web identity theft service is selling digital scans of more than 153 million driver's licences belonging to people in the United States and Canada. https://hireaciso.ca/brief/4-what-cisas-two-red-teams-say-about-your-soc-2 https://hireaciso.ca/brief/4-what-cisas-two-red-teams-say-about-your-soc-2 Tue, 01 Sep 2026 13:00:00 +0000 McKesson breach came through third-party applications. McKesson disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft. Cyber claims are fewer and far more expensive. Chubb reported that average losses per cyber claim are rising even though the number of claims has fallen. Two arrests in the TeamPCP open-source supply chain spree. The Australian Federal Police arrested two men in Western Australia, aged 21 and 23, over alleged membership in TeamPCP. https://hireaciso.ca/brief/3-a-cvss-10-in-entra-id-and-a-breach-that-grew-tenfold https://hireaciso.ca/brief/3-a-cvss-10-in-entra-id-and-a-breach-that-grew-tenfold Tue, 25 Aug 2026 13:00:00 +0000 SickKids gets hit through somebody else's software. Toronto's Hospital for Sick Children disclosed a security incident that exposed personal information belonging to some current and former employees and job applicants. https://hireaciso.ca/brief/1-a-250-000-penalty-and-a-vendor-that-went-dark https://hireaciso.ca/brief/1-a-250-000-penalty-and-a-vendor-that-went-dark Tue, 11 Aug 2026 13:00:00 +0000 LexisNexis pulled products offline over a third-party vendor incident. LexisNexis took several services offline, including Diligence and the Metabase API, in response to unusual activity on servers hosted and managed by a third-party vendor it has not named. Gunra ransomware is getting in through firewalls, per a joint advisory. US and South Korean agencies issued a joint advisory on Gunra, a ransomware-as-a-service operation that has been breaching organizations by exploiting vulnerabilities in Fortinet and Schneider Electric products.