Tech & Security News
What happened, why it matters, and what to do.
The vulnerabilities, scams and tech stories worth your attention — including news from across Atlantic Canada — boiled down to a 30-second read.
SpaceX plans access to 80,000 US cell sites for mobile push
SpaceX is reportedly planning access to at least 80,000 US cell sites as it tries to become a major mobile carrier. It is in talks with Crown Castle.
Read the briefMeta delays new business terms after publisher backlash
Meta is pushing back enforcement of new business terms until November 20. Publishers worry the terms could affect how their content is used for AI training and scraping.
Railway warns users to rotate secrets after possible breach
Railway says suspicious activity may have exposed decrypted customer environment variables. The company is urging all users to rotate secrets and credentials now.
x402 SDK flaw could let malicious APIs drain AI agent balances
V12 says a flaw in x402 SDKs could let a malicious API push an AI agent to sign away its full token balance. The foundation says the critical issues were fixed in August 18 releases.
Hackers hit Fortinet and Palo Alto devices, exposing over 70,000 credentials
Researchers say a global campaign targeted exposed Fortinet FortiGate and Palo Alto GlobalProtect devices. More than 70,000 exposed credentials were found, and the activity affected organizations worldwide.
Fortinet advisory flags exploited vulnerability
Fortinet has a security advisory out for an exploited vulnerability. The Cyber Centre says to review the links provided and apply updates when they are available.
HPE patches 72 ArubaOS flaws, including eight critical issues
HPE has released security updates for ArubaOS after finding 72 vulnerabilities, including eight maximum-severity flaws. The company says customers should patch as soon as possible.
Cyber Centre flags MongoDB advisory
The Cyber Centre has posted a MongoDB security advisory. It does not name an exploited flaw in the text, but tells users and administrators to review the links and apply updates as they appear.
PHP warns of another code execution risk
PHP says a narrow setup could let an attacker run code on a web server. It is not issuing an emergency fix and recommends turning off session upload progress until the next routine release.
Nova Scotia and New Brunswick data centre debates continue
Headlines point to ongoing debate over proposed AI and data centre projects in Nova Scotia and New Brunswick. Questions include economic benefits, guardrails and agreements.
Crime Stoppers tip systems suspended after data breach
Canadian Crime Stoppers operations have been disrupted after a data breach exposed tip information. Several police services have paused or frozen their participation.
Capcom says hackers stole 11 million email addresses
Capcom says hackers accessed CAPCOM ID and stole 11,774,247 email addresses. The company also says passwords for 196 accounts were changed and some personal details were exposed.
Arista patches exploited VeloCloud Orchestrator zero-day
Arista has patched a critical VeloCloud Orchestrator vulnerability that was being exploited as a zero-day. The company says on-premises users should update to a fixed release as soon as possible.
Pillow image library flaw can run server commands
Pillow has a flaw that can let an attacker run operating system commands on a server through a crafted file name. The maintainers fixed it in version 13.0.0.
Node.js Brotli flaw can run code on affected builds
A Brotli decoder flaw in Node.js can let crafted data run attacker-supplied code on affected builds. Node.js has released fixes, and untrusted Brotli data should be treated carefully.
Quest Diagnostics says patient records may have been accessed
Quest Diagnostics says unauthorized access hit its Quanum Lab Services Manager system. The company believes certain patient records were accessed and is still investigating the scope.
LiteLLM supply chain attack pushed malicious packages to PyPI and Docker
Hackers used stolen GitHub CLI OAuth tokens to publish malicious LiteLLM packages. People who installed version 1.107.0 during the attack window were exposed to malware.
Atlassian bulletin covers 75 unique CVEs
Atlassian’s October bulletin lists 75 unique CVEs in third-party components used by its Data Center and Server products. The company says the issues are not being exploited and recommends updating to fixed releases.
Atlassian and Splunk security advisories issued by Canada’s cyber centre
Canada’s Cyber Centre has issued security advisories for Atlassian and Splunk. It is telling users and administrators to review the links and apply updates as they become available.