Major Incidents or Breaches

  • The Canadian Investment Regulatory Organization (CIRO) confirmed that a data breach last year exposed the personal information of approximately 750,000 Canadian investors.

Newly Discovered Vulnerabilities

  • Cybersecurity researchers identified a cross-site scripting (XSS) vulnerability in the web-based control panel of the StealC information stealer malware. This flaw allowed researchers to observe threat actor operations within the panel.

Trends, Tools, or Tactics of Interest

  • Honeypot logs have recorded a significant volume of API requests targeting various large language models (LLMs), indicating ongoing automated probing or attempted misuse of AI-related APIs by threat actors.

Regulatory or Policy Developments Affecting the Security Industry

  • Microsoft issued multiple emergency, out-of-band (OOB) updates for Windows 10, Windows 11, and Windows Server to address issues introduced by the January Patch Tuesday updates, specifically fixing shutdown and Cloud PC-related bugs.