Zero-Day North

Alex and Jordan cover Monday Nov 2, 2026 cybersecurity news: the Ivanti Connect Secure federal deadline landing today with Canada's Cyber Centre safe builds, CrowdStrike's legal-sector threat surge following the Bay Street vishing campaign, a refrigeration OT attack hitting 115-plus European supermarkets, an unconfirmed Payload claim against a mining surveying firm, more than 1,000 unpatched GitLab servers, a Synology C3RB3R ransomware surge, a malicious Claude Code extension in Cursor, the Trigger.dev environment-variable breach, the X.CPE botnet takedown, and Unit 42's AI-scripted government Linux espionage campaign.

Alex and Jordan cover Sunday Nov 1, 2026 cybersecurity news: four Bay Street law firms compromised in the vishing campaign Canada's Cyber Centre warned about, joint SD-WAN threat guidance, a Qilin claim against a resources firm, Dragos industrial ransomware figures, the Ivanti deadline landing Nov 2, Oracle EBS exploitation attempts, Northflank's secret rotation warning, the FBI's Binance attribution to North Korea, Kaspersky's NetamLoader, and the Talos VOLTA infostealer that asks AI to rank its victims.

Alex and Jordan cover Saturday Oct 31, 2026 cybersecurity news: Canada's Cyber Centre updates its Ivanti, HashiCorp, Linux and MongoDB advisories, a Genesis ransomware claim against Psychometrics Canada, Siemens Node2Shell advisories for Industrial Edge and RUGGEDCOM, the Ivanti VPN chain now on CISA KEV, a WordPress upgrade flaw drawing 62,969 attack attempts in 24 hours, PHP2Shell plus Fragnesia rooting 25 Palo Alto firewalls, the Binance frozen total reaching about 3 billion dollars, the Chainalysis breach disclosure, and the patch-now deadlines from Oct 31 to Nov 13.

Alex and Jordan cover Friday Oct 30, 2026 cybersecurity news: Canada's Cyber Centre updates its GitLab, Cisco and Mattermost advisories, an RCMP warning on help-desk vishing targeting law firms, a Payload ransomware claim against mining supplier Hauhinco, CISA adding the CVSS 10.0 GitLab flaw to KEV with a Ruby patching trap, the record Binance crypto theft, an actively exploited Drupal Commerce Core flaw, and the patch-now deadlines for Nov 1 and Nov 10.

Alex and Jordan cover Thursday Oct 29, 2026 cybersecurity news: Canada's Cyber Centre warns of a help-desk vishing campaign targeting legal and financial firms, Cisco Talos KeyDrift malware stealing SD-WAN encryption keys, the PHP2Shell deadline today as a PHP-plus-kernel chain roots 25 servers, CISA adding a Linux kernel flaw and a VMware logging flaw to KEV, a Cisco firewall zero-day crashing VPN gateways, a Convertr checkout skimmer, and the FBI seizure of bulletproof host Virtualine.

Alex and Jordan cover Wednesday Oct 28, 2026 cybersecurity news: Canada's Privacy Commissioner opens an investigation into Navigate360 and the Crime Stoppers tip platform, Dragos and AI OT lab warnings for mining and plant operators, CISA adding PolyShell and Brotli to KEV with a Nov 10 deadline, the PHP2Shell deadline on Oct 29, Huntress Microsoft 365 token replay at 79 organizations, and GMO's ransomware deadline in Japan.

Alex and Jordan cover Tuesday Oct 27, 2026 cybersecurity news: the Crime Stoppers freeze widening to 35 agencies, the Canadian Centre for Cyber Security HashiCorp Consul advisory, what a cyberattack could do to a mine, CISA adding PHP2Shell to KEV with an Oct 29 deadline, the Brotli decoder patch spread, the University of New Mexico Health System disruption, and Apple's 304 patches.

Alex and Jordan cover Monday Oct 26, 2026 cybersecurity news: the Canadian Centre for Cyber Security advisory AV26-1083 on Siemens Mendix SAML, a Payload ransomware claim against a mining survey firm, PHP2Shell confirmed exploited in the wild plus the unpatched third PHP flaw, today's CISA KEV patch deadline for Collabora and VeloCloud, and AI coding agents hijacked via a malicious AGENTS.md file.

Alex and Jordan cover Sunday Oct 25, 2026 cybersecurity news: Ottawa police pause Crime Stoppers and privacy watchdogs say they cannot act on the 1.5M-tip breach, fresh Canadian ransomware claims, Sandvik's mining OT certification, the PHP2Shell confirmed compromise, the KEV patch deadline on Oct 26, Capcom's 11.7M-account breach, Quest Diagnostics patient records, HPE Aruba's eight CVSS 10.0 flaws, and the LiteLLM root cause.

Alex and Jordan cover Saturday Oct 24, 2026 cybersecurity news: the Crime Stoppers Navigate360 breach affecting 1.5M+ Canadian tips, the Canadian Centre for Cyber Security Fortinet advisory AV26-1081, Siemens S7 OT risks for mining, CISA KEV additions for Collabora and VeloCloud due Oct 26, and the Node2Shell proof of concept.