CCCS - Guidance, news and events
Joint cyber security advisory on Russian state-sponsored phishing campaign targeting Zimbra webmail
4 days 18 hours ago
The joint advisory warns that Russia-sponsored threat actors associated with an advanced persistent threat group, known as Laundry Bear, are exploiting a known vulnerability in Zimbra webmail.
Canadian Centre for Cyber Security
What is voice phishing (vishing)? - ITSAP.00.102
6 days 23 hours ago
Canadian Centre for Cyber Security
Social engineering – ITSAP.00.166
1 week ago
Social engineering attacks occur when a threat actor uses social connection and manipulation to pressure users into providing sensitive details.
Canadian Centre for Cyber Security
Securely deploying AI at the network edge - ITSP.80.101
1 week 5 days ago
Canadian Centre for Cyber Security
Guidance on securely configuring authorization and authentication frameworks - ITSP.40.063
2 weeks ago
Canadian Centre for Cyber Security
Joint guidance on improving router hygiene to protect against Russian state-sponsored targeting
2 weeks ago
Canadian Centre for Cyber Security
SharpViewStateKing: The stealthy implant framework
2 weeks 3 days ago
Canadian Centre for Cyber Security
Obsolete products - ITSAP.00.095
2 weeks 6 days ago
Although obsolete products may still meet functional requirements, their continued use can introduce security and operational risks that are not always obvious. This publication provides guidance to help your organization identify obsolete products, manage associated risks and transition safely to supported alternatives.
Canadian Centre for Cyber Security
Statement from the Canadian Centre for Cyber Security on frontier artificial intelligence models and their impact on cyber security
1 month ago
Canadian Centre for Cyber Security
Five Eyes cyber security agencies statement on the AI shift in cyber risk: why leaders must act now
1 month ago
Canadian Centre for Cyber Security
Cyber threat bulletin: FIFA World Cup 2026™
1 month 3 weeks ago
Canadian Centre for Cyber Security
G7 Cybersecurity Working Group Statement on preparing for a post-quantum cryptography migration
1 month 3 weeks ago
Canadian Centre for Cyber Security
Cryptographic algorithms for UNCLASSIFIED, PROTECTED A, and PROTECTED B information - ITSP.40.111
1 month 4 weeks ago
Canadian Centre for Cyber Security
Top 10 artificial intelligence security actions: A primer - ITSAP.10.049
1 month 4 weeks ago
Our top AI security actions are designed to help organizations of all sizes and sectors strengthen their cyber resilience.
Canadian Centre for Cyber Security
Frontier artificial intelligence (ITSAP.10.050)
1 month 4 weeks ago
This publication provides your organization with additional details on frontier AI, the associated risks and suggested mitigation measures to enhance your cyber security posture.
Canadian Centre for Cyber Security
Protect your devices from IMSI catchers (ITSAP.00.106)
2 months 1 week ago
An international mobile subscriber identity (IMSI) catcher is a type of cell site simulator (CSS) that impersonates a legitimate cell tower to exploit connected mobile devices. It is important to understand how IMSI catchers work in order to detect them and protect your sensitive information from being compromised.
Canadian Centre for Cyber Security
Cell site simulators - ITSM.00.108
2 months 1 week ago
This publication provides information on how CSS devices work, the security risks you should consider, and the mitigation actions you can take to better protect from CSS exploitations.
Canadian Centre for Cyber Security
Certifications in the field of cyber security
2 months 2 weeks ago
Canadian Centre for Cyber Security
Security configurations and best practices to protect your mobile device (ITSM.80.002)
2 months 2 weeks ago
Canadian Centre for Cyber Security
Checked
3 hours 34 minutes ago