Alex Rudolph

Canada's Privacy Commissioner has launched an investigation into the leak of Crime Stoppers data. www.priv.gc.ca/en/opc-news/...

I am pretty sure this is a first in Canada: Scammer swats woman after she didn't fall for their scam. www.cbc.ca/news/canada/...

Advertising is the economic engine of the internet, and both Canada and Europe are grappling with the same problem. Now might be the right time to think about ways that we can build sovereign alternatives to American adtech. canadianshieldinstitute.ca/updates/cana...

Latest Canadian Cyber New Rewire is out. Busy busy week: - Canada's response to PHP vulnerabilities - Response to leak of Canadian crimestoppers data spreads - StatCanada releases cybercrime impact on businesses data for 2025 -City of Toronto opens AI register www.cyberincontext.ca/p/canadian-c...

Google on Bill C-22's lawful access provisions: "This treats all users as potential criminals. Metadata is not merely ‘administrative’ data – in some cases metadata can contain core biographical data that is fundamental to a citizen’s private life." www.theglobeandmail.com/politics/art...

Like a spooky ghost, intangible assets haunt the economy. Intangibles are the most important factor in shaping the flows of value in the 21st century, and Canada has done a poor job of capturing their strategic importance. So where's is the IP review? canadianshieldinstitute.ca/updates/the-...

Canada's Chief Information Officer releases a statement about the PHP vulnerabilities affecting Government of Canada websites and infrastructure. No new information other than that they're patching and some things will be offline until the work is completed. www.canada.ca/en/treasury-...

And now the National Security Intelligence Review Agency's site is down

Russian APT Sandworm wipes the network of a Ukrainian grain logistics firm www.welivesecurity.com/en/eset-rese...

CSE's site(s) are down. Unclear how much are down. betakit.com/canadian-gov...

There were a lot of rumblings about this for a while, now confirmed via CBC reporting

OK, running thread of PHP-related issues and disruption, starting ... now 👇

Just a heads up, if you are running any #php applications, take them down now. A patch for a Critical vulnerability is expected at 4pm CET. It could be released earlier in the event that the vulnerability is made public before then. https://www.php.net/archive/2026.php#2026-10-20-1

The eMudhra (emSign) CA has been compromised to issue fraudulent HTTPS certificates blog.mozilla.org/security/202... github.com/certifi/pyth...

"The FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned" krebsonsecurity.com/2026/10/feds...

Two observations, one Telegram is a surreal platform & two this points to a lot more involvement of Turkish hackers in Russian hacktivist groups than I had realized if this is true. Cardinal, Russian Legion & 404 Crew have all been amplified by NoName057(16), Russian hacking regime establishment.

I know I had a few people interested in my presentation today: Unfortunately, I had to cancel due to a severe chronic illness flare up. I hope to reschedule with OWASP Ottawa to present the talk sometime soon.

Canadians: Bill C-22 threatens the privacy and security of all Canadians’ communications. This dangerous surveillance bill can still be fixed. @openmedia.org has a petition demanding the Canadian Senate defend our digital rights. (Petition hosted by OpenMedia; its privacy policy applies.)

For everyone who has ever had to give a talk. Superb. 10/10. No notes.

Halifax Examiner reporters thrown out of EverWind data centre announcement in Point Tupper By @joanbaxter.bsky.social and @dartjenhen.bsky.social

Great new article from @christysomos.bsky.social in @thestateofthings.bsky.social about the growing use of cyber operations by Canada and the major transparency gaps that exist in how Canada communicates its use of cyber operations. thestateofthingsca.substack.com/p/has-canada...

BAE is pretty big in Canadian defence as well.

An (auto-translated into English) interview with SharpWinner about patriotic "red" hacktivists and hackers in China and his plans for a book that he wanted to have turned into a movie. This interview in 2005 would have been after the peak of Chinese hacktivism as the government turned against it.

Haven't read it yet, but Jon DiMaggio out with a piece on the shenanigans around ShinyHunters leadership. It's been fascinating to watch, and there's no better person to hear the story from than DiMaggio. arkemcyber.com/research/who...

@raphae.li has been doing some great reporting on shinyhunters and I have a lot of thoughts on this latest article.

Come hear me talk next Saturday in at OWASP Day about digital sovereignty is and how changing risks impact our control of technology and puts Canada's sovereignty at risk.

Anthropic banning “abusive or cruel behavior” toward Claude in its new usage policies is proof to me that tech companies are going to moderate violence against AI before they ever moderate violence against women and minorities

So, my post-SecTor article is in the works with the theme that SecTor is not relevant to Canada and is just a big US cyber marketing scheme.

📢 We’re hiring! Interested in law, technology, and human rights? Are you a law student or a graduate student with a law degree? We’re looking for a research assistant to join the Citizen Lab’s spyware and digital targeted threats team. Learn more and apply by Dec 1: citizenlab.ca/opportunity/...

"The people holding up the internet" A good-looking but somewhat depressing exposé about the people holding up current digital infrastructure as a hobby. https://sheets.works/data-viz/holding-up-the-internet

NSA announced it is accelerating it's PQC timeline 👀 👀 👀 All systems must be PQC hardened by the start of next year All legacy systems that don't support PQC must be phased out by 2030 www.nsa.gov/Press-Room/P...

This has far more national security implications than many will realize. Kingston is home to Royal Military College, Canadian Forces School of Communications and Electronics, and many other CAF orgs. What sort of info on the base and CAF could these documents contain?

The fact that we're only learning about this now is concerning. www.cbc.ca/news/canada/...

U.S. investigators reportedly believe that unidentified hackers broke into an oil supertanker's propulsion system as the vessel headed toward Texas this summer, which does not seem great. www.bloomberg.com/news/article...

I ventured out of my usual focus on the military to talk about another organization that has struggled with digital modernization. All the talk is about Bill C-22 and lawful access, but few have pointed out that the RCMP isn't ready for more powers. www.cyberincontext.ca/p/rcmp-are-d...

Apparently, AI agents have been trying to hack the Canadian government. Oh, good. That's new. 😬 Researchers at Transluce reported suspicious AI-agent activity targeting Library and Archives Canada, including requests containing attack payloads and SQL injection attempts. 1/4

It's as if millions of people suddenly cared about cybersecurity as the month changed...

According to Transluce, the probes targeted the Library and Archives Canada, a Canadian federal agency. Government statement: www.cyber.gc.ca/en/news-even... Transluce report: transluce.org/us-canada-gov

No wonder it wasn't successful. No one gets anything useful from the Library and Archives Canada website.

"AI-powered probes targeted Canadian and US government sites, with officials reporting no evidence of successful breaches" www.verdict.co.uk/canadian-web...

In which I explain how I ended up with a shelf-load of Japanese dictionaries once owned by one of Canada's early codebreakers. luxexumbra.blogspot.com/2026/09/in-s...