Feels like mid-30s in parts of Canada, while other areas expecting snow
Anything is possible this week, as far as Canada's weather is concerned, with forecasts ranging from scorching heat in some parts of the country to rain and snow in others.
State-sponsored actors targeted security devices used by governments around the world, according to technology firm Cisco Systems, which said the network devices are coveted intrusion points by spies.
In a blog post Wednesday, Cisco named it "ArcaneDoor," and described the activity as an espionage-focused campaign carried out by "state-sponsored actors targeting perimeter network devices from multiple vendors." It also said it found victims globally, all of which involved government networks.
Cisco and the cybersecurity agencies of Canada, Australia and the United Kingdom are urging customers to patch devices quickly.
In a joint, separate advisory, the Canadian Centre for Cyber Security, Australian Signals Directorate's Australian Cyber Security Centre and the UK's National Cyber Security Centre said they've been monitoring malicious cyber activity since early 2024 that targets virtual private network services — known as VPNS — used by governments and critical infrastructure globally.
VPNs offer a private tunnel that lets workers log into office networks from home, among other uses.
"The capabilities are indicative of espionage conducted by a well-resourced and sophisticated state-sponsored actor," the advisory said.
The agencies noted the campaign was sophisticated and used "multiple layers of novel techniques.
Canada's Communications Security Establishment (CSE), the government agency responsible for information security, told CTV News it was too early to determine which, if any, state was behind the attack.
"It is important that Canada and its partners defend against all threats, whether attributed or not," a spokesperson wrote.
Claudiu Popa, CEO of Datarisk Canada, said the Canadian government has historically been a consumer of Cisco and pointed out how the company is one of the largest providers of network equipment.
"It's a huge concern for not just Canada, but any country around the world and their governments," Popa said, adding the attackers don't appear to be on a mission to use ransomware or cyber extortion.
"The attackers are specifically looking for information," he said.
According to Cisco, a customer first alerted the company of a possible threat in early 2024 but its investigation discovered "actor-controlled infrastructure" dating back to early November 2023, and most activity took place between December 2023 and early January 2024. Cisco found methods were being tested as early July 2023.
Calvin Engen, chief technology officer of F12.net, said every Cisco ASA (Adaptive Security Appliance) device is compromised. Despite issuing patches to protect against it, an actor may have already gained access to the device, Engen said.
"They could possibly have what's called a 'backdoor' that could allow them to stay within their organization. So, it's very paramount for all organizations that have these devices to properly go through and validate that they don't have a persistent threat actor in their environment," he said.
Canada's privacy commissioner is investigating a data breach at Global Affairs Canada involving a cyberattack on an internal network reported earlier in 2024.
Personal information of users, including employees, was compromised when unauthorized individuals accessed the department's virtual private networks.
CTV News reached out to Global Affairs Canada to ask whether it was affected by the Cisco attack.
"The Government of Canada deals with ongoing and persistent cyber risks and threats every day and takes appropriate measures to protect its systems and mitigate against these threats," a spokesperson told CTV News in an email.
"Given its profile, Global Affairs Canada has very proactive security monitoring in place, and takes cyber security and such incidents very seriously," the spokesperson continued, adding the agency isn't able to comment further due to "operational reasons."
"I think for Canadians, the most interesting thing… is will we ever learn what country was behind this particular attack? And that will tell us something," Beauceron Security CEO David Shipley said. "And whether or not the government would… ever formally attribute this attack will tell us something else. These are all really complicated things."
The tech company released software updates to address the vulnerabilities that were exploited, "along with clear guidance to enable customers to detect potential compromise, upgrade, and restore integrity to compromised devices running ASA or FTD (Firepower Threat Defence) software," a Cisco spokesperson told CTV News.
The spokesperson said users can be assured that the company has a history of earning customers' trust through engagement and transparency when facing issues with its products.
Anything is possible this week, as far as Canada's weather is concerned, with forecasts ranging from scorching heat in some parts of the country to rain and snow in others.
Canada's annual inflation rate slowed to a three-year low of 2.7 per cent in April, matching expectations, and core measures continued to ease, data showed on Tuesday, likely boosting chances of a June interest rate cut.
One passenger was killed and 30 injured after a Singapore Airlines SIAL.SI flight from London hit severe turbulence en route on Tuesday, forcing it to make an emergency landing in Bangkok, officials and the airline said.
As the month-long boycott of Loblaw-owned stores wears on, small independent food retailers and alternative grocery options say they're seeing a boost in traffic and sales.
If you've been to a party lately and haven't seen someone drinking a BORG, you're likely not partying with college students.
Four Indian nationals accused in the murder of British Columbia Sikh activist Hardeep Singh Nijjar are all due in court Tuesday.
As we enter another wildfire season, Environment and Climate Change Canada is advising people to pay attention to air pollution levels and check the Air Quality Health Index – especially on smoky days.
The Vatican has announced that the investigation it commissioned into allegations of sexual touching against Cardinal Gerald Cyprien Lacroix did not confirm any act constituting misconduct or abuse on the part of the Vatican.
Prime Minister Justin Trudeau is in Philadelphia today, on his first trip south of the border since his government launched a new 'Team Canada' charm offensive in the United States.
For those who go to their local libraries often, they know there’s much more to their library than just borrowing books. Local libraries in Atlantic Canada are now renting out a broader range of items for people.
Flashes of purple darting across the sky mixed with the serenading sound of songs will be noticed more with spring in full force in Manitoba.
Catching 'em all with impressive speed, a 7-year-old boy from Windsor, Ont. who only started his competitive Pokémon journey seven months ago has already levelled up to compete at a world championship level.
A sanctuary dedicated to animals with disabilities is celebrating the third birthday of one of its most popular residents.
2b Theatre recently moved into the old Video Difference building, seeking to transform it into an artistic hub, meeting space, and temporary housing unit for visiting performers in Halifax.
A B.C. woman says her service dog pulled her from a lake moments before she had a seizure, saving her life.
A Starbucks fan — whose name is Winter — is visiting Canada on a purposeful journey that began with a random idea at one of the coffee chain's stores in Texas.
Members of Piapot First Nation, students from the University of Winnipeg and various other professionals are learning new techniques that will hopefully be used for ground searches of potential unmarked grave sites in the future.
ALS patient Mathew Brown said he’s hopeful for future ALS patients after news this week of research at Western University of a potential cure for ALS.