Zero-Day North

DJ
  • 0.0 (0)
  • Technology
  • Daily

Zero-Day North — a daily cybersecurity news podcast. Every morning: the latest cyber attacks, data breaches, ransomware campaigns, zero-day vulnerabilities and CVEs, and exploits confirmed in the wild, with a patch-now roundup for defenders. Canada first — Canadian cyber incidents and Canadian Centre for Cyber Security alerts lead every episode — plus a dedicated mining industry segment covering mining cybersecurity, OT and ICS threats.

Episodes

  1. 9h ago

    Zero-Day North: Ivanti deadline lands today as GitLab servers stay exposed

    Alex and Jordan cover Monday Nov 2, 2026 cybersecurity news: the Ivanti Connect Secure federal deadline landing today with Canada's Cyber Centre safe builds, CrowdStrike's legal-sector threat surge following the Bay Street vishing campaign, a refrigeration OT attack hitting 115-plus European supermarkets, an unconfirmed Payload claim against a mining surveying firm, more than 1,000 unpatched GitLab servers, a Synology C3RB3R ransomware surge, a malicious Claude Code extension in Cursor, the Trigger.dev environment-variable breach, the X.CPE botnet takedown, and Unit 42's AI-scripted government Linux espionage campaign.

  2. 1d ago

    Zero-Day North: Four Bay Street law firms hit in vishing campaign

    Alex and Jordan cover Sunday Nov 1, 2026 cybersecurity news: four Bay Street law firms compromised in the vishing campaign Canada's Cyber Centre warned about, joint SD-WAN threat guidance, a Qilin claim against a resources firm, Dragos industrial ransomware figures, the Ivanti deadline landing Nov 2, Oracle EBS exploitation attempts, Northflank's secret rotation warning, the FBI's Binance attribution to North Korea, Kaspersky's NetamLoader, and the Talos VOLTA infostealer that asks AI to rank its victims.

  3. 2d ago

    Zero-Day North: Canada flags Ivanti VPN chain as CISA adds two flaws to KEV

    Alex and Jordan cover Saturday Oct 31, 2026 cybersecurity news: Canada's Cyber Centre updates its Ivanti, HashiCorp, Linux and MongoDB advisories, a Genesis ransomware claim against Psychometrics Canada, Siemens Node2Shell advisories for Industrial Edge and RUGGEDCOM, the Ivanti VPN chain now on CISA KEV, a WordPress upgrade flaw drawing 62,969 attack attempts in 24 hours, PHP2Shell plus Fragnesia rooting 25 Palo Alto firewalls, the Binance frozen total reaching about 3 billion dollars, the Chainalysis breach disclosure, and the patch-now deadlines from Oct 31 to Nov 13.

  4. 3d ago

    Zero-Day North: Canada updates GitLab and Cisco guidance as GitLab flaw hits KEV

    Alex and Jordan cover Friday Oct 30, 2026 cybersecurity news: Canada's Cyber Centre updates its GitLab, Cisco and Mattermost advisories, an RCMP warning on help-desk vishing targeting law firms, a Payload ransomware claim against mining supplier Hauhinco, CISA adding the CVSS 10.0 GitLab flaw to KEV with a Ruby patching trap, the record Binance crypto theft, an actively exploited Drupal Commerce Core flaw, and the patch-now deadlines for Nov 1 and Nov 10.

  5. 4d ago

    Zero-Day North: Canada warns of help-desk vishing as PHP2Shell chain roots 25 servers

    Alex and Jordan cover Thursday Oct 29, 2026 cybersecurity news: Canada's Cyber Centre warns of a help-desk vishing campaign targeting legal and financial firms, Cisco Talos KeyDrift malware stealing SD-WAN encryption keys, the PHP2Shell deadline today as a PHP-plus-kernel chain roots 25 servers, CISA adding a Linux kernel flaw and a VMware logging flaw to KEV, a Cisco firewall zero-day crashing VPN gateways, a Convertr checkout skimmer, and the FBI seizure of bulletproof host Virtualine.

  6. 5d ago

    Zero-Day North: Privacy watchdog probes Crime Stoppers as CISA adds PolyShell and Brotli to KEV

    Alex and Jordan cover Wednesday Oct 28, 2026 cybersecurity news: Canada's Privacy Commissioner opens an investigation into Navigate360 and the Crime Stoppers tip platform, Dragos and AI OT lab warnings for mining and plant operators, CISA adding PolyShell and Brotli to KEV with a Nov 10 deadline, the PHP2Shell deadline on Oct 29, Huntress Microsoft 365 token replay at 79 organizations, and GMO's ransomware deadline in Japan.

  7. 6d ago

    Zero-Day North: Crime Stoppers freeze widens as CISA confirms PHP2Shell exploitation

    Alex and Jordan cover Tuesday Oct 27, 2026 cybersecurity news: the Crime Stoppers freeze widening to 35 agencies, the Canadian Centre for Cyber Security HashiCorp Consul advisory, what a cyberattack could do to a mine, CISA adding PHP2Shell to KEV with an Oct 29 deadline, the Brotli decoder patch spread, the University of New Mexico Health System disruption, and Apple's 304 patches.

  8. 6d ago

    Zero-Day North: PHP2Shell exploitation confirmed as Canada flags Siemens flaw

    Alex and Jordan cover Monday Oct 26, 2026 cybersecurity news: the Canadian Centre for Cyber Security advisory AV26-1083 on Siemens Mendix SAML, a Payload ransomware claim against a mining survey firm, PHP2Shell confirmed exploited in the wild plus the unpatched third PHP flaw, today's CISA KEV patch deadline for Collabora and VeloCloud, and AI coding agents hijacked via a malicious AGENTS.md file.

  9. 6d ago

    Zero-Day North: Ottawa pauses Crime Stoppers as privacy watchdogs say they cannot act

    Alex and Jordan cover Sunday Oct 25, 2026 cybersecurity news: Ottawa police pause Crime Stoppers and privacy watchdogs say they cannot act on the 1.5M-tip breach, fresh Canadian ransomware claims, Sandvik's mining OT certification, the PHP2Shell confirmed compromise, the KEV patch deadline on Oct 26, Capcom's 11.7M-account breach, Quest Diagnostics patient records, HPE Aruba's eight CVSS 10.0 flaws, and the LiteLLM root cause.

  10. 6d ago

    Zero-Day North: Crime Stoppers breach exposes one point five million Canadian tips

    Alex and Jordan cover Saturday Oct 24, 2026 cybersecurity news: the Crime Stoppers Navigate360 breach affecting 1.5M+ Canadian tips, the Canadian Centre for Cyber Security Fortinet advisory AV26-1081, Siemens S7 OT risks for mining, CISA KEV additions for Collabora and VeloCloud due Oct 26, and the Node2Shell proof of concept.

  11. 6d ago

    Daily Breach Brief: Canada Takes Sites Offline Over PHP2Shell, Mining in the Crosshairs

    The refocused Daily Breach Brief for Friday Oct 23, 2026: Canada leads with the PHP2Shell scramble (federal and provincial sites offline, Cyber Centre alert AL26-026), the Burnaby School District ransomware confirmation, the CCQ breach affecting ~685,000 people, and unverified claims against Smart & Biggar and POWERsonic. The mining segment covers the UmBra claim against Tharisa and why mining OT is a growing ransomware target. Plus the in-the-wild round: VeloCloud, BeyondTrust, and PAN-OS.

  12. 6d ago

    Daily Breach Brief: PHP2Shell, VeloCloud Zero-Day, and a Poisoned AI Library

    Alex and Jordan break down Friday Oct 23's cybersecurity news: PHP2Shell flaws exploited before patches existed, an Arista VeloCloud zero-day, a backdoored LiteLLM release on PyPI, exploited BeyondTrust and PAN-OS flaws, a CVSS 10 GitLab bug, a public FortiSIEM exploit, and the fallout from Microsoft's record Patch Tuesday.

  • 12 Episodes

About

Zero-Day North — a daily cybersecurity news podcast. Every morning: the latest cyber attacks, data breaches, ransomware campaigns, zero-day vulnerabilities and CVEs, and exploits confirmed in the wild, with a patch-now roundup for defenders. Canada first — Canadian cyber incidents and Canadian Centre for Cyber Security alerts lead every episode — plus a dedicated mining industry segment covering mining cybersecurity, OT and ICS threats.

Information

  • Creator
    DJ
  • Years Active
    2026
  • Episodes
    12
  • Rating
    Clean
  • Copyright
    © DJ
  • Show Website
    Zero-Day North