InfoSecBulletin Cybersecurity for mankind
The President of the Canadian treasury board, Anita Anand, announced yesterday (30 October) a ban on the use of the WeChat and Kaspersky suite of applications on government-issued mobile devices.
The press release stated, the Government of Canada is committed to keeping government information and networks secure. We regularly monitor potential threats and take immediate action to address risks.
“Forces Penpals” exposed US and UK Military Social Network’s 1 Million Records
CVE-2024-51503
Trend Micro released updates for Deep Security Agent RCE
Apple Releases Patch for two Actively Exploited Zero-Day
Maxar Space Data Leak, Company admit, Investigation ongoing!
GitHub CLI Vulnerability Could Allow RCE
“Sarcoma” ransomware group
Hacker to disclose “Popular Life Insurance” 36 GB of stolen data
BugHunt 2024: A Milestone Cyber security Competition held at Dhaka
TP-Link DHCP Vulnerability Allow Attackers Takeover Routers Remotely
WSJ reports
T-Mobile hacked in massive breach of telecom networks
Palo Alto Networks Confirms critical RCE zero-day actively exploited
Effective October 30, 2023, the WeChat and Kaspersky suite of applications will be removed from government-issued mobile devices. Users of these devices will also be blocked from downloading the applications in the future.
The Chief Information Officer of Canada determined that WeChat and Kaspersky suite of applications present “an unacceptable level of risk to privacy and security”. On a mobile device, the WeChat and Kaspersky applications data collection methods provide considerable access to the device’s contents.
The decision to remove and block the WeChat and the Kaspersky applications was made to ensure that Government of Canada networks and data remain secure and protected and are in line with the approach of our international partners.
While the risks of using these applications are clear, we have no evidence that government information has been compromised.
For the broader public, the decision to use a social media application or mobile platform is a personal choice. However, the Communications Security Establishment’s Canadian Centre for Cyber Security (Cyber Centre) provides advice and guidance regarding the use of personal social media and on security considerations that should be made when using social media in an organization.
