InfoSecBulletin Cybersecurity for mankind
The President of the Canadian treasury board, Anita Anand, announced yesterday (30 October) a ban on the use of the WeChat and Kaspersky suite of applications on government-issued mobile devices.
The press release stated, the Government of Canada is committed to keeping government information and networks secure. We regularly monitor potential threats and take immediate action to address risks.
CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed
ALERT
Thousands of IP addresses compromised nationwide: CIRT warn
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks
Critical RCE Flaw Patched in Roundcube Webmail
Hacker claim Leak of Deloitte Source Code & GitHub Credentials
CISA Issued Guidance for SIEM and SOAR Implementation
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora
Australia enacts mandatory ransomware payment reporting
Why Govt Demands Foreign CCTV Firms to Submit Source Code?
Effective October 30, 2023, the WeChat and Kaspersky suite of applications will be removed from government-issued mobile devices. Users of these devices will also be blocked from downloading the applications in the future.
The Chief Information Officer of Canada determined that WeChat and Kaspersky suite of applications present “an unacceptable level of risk to privacy and security”. On a mobile device, the WeChat and Kaspersky applications data collection methods provide considerable access to the device’s contents.
The decision to remove and block the WeChat and the Kaspersky applications was made to ensure that Government of Canada networks and data remain secure and protected and are in line with the approach of our international partners.
While the risks of using these applications are clear, we have no evidence that government information has been compromised.
For the broader public, the decision to use a social media application or mobile platform is a personal choice. However, the Communications Security Establishment’s Canadian Centre for Cyber Security (Cyber Centre) provides advice and guidance regarding the use of personal social media and on security considerations that should be made when using social media in an organization.
