CSA

Critical Cisco Secure Firewall Management Center Vulnerabilities Addressed

Cisco has released security updates for critical vulnerabilities (CVSS 10.0) in its Secure Firewall Management Center software. Users of affected on-premises versions are advised to update immediately to prevent root access and arbitrary code execution.

Fortinet Vulnerabilities Require Immediate Updates

The Cyber Security Agency of Singapore (CSA) has issued an alert regarding high-severity vulnerabilities in multiple Fortinet enterprise products. Users are strongly advised to update affected systems immediately to mitigate risks of unauthorized code execution, authentication bypass, and privilege escalation.

HPE Patches Critical Aruba Networking AOS-CX Vulnerabilities

Hewlett Packard Enterprise (HPE) has released patches for critical vulnerabilities in its Aruba Networking AOS-CX operating system. The most severe flaw (CVE-2026-23813) allows unauthenticated remote attackers to reset administrator passwords. Users are urged to update immediately.

Microsoft Security Patches for Critical Vulnerabilities

The Cyber Security Agency of Singapore (CSA) has issued an alert regarding Microsoft's release of security patches for critical vulnerabilities in its software. These patches address multiple security flaws, some with a base score of 9.8, requiring immediate attention from users and organizations.

CSA Disarms Over 7,500 Fake Investment and Crypto Scam Websites

The Canadian Securities Administrators (CSA) announced the deactivation of over 7,586 fake investment and crypto scam websites targeting Canadians between June 2025 and February 2026. This initiative highlights the CSA's ongoing efforts to combat online investment fraud using regulatory and technological tools.

Canadian Securities Regulators Amend Benchmark Assurance Report Rules

Canadian securities regulators have adopted final amendments to rules governing designated benchmarks and benchmark administrators, effective May 5, 2026. These changes clarify assurance report requirements for independent public accountants, specifying the level of assurance, report type, and submission timing, and introduce a new requirement for certain designated benchmarks.

CSA and CIRO Guidance for Finfluencers and Firms

The Canadian Securities Administrators (CSA) and Canadian Investment Regulatory Organization (CIRO) have released new guidance for financial content creators ('finfluencers') and the firms they work with. The guidance aims to ensure compliance with securities laws, promote transparency, and protect investors from risks associated with online financial information.

Canadian Securities Regulators Disarm Fraudulent Investment Websites

The Canadian Securities Administrators (CSA) and the Canadian Investment Regulatory Organization (CIRO) announced the initial results of a new initiative to combat fraudulent investment websites. Between June 5 and November 23, 2025, regulators deactivated over 3,900 fraudulent websites and 6,900 URLs.

CSA Eases Investment Fund Reporting Requirements

The Canadian Securities Administrators (CSA) has finalized amendments to modernize the continuous disclosure regime for investment funds, effective April 22, 2026. These changes aim to reduce regulatory burden by providing exemptions from certain reporting requirements and eliminating unnecessary disclosures, while maintaining investor protection.

CSA Warns Registrants About Malicious Impersonation Scam Emails

The Canadian Securities Administrators (CSA) has issued a warning to registrants about a malicious spear phishing scam. The emails impersonate the CSA and aim to obtain personal or confidential business information. Registrants are urged to be vigilant, verify sender addresses, and report suspicious emails.